What you tell us stays with us.

Who we are.

The Craft Group ("we", "us") partners with and buys Canadian trade businesses, and builds custom software tools for trade businesses on Compound, our AI automation tool. This policy covers personal information we collect through thecraft.group, our forms, booking tool, phone calls and email.

Our companies (for example Craft Electric and Brink Landscaping) have their own customer-facing privacy notices for the work they do for homeowners and clients.

What we collect.

We only collect what we need to have a useful first conversation.

Our site isn't meant for anyone under 18, and we don't knowingly collect their information.

Why we use it.

• To book, confirm and prepare for your call.
• To follow up about partnering, selling or a custom tool, if you want us to.
• To assess whether a deal or project makes sense, if talks go that far.
• To keep the site working and secure.
• To meet legal, tax and accounting obligations.

We won't use your information for any other purpose without asking you first, unless the law requires or allows it.

Consent.

When you fill in a form or book a call, you consent to us using your information for the purposes in § P-03. We'll only send marketing email if you've said yes, as required by Canada's Anti-Spam Legislation (CASL), and every email has a working unsubscribe.

You can withdraw consent at any time by emailing privacy@thecraft.group. We'll tell you if withdrawing means we can't continue a conversation, for example if we can no longer contact you.

Who sees it.

Inside The Craft Group, access is limited to the people handling your conversation. We don't tell your crew, customers, suppliers or competitors that you've been in touch.

We use a small number of service providers to run our business, such as website hosting, email, calendar booking and secure document storage. They may only use your information to provide that service to us, under contracts that require protection comparable to this policy.

We'll only disclose information beyond that if you agree, if a professional adviser (lawyer, accountant) needs it for a transaction you're part of, or if the law requires it. We never sell personal information.

AI and automated tools.

We build AI tools, and we use some ourselves, for example to schedule calls or summarize notes before a conversation. When we do:

• A person makes every decision that matters to you. No decision about you is made by automated processing alone.
• We only use AI providers whose terms don't allow your information to be used to train their public models.
• You can ask us not to run your information through AI tools at all, and we'll do it by hand.

Where it's stored.

We store information in Canada wherever we reasonably can. Some of our service providers may process or store data outside Canada, including in the United States. If so, it's protected by contract, but it may be subject to the laws of that country and accessible to its courts and authorities. You can ask us for details of which providers process data outside Canada.

How long we keep it.

We keep enquiry and booking information for up to 24 months after our last contact, then delete or anonymize it. If we do a deal or project together, records are kept as long as the law requires (for example, tax records). If you ask us to delete your information sooner, we will, unless the law requires us to keep it.

How we protect it.

We protect your information with security that matches how sensitive it is: encryption in transit and at rest, access limited to people who need it, multi-factor sign-in, and confidentiality agreements with staff and service providers. Financial records shared during a deal are kept in a separate, access-controlled data room.

Cookies and analytics.

We use the cookies and local storage the site needs to work, such as remembering your Partner/Sell choice on your device. We use privacy-respecting analytics that count visits without building a profile of you. We don't use advertising cookies or sell browsing data. You can clear cookies and site storage in your browser at any time.

Your rights.

You can ask us to:

• Tell you what personal information we hold about you, how we've used it and who we've shared it with.
• Correct anything that's wrong or incomplete.
• Delete it, or withdraw your consent.
• For Quebec residents: give you a copy in a commonly used format, and tell you about any automated processing.

Email privacy@thecraft.group. We'll reply within 30 days, at no cost. We may need to confirm who you are first.

If something goes wrong.

If a breach of our safeguards creates a real risk of significant harm to you, we'll tell you as soon as we can and report it to the Office of the Privacy Commissioner of Canada and any provincial commissioner where required. We keep a record of every breach, as the law requires.

Complaints.

Talk to us first: we'd rather fix it. If you're not satisfied, you can contact the regulator:

Changes and contact.

If we change this policy, we'll update the revision and date at the top. If a change affects how we use information you've already given us, we'll ask you first.