Privacy policy
What we collect, why, and how long we keep it.
Last updated 22 October 2026
Who we are
Workplace Desk is operated by 17776594 Canada Inc., Kitchener, Ontario. We follow Canada's federal privacy law (PIPEDA) and the anti-spam law (CASL). Questions go to our email.
What we collect
- When you send an inquiry or book a walkthrough: your name, work email, phone if you give it, your company, your role, the building address and what you told us about it.
- When you become a client: the details of your sites (areas, access rules, hours, contacts), every request you send the desk, service reports, invoices and payments.
- When you apply as a crew or supplier: your business details, insurance and clearance documents, and the work you take on.
- On this website: standard server logs (IP address, browser, pages viewed). We do not run advertising trackers.
Why we collect it
- To answer you and set up a walkthrough or a quote.
- To run your account: route requests to the right crew, send reports, invoice you and pay the crews.
- To keep records the law requires (tax and contract records).
- To improve the desk, using numbers without names.
We only email you about what you asked for or about your account. We do not send marketing email without your consent, and every such email has an unsubscribe link.
Who sees it
- The crews and suppliers assigned to your site see only what they need for the work order: the address, access instructions, the scope and your site contact. They never see your billing details or other clients' data, and they sign confidentiality terms with us.
- Service providers we use to run the desk: website hosting, email delivery, our database, e-signature and payments. Each one processes data only on our instructions. Some are in the United States; see below.
- Nobody else. We do not sell or rent your information, and we do not share it with other clients.
Where it is stored
Our systems run on cloud providers that may store data in Canada or the United States. Data stored outside Canada can be subject to the laws of that country. We choose providers with strong security terms and keep the amount of personal data to what the work needs.
How long we keep it
- Inquiries that do not become clients: deleted 90 days after our last exchange.
- Client and crew records: for the term of the agreement, then seven years for tax and contract records, then deleted.
- Server logs: 90 days.
Your choices
- Ask us what we hold about you, correct it, or ask us to delete it (unless we must keep it by law). Email us and we answer within 30 days.
- Unsubscribe from any marketing email with the link in the email, or by replying "stop".
- If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
Security
Access to your data is limited to the people and systems that need it. Passwords and keys are stored in secured vaults, connections are encrypted, and we keep backups. If a breach ever creates a real risk of harm to you, we tell you and the Privacy Commissioner as the law requires.
Changes
If this policy changes in a way that affects you, we update the date above and tell current clients by email.