Privacy, in plain English.

Effective 13 October 2026 · Glass Floor Studio · Milton, Ontario

Short version: I collect what it takes to deliver your order, email you if you asked me to, and answer your questions. I don't sell it, I don't track you around the web, and you can ask me to delete it at any time.

Who I am

Glass Floor Studio is run by Shawn Mann in Milton, Ontario. It sells brand new, open box and used items with local delivery, and it builds websites for local businesses. I'm the person who receives and answers anything you send. Questions about your data go straight to me: glassflooorstudio@gmail.com.

What I collect

• When you order: your name, mobile number, delivery address, the postal code you check, the day and time you'd like, any delivery note, and your email if you give it. That's what it takes to bring the order to your door and text you a delivery time.
• When you pay: at the door by e-Transfer or cash, or online by card. Card details go straight to Stripe, the payment processor. I never see or store your card number.
• When you become a member: your email, your first name if you give it, what you want to hear about (brand new, open box, used), how often, and a record of your consent: the exact wording you agreed to, when, and a one-way scrambled code made from your IP address. The IP address itself isn't stored.
• When you track an order: the order number and the last four digits of your phone number, checked against the order. Nothing new is stored.
• When you ask about a website: your name and email, your business name, website and phone number if you give them, and what you write. If you buy a website package, your project brief too.
• When you use the free website checkup: the address you checked, the number of problems found, and a scrambled code made from your IP address so the tool can't be abused.
• If you use the voice option in the website question box: your browser sends your voice to its own speech service to turn it into text. I don't receive or keep the audio.
• When you visit: a random visit code saved in your browser (not a cookie), the pages you view, the page that sent you here, your browser type and your screen size. In the shop it also notes the items you open, the words you search for and what you add to your cart or check out with, so I know what people want to buy. It has no name attached and never includes anything you type into a form. It is used only to see which pages and items people find useful, and it is deleted after 90 days.

What your own browser remembers. Your cart, the postal code you checked, and after an order, your delivery details, so checkout is quicker next time. If you're a member, your browser also remembers your member link. All of it stays on your device; clearing this site's data in your browser removes it.

The site runs on Netlify, which keeps standard, short-lived server logs (IP address, browser type), as almost every website does. I don't use tracking cookies, advertising pixels, or third-party analytics that follow you.

Why I collect it, and where it goes

Orders are used to deliver: I text you to confirm a time, and when I plan the drive your address goes into Google Maps on my phone. Order alerts reach my phone through a notification service (ntfy) on a private channel, and a copy reaches my inbox. If you gave an email, you get a receipt.

Member emails are only what you signed up for: an email when new items you picked are listed. Every one has a link to change what you get and a link to unsubscribe, and unsubscribing works right away.

Everything is stored in a database hosted by Supabase in Canada. Emails are sent through Resend. Card payments are handled by Stripe. Website enquiries also pass through Netlify Forms as a backup. Each of these handles the information on my behalf under its own security and privacy terms.

How long I keep it

Orders: six years, because the Canada Revenue Agency requires businesses to keep sales records that long. Membership: until you unsubscribe. After that I keep only the record that you unsubscribed, so you're never emailed again by mistake. Website enquiries: as long as they're useful for talking with you, and for the life of a project if we work together.

Your choices and rights

Under Canada's privacy law (PIPEDA), you can ask me to see, correct, or delete the personal information I hold about you. Email glassflooorstudio@gmail.com and I'll handle it promptly, usually the same business day. You don't need to explain why. The one exception is order records I'm legally required to keep for tax purposes; I'll tell you if that applies.

Children

This site isn't directed at children, and I don't knowingly collect information from anyone under 13.

Changes to this page

If I change how I handle your information, I'll update this page and the effective date at the top. The current version is always the one you're reading here.