Privacy Policy

1. Who We Are

Tote Goat (“we”, “us”, or “our”) is a moving tote rental service operating in the Okanagan, British Columbia, Canada. We can be reached at hello@totegoat.ca.

This policy explains what personal information we collect, why we collect it, and how we handle it. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

2. Information We Collect

When you place a booking, we collect:

• Your full name, email address, and phone number
• Drop-off and pick-up addresses
• Your selected rental package and dates
• Payment information — processed directly by Stripe. We never see or store your card details.

When you submit a contact inquiry, we collect your name, email, phone (optional), and message.

We do not use analytics tools, advertising trackers, or third-party cookies on this website.

3. How We Use Your Information

• To fulfill your rental booking (scheduling delivery and pick-up)
• To send you a booking confirmation and any rental reminders
• To contact you about your order if needed
• To respond to your inquiries
• To comply with legal and financial record-keeping obligations

We do not use your information for marketing without your explicit consent, and we never sell your data to third parties.

4. Third-Party Services

We use the following trusted services to operate our business:

• Stripe — payment processing. Your card data goes directly to Stripe and is governed by Stripe's Privacy Policy.
• Resend / Google Workspace — transactional email delivery.
• Supabase — secure database storage for booking records.
• Mapbox — address distance calculation for surcharge pricing.
• Vercel — website hosting.

Some of these services may store data outside Canada. Where this occurs, we ensure appropriate contractual protections are in place consistent with PIPEDA requirements.

5. Data Retention

We retain booking records (including your personal information and payment details) for seven years to comply with Canada Revenue Agency record-keeping requirements. Contact inquiry records are retained for up to two years.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate information
• Request deletion of your information (subject to legal retention obligations)
• Withdraw consent where processing is based on consent

To exercise any of these rights, email us at hello@totegoat.ca. We will respond within 30 days.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure cloud infrastructure, and access controls. Payment data is handled exclusively by Stripe, which is PCI DSS Level 1 certified.

8. Changes to This Policy

We may update this policy from time to time. We will post the revised policy on this page with an updated date. Continued use of our services after changes constitutes acceptance of the updated policy.

9. Contact

Questions or concerns about your privacy? Contact us at hello@totegoat.ca.