Privacy Policy

Who we are

The Driveway Doctor is an Ontario driveway restoration business serving Southern Ontario. In this policy, “we,” “us” and “our” refer to The Driveway Doctor.

Information we collect

Depending on how you interact with us, we may collect:

• contact information such as your name, email address and telephone number;
• service-property information, photographs, measurements and details needed to prepare an estimate or perform work;
• estimate, scheduling, job, invoice, payment-status and customer-service records;
• messages and comments sent to our Facebook Page, along with identifiers and profile information supplied by Meta for that interaction; and
• basic technical and security information generated when you use our website or client portal;
• marketing-email permission, unsubscribe, bounce, complaint, delivery and campaign-interaction records where applicable; and
• first-party website analytics such as landing and referral URLs, pages viewed, important site actions, device/browser information, a random browser/session identifier, IP address and approximate city/region derived from the IP address.

How we use information

We use information to respond to questions, prepare estimates, schedule and deliver services, operate the My TDD client portal, maintain business records, protect our systems and improve customer service.

We also use first-party website analytics to understand how visitors find the website, which pages and service areas are useful, where visitors leave the estimate process, which marketing sources produce estimate requests, and which old or broken URLs are still receiving traffic. We do not use session replay, record keystrokes, or copy names, addresses, phone numbers, email addresses or other estimate-form field contents into the analytics event log.

If you have provided or otherwise have a valid basis for marketing email, we may use contact and service-history information to send relevant promotions or customer reactivation messages. Marketing emails include an unsubscribe mechanism. We maintain a suppression record for unsubscribes, delivery failures and complaints so those addresses are not repeatedly marketed to. If email engagement tracking is enabled, we may record approximate opens and clicks to understand campaign performance; these signals can be affected by email-app privacy features.

Our Facebook automation may receive Page comments and Messenger conversations through Meta’s APIs. Message or comment text and relevant business context may be sent to the OpenAI API to prepare a response. Automated responses are used only for customer-service and lead-response purposes and may be reviewed, limited or disabled by us.

Sharing and service providers

We do not sell personal information. We may provide limited information to service providers that help us host the website, communicate with customers, process business records or operate email delivery and the Meta and OpenAI integrations. Amazon Simple Email Service (SES) may be used to deliver marketing email and Amazon Simple Notification Service (SNS) may provide delivery, bounce and complaint feedback. Those providers process information under their own terms and privacy commitments. We may also disclose information when required by law or when reasonably necessary to protect customers, our business or our systems.

Visitor analytics are stored in our own TDD database. If approximate IP geolocation is enabled in our administrative settings, a public IP address may be sent to an IP geolocation provider solely to obtain general city, region, country and network information. Geolocation is disabled by default. Any resulting location is approximate and is not GPS or a service-property address.

Retention and security

We keep information only as reasonably needed for customer service, business, legal, accounting and security purposes. Raw social-webhook event records are normally retained for up to 30 days, subject to the operational setting in our system. Customer, estimate, job, invoice and communication records may be retained longer where needed for an ongoing relationship or legitimate business and legal records.

Raw visitor IP addresses are retained only for the period selected in our administrative settings; the default is 30 days and retention can be disabled. Raw IPs are then automatically cleared from visitor-session records. Detailed first-party analytics may be retained for up to five years so we can compare seasonal and year-over-year website performance.

We use reasonable administrative and technical safeguards, but no internet transmission or storage system can be guaranteed completely secure.

Your choices

You may ask to access, correct or delete personal information that we control, subject to records we must or are permitted to retain. You may unsubscribe from marketing email at any time using the unsubscribe link included in those messages. We may retain a minimal suppression record of an unsubscribed or invalid address so that the preference continues to be honoured. Marketing preferences do not prevent transactional service, estimate, scheduling, invoice, payment or account-security messages where appropriate. You can also stop contacting us through Facebook and use another contact method.

Contact

Questions or privacy requests can be sent to john@thedrivewaydoctor.ca. Please do not send passwords, access tokens, payment-card details or other secrets by email.

For deletion requests involving Facebook or Messenger, follow our Data Deletion Instructions.