Privacy Policy
Effective date: October 14, 2026
Last updated: October 14, 2026
1. Who we are and how to contact us
Prime Spray is a painting and refinishing business serving Montréal, the West Island and surrounding areas. In this policy, “we” means Prime Spray MTL, operating as Prime Spray.
This policy describes how we handle personal information received through primespray.ca, quote requests, Meta lead forms, social-media messages and communications about our services.
For privacy questions, complaints or requests, contact:
- Privacy officer: Person in charge of the protection of personal information, Prime Spray
- Email: info@primespray.ca
- Telephone: 514-586-1740
2. Information you provide
When you request an estimate or contact us, we collect the information you submit, which can include your name, email address, telephone number, city or postal code, project address, preferred timing, project description, photographs and messages.
Our website quote form asks for your name and telephone number (required), your email address (optional), the type of project, a description of the work and up to six photographs (optional). When you submit it, the form sends your information and photographs by email to our business inbox (info@primespray.ca). The website itself does not store your submission in a database.
We use these details to understand the work, check our service area, respond to questions, prepare estimates and arrange appointments. If you hire us, we also keep the information needed to schedule and carry out the work, manage invoices and payments, and handle service or warranty requests.
Please send only photographs and details relevant to your project. Avoid including people, identification documents or other private material that is not needed for an estimate. We obtain separate permission before using identifiable project photographs or testimonials for public marketing.
3. Lead forms and social-media messages
If you submit a Facebook or Instagram lead form, Meta provides us with your submitted answers and contact information. When you contact us through Messenger or other social channels, we receive the messages and information you share with our business.
We use these submissions to follow up on your request. Submitting an estimate request does not automatically subscribe you to unrelated promotional messages. Where we send optional promotional communications, we obtain the consent required and provide a way to unsubscribe.
The social platform also handles information under its own privacy policy. Meta’s policy is available at https://www.facebook.com/privacy/policy/.
4. Website data, cookies and advertising tools
Essential hosting and security data. Our website is hosted by Vercel. When you visit, the hosting service processes technical information such as your IP address, browser type and the pages requested, in order to deliver the website, protect it against abuse and diagnose errors. These logs are kept for a short period under the hosting provider’s settings and are not used for advertising. This processing is necessary for the website to work and does not depend on your cookie choice.
Optional advertising tools. With your consent, we use two advertising measurement tools. They are off by default and do not load until you select “Accept” in our cookie banner:
- Google Ads conversion tag (Google LLC). Receives browser/device identifiers stored in cookies, the pages you visit and a conversion event when a quote request is successfully submitted. Purpose: measure which Google ads lead to quote requests.
- Meta Pixel (Meta Platforms, Inc.). Receives browser/device identifiers stored in cookies, the pages you visit and a “Lead” event when a quote request is successfully submitted. Purpose: measure which Facebook and Instagram ads lead to quote requests, and show relevant advertising.
Where enabled with the required consent, advertising measurement can connect a website visit or successful quote submission with an advertisement. Advertising platforms may process browser/device identifiers, page or event information and other disclosed matching data under their own policies. We do not send your name, email address, telephone number, project details or photographs from our quote form to Google or Meta, and we do not use your contact details for ad matching or audience creation.
Your choice. On your first visit, a banner lets you accept or refuse advertising cookies. Refusing does not affect your use of the website or your ability to request a quote. You can change your choice at any time using the “Cookie settings” link at the bottom of every page, or here: . When you withdraw consent, the tools stop loading and we remove their cookies from our domain. Advertising cookies generally expire after up to 90 days.
Google’s policy: https://policies.google.com/privacy. Meta’s policy: https://www.facebook.com/privacy/policy/.
5. Who can access your information
Within Prime Spray, access is limited to people who need the information to handle inquiries, provide services, manage billing or address privacy matters.
We use service providers to support these activities. The providers and their roles are:
- Vercel Inc. — website hosting and security; processes technical data and relays quote-form submissions to our email.
- Our business email provider — receives and stores quote requests, photographs and our email correspondence with you.
- Our authorized website and marketing agency — website maintenance and advertising management, with access limited to what is needed for that work.
- Google LLC and Meta Platforms, Inc. — advertising measurement, only with your consent (see section 4); Meta also delivers lead-form submissions and social-media messages to us (see section 3).
We limit service-provider access to what is needed for the relevant purpose and require appropriate confidentiality and security arrangements. We may also disclose information where authorized or required by law, including to respond to a valid legal demand.
We do not sell personal information or provide inquiry lists to unrelated businesses for their own marketing.
6. Processing outside Québec
Some providers store or process information outside Québec, including in the United States (Vercel, Google and Meta) and other countries where these providers operate. Information processed there may be subject to local laws and lawful access by authorities. Before transferring personal information outside Québec, we assess the relevant privacy risks and put the required safeguards and contractual measures in place.
7. Keeping and protecting information
We retain information according to its purpose and applicable obligations:
- Inquiries that do not become customer projects: deleted 24 months after our last communication with you.
- Customer, invoice and warranty records: invoice and payment records are kept for 6 years after the end of the fiscal year to which they relate, as required by tax law; warranty records are kept until the warranty period ends, or for that 6-year period if longer.
- Technical logs, tracking records and backups: hosting logs are kept for a short period under our hosting provider’s settings; advertising cookies expire after up to 90 days or when you withdraw consent; backups follow the periods above.
When information is no longer needed and no retention obligation applies, we securely destroy it or anonymize it as permitted by law.
We use access restrictions, account security and safeguards appropriate to the information we hold, and our website transmits form submissions over encrypted (HTTPS) connections. No electronic storage or transmission method is entirely risk-free.
8. Your choices, requests and complaints
You may ask to access or correct personal information we hold about you, withdraw consent where applicable, or raise a concern about our handling of your information. You may also request a portable copy of eligible computerized information where the law provides that right. Contact the privacy officer above. We may need to verify your identity before responding. We respond to written requests within 30 days.
You may choose not to supply optional details. If you do not provide information needed to assess or arrange your project, we may be unable to give an accurate estimate or provide the requested service. Withdrawing consent does not necessarily require deletion of records we must retain for legal or contractual reasons.
We review privacy complaints and communicate our response. You may also contact Québec’s Commission d’accès à l’information: https://www.cai.gouv.qc.ca/.
9. Changes to this policy
We update this page when our practices change and revise the date above. We provide appropriate notice of material changes and obtain new consent when required before using information for a new purpose.
