This policy explains what personal information Moshan collects when you visit our website or contact us outside the app (by phone, text message, WhatsApp, WeChat, email or the online request), what we use it for, who handles it for us, how long we keep it, and how you can see, correct or delete it. The app will have its own privacy policy when it launches.
Who we are
Moshan (墨山) is run by UPAW CORP, operating as MoShan (UPAW CORP o/a MoShan), in Toronto, Ontario, Canada.
We are responsible for the personal information we hold, including what service providers handle for us, and we handle it under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
We collect only the information below, for the purposes in the next section.
- What you send us: what you tell us by phone, text message, WhatsApp, WeChat or email, and what those channels show us, such as your phone number and your WhatsApp or WeChat name and picture. If you add us on WeChat, we can also see the Moments you share with your WeChat contacts; you can stop us seeing them in WeChat's settings.
- The online request: the services you want, your name, how to reach you and the number or account for it, and, if you add them, your area or postal code and other details. The business inquiry also asks which kind of client you are and the name of your company or listing, and, if you add them, how often and the addresses. Sent with it: the page you sent it from, the first page you opened here, the name of the website and the campaign tags that brought you, and how long you took to fill it in (to filter out automated submissions).
- When you browse: the website uses no cookies and no visitor analytics. It shows you the Chinese or English pages according to your device's language; this happens in your browser and is not sent to us. If you choose light or dark mode, or switch language, your browser remembers the choice on your device. The current tab also remembers the first page you opened and where you came from; this is sent only if you submit the online request, and is cleared when you close the tab.
- Cloudflare hosts the website. To deliver pages to your device and protect the site from attacks, it processes technical information such as your IP address and browser type. The online request also uses Cloudflare Turnstile to confirm a person is sending it: it runs in your browser and reads some technical information about your browser and device.
- When we arrange a service for you: the address, how to get in, the work and the time, photos before and after (if taken), and payment records.
We do not collect payment details, identity documents or your precise location through the website.
What we use it for
- To answer your request, contact you the way you chose, explain our services and arrange a time;
- To arrange and carry out a service, and take payment for it;
- To keep a record of our conversation so we can follow up;
- To see which websites and campaigns bring people to us;
- To protect the website and the online request, and to filter out spam;
- To meet our legal obligations.
We do not sell your personal information. We will not send you promotional messages without your express consent.
Your consent
By contacting us or submitting the online request, you agree that we use what you give us for these purposes. You can withdraw your consent at any time by telling us; we may then be unable to keep answering you or arrange a service.
Who handles your information
We share it only with the service providers that help us operate and the person who does your service, or when the law requires or allows it, for example to protect someone's safety, or if the business is sold:
- Cloudflare: hosts and protects the website, and confirms with Turnstile that a person sends the online request.
- Google: the online request goes from your browser straight to Google, which keeps it in our Google Sheet and emails us when one arrives; Google also receives your IP address and browser type. When you open our Google Business Profile, Google's privacy policy applies.
- Our email, provided by Google (Google Workspace): for the notification emails and the emails you send us.
- WhatsApp (Meta) and WeChat (Tencent): when you contact us through them, your messages are handled under their own terms and privacy policies.
- Phone and text message carriers.
- The person who does your service: when we arrange one, they see your name, the address, how to get in and the work.
These providers may process information outside Canada, including in the United States; messages sent through WeChat may be processed in China or elsewhere. There, the information is subject to local laws, and local courts, law enforcement and national security authorities may obtain it under those laws.
How long we keep it
Only until we no longer need it. If a request does not lead to a service, we delete its record within 15 days of our last contact, including in the sheet, emails, chats, text messages and call logs. If it does, we keep the records of the service and the payment as long as tax and other laws require, and delete the rest within 15 days of the last service. If you have asked to see your information, or a complaint or claim is still open, we keep what it concerns until it is resolved.
How we protect it
Within Moshan, only the people who handle requests and arrange services can see this information. The website and the online request use encrypted connections (HTTPS), and the Google account that stores online requests is protected by a password and two-step verification.
If a breach creates a real risk of significant harm to you, we will tell you and the Office of the Privacy Commissioner of Canada, as the law requires.
Access, correction and deletion
You can ask to see the personal information we hold about you, correct it, delete it, or withdraw your consent. We reply within 30 days of receiving your request; if we need more time, we tell you why, as the law allows. Before we show or change anything, we confirm it is you.
Contact our privacy officer at hello@moshan.ca, or by phone or WhatsApp at 942-688-1616.
If you are not satisfied with how we handle it, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Children
The website is not meant for children under 13, and we do not knowingly collect their personal information. If you think we have, tell us and we will delete it.
Changes to this policy
When we change this policy, we update the date at the top of this page. For important changes, we say on this page what changed. Before we use your information for a new purpose, we ask for your consent.