Privacy Policy

Information We Collect

Website forms collect your name, contact details, message and relevant product or device information. Shipping quote requests collect a delivery address; mail-in repair and device-sale requests collect a return address. Mail-in repair requests also record battery condition and acknowledgement of the repair process. Selling forms also collect storage capacity, optional colour details, condition, damage, repair history, ownership and account or carrier-lock disclosures. You may optionally upload device-condition photos with repair and device-sale requests. These are stored privately for staff assessment and are not published in the shop. Photos are resized and location metadata is removed during upload. Avoid including personal content in them. We keep submission references, policy acknowledgements and processing records. Repair requests also store the customer’s name, acceptance time, waiver version and a copy of the accepted repair waiver wording. Hosting and security services process technical information such as IP addresses, browser details and request logs.

Staff accounts store a name, email and securely hashed password. Essential session cookies keep staff signed in. Employee access and changes made in the workspace are recorded. Time clock PINs are stored as salted hashes and are required to clock in and out. PIN recovery sends a short-lived, single-use verification code to the staff member’s account email; owner resets are recorded. Timekeeping records include staff identity, clock-in and clock-out times, and any owner corrections or daily notes. Employees can view only their own timesheets; the owner can review all staff hours. Enter staff passwords only in the dedicated sign-in or password forms. Do not put passwords, payment-card numbers, identity documents or sensitive device content in customer forms. Any necessary ownership checks or device access are arranged separately.

How We Use It

We use relevant information to respond, arrange pickup, shipping or service, assess offers and warranty claims, maintain transaction records, control staff access and prevent misuse. Customer contact details from orders, repairs, device-sale requests, inquiries and in-store sales are organized in a staff-only customer directory to support ongoing service and transaction follow-up. Customers sign in using a single-use email verification code to access their saved profile and order history. New orders are linked to the signed-in account; earlier website orders submitted using the same verified email address are also available. The account shows order status, estimated delivery dates and carrier details without exposing private device identifiers or staff notes. Essential customer session cookies maintain sign-in for up to 30 days unless the customer signs out. We use employee time records to track working hours and support owner review for payment. Submitting a form does not subscribe you to marketing. We do not sell personal information. We disclose information when you authorize it, when reasonably needed to provide the requested service, or when permitted or required by law.

Service Providers & International Processing

The website uses OpenAI Sites and Cloudflare for hosting, storage and sign-in infrastructure. Contact-form notifications, staff account emails and store drop-off repair notifications are sent through Resend. Store drop-off repair notifications include a PDF of the customer’s request, selected repair and price, and recorded waiver acceptance, sent to the store administrator. Our business email is hosted with Titan. Carriers receive the information needed to deliver shipments arranged with us.

These providers may process or store information outside Canada, including in the United States, where local laws may permit access by authorities. For details about our use of a particular provider, its processing locations or our related practices, contact the Store Owner at support@thephonezone.ca before submitting information.

Storage, Security & Retention

Customer records are restricted to approved staff. We use HTTPS, access controls and activity records to protect the website. No electronic system can guarantee absolute security. Records must be kept only for as long as reasonably needed for the stated purpose or legal requirements, including accounting, warranty claims and disputes, and then securely deleted or anonymized. Contact us to request a retention review; deletion is not automatic when a request is closed.

Your shopping bag is saved in your browser. Clearing site data removes it from that browser. Hosting and sign-in services may use essential cookies. We have not added advertising pixels or marketing analytics to this storefront.