Privacy Policy

At Zoned ("we", "us", "our"), we collect and use information to deliver zoning reports, feasibility guidance, planning tools, site plans, and contractor connection workflows. This Privacy Policy explains what we collect, how we use and share it, how long we keep it, and the rights you have under Canadian privacy law, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial equivalents.

This Privacy Policy should be read together with our Terms of Use and Disclaimer. Zoned is accountable for personal information in its custody and under its control.

Your Consent

By using the Service, submitting a form, subscribing as a contractor, or otherwise providing information to us, you consent to the collection, use, and disclosure of your personal information as described in this Policy. Where we rely on your express consent (for example, to share lead data with a matched contractor, to send you commercial electronic messages, or to use advertising and analytics cookies), we will seek that consent at the point of collection and you may withdraw it at any time by contacting hello@zoned.ca, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent does not affect processing that already occurred while consent was in place.

Accountability & Privacy Officer

Zoned is accountable for personal information in its custody or control, including information transferred to third-party service providers for processing. Questions, complaints, or access requests should be directed to our Privacy Officer at hello@zoned.ca. We will respond as required by applicable law, typically within thirty (30) days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Information We Collect

When you use Zoned, we may collect and store the following categories of information:

  • Search and property data: Property addresses you search, zoning results, parcel and lot metrics, setback analysis, and related project feasibility outputs.
  • Lead and contact data: Name, email address, phone number, project interest, project timing, and any other information you submit through a lead or intake form.
  • Project and planning data: Site-plan requests, collaborative planning session data, project polygons or shapes you draw, generated PDFs, and related project context.
  • Analytics and attribution data: Session identifiers, referrer information, campaign parameters, ad-click identifiers, page interactions, device/browser details, and event telemetry.

Information We Do Not Intentionally Collect

  • Government identification documents (driver's licences, passports, SINs)
  • Full payment card numbers, card security codes, or bank account credentials
  • Precise device location data beyond the property address you provide or search
  • Sensitive personal information such as health, racial or ethnic origin, religious beliefs, sexual orientation, political views, or biometric identifiers
  • Information from children known to us to be under the age of thirteen (13); the Service is not directed to children, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact hello@zoned.ca and we will delete it.

How We Use Your Information

  • Generate zoning reports, site plans, and related planning outputs for the address you provide.
  • Operate collaborative planning tools and save planning-session progress.
  • Send you transactional emails such as zoning reports, site plans, and service-related follow-ups.
  • Match you with a contractor and share your information with that contractor when you submit the Ottawa form and provide the required consent.
  • Measure product usage, campaign performance, lead conversions, and contractor engagement.
  • Operate support, internal administration, quality assurance, fraud prevention, and legal compliance functions.

Contractor Sharing and Referral Flows

If you submit a lead form that includes contractor-sharing consent, Zoned may share your contact details, property address, project type, zoning and lot analysis context, site-plan information, and campaign attribution data with a matched contractor so that contractor can review your project and contact you. For limitations of liability and how independent contractors may use your information to follow up, see the Terms Privacy Disclaimer.

Depending on the workflow, this sharing may occur through direct email, scheduling links, CRM or webhook integrations, or contractor notification systems. For certain contractor referral flows, this may include Zapier or comparable custom webhook / CRM endpoints configured by the matched contractor.

Analytics, Advertising, and Conversion Tracking

Zoned uses analytics and ad-measurement tooling to understand product usage and campaign performance. On some pages and referral flows, this may include Google Tag Manager, Meta Pixel, Clicky, and similar tools.

When lead-conversion tracking is enabled, these systems may receive event-level conversion and campaign metadata such as project type, referral code, page context, and UTM or ad-click attribution values. Zoned keeps richer operational lead details, such as contact information and property-specific context, in first-party systems used to operate the service and report on performance.

Third-Party Services

Zoned uses third-party services to operate the platform, including:

  • Vercel: Hosting and deployment
  • Vercel Analytics: Product and site analytics
  • Google Tag Manager: Tag management and event delivery
  • Meta Pixel: Advertising and conversion measurement
  • Clicky: Analytics used on some referral experiences
  • Supabase: Database, storage, and backend services
  • Resend / Nodemailer / SMTP providers: Transactional email delivery
  • Zapier / contractor CRM webhooks: Contractor lead delivery and automation when configured
  • City of Ottawa APIs, Esri, OpenStreetMap, and Carto: Mapping and public property / zoning data
  • OpenAI: AI-powered summaries or responses where enabled
  • Stripe: Payment processing for paid services, when applicable

These providers may process information on our behalf under their own terms and privacy policies.

Legal Basis for Processing

We process personal information on one or more of the following lawful bases: your express or implied consent; the performance of a contract with you (for example, delivering a site plan you purchased or operating a contractor subscription); compliance with legal obligations (for example, tax, anti-spam, or consumer-protection rules); and legitimate interests in operating, securing, and improving the Service, preventing fraud, and defending legal claims, where those interests are not overridden by your rights.

International Transfers & Service Providers

Zoned is based in Canada but uses service providers and cloud infrastructure that may store or process personal information in the United States, the European Union, or other jurisdictions. When we transfer personal information outside your province or country, we use contractual and technical safeguards (for example, data-processing agreements, encryption in transit, and access controls) to provide a comparable level of protection. Information processed in another country is subject to the laws of that country, including lawful requests for disclosure by courts, law-enforcement, and national-security authorities.

Data Security

We implement commercially reasonable technical, administrative, and physical safeguards to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. These include encryption in transit (TLS), access controls, audit logging, vendor review, least-privilege permissions, and vulnerability management. No internet transmission or storage system can be guaranteed to be completely secure. If we become aware of a breach of security safeguards involving your personal information that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA, and keep records of the breach for as long as the law requires.

Data Retention

Zoned retains personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, to comply with legal, accounting, tax, and regulatory obligations, to resolve disputes, and to enforce our agreements. Typical retention windows are:

  • Lead and project information: up to seven (7) years from last activity, to support tax, consumer-protection, and dispute-resolution obligations;
  • Contractor account and billing records: up to seven (7) years after termination, to meet Canadian tax and record-keeping requirements;
  • Analytics and telemetry data: typically twenty-six (26) months, shorter where our analytics tooling allows;
  • Marketing-consent records: for the duration of consent plus three (3) years after withdrawal, as required under CASL;
  • Backups and archived logs: on a rolling basis consistent with our vendor-configured schedules.

When personal information is no longer required, we will take reasonable steps to delete, de-identify, or anonymize it.

Your Rights & Choices

Subject to applicable law (including PIPEDA and provincial equivalents), you have the right to:

  • Access — request a copy of the personal information we hold about you and information about how it has been used and disclosed;
  • Correction — request that we correct inaccurate or incomplete personal information;
  • Deletion — request that we delete personal information we no longer need, subject to legal, contractual, or legitimate-business exceptions;
  • Withdraw consent — withdraw consent to future collection, use, or disclosure on reasonable notice, subject to legal or contractual restrictions;
  • Portability — where technically feasible and required by law, receive your personal information in a structured, commonly used format;
  • Opt out of marketing — unsubscribe from commercial electronic messages at any time using the unsubscribe link in any such message or by emailing hello@zoned.ca. Transactional messages (for example, receipts, security alerts, and lead notifications) may continue while your account is active;
  • Complain — file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or your provincial privacy regulator.

To exercise any of these rights, contact hello@zoned.ca. We may need to verify your identity before responding, and we may charge a minimal fee where expressly permitted by law. If we decline a request, we will explain why and, where practicable, point you to further recourse.

Do Not Track & Global Privacy Signals

Some browsers send "Do Not Track" or Global Privacy Control signals. Because there is no common standard for how these signals should be interpreted, the Service does not currently respond to them. You can still manage tracking preferences through the in-site consent banner and your browser settings.

Cookies and Similar Technologies

Zoned uses cookies, local storage, pixels, and similar technologies for essential functionality, session management, analytics, attribution, and conversion measurement. Where available, we provide an on-site consent control for optional analytics and advertising measurement. You can also control many of these technologies through your browser settings, although disabling them may affect site functionality.

Payment Processing

If you purchase a paid service, payment information is processed directly by Stripe or another configured payment provider. Zoned does not store full payment card numbers on its own servers.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

Contact Us

If you have questions about this Privacy Policy or want to request access, correction, or deletion of your information, contact us at hello@zoned.ca.

Last updated: Mar 2026