Timewood
← Back to site

Legal

Privacy Policy

Effective from 6. 7. 2026

This policy explains how we collect, use, disclose and protect personal information you provide or that we obtain in connection with visiting this website and registering for a watchmaking workshop. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA) and, where applicable, Quebec's Law 25. Canada's anti-spam law (CASL) governs our commercial e-mails.

1. Who is responsible

The organization responsible for your personal information is Timewood — Ismail (Zak) Yildiz, based in Edmonton, Alberta, Canada.

Privacy officer contact: e-mail zakismailyildiz@gmail.com, phone +1 (647) 248-2469.

2. What information we collect

Information you provide — mainly via the enquiry / booking form: name, e-mail, phone, preferred city and date, number of people and notes.

Information collected automatically — technical data (IP address, browser and device type, language, visit time) and cookie data, only to the extent you consent. See the Cookie Policy.

3. Why we collect it (identified purposes)

  • Handling enquiries and bookings — to answer you, reserve your seat and deliver the workshop (implied consent when you submit the form).
  • Service communication — confirmations, changes and practical information about your booking.
  • Legal and accounting obligations — invoices, tax and business records.
  • Analytics and marketing (Google Analytics, Meta Pixel) — express opt-in consent only, which you may withdraw at any time.
  • Commercial e-mails — sent only with your consent under CASL, always with sender identification and a working unsubscribe link.

We do not sell your personal information and we do not use it for purposes other than those listed above without asking you first.

4. Consent and withdrawal

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice — write to zakismailyildiz@gmail.com. Withdrawing consent for marketing does not affect a booking already made.

5. Retention

Enquiries and communication are kept typically for 12 months after the last interaction; booking and accounting records for as long as required by Canadian tax and business law (generally 6 years). Information is then securely destroyed, erased or anonymised.

6. Service providers and transfers outside Canada

We share information only with trusted service providers who need it to operate our site (web hosting, database, e-mail delivery and booking tools) and — only with your consent — analytics and advertising providers (Google, Meta). Some of these providers store or process information outside Canada, including in the United States and the European Union, where it may be accessible to foreign courts, law enforcement or national security authorities under the laws of those countries. We use contractual and technical safeguards comparable to our own protections.

7. Your rights

You have the right to access the personal information we hold about you, to ask for corrections, to withdraw consent, and to be told how your information is used and disclosed. Quebec residents may also request portability and the de-indexing or deletion of their information.

Send requests to zakismailyildiz@gmail.com. We respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376), to the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca), or to your provincial privacy regulator.

8. Safeguards

We apply physical, organizational and technological safeguards appropriate to the sensitivity of the information; data is transmitted over an encrypted connection (HTTPS) and access is limited to people who need it. If a breach creates a real risk of significant harm we will notify you and the Privacy Commissioner as required by law.

9. Children

The workshops and this website are intended for adults. We do not knowingly collect personal information from children under 13 without a parent's or guardian's consent.

10. Changes to this policy

We may update this policy. The current version is always available on this page together with the effective date.