Privacy Policy.

Sonata Design, operating as Sonata Design (“Sonata Design,” “we,” “us,” or “our”), respects your privacy and is committed to protecting the personal information you share with us. This policy explains what personal information we collect, why we collect it, how we use and share it, and the choices available to you.

We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta’s Personal Information Protection Act (PIPA), and Canada’s Anti-Spam Legislation (CASL).

This policy applies to personal information we collect through our website at https://sonatadesign.ca/, through consultation and quote requests, through our email and text message programs, and in the course of providing design, supply, and installation services. It does not apply to the practices of third-party websites or services that we link to but do not control.

Information you provide directly

• Contact details: your name, email address, phone number, and mailing or service address.
• Project information: details about your home or project — room types, window measurements, photographs you send us, product preferences, design preferences, timelines, and budget ranges you choose to share.
• Appointment information: preferred consultation dates, site access instructions, and notes from in-home or virtual consultations.
• Correspondence: the content of emails, text messages, form submissions, and messages you send us through social media or our website.
• Marketing preferences: your consent to receive emails or text messages, and your subsequent choices about those communications.

Information collected automatically

• Device and usage data: IP address, browser type and version, operating system, device type, referring website, pages viewed, links clicked, and the dates and times of your visits.
• Cookies and similar technologies: small files and tags placed on your device, described in section 6.

Information from third parties

• Advertising and analytics platforms: aggregated campaign and audience information from platforms such as Meta and Google.
• Referral partners: where a builder, designer, renovator, or previous client refers you to us, we may receive your name and contact information from them.
• Social media: information you make available to us when you interact with our accounts or send us a direct message.

We do not knowingly collect government identification numbers, financial account numbers, or sensitive categories of personal information through our website. Please do not send these to us through web forms or email.

We collect and use personal information for the following purposes:

• To respond to consultation requests, quote requests, and general inquiries.
• To prepare estimates and quotes, including measuring, product selection, and design recommendations.
• To fulfill orders — placing orders with manufacturers, scheduling installation, and arranging service or warranty work.
• To communicate with you about your project, including confirmations, scheduling, and follow-up.
• To send marketing communications where you have consented to receive them.
• To measure and improve the performance of our website and advertising, including which campaigns generate inquiries.
• To maintain business records, manage accounts receivable, and comply with legal, tax, and accounting obligations.
• To protect our rights, property, and safety, and those of our clients and staff.

We will not use your personal information for a new purpose that is materially different from those described above without first obtaining your consent, unless permitted or required by law.

We collect, use, and disclose personal information with your consent, except where PIPEDA or PIPA permits or requires otherwise.

• Express consent is obtained when you submit a form, check a marketing consent box, sign a quote or work order, or otherwise clearly agree to a specific use.
• Implied consent may apply where the purpose is obvious from the circumstances and you voluntarily provide the information — for example, providing your address so that we can attend a measurement appointment.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide certain services — for example, we cannot complete an installation without an address. To withdraw consent, contact our Privacy Officer using the details in section 16.

Our website uses cookies and similar technologies, including pixels and tags placed by third parties. These help the site function, tell us how visitors use it, and allow us to deliver and measure advertising.

Where required, we will ask for your consent before setting analytics and advertising cookies, and you may change your preferences at any time through the cookie banner or your browser settings. Most browsers allow you to refuse or delete cookies; disabling strictly necessary cookies may prevent parts of the site from working.

You can also manage advertising preferences directly with the platforms: Meta through your Facebook or Instagram ad settings, and Google through Google Ad Settings and the Google Analytics Opt-out Browser Add-on.

• We send commercial electronic messages — including promotional emails and text messages about products, seasonal promotions, design ideas, and events — only to people who have consented to receive them, in accordance with CASL.
• Every marketing message identifies Sonata Design, includes our contact information, and contains a clear unsubscribe mechanism.
• You may unsubscribe at any time using the link in any email, by replying STOP to a text message, or by contacting us directly. We will action unsubscribe requests within 10 business days.
• Unsubscribing from marketing does not stop transactional messages relating to an active order, such as appointment confirmations, delivery updates, or invoices.
• Standard message and data rates from your mobile carrier may apply to text messages.
• We use Gmail to send these messages, which processes subscriber information on our behalf.

We do not sell your personal information. We share it only as described here:

• Service providers: companies that perform services for us, such as website hosting, customer relationship management, email and text message delivery, analytics, advertising, scheduling, bookkeeping, and payment processing. They may access personal information only as needed to perform those services for us.
• Manufacturers and suppliers: where necessary to place, fulfill, or warranty an order — for example, providing measurements and delivery details to a window covering manufacturer.
• Installers and trade partners: where installation, service, or related work is performed by our contracted installers or partner trades, we share the contact details and site information needed to complete the work.
• Professional advisors: our accountants, auditors, insurers, and lawyers, where reasonably required.
• Business transaction: in connection with a sale, merger, financing, or reorganization of our business, subject to appropriate confidentiality protections.
• Legal requirements: where required or permitted by law, including in response to a valid court order, subpoena, warrant, or request from a government or regulatory authority, or to establish, exercise, or defend a legal claim.

We require service providers to protect personal information with safeguards comparable to our own and to use it only for the purposes we specify.

Some of our service providers — including analytics, advertising, email, and hosting providers — store or process personal information in the United States or other countries. While information is in another country, it may be accessible to the courts, law enforcement, and national security authorities of that country under its laws.

You may contact our Privacy Officer for information about our policies and practices regarding service providers outside Canada, and about how we protect information transferred to them.

We keep personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• Inquiries that do not become projects: retained for a reasonable period to allow follow-up, then deleted or anonymized.
• Client project records: retained for the duration of the warranty period and for as long as needed to support service, warranty claims, and reordering, and to meet tax and accounting obligations.
• Marketing subscribers: retained until you unsubscribe, after which we keep a minimal record of your unsubscribe request so that we do not contact you again.

When personal information is no longer required, we destroy, erase, or anonymize it securely.

We maintain physical, organizational, and technological safeguards appropriate to the sensitivity of the information we hold. These include restricting access to staff and contractors who need it to do their jobs, using password protection and reputable service providers, securing physical records, and transmitting our website forms over encrypted connections.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and information you send us by email or text message travels over networks we do not control.

Subject to certain exceptions under PIPEDA and Alberta PIPA, you have the right to:

• Access the personal information we hold about you, and be told how it has been used and to whom it has been disclosed.
• Correct personal information that is inaccurate or incomplete.
• Withdraw consent to our collection, use, or disclosure of your information, subject to legal and contractual restrictions.
• Unsubscribe from marketing communications at any time.
• Ask questions or complain about how we handle your information.

To make a request, contact us using the details in section 16. We may ask you to verify your identity before responding. We will respond to access requests within the time limits required by law, generally 45 days under Alberta PIPA, or 30 days under PIPEDA, and will tell you if we need an extension and why. In limited cases, the law requires or permits us to refuse access; if we do, we will explain why and tell you how to seek a review.

Our website and services are directed to adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us, and we will delete it.

Our website and social media accounts may link to third-party websites, including manufacturers, suppliers, and social platforms. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing personal information.

We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. The current version will always be posted at https://sonatadesign.ca/privacy-policy with the effective date shown at the top. Material changes will be brought to your attention through a notice on our website or by direct communication where appropriate.

For questions, access requests, corrections, or complaints about how we handle personal information, contact our Privacy Officer:

We will acknowledge your inquiry and investigate all complaints. If we find a complaint is justified, we will take appropriate steps to resolve it, including correcting our practices and information where necessary.

If you are not satisfied with our response, you may contact:

• The Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca), for matters under Alberta PIPA.
• The Office of the Privacy Commissioner of Canada (priv.gc.ca), for matters under PIPEDA.