Privacy Policy

Alayan Design-Build Inc. ("Alayan", "we") respects your privacy and handles personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

Inquiries: your name, email, phone number, project type, location and message.
Client accounts: your name, email and a securely hashed password (we never store the password itself). A phone number is optional.
Projects: project details, milestones, design files and 3D models we prepare for you, and your space program (the spaces you want, their sizes and how you'd like them to feel).
Payments: the amount, date and payment reference. Card payments are processed by Stripe; we never receive or store your card number.
Design Style Assessment: your project registration details, the images and options you choose, your notes and the resulting Design Taste Profile.
Marketing preferences: whether you agreed to receive optional news by email. We only send it if you opted in.
Security records: sign-in times and IP addresses, used to protect your account and investigate misuse.

We collect only what we need to respond to you and to design your project (data minimization). Optional fields are marked as optional.

Cookies

We use one essential cookie to keep you signed in, plus a few browser-storage preferences. We don't use advertising, analytics or tracking cookies. Full details are in our Cookie Policy.

How we use it

To respond to inquiries, provide our design and permit documentation services, give you access to your project, process payments, keep the site secure and meet legal obligations. We don't sell your information, and we don't send marketing messages without your consent.

Who we share it with

Only service providers that help us run the site, under contracts that protect your information: Cloudflare (hosting, database and file storage), Stripe (card payments) and our email provider. We also share information with authorities such as your municipality when you ask us to submit a permit application on your behalf, and with other professionals on your project (for example, a structural engineer) when needed for your project.

Processing outside Canada

Some of these providers may store or process information outside Canada, including in the United States. While it's there, it may be accessible to courts and authorities of that country under its laws.

How we protect it

Encrypted connections (HTTPS), hashed passwords, server-side access checks on every private file and project, and an internal audit log of administrative actions.

Retention

Inquiries that don't become projects: deleted after they're closed and the retention period set by Alayan has passed (24 months by default).
Project records and drawings: kept as long as needed for the project and for legal, insurance and professional record-keeping requirements.
Payment records: kept for at least six years, as required by Canadian tax law.
Sign-in sessions and password-reset links expire and are deleted automatically.
Security logs (sign-ins, admin actions) are kept to protect accounts and can't be altered.

Your rights

You can ask to see, correct or delete your personal information, or withdraw your consent, at any time (legal or contract limits may apply, and we'll explain them). We respond within 30 days.

With a client account: go to Account → Your data and privacy to download your information instantly or make a request.
Without an account: use our privacy request form.

If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Contact

Privacy questions: contact us.

Last updated: October 2026