Privacy Policy

Photos can help us assess your request, but providing them is optional. Before-and-after quality photos are taken with your authorization and used for the private service report. Refusing these photos does not prevent the agreed service. Please avoid including people, identity documents, financial papers or unrelated belongings in photos you send.

Permission for a private quality report is not permission to publish images on our website, social media or advertisements. We ask for separate authorization before that use. Contact us to withdraw optional permission for future use; this does not automatically erase records we must lawfully retain.

We contact you about your request, quotes, appointments, services and payments. A quote request does not automatically subscribe you to promotional messages. Promotional communications require an applicable consent basis and a way to unsubscribe; opting out does not stop necessary messages about an agreed service.

Authorized OMSG staff and service partners receive information relevant to their work, such as the address, tasks, timing and access instructions. Our technology providers process information for their respective functions:

• Supabase: client and application records, authentication and file storage.
• Resend: transactional email delivery and related delivery information.
• Stripe: online payment processing when that option is used.
• Meta: Facebook/Instagram conversations and optional advertising measurement as described below.
• Cloudflare and hosting providers: delivery and security of the site. Google Fonts: loading the site’s typefaces, which involves a technical request to Google including connection information such as your IP address.

We may also disclose information where legally required or reasonably necessary to establish or defend legal rights. Providers and their subprocessors may process information outside Quebec or Canada, where local laws can permit access by authorities. We do not guarantee that all data stays in Canada. Contact us for information about the providers and processing arrangements relevant to your records.

We retain information for the time needed for its purpose and applicable obligations. Factors include an active request or application, the service relationship, accounting and tax requirements, proof of an accepted contract, and a complaint or dispute. Photos and applications do not necessarily require the same retention as accounting records. Once no longer needed, information is deleted or anonymized unless lawful retention is necessary; restricted backups may remain until their normal replacement cycle.

Access restrictions and account-based permissions limit access to records and private files. Service-photo links may be time-limited. No website, email or storage system is entirely risk-free. Protect your account and avoid forwarding private access links. Contact us promptly if you suspect unauthorized access.

You can ask to access or correct your information, request deletion, withdraw optional consent, or raise a privacy concern. Depending on applicable law, you may have other rights, including receiving eligible computerized information in a commonly used format. We may verify your identity using information proportionate to the request. We will explain any lawful limitation or necessary retention and respond within applicable legal time limits.

We will explain if withdrawing information essential to an agreed service affects our ability to provide it. Optional advertising and publicity-photo consent are not conditions of receiving that service.

How to request deletion of your data