Privacy policy
Last updated October 6, 2026
This policy explains what personal information LAPS Supply collects through LAPS Supply CRM (the "Service"), how it is used and protected, and the choices you have. LAPS Supply is based in Alberta, Canada, and handles personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act.
Who this policy is for
Businesses that use the Service ("you", our customers) and their staff. Your own customers — the people you book service calls for — are covered too: for their information, you decide what is collected and why, and LAPS Supply processes it on your behalf as your service provider.
What we collect
- Account information: names and work email addresses of your users, their role, and when they sign in.
- Your customers' details that you or your Shopify store provide: names, phone numbers, email addresses and service addresses.
- Business records you create: bookings and job details, notes, technician reports, parts used, billing records, sales leads, tasks and time off.
- Job photos your technicians upload. Photos are re-saved when uploaded, which removes hidden data such as GPS location and phone model.
- Shopify data, if you connect a store: customers (read and write), products (read) and draft orders (read and write), only as needed to run the Service.
- Technical data: IP addresses and browser type at sign-in, and server logs used for security and troubleshooting.
We do not sell personal information, use it for advertising, or run third-party analytics or tracking on the Service.
How we use it
- To provide the Service: scheduling, drive-time estimates, job reports, billing and sending sign-in links.
- To keep the Service secure: detecting misuse, investigating problems and keeping audit logs of changes.
- To support you and bill for your subscription.
Where it is stored and who helps us
The Service runs on Google Cloud servers in Montréal, Canada. Backups are kept in Google Cloud Storage, which encrypts stored data. We use these providers only to run the Service, under their own data protection terms:
- Google Cloud — hosting and backups.
- Google Maps Platform — checking addresses and estimating drive times. Service addresses are sent to Google for this.
- Cloudflare — secure network delivery and protection from attacks.
- Postmark — sending sign-in emails.
- Shopify — your store, if you connect it; and app billing if you subscribe through the Shopify App Store.
- Stripe — subscription payments if you subscribe directly with us.
Some of these providers process data outside Canada, including in the United States, where it may be accessible to authorities under local law.
Photo links
You can send a customer a private link showing the photos from one visit. Anyone with the link can view those photos (and nothing else), so share it only with the customer. Links expire after one year and can be switched off at any time. Photo pages ask search engines not to index them.
Cookies
The Service sets one essential cookie to keep you signed in. There are no advertising or analytics cookies.
How long we keep it
We keep your data while your account is active. If you cancel, or uninstall the Shopify app, we delete your company's data within 30 days, except where the law requires us to keep records (for example, billing records). Backups roll off within 30 days after that. When Shopify tells us a shopper or store has asked for their data to be deleted, we act on it within 30 days.
Your choices and rights
You can see and correct most information in the Service yourself. You can ask us for access to, correction of, or deletion of your personal information, or for a copy of your company's data, by emailing [email protected]. If you are a customer of a business that uses the Service, please contact that business first; we will help them respond.
Security
We protect information with encryption in transit, a separate database for each company, role-based access, audit logs and regular backups. Read more on our data protection page. If a breach creates a real risk of significant harm, we will notify affected businesses and the Privacy Commissioner as the law requires.
Changes
We will post updates here and change the date above. For significant changes we will also email account owners.
Contact
Questions or requests: [email protected].