Last updated
May 2026
1. Who we are
Heritage Valuation is a Canadian professional practice providing Insurance Appraisals and Replacement Cost Valuations. The Principal acts as the privacy officer for the practice and is the contact point for any privacy enquiry.
2. Personal information we collect
- Enquiry data: name, email, organisation, phone, property address and the message you submit through the contact form.
- Engagement data: billing details, property documentation and any information you choose to share to enable us to deliver the engagement.
- Payment data: deposits are processed by Square. Card numbers are entered on Square's hosted checkout and are never stored on our servers.
- Technical data: IP address, browser type, pages visited and timestamps, collected through standard server logs.
3. How we use personal information
- To respond to enquiries and prepare quotes.
- To deliver and administer engaged services.
- To process payments and maintain accounting records.
- To comply with legal, regulatory and professional obligations (including RICS).
- To safeguard the security and integrity of this website.
4. Legal basis and consent
We rely on your consent — given when you submit the contact form, sign an engagement letter or pay a deposit — to collect and use personal information. You may withdraw consent at any time by writing to us, subject to legal and contractual restrictions and reasonable notice.
5. Disclosure to third parties
We share personal information only as necessary, with:
- Square — for payment processing.
- Cloud hosting providers — for website operation and form submission storage.
- Professional advisors — accountants, legal counsel and our insurer where required.
- Regulators or law enforcement — where compelled by law.
Some of these providers may store data outside Canada (typically the United States or European Union). Where this occurs, the information is subject to the laws of those jurisdictions, including lawful access by their authorities.
6. Retention
Engagement files are retained for a minimum of seven (7) years following completion, in line with professional and tax record-keeping requirements. Enquiries that do not lead to engagement are retained for up to 24 months and then deleted.
7. Safeguards
We use technical and organisational safeguards appropriate to the sensitivity of the information, including encryption in transit (TLS), access controls, and confidentiality undertakings from any service provider with access to personal information.
8. Your rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Withdraw consent to further use, subject to legal and contractual limits.
- Lodge a complaint with the Office of the Privacy Commissioner of Canada.
9. Children
This website is not directed to individuals under the age of 18 and we do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy from time to time. The current version will always be posted at this URL with the "Last updated" date above.
11. Contact
Privacy enquiries can be sent to privacy@example.com. You may also write to the Office of the Privacy Commissioner of Canada at priv.gc.ca.