Privacy Policy

Last updated Oct 2026

We respect your privacy. This page explains, in plain words, what we collect, why, where it is kept, and how you can see or delete it. It is written to meet Canada's federal privacy law (PIPEDA) and the provincial laws that apply, such as BC PIPA, Alberta PIPA and Quebec's Law 25.

1. What we collect

• Owners who list: your name, email, and the details you give about your business.
• Buyers: your name, email, the area and type of business you want, and an optional budget.
• Messages: what you write when you contact an owner or ask us for help.
• Email sign-ups: your email, the area you chose, and a record of when and how you agreed to receive email.
• Value estimates: the numbers you enter in the estimate tool, if you choose to send them.

We do not collect payment card details. We do not knowingly collect information from anyone under 18.

2. Why we collect it

We use your information only to run the site: to show and review listings, to pass messages between buyers and owners, to reply to you, to send email you have agreed to, and to keep the site safe from spam and misuse. We do not sell or rent your personal information.

3. Who can see it

Owners' names and email addresses are not shown publicly. When a buyer sends an owner a message, we pass it on, and the owner decides whether to reply and what to share. Only the people who run the site can see what is stored.

4. Where it is stored, and who helps us

• Database: stored with Supabase, on servers located in Canada.
• Website hosting: provided by Vercel. Pages may be delivered from servers outside Canada, including in the United States.
• Email: email to our address is passed through our domain provider's email forwarding service (Namecheap) to our email inbox provider. These services may store email outside Canada.

Information handled outside Canada may be accessed by authorities there under local law. We choose providers that protect data with industry-standard security.

5. Cookies and analytics

The public site does not use advertising cookies or tracking cookies, and we do not currently use an analytics service. A single security cookie is used only when a site administrator logs in. If we add analytics or ads in future, we will update this page first.

6. How long we keep it

We keep listings and messages while a listing is active and for up to 2 years after, then delete them. Buyer and email sign-ups are kept until you ask us to remove them or withdraw consent. Records of email consent are kept as long as the law requires.

7. Email and consent (CASL)

We only send marketing email to people who have clearly agreed. Every email says who it is from and how to stop. You can withdraw consent at any time by replying to any email or writing to us.

8. Your rights: see, correct or delete your information

You can ask to see the personal information we hold about you, correct it, or have it deleted. Email hello@sellmybusinessdirect.com. We will reply within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

9. Keeping it safe

We use encrypted connections (HTTPS), access controls and reputable providers. No system is perfect, so if a breach ever puts you at real risk, we will tell you and the authorities as the law requires.

10. Changes

If we change this policy, we will update the "Last updated" date at the top of this page.

Questions about this page? Email hello@sellmybusinessdirect.com.