Privacy Policy

1) Scope of This Policy

This Privacy Policy applies to blackskydiesel.ca, our online parts store, and our repair/service operations, including quote, booking, vehicle, ticket, invoice, payment, and customer support workflows.

By using our website, purchasing products, booking services, or communicating with us, you agree that your information will be handled as described in this policy.

2) Information We Collect

• Identity and contact details (name, business name, email, phone number, billing/shipping address).
• Vehicle and equipment details (year, make, model, VIN, unit number, usage details, service history).
• Order and service records (quotes, work orders, invoices, payments, warranty claims, support messages).
• Media and files you submit (photos, videos, signatures, attachments, inspection documents).
• Technical and usage data (IP address, browser/device data, pages visited, referral source, session/cookie data).
• Communication records (emails, form submissions, chat/support interactions, call notes).

3) How We Use Information

• Provide and manage diesel repair services, diagnostics, estimates, appointments, and follow-up support.
• Process e-commerce orders, payment transactions, shipping, returns, exchanges, and warranty requests.
• Verify fitment and compatibility of parts and reduce ordering/service errors.
• Operate customer dashboards and account features, including vehicle garages and order/service history.
• Prevent fraud, enforce platform security, and protect business and customer safety.
• Comply with legal, accounting, tax, insurance, warranty, and recordkeeping obligations.
• Improve our products, services, website reliability, and customer experience.

4) Legal Basis and Consent (Canada)

Where required by applicable law, we collect, use, and disclose personal information with consent, or where otherwise permitted/required by law for operational, contractual, legal, security, and safety purposes.

You may withdraw consent for certain uses (such as optional marketing) subject to legal or contractual restrictions and reasonable notice.

5) Payments, Shipping, and Service Providers

We use third-party providers to process payments, deliver shipments, host services, send communications, store files, and support analytics and operations. Those providers receive only the data reasonably required to perform their services.

Payment card details are handled by our payment processor and are not stored in full by Black Sky Diesel.

6) Banking and Financial Data (Plaid)

If you connect a bank account through our accounting system, we use Plaid Inc. to securely access your banking information. Plaid acts as an intermediary between you, your bank, and Black Sky Diesel.

• Data collected: Account name, institution name, account type, and transaction history (date, amount, merchant, category).
• How it is used: Bank data is used for internal accounting, bookkeeping, and reconciliation of business transactions. It is not used for credit decisions or shared with other customers.
• How it is stored: Plaid access tokens are encrypted at rest using AES-256-GCM before being stored in our database. Transaction data is stored in our encrypted PostgreSQL database.
• Retention: Plaid access tokens are retained while the bank connection is active and deleted immediately upon disconnection. Transaction records are retained for 7 years to comply with CRA financial record-keeping requirements.
• Disconnection and deletion: You may disconnect your bank account at any time through the accounting dashboard. Upon disconnection, the access token is deleted and revoked with Plaid. To request deletion of stored transaction data (subject to legal retention requirements), email [email protected].

7) AI, Automation, and Diagnostic Tools

We may use internal and third-party software tools to assist with search, ticket handling, diagnostics, product mapping, and workflow automation. Inputs may include service/order context, vehicle details, and customer-provided content.

We limit access to authorized personnel and maintain controls appropriate to business and technical needs.

8) Cookies and Similar Technologies

We use cookies and similar tools for authentication, session continuity, shopping cart functionality, performance monitoring, and analytics. You can control cookies in your browser settings, but some site features may not function correctly without them.

9) Data Retention

We retain information only as long as needed for the purposes in this policy, including service continuity, legal compliance, tax/accounting records, fraud prevention, chargeback defense, warranty support, and dispute resolution.

Retention periods vary by record type and legal requirements.

10) Security Safeguards

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11) International Processing

Our service providers may process data in jurisdictions outside your province/territory or outside Canada. Where this occurs, information may be subject to lawful access by courts, regulators, and law enforcement in those jurisdictions.

12) Your Rights and Choices

To make a request, email [email protected]. We may need to verify your identity before processing a request.

• Request access to personal information we hold about you, subject to legal exceptions.
• Request correction of inaccurate or incomplete personal information.
• Request deletion, anonymization, or restriction where legally available.
• Opt out of non-essential marketing communications.
• Request information about our privacy practices.

13) Children's Privacy

Our services are not directed to children under the age of majority in their jurisdiction. We do not knowingly collect personal information from children without appropriate legal authorization.

14) Third-Party Links

Our website may link to third-party sites. We are not responsible for the privacy or content practices of those sites. Please review their policies before providing personal information.

15) Updates to This Policy

We may update this policy from time to time. The updated version is effective when posted at /privacy with a revised date.

16) Contact

For privacy requests, complaints, or questions, contact: [email protected]

For contractual or legal terms questions, contact: [email protected]