Updated 29 October 2026

Hello Toronto Privacy Notice

Information we collect

When you send a booking request, we collect the stay dates, guest counts, contact information, purpose of stay, pet and parking requests, any optional additional guest names, and information you choose to provide. The initial inquiry does not require house-rule acknowledgments or a signature. If you later complete screening, we also collect your typed name, drawn signature, the acknowledgments you accepted, their version and submission timestamps.

Please do not include identification documents, payment-card details or sensitive personal information in the form. Only provide another person’s information if you have permission to do so.

How we use it

We use this information to review your request, communicate with you about your stay, record the acknowledgments you accepted, and administer and protect the request process. Sending a request does not confirm a reservation, authorize a payment or guarantee availability.

Optional marketing choice

Submitting an inquiry does not subscribe you to promotions. The separate, optional checkbox lets you ask for Hello Toronto offers and updates by email from Ortega Building Services Inc. We record your choice, the wording and version shown, its source and the time received. You can submit without opting in and can withdraw consent by contacting admin@hellotoronto.ai. Promotional sending is not currently activated.

Storage and service providers

We use Vercel for website hosting, Supabase for request and private signature storage, Resend for notifications to our administrator, and Cloudflare Turnstile to protect the request process. New administrator notifications sent to our existing admin inbox include your name, email, phone number, stay dates, guest counts, pet and parking requests, origin and purpose of stay, and inquiry reference. They do not include drawn signatures or signature links. These emails also create a copy of those inquiry details in the administrator’s mailbox. Authorized administration access is required to review the stored request.

Our Supabase project is located in the United States, in North Virginia. Our hosting, email, security and tracking providers may process information outside Canada; this notice does not promise Canada-only processing.

Provider information: Vercel, Supabase, Resend, and Cloudflare.

Retention and privacy requests

We retain inquiry and customer history to manage requests, support current and possible future stays, and maintain relevant records. We have not set a single fixed retention period for requests, signatures, logs and backups, and we do not promise automatic deletion. Applicable recordkeeping obligations and the purpose for retaining information must be considered when handling a deletion request.

Contact admin@hellotoronto.ai to ask about access, correction or deletion, or to raise a privacy question. These requests are handled through the administrator; this website does not provide an automatic deletion tool. Information already retained in provider logs or backups may be subject to those providers’ retention practices.

Website tracking and choices

We use Google Tag Manager and Google Ads tools for advertising attribution and conversion measurement. Google’s conversion linking uses first-party cookies and browser storage to associate an ad click with a later action, including across hellotoronto.ai and booking.hospitable.com. See Google’s conversion-linking information and Google’s Privacy Policy.

When present in a page URL, campaign parameters (UTM values) and Google and Facebook click identifiers (GCLID and FBCLID) are saved in browser local storage. Our website uses those values for attribution and carries them into availability-search URLs. Our attribution-storage code sets no automatic expiry. Storing an FBCLID does not by itself mean a Meta advertising tag is active.

The website records page views, availability searches, booking-widget starts, social-link clicks, WhatsApp inquiry starts and insurance-housing page events in its tracking event layer. Some events include stay dates, guest counts or the property page. A saved booking request can generate an accepted-inquiry conversion using an opaque request reference for deduplication. Our inquiry conversion does not include your name, email, phone, stay context, signature or marketing choice. The unverified booking Purchase tag is paused; we do not count a booking-widget click or inquiry as a purchase.

You can use your browser’s controls to block cookies or scripts and clear site storage. Clearing storage removes locally saved attribution values but does not delete information already transmitted. Some security or form functions may not work when scripts are blocked. This website does not currently provide an on-site tracking preference control. The optional marketing checkbox concerns promotional email, not website tracking.

The form also uses a session-storage submission reference to help prevent duplicate requests.

Contact and operator

Hello Toronto is operated by Ortega Building Services Inc.

Privacy contact: admin@hellotoronto.ai.

Return to the booking request