Effective date: August 14, 2026

Backflow Club (“Backflow Club”, “we”, “us”, or “our”) provides annual backflow prevention assembly testing and compliance coordination services to property owners and managers in British Columbia, Canada. This Privacy Policy explains what personal information we collect through backflow.club and our booking platform, why we collect it, who we share it with, and the choices you have.

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (PIPA).

1. Information we collect

Information you provide to us. When you request pricing, book a test, or communicate with us, we collect:

• Your name and the business or property name, where applicable
• Email address and mobile number
• Service address and billing address, including city, province, postal code, and country
• Details about the property and the backflow assemblies to be tested, including the number of assemblies, access type, and any access instructions or preferred appointment times you give us
• Test and compliance records, including test dates, test outcomes, certificate and report files, and any repair approvals
• The content of messages you send us by email, text message, or WhatsApp

Payment information. Card details are entered directly into a secure payment form hosted by our payment processor, Stripe. Backflow Club does not receive, process, or store full card numbers, expiry dates, or security codes on its own systems. We retain only a payment token issued by Stripe, together with the card brand and last four digits, so we can charge the agreed amount once your test is complete.

Information collected automatically. When you visit backflow.club, our website and hosting provider record standard technical data such as IP address, browser type, pages viewed, and the date and time of the visit. We use cookies and similar technologies to keep your booking session working, remember your selections between booking steps, and understand aggregate site usage.

2. How we use your information

• To quote, schedule, and deliver backflow testing services
• To assign a certified tester and give that tester the address, access details, and contact information needed to attend the appointment
• To take payment, issue invoices and receipts, and maintain our accounting records
• To send you service communications, including booking confirmations, appointment reminders, completion notices, test reports, repair quotes, and annual testing reminders
• To respond to your questions and resolve service issues
• To meet our legal, tax, and record-keeping obligations

We rely on your consent, and on the performance of our service agreement with you, as the basis for these uses.

3. Who we share your information with

We do not sell your personal information. We do not share it with advertisers, data brokers, or any third party for that party’s own marketing purposes.

We share personal information only where it is necessary to deliver the service you booked, and only with the following categories of recipient:

• Certified testers. The independent certified tester assigned to your job receives your name, service address, contact number, access instructions, and assembly details so the test can be performed.
• Municipalities. Completed backflow test reports are submitted to your municipality by the certified tester, as required by municipal bylaw and provincial regulation. This submission is a legal requirement of the service.
• Stripe. Our payment processor, which handles card authorization, storage, and charging. Stripe acts as an independent controller of card data under its own privacy policy and PCI DSS obligations.
• Intuit QuickBooks. Our accounting system. Invoices are synced to QuickBooks for bookkeeping and tax purposes. The synced record contains your name, billing address, invoice line items, amounts, and tax. No card numbers are ever sent to QuickBooks.
• Service providers that operate our systems. Our website host, our customer relationship and messaging platform, and our email and file storage providers process data on our behalf, under contract, and only on our instructions.

We may also disclose personal information where required by law, court order, or a lawful request from a government or regulatory authority, or where necessary to establish or defend a legal claim.

4. Where your information is stored

Backflow Club operates in British Columbia, Canada. Some of our service providers, including our payment processor, accounting system, hosting, and messaging platform, store and process data on servers located in the United States and other countries. Personal information held in another country may be accessible to the courts and law enforcement of that country under its laws. By using our services you consent to this transfer and processing.

5. How long we keep it

We keep booking, test, and compliance records for as long as needed to provide the annual testing service and to meet legal, tax, and regulatory retention requirements, generally seven years for financial records. Test reports and compliance history are retained so we can send accurate annual reminders and reproduce your testing history on request. When information is no longer required, we delete it or render it anonymous.

6. Security

We use access controls, encrypted connections (HTTPS/TLS), and reputable third-party platforms that maintain their own security programs. Card data is held by Stripe, a PCI DSS Level 1 certified provider, and never on Backflow Club systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable steps appropriate to the sensitivity of the information.

7. Your rights and choices

• Access and correction. You may request a copy of the personal information we hold about you, and ask us to correct anything inaccurate.
• Withdrawal of consent. You may withdraw consent to non-essential communications at any time. Note that service communications relating to an active booking, such as appointment confirmations, reminders, invoices, and test reports, cannot be switched off while that booking is open.
• Marketing opt-out. Every marketing message includes an unsubscribe option. You can also reply STOP to a text message to stop text messages.
• Deletion. You may ask us to delete your information. We will do so except where we are required to retain it for legal, tax, or regulatory reasons.

To exercise any of these rights, contact us using the details in Section 11. We will respond within 30 days.

8. Cookies

We use cookies that are strictly necessary to operate the booking funnel and keep your session and selections intact between steps, and analytics cookies that tell us in aggregate how the site is used. You can block or delete cookies in your browser settings, but the booking funnel may not work correctly without the necessary cookies.

9. Children

Our services are directed to property owners, property managers, and businesses. We do not knowingly collect personal information from anyone under the age of 19. If you believe a minor has provided us with personal information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page shows when it was last revised. Material changes will be communicated to active customers with reasonable notice. Continued use of our services after an update constitutes acceptance of the revised policy.

11. Contact us

Questions, requests, or complaints about privacy can be directed to our Privacy Officer:

• Email: support@backflow.club
• Text or WhatsApp: 778 819 2687
• Backflow Club, British Columbia, Canada

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia, or the Office of the Privacy Commissioner of Canada.