Privacy Policy

A Troy Ounce
Brantford, Ontario, Canada
Email: atroyounce@gmail.com · Phone: 289-204-4818
Website: recycle.atroyounce.ca

Effective date: November 12, 2026

A Troy Ounce is operated by Tyrone Thomas in Ontario, Canada. This policy covers website visitors, enquiries, meetup and mail-in requests, assessments and purchases. Privacy questions can be sent to atroyounce@gmail.com.

1. Information we collect

Meetup requests: name, email, optional phone, message, selected city and any supplied item or estimator details.
Mail-in requests: email, optional phone, province or territory, piece description, selected metal, uploaded photo and optional estimator details.
Estimator attachments: metal, purity, weight and unit, preliminary amount when available, reference price, quote time and pricing day. We may retain the completed-day reference separately for a mail-in offer.
Consent and case records: acknowledgements, policy versions and timestamps, correspondence, assessment permissions, shipping instructions, addresses, tracking, arrival/unboxing evidence, verified findings, offers, acceptance and return arrangements.
Payment records: confirmed payout email, confirmation evidence, amount, payment reference and transaction status. We do not ask for your banking password or online-banking login.

When you email, phone or chat, we receive the information you choose to share. Uploaded originals may contain embedded information such as location or device metadata. Avoid including unnecessary personal information, faces, documents or location data in photos. If identity information is required by law or reasonably needed to verify a transaction, we explain the request and purpose.

2. Why we use it

We use information to answer enquiries, assess eligibility, calculate and explain estimates, arrange meetups and shipping, verify contents and ownership authority, assess items, obtain decisions, pay sellers, return items, manage claims, prevent misuse and keep necessary business records. Contact about your request is service correspondence, not newsletter consent. We do not sell, rent or trade personal information or add you to marketing lists. Promotional use of your photos requires separate permission.

3. Your choices and consent

Forms explain required and optional fields and ask for acknowledgement of the applicable terms and this policy. Mail-in assessment permission is recorded separately. A form acknowledgement is not acceptance of a later purchase offer. Direct correspondence is used to handle the request you make, with further acknowledgement obtained where appropriate before shipping or assessment.

You can withdraw optional consent or ask us to stop further contact by emailing us. This may prevent us from continuing the service. We may still need to communicate about items in our custody, complete an agreed payment or return, and keep records required for legal obligations or unresolved claims.

4. Estimator and market-price requests

Using the estimator alone does not create a seller-request record. Attaching its details to a submitted form does. Page requests still involve hosting and, where enabled, analytics or chat processing.

Recorded pricing is read through our server from Supabase. If that path is unavailable, your browser may request current market prices directly from gold-api.com. The price provider receives normal technical request information, including IP address; we do not send it your seller form or uploaded photo. Current fallback spot prices do not replace the daily-low reference in the live estimator.

5. Providers and disclosures

Supabase: request records, pricing evidence, staff authentication and private uploaded photos. The current database/storage project is in Canada Central. Access to seller records and private files is restricted to authorised operations staff and necessary service processing.
Vercel: website hosting, delivery, technical/security logs and Web Analytics. Technical processing can include IP addresses and browser information.
Google/Gmail: correspondence, photos and other information sent through our business email.
Canada Post or an agreed carrier: information needed to ship, return, track or investigate a parcel, such as names, addresses, contact information and required shipment details.
Our financial institution and Interac: recipient and transaction information needed to send and verify payment. Their own terms and privacy practices apply.
tawk.to: live-chat messages, information you provide and technical data necessary for the enabled widget.

We share information only as reasonably necessary for these purposes, with your appropriate consent, or as permitted or required by law. Providers other than the Canadian database/storage project may process information outside Canada, including the United States. Foreign laws may permit access by authorities. Canadian database hosting does not mean every service processes all information exclusively in Canada.

6. Cookies, chat and analytics

Protected staff sign-in uses session cookies. When enabled, tawk.to can load before you send a message and can process technical details and use cookies or similar browser storage to operate and remember a conversation. You may contact us by email or phone instead. Browser settings can limit storage, although features may stop working.

Vercel Web Analytics measures page visits and traffic sources without analytics cookies. It processes request-derived information to produce aggregate reports, including pages, referrers, approximate location, browser and device information. Its temporary visitor identifier has a 24-hour lifespan. Hosting logs are separate from analytics. We do not intentionally include form contents, private photos or payout details in analytics events. Avoid placing personal information in page URLs.

7. Retention and disposal

Our baseline for unsuccessful enquiries and related photos is 12 months after the last meaningful contact or case closure, whichever is later. Open cases and records needed for unresolved claims or legal holds require separate review. Necessary sale and tax records are generally kept for six years from the end of the last relevant tax year, or longer where required.

We review records for deletion or anonymisation under this schedule. Review includes database records, private uploads, email and assessment/unboxing material; deleting one database row does not automatically erase every copy. Providers’ backups and technical logs follow their own retention cycles and may not disappear immediately. Failed uploads and unused reservations are reviewed for cleanup once safe retry and evidence needs have ended. We keep only what remains needed for the identified purpose or applicable obligations.

8. Security

We use restricted staff access and private storage, with reasonable technical and organisational safeguards. No internet service or email account is perfectly secure. Check the exact payout email and amount when we ask for confirmation. For transfers without Autodeposit, payment instructions may be exchanged by email as agreed with you; email compromise can expose those instructions. Confirmation does not guarantee email or payment security. Never send us banking login credentials.

9. Access, correction and deletion

Email atroyounce@gmail.com to request access, correction, deletion or information about our handling of your records. We take reasonable steps to verify the request and generally respond within 30 days, subject to lawful extensions and exceptions. We explain when information must be retained or access is restricted. Withdrawing consent does not require deletion of records we must lawfully keep.

10. Accountability and changes

Our privacy contact is Tyrone Thomas, Owner, reachable at atroyounce@gmail.com or 289-204-4818. If concerns remain unresolved, you may contact the Office of the Privacy Commissioner of Canada or the applicable privacy authority.

The date above identifies this policy version. We provide notice of material changes and obtain further consent where required. We maintain an internal record of policy versions and do not treat a later policy as evidence that you accepted it earlier.