Who We Are
Holdback is an independent automotive advisory practice based in Toronto, Ontario. We provide remote consultation services to vehicle buyers across Ontario.
This Privacy Policy explains what personal information we collect, how we use it, and your rights under applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
The Founder of Holdback serves as the Privacy Officer and is accountable for Holdback's compliance with this policy and with PIPEDA. You can reach the Privacy Officer by email at hello@holdback.ca for any questions or requests regarding this policy, including to access, correct, or delete your information, or to file a privacy-related complaint.
Information We Collect
We collect personal information only when you voluntarily provide it to us. This includes:
- Contact information: First name, last name, email address, phone number
- Vehicle information: Make, model, trim, year, price range, and purchase timeline you provide through our getting started form
- Session information: Notes and materials generated during your consultation, including deal worksheets or quotes you share with us
- Payment information: Processed through Stripe. We do not store your payment card details. Stripe's privacy policy applies to payment processing.
- Communication records: Emails exchanged before, during, or after your consultation
We use Google Analytics 4 (property G-H2KWZ2Y968) to understand how visitors use this site. Analytics only runs after you grant consent through the cookie banner shown on your first visit. Until you explicitly click Accept, no analytics cookies are set and no analytics data is collected.
When you accept, Google Analytics sets cookies named _ga and _ga_H2KWZ2Y968 to record anonymous usage such as pages visited, session duration, referral source, and general geographic region. IP addresses are anonymized before storage. No advertising cookies, retargeting pixels, or cross-site tracking are used.
Analytics data is processed by Google LLC in the United States. By accepting, you consent to this cross-border transfer. Google retains GA4 event data for up to 14 months.
You can change or withdraw your choice at any time using the Cookie Settings link in the site footer, which re-opens the consent banner. You can also opt out at the browser level with the Google Analytics Opt-out Browser Add-on.
If you arrive at Holdback from an advertising or referral link that includes campaign tracking parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term), those values may be stored in your browser's local storage for up to 30 days to help us measure which channels drive successful bookings. Campaign tracking parameters are stored only in your browser and are transmitted to our backend only when you voluntarily submit a form (email capture, booking request, or consultation inquiry). If you decline analytics consent, this tracking is never used for any advertising or cross-site profiling.
How We Use Your Information
Your information is used only for the following purposes:
- Delivering the consultation service you booked
- Preparing your session based on your vehicle and deal information
- Sending you pre- and post-session communications (confirmation, reminders, written summary)
- Processing your payment through Stripe
- Responding to questions or follow-up emails you send us
We do not use your information to send unsolicited marketing communications.
What We Do Not Do With Your Information
This is important. Holdback does not:
- Share your contact information, vehicle details, or session content with any dealership, manufacturer, or automotive retail organization
- Sell your personal information to any third party
- Use your information to generate dealer leads or referrals
- Pass your details to any automotive data aggregator or market research firm
Your session notes, deal details, and personal information remain confidential and are used solely to deliver the service you paid for.
Third-Party Services
We use a small number of third-party services to operate this business:
- Stripe: Payment processing. Subject to Stripe's Privacy Policy.
- Cal.com: Scheduling, booking, and video consultations (Cal.com's built-in video feature is used for remote sessions). When you click a booking link, you are directed to cal.com. Consultation sessions are not recorded without your explicit consent. Subject to Cal.com's Privacy Policy.
- Zoho Mail: Used to send booking confirmations and session-related emails. Subject to Zoho's Privacy Policy.
- Google Analytics: Anonymous website usage analytics. Subject to Google's Privacy Policy.
- MailerLite: Email list management. If you submit your email through the Deal Analyzer or homepage, it is stored in MailerLite. Subject to MailerLite's Privacy Policy.
These providers are selected for their commitment to data security. We do not share more information with them than is necessary to deliver the service.
Cross-Border Data Transfers
Several of the third-party services listed above process information outside Canada, primarily in the United States:
- Google LLC (Google Analytics): United States
- Stripe, Inc. (payment processing): United States
- Cal.com, Inc. (booking and video): United States
- MailerLite (email list management): data centres in the European Union and United States
- Zoho Corporation (email): data centres in Canada, United States, Ireland, Netherlands, India, and Australia
When your personal information is transferred to or stored in another country, it may be subject to the laws of that country, including lawful access by government authorities. We select providers based on their commitment to data security and their compliance with recognized privacy frameworks, and we limit the information shared to what is necessary to deliver the service.
By providing your information to Holdback, you consent to the cross-border transfers described above. If you do not consent, please do not book a consultation or submit information through this site.
Data Retention
We retain your personal information for up to 3 years after your last consultation to support follow-up questions and comply with applicable accounting and record-keeping obligations.
If you would like your information deleted, email hello@holdback.ca and we will remove it from our records within 30 days, subject to any legal retention obligations.
Security
We take reasonable steps to protect your personal information from unauthorized access, disclosure, or misuse. Communications are conducted through encrypted channels. We do not store sensitive payment data.
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to handling your information with care.
Security Breach Notification
If Holdback experiences a breach of security safeguards involving your personal information, and the breach poses a real risk of significant harm, we will notify you directly as soon as feasible and report the breach to the Office of the Privacy Commissioner of Canada, as required under PIPEDA section 10.1. Holdback maintains a record of every breach of security safeguards for at least 24 months as required by law.
Your Rights
Under Canadian privacy law, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information (subject to legal obligations)
- Withdraw consent to our use of your information, where consent is the basis for processing
To exercise any of these rights, contact us at hello@holdback.ca.
Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our services after an update constitutes acceptance of the revised policy.
Children and Minors
This service is not directed to anyone under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal information to Holdback, please contact us at hello@holdback.ca and we will delete the information promptly.
Contact
For any privacy-related questions or requests:
Email: hello@holdback.ca
Toronto, Ontario, Canada
You only buy a car every four to six years. They sell one every day.