The fine print, continued

Privacy note

The short version: the request form collects only what Andrew needs to reply to you. It’s emailed to him, not stored in a database, never sold and never added to a mailing list.

Who’s responsible

Art Loft is run by its host, Andrew, in Toronto. He is responsible for the personal information sent through this site. Questions or requests: andrew@artloft.ca.

What the request form collects

• Your name, email and, if you choose, a phone number
• If you’re booking for someone else, the guest’s name and, if you choose, their email
• The city where you (or the guest) normally live
• Your dates, and how many guests are staying
• What brings you to Toronto, and any message you write

Along with the form, the site records how you found it: the link you arrived through (including tags such as ?src=flyer or utm_source), the page that referred you, and the page you landed on. That tells Andrew which posts and flyers work. Your browser keeps those tags in session storage until you close the tab, so they stay with your request if you look at another page first.

This site never asks for ID numbers, your date of birth, income, or bank or card details. If you decide to go ahead after a call, screening (ID, employment, references) happens separately, with your consent.

Why

To reply to your request, arrange a call and, if you go ahead, prepare your stay. That’s all. You get one confirmation email when you send the form; there’s no newsletter.

Where it goes

These services handle it on Andrew’s behalf, some of them outside Canada (mainly in the United States):

• Vercel hosts the site and runs the form.
• Resend delivers the two emails: your request to Andrew, and your confirmation.
• Google (Gmail) is Andrew’s inbox, where your request is kept.
• ImprovMX forwards email sent to andrew@artloft.ca to that inbox.
• Cloudflare Turnstile checks that a person, not a bot, is sending the form. It loads only near the form. See Cloudflare’s privacy policy.

Visit counts

The site counts visits with Vercel Web Analytics, which uses no cookies and doesn’t identify you. It also counts four moments: arriving from a tagged link, starting the form, sending it (with the reason you chose), and downloading the fact sheet. Each count carries only the link’s tag, such as “flyer”, never your name or details. The site itself sets no cookies.

How long it’s kept

If your request doesn’t turn into a stay, Andrew deletes it within 12 months. If it does, it’s kept for as long as the stay and Canadian tax-record rules require.

Your choices

You can ask to see, correct or delete what you’ve sent. Email andrew@artloft.ca and you’ll get an answer within 30 days. If you’re not satisfied, you can contact the Office of the Privacy Commissioner of Canada.

Last updated November 2026.