Privacy Policy

Privacy PolicyNorthCan Roofing Inc.Last updated: 1. Who we are

NorthCan Roofing Inc. ("NorthCan", "we", "us") is a commercial and industrial roofing contractor with its head office at 425 Alness Street, Toronto, Ontario M3J 2T8. This policy explains how we handle personal information collected through northcanroofing.com and through the enquiries that start there.

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law.

2. What we collect

Information you give us. When you complete our contact form, our estimate request form, or call or email us, we collect: - your name; - your telephone number, including any extension; - your email address; - the address or postal code of the property, and the property or company name where you provide it; - details of the roofing work you are enquiring about, including anything you tell us in the message field; - photographs or documents you choose to send us.

If you apply for a job through our Careers page, we collect the information in your application, including your CV, work history and certifications.

Information collected automatically. When you visit our website we collect: - your IP address, in truncated or full form depending on the tool; - your browser type, device type, operating system and screen size; - the pages you view, how long you spend on them and the links you click; - the website, search or advertisement you arrived from; - the approximate location derived from your IP address, at city level.

Information from telephone calls.

3. Why we collect it, and our legal basis

We use your personal information to: - respond to your enquiry and answer your questions; - attend your property, inspect your roof and prepare a quote; - carry out work you engage us for, including scheduling, ordering materials and issuing warranty documents; - invoice you and keep the accounting records the law requires us to keep; - handle warranty claims and service calls after the work is done; - improve our website and understand which pages and which advertising are useful; - send you marketing emails, only if you have separately agreed to receive them; - meet our legal, insurance and health and safety obligations.

Under PIPEDA we rely on your consent. When you submit an enquiry form, your consent to us using your details to respond to that enquiry is implied by the act of submitting it. For anything beyond responding to you, including marketing email and advertising cookies, we ask for your express consent and you can withdraw it at any time.

4. Cookies and tracking on this website

Our website uses cookies and similar technologies. A cookie is a small file stored on your device.

Strictly necessary. Required for the site to work: session management, security, load balancing and remembering your cookie choices. These are set without consent because the site cannot function without them.

Analytics. We use Google Analytics 4, deployed through Google Tag Manager (container GTM-N6LWBWPN), to understand how visitors use the site: pages viewed, time on page, source of traffic, and which forms are completed. We have configured Google Analytics so that .

Advertising.

Other services.

You control non-essential cookies through our cookie banner and can change your choice at any time using the Cookie Settings link in the footer of every page. Non-essential cookies are not set before you consent. You can also block or delete cookies in your browser settings, though parts of the site may then not work properly.

5. Who we share it with

We do not sell your personal information. We share it only with: - service providers who operate our systems, and only as needed for that purpose: our website host, our form and CRM software, our email provider, Google (analytics and tag management); - subcontractors we engage to carry out or assist with work at your property, who receive only what they need to do the job; - manufacturers, where a system warranty is issued to you in your name and the manufacturer requires your details to register it; - our insurers, our accountants and our lawyers, where necessary; - anyone we are legally required to share with, including under a court order, a warrant, or a regulator's or a Ministry of Labour inspector's lawful demand.

Information stored outside Canada. Some of our service providers, including Google, store and process information on servers outside Canada, including in the United States. While your information is in another country it is subject to that country's laws and may be accessible to that country's courts and law enforcement. We use service providers who offer a comparable level of protection through contract, and we remain accountable for your information while it is with them.

6. How long we keep it

Enquiries that do not become work: 24 months from the last contact, then deleted
Customer records, contracts and invoices:
Warranty records: for the life of the warranty plus years.
Job applications:
Marketing subscriber records, including the record of consent: for as long as you are subscribed and years afterwards, so we can show we had your consent.
Website analytics: as configured in Google Analytics.

When a retention period ends we securely delete or anonymise the information.

7. How we protect it

We use encryption in transit (HTTPS across the whole site), access controls so staff see only what their job requires, and reputable service providers. No system is perfectly secure, but we take these obligations seriously and we will tell you and the Office of the Privacy Commissioner of Canada if a breach creates a real risk of significant harm to you, as PIPEDA requires.

8. Your rights

You have the right to: - ask what we hold about you and receive a copy; - correct anything inaccurate or incomplete; - withdraw your consent at any time, subject to legal and contractual limits, including consent to marketing email and to non-essential cookies; - ask us to delete information we no longer need; - ask how we use it and who we have shared it with; - complain, first to us, then to the federal regulator.

To exercise any of these, contact our Privacy Officer below. We respond within 30 days, as PIPEDA requires. We may need to verify your identity first. There is no charge for a reasonable request.

9. Children

Our services are sold to property owners and managers. We do not knowingly collect personal information from anyone under 18 through this website.

10. Our Privacy Officer

, Privacy Officer NorthCan Roofing Inc. 425 Alness Street, Toronto, Ontario M3J 2T8 Email:
Telephone: 416-456-0777

11. Complaining to the regulator

If you are not satisfied with our response you may complain to the Office of the Privacy Commissioner of Canada: 30 Victoria Street, Gatineau, Quebec K1A 1H3 Toll free: 1-800-282-1376 priv.gc.ca

12. Changes to this policy

We may update this policy. The "last updated" date at the top tells you when. If we make a change that materially affects how we use your information, we will make that clear on the website.

Quebec Law 25: assessed, and here is why it is not in this policy.

Quebec's private-sector privacy law (the Act respecting the protection of personal information in the private sector, CQLR c P-39.1, as amended by the Act to modernize legislative provisions as regards the protection of personal information, commonly "Law 25") applies to an enterprise carrying on an enterprise in Quebec. On the facts in the brief, NorthCan is a Toronto contractor serving Toronto, the GTA and southwestern Ontario, with no Quebec premises, no Quebec service area, no Quebec marketing and an English-only site. Law 25 is therefore not engaged and importing its machinery (a designated Privacy Officer published by name and title on the site, a data portability right, mandatory privacy impact assessments, express consent for every technology that collects personal information) would be over-engineering.Two triggers would change that, and the client should be told to tell us if either happens: 1. NorthCan takes work on a property in Quebec, or opens or staffs anything there. 2. NorthCan advertises to Quebec (Google Ads geo-targeting that includes Gatineau or Montreal, a French page, a Quebec service-area page).

Note that Law 25's cookie and tracking rules are stricter than PIPEDA's, and its penalty exposure is materially higher. If Quebec ever enters the picture, this policy is revisited before the first Quebec lead, not after. A related note: the site's stated area includes "southwestern Ontario," which is nowhere near the Quebec border, so the risk of accidental Quebec targeting is low, but Google Ads geo-settings should be checked once.

The rest of the legal pack