Privacy Policy

1. What we collect

We collect only what we need to respond to you, quote and deliver the work, and run our business:

• Contact details — your name, email address, phone number and the service location you give us through the contact form, the quote builder, WhatsApp, phone or email.
• Property details — the address you enter in the quote builder, the areas you draw on the property map and the measurements calculated from them, access instructions, gate codes, pet notes and any special requests you add to your property profile (the "Property Care Passport").
• Account information — the email address you use to sign in to the customer portal. We sign you in with a one-time code sent to that address; we do not store a password.
• Service records — plan selections, schedules, visit reports, before-and-after photos of the work area, snow-stake and garden markings, and messages between you and our crew.
• Billing information — the plan and payment schedule you choose, invoices and payment status. Card or bank details are not entered on this website.
• Communication preferences — whether you asked for visit updates by text, email or WhatsApp, and whether you agreed to receive marketing messages, with the date you agreed.
• Technical data — the pages you visit, your IP address, browser type and the time of your visit, collected automatically by our hosting provider's logs so the site works and stays secure.

2. Why we use it

• To answer your enquiry, visit your property and prepare an estimate or quote.
• To schedule and perform the work, route our crews, and let you know when we are on the way and when a visit is done.
• To keep a consistent record of how your property should be serviced, so instructions survive crew changes and seasons.
• To invoice you and process payments under your agreement.
• To confirm weather triggers for seasonal snow removal (we use Environment Canada readings and our own weather service; this does not involve your personal information).
• To send you marketing about our services, only if you have opted in.
• To meet our legal obligations, including tax and record-keeping rules, and to defend or bring legal claims.

We do not sell or rent personal information to anyone.

3. Consent and marketing messages

We rely on your consent to collect and use your personal information, which you give when you contact us, submit a form, create an account or sign an agreement. You can withdraw consent at any time, subject to legal or contractual limits, by contacting us; we will explain what that means for the services we can still provide.

Under CASL we send commercial electronic messages (newsletters, promotions, seasonal reminders about new plans) only with your express consent. Messages about your own service — quotes you requested, visit updates, invoices, account codes — are transactional and do not require that consent. Every marketing email includes an unsubscribe link, and you can also opt out in your portal settings or by emailing us. We record the date your consent was given and remove it when you withdraw.

4. Who we share it with

We share personal information only with the people and providers needed to deliver the service:

• Our crews and office staff, who see the property details and instructions relevant to their work.
• Supabase, which hosts our database, authentication and file storage for the customer portal and visit records.
• Resend, which delivers our transactional emails such as sign-in codes, quotes and visit updates.
• Google Maps Platform, which renders the property map in the quote builder. When you use the map, Google receives your interaction with it under Google's own privacy policy.
• WhatsApp (Meta) if you choose to message us there, under WhatsApp's terms and privacy policy.
• Professional advisers, insurers and payment providers where needed to run the business.
• Authorities, courts or other parties where the law requires it or to protect our rights, property or safety.

Some of these providers store data on servers outside Canada, including in the United States. While it is there it may be subject to the laws of that country. We choose providers that commit to contractual and technical safeguards comparable to those required in Canada.

5. Cookies

Cookies are small files stored in your browser. We use two kinds:

• Essential cookies, always on: a session cookie that keeps you signed in to the customer portal, standard security cookies, and a cookie (al_cc, kept for six months) that remembers your cookie choice. Google Maps may set its own cookies while you draw your property in the quote builder, under Google's privacy policy.
• Analytics cookies, off unless you allow them: anonymous statistics about which pages are visited so we can improve the site. We do not currently run an analytics service; if we add one, it will only load after you opt in.

We do not use advertising cookies. The cookie banner shown on your first visit records your choice; you can change it any time from "Cookie settings" in the footer or by clearing your browser cookies. Blocking essential cookies in your browser means the portal cannot keep you signed in.

6. How long we keep it

We keep personal information for as long as we need it for the purposes above and then for as long as the law requires. In practice that means:

• Enquiries that do not lead to work: up to two years, so we can follow up if you come back.
• Customer, property, service and billing records: for the life of the relationship and generally seven years after it ends, to meet Canada Revenue Agency record-keeping rules, Ontario's Limitations Act and Construction Act lien periods.
• Server and security logs: typically 90 days.

When information is no longer needed we delete it or de-identify it so it can no longer be linked to you.

7. How we protect it

We use reasonable physical, technical and administrative safeguards appropriate to the sensitivity of the information: encrypted connections (HTTPS), one-time sign-in codes instead of passwords, private storage for photos and documents with access limited by role, and staff access limited to what their job needs. No method of storage or transmission is completely secure. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

8. Your rights

Under PIPEDA you can:

• Ask what personal information we hold about you and how it has been used or shared, and receive a copy. We respond within 30 days.
• Ask us to correct information that is inaccurate or incomplete.
• Withdraw your consent to marketing, or to other uses where the law allows.
• Ask us to delete information we no longer need to keep.
• Complain to us, and if you are not satisfied, to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

Requests can be sent to the contact below. We may need to verify your identity before acting on a request.

9. Children

Our website and services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy as our services or the law change. The effective date at the top shows when it was last revised. Material changes will be announced on this page, and where required we will ask for your consent again.

11. Contact us

Questions, access requests and complaints about privacy should go to our privacy contact: AL Construction, 3360 Council Ring Road, Mississauga, Ontario and 499 Silver Maple Road, Oakville, Ontario. Email alconstruction964@gmail.com or call +1 647 339 1991.