York Products respects your privacy. This policy explains what personal information we collect through yorkproducts.ca, why we collect it, how we use and protect it, when we disclose it, and the choices you have. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable law.
1. Information we collect
Information you give us
- Quote and contact requests: your name, email address, telephone number, the address or property the work relates to, and whatever you choose to tell us about the job.
- Online orders: your name, email address, telephone number, the measurements and options you select, and your order history.
- On-site measurement and project work: the service address and site details needed to measure, manufacture, perform and complete the work.
- Business accounts and the client portal: your name, business email, telephone number, company name, and orders placed under your account.
- Emergency call-outs: the service address, your contact details, and a description of the damage.
Information collected automatically
- Website analytics: we use a self-hosted, privacy-respecting analytics tool that records information such as page views, referring pages, approximate region, and browser and device type. It does not use cookies for analytics, does not fingerprint you, does not follow you across other websites, and does not build an advertising profile.
- Server logs: standard web-server records, which may include IP address, date and time, browser and device information, and information about requests made to the site. We use these records for security, troubleshooting, fraud prevention and system administration.
Payment information. Online payments are processed by Stripe. Your card number is submitted directly to Stripe and is not received or stored by York. We receive payment confirmation and limited transaction information, such as the last digits and card type, where provided by the payment processor.
Information we do not intentionally solicit. We do not intentionally solicit sensitive personal information that is not needed for our business purposes, and we do not knowingly collect personal information from children through the site.
We do not sell, rent or trade personal information.
2. Why we use personal information
We use personal information for the purposes for which it was collected and for closely related purposes that a reasonable person would consider appropriate, including to: prepare quotes and take measurements; manufacture, fulfil and arrange pickup or delivery of orders; process payments and refunds; arrange emergency attendance; provide support, warranty and follow-up service; operate business accounts and the client portal; communicate with customers about orders, projects, accounts and service matters; keep proper business, tax and accounting records; secure our systems and prevent fraud, misuse and unauthorized access; administer and improve the website and our services; and, where permitted by law and where we have the required consent or other lawful basis, send service-related or marketing communications.
We do not use personal information for automated decision-making that produces legal or similarly significant effects.
3. Consent
We obtain consent to collect, use and disclose personal information as required by law. Depending on the circumstances, consent may be express or implied where permitted by law.
When you provide personal information to request a quote, place an order, open an account, request service or otherwise deal with us, we may use that information for the purposes reasonably connected with that interaction. Where we require express consent for a particular use, we will ask for it separately.
For commercial electronic messages, we comply with Canada's Anti-Spam Legislation (CASL). Marketing consent is handled separately from transactional communications. You may withdraw consent to marketing communications at any time by using the unsubscribe mechanism in the message or by contacting us. Withdrawal of marketing consent does not stop communications that we are entitled or required to send about an order, account, transaction, service request, safety matter or other existing relationship.
4. Who we share personal information with
We disclose personal information only where reasonably necessary for the purposes described in this policy, including to service providers that perform services for us.
| Provider | Purpose | Location / processing |
|---|---|---|
| Stripe | Payment processing | Canada / United States |
| Amazon Web Services | Website and application hosting | Canada |
| Our email provider | Order confirmations and, where permitted, marketing email | Canada / United States |
| Our analytics server | Website measurement | Canada |
| Manufacturing, delivery and installation partners | Only where needed to complete an order or project | Canada |
Our service providers may process personal information on our behalf and are expected to protect it appropriately and use it only for the services they provide.
We may also disclose personal information where required or permitted by law, including to comply with legal process, enforce an agreement, protect our rights or property, prevent fraud or other unlawful activity, or protect the safety of York, our clients or the public.
Processing outside Canada. Some service providers may store or process personal information in the United States or another jurisdiction outside Canada. Personal information processed outside Canada may be subject to the laws of that jurisdiction, including lawful access by courts, law-enforcement agencies or other authorities. We take reasonable steps to select service providers and establish contractual or other safeguards appropriate to the information and services involved.
5. How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, to meet legal and accounting requirements, to resolve disputes, and to enforce agreements. Our current retention periods are:
- Quote and enquiry records that do not become orders: 24 months, unless a longer period is reasonably required for a dispute, legal obligation or other legitimate business purpose.
- Order, invoice and payment records: 7 years, or longer where required by law or reasonably necessary to establish, exercise or defend legal rights.
- Client portal accounts: for as long as the account is active, then 24 months, subject to records that must be retained for another purpose.
- Marketing email lists: until you unsubscribe or the information is otherwise no longer required. We may retain a suppression record after an unsubscribe request so that we do not send you marketing messages again.
- Server logs: 90 days, subject to longer retention where reasonably necessary for security, fraud prevention, an investigation or a legal requirement.
We securely delete, destroy or anonymize personal information when it is no longer required.
6. How we protect personal information
We use safeguards appropriate to the sensitivity of the information, including access controls, encryption in transit, restricted administrative access, authentication controls and reputable service providers with security programs. No system or method of transmission is completely secure and we cannot guarantee absolute security.
If York experiences a breach of security safeguards involving personal information, we will assess the breach as required by law. Where PIPEDA requires reporting or notification because the breach creates a real risk of significant harm, we will report it to the Privacy Commissioner of Canada and notify affected individuals as soon as feasible. We also maintain records of breaches as required by PIPEDA.
7. Your privacy rights
Subject to applicable legal exceptions, you may ask us to: confirm whether we hold personal information about you; provide access to it; correct inaccurate or incomplete information; explain how we use or disclose it; and withdraw consent to uses for which consent is required, subject to legal or contractual restrictions. You may also unsubscribe from marketing communications at any time.
To make a privacy request or raise a concern, contact us using the information in section 10. We will generally respond to an access request within 30 days, subject to any lawful extension or exception. If you are not satisfied with our response, you may raise the matter with the Office of the Privacy Commissioner of Canada.
8. Cookies and similar technologies
The site does not use advertising or cross-site tracking cookies, and our analytics does not use cookies. The site may use strictly necessary cookies or similar technologies for functions such as keeping you signed in to the client portal, maintaining a secure session, or remembering choices made while configuring an order. These technologies are not used to create an advertising profile or to track you across unrelated websites.
9. Changes to this policy
We may update this policy from time to time. The effective date above identifies the current version. If we make a material change to how we collect, use or disclose personal information, we will take reasonable steps to bring the change to your attention.
10. Contact
York Home Products Inc. o/a York Products · 201 Millway Ave #28, Concord, ON L4K 5K8 · info@yorkproducts.ca · (942) 996-9191