This Privacy Policy explains what personal information Proventa Construction Inc. (“Proventa,” “we,” “us,” or “our”) collects through our website (proventaconstruction.com), why we collect it, how long we retain it, and your legal rights regarding your data.
We operate out of Ontario, Canada. For the purposes of the General Data Protection Regulation (GDPR) and UK GDPR, Proventa Construction Inc. acts as the “data controller”.
1 Information We Collect
We collect personal information directly from you when you interact with our website, request a quote, or communicate with our team:
- Contact & Inquiry Data: Name, email address, phone number, city/location, project type/scope, timeline, budget, and any message content submitted via our contact or quote forms.
- Lead Generation & Resources: Email address and contact details provided when requesting guides, project estimates, or promotional content.
- Technical & Site Usage Data: Pages viewed, referring URLs, anonymized IP address, browser type, device information, and marketing parameters (e.g., UTM parameters).
- Cookies & Tracking: Essential and functional cookies to ensure proper website functionality and session management.
2 Why We Collect It & Legal Basis
We process your personal information for specific, limited business purposes based on legitimate legal grounds:
- To Respond to Inquiries & Quote Requests: Reviewing project details, preparing cost estimates, and communicating regarding services (Legal basis: Performance of pre-contractual steps or contract performance).
- To Deliver Requested Resources: Emailing downloadable guides, project estimates, or requested materials (Legal basis: Consent).
- Site Optimization & Security: Monitoring website performance, enhancing user experience, and preventing security threats or fraudulent activities (Legal basis: Legitimate interest).
- Marketing & Communications: Sending updates, promotional offers, or follow-up communications where permitted by law (Legal basis: Consent or legitimate business interest, with the option to opt out at any time).
3 Sale or Sharing of Personal Information (CCPA / CPRA)
Proventa Construction Inc. does not sell, rent, or share your personal information with third parties for monetary consideration or targeted cross-context advertising, as defined under the California Consumer Privacy Act (CCPA / CPRA) or other applicable privacy laws.
4 Third-Party Service Providers
We share limited personal information with trusted third-party service providers strictly necessary for operating our website and delivering our services:
- Website Hosting & Infrastructure: Hosting servers and Content Delivery Networks (CDNs) for secure site operation.
- Form Processing & Database Management: Secure services storing contact form submissions and quote inquiries.
- Email & SMTP Deliverability Services: Services used to send transactional email notifications, quote receipts, and customer service replies.
All third-party service providers are contractually obligated to keep your information confidential, secure, and used solely for the services requested. Where data is processed outside Canada (e.g., in the United States), we ensure appropriate contractual and security safeguards are enforced.
5 Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:
- Contact & Project Inquiries: Retained for up to 24 months from the last interaction, after which data is securely deleted or anonymized.
- Email & Marketing Lists: Retained until you request to unsubscribe, after which your details are removed within 30 days.
- Site Security & Diagnostic Logs: Retained for up to 12 months for security auditing purposes.
6 Your Data Rights
Depending on your jurisdiction (including Ontario/PIPEDA, Quebec Law 25, GDPR, or CCPA), you may have the following rights regarding your personal data:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request updates or corrections to inaccurate personal details.
- Erasure (“Right to be Forgotten”): Request the deletion of your personal data, subject to legal and contractual obligations.
- Portability: Receive your personal information in a structured, commonly used format.
- Restriction & Objection: Object to or restrict certain processing of your data.
- Withdraw Consent: Withdraw consent for marketing or data processing at any time.
To exercise any of these rights, please email us at info@proventaconstruction.com. We respond to all verified requests within 30 days (or 45 days where required under CCPA).
7 Cookies & Tracking Technologies
Our website uses minimal, strictly necessary, and functional cookies to ensure proper operation and session management. We do not use intrusive third-party cross-site advertising trackers. You can adjust your web browser settings to reject cookies, though some features of the website may not function as intended.
8 Children’s Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children under 13 (COPPA) or 16 (GDPR). If you believe a child has provided us with personal information, please contact us immediately, and we will promptly remove the data.
9 Data Security
We enforce physical, technical, and administrative safeguards to protect your personal information against unauthorized access, loss, or misuse:
- Secure HTTPS/TLS encryption across all site pages.
- Encrypted database storage and restricted staff access on a strict need-to-know basis.
- Routine security header configurations and system monitoring.
While no online platform can offer 100% security, we strictly follow industry best practices to protect your data.
10 Quebec Law 25 Compliance
If you are a resident of Quebec, you hold specific rights under Law 25 (An Act respecting the reform of legislative provisions as regards the protection of personal information), including the right to data portability and notification regarding automated processing. To exercise these rights or make inquiries, contact info@proventaconstruction.com. You may also file a complaint with the Commission d’accès à l’information du Québec (CAI) if you are unsatisfied with our response.
11 Regulatory & Supervisory Authorities
If you believe your data privacy rights have been violated, you have the right to submit a complaint to the relevant supervisory authority:
- Canada: Office of the Privacy Commissioner of Canada (OPC) or relevant provincial privacy commissioners.
- European Union / UK: Your local national Data Protection Authority (DPA) or Information Commissioner’s Office (ICO).
12 Policy Changes
We reserve the right to update this Privacy Policy to reflect operational, legal, or regulatory changes. Any modifications will be posted directly on this page with an updated “Last Updated” date at the top.
