Privacy Notice

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you submit our contact form to request a quote, or otherwise when you contact us by phone or email.

Personal Information Provided by You. The personal information we collect through our contact form includes the following:

• name
• email address
• phone number
• physical address, city, and postal code
• details about the services you are requesting

We do not knowingly collect any sensitive personal information.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Unless you turn them off, we use Google Analytics and Google Ads conversion tracking to automatically collect some information — such as your Internet Protocol (IP) address, browser and device characteristics, and the actions you take on our site — when you visit our website.

We use Google Analytics to understand how visitors use our website. This information does not reveal your specific identity (like your name or contact information) but may include your IP address, browser and device characteristics, operating system, referring URLs, country or region, and information about how and when you use our Services. This information is used for our internal analytics and reporting purposes, and to help us improve our website.

We also use Google Ads conversion tracking to measure whether our advertising works. If you arrive at our website by clicking one of our Google ads, Google Ads records that click and whether you then call us, email us, or submit a quote request through our site. We see only totals (for example, how many quote requests came from a particular ad); we do not receive your name or contact details from Google, and we do not use this information for remarketing, personalized advertising, or to build a profile of you.

Google Analytics and Google Ads conversion tracking are on by default. You can turn either or both off at any time through our cookie consent tool, and they will stop collecting information about your visit. Visitors from Quebec, the European Economic Area, the United Kingdom, and Switzerland are not tracked unless they accept these cookies. Google processes this data as described in Google’s Privacy Policy; see also how Google uses information from sites that use its services.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process the information you submit through our contact form to respond to your quote request and provide our services, and, unless you opt out, we use analytics and advertising measurement cookies to understand how our website is used and whether our advertising is working.

We process your personal information for the following purposes:

• To respond to quote requests submitted through our contact form and to contact you about scheduling a site visit or providing our services.
• To communicate with you about your inquiry, including by phone, email, or the details you provide.
• Unless you opt out, to understand how visitors use our website through Google Analytics, so we can improve the site.
• Unless you opt out, to measure whether our Google ads lead to phone calls, emails, and quote requests, so we can decide where to spend our advertising budget.
• To maintain the security and proper operation of our Services.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations
• We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

• Form Processing. When you submit our contact form, the information you provide is transmitted through StaticForms, a third-party form-processing service, solely to deliver your quote request to us by email.
• Analytics. Unless you opt out, information about your visit is shared with Google LLC through Google Analytics, so we can understand how our website is used.
• Advertising Measurement. Unless you opt out, information about ad clicks and the actions you take on our site (such as clicking our phone number or submitting a quote request) is shared with Google LLC through Google Ads conversion tracking, so we can measure how well our ads perform. The contents of your quote request are not shared with Google.
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal Requirements. We may disclose your information where required to comply with a subpoena, warrant, court order, or other legal process.

We do not sell, rent, or share the information you submit through our contact form with anyone else, including other contractors, lead-generation services, or marketing companies. It is used only by Bent Metal Exteriors to respond to your request.

Your personal information may be stored and processed in jurisdictions outside of Canada, including the United States, where our service providers maintain facilities or use cloud-based infrastructure. While such information is outside of Canada, it may be subject to the laws of those jurisdictions and may be accessible to law enforcement and national security authorities. We take reasonable steps to ensure that your personal information is protected in accordance with applicable laws through contractual agreements and appropriate safeguards with our service providers.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use strictly necessary cookies to run our site, and, unless you opt out, analytics cookies (Google Analytics) and advertising measurement cookies (Google Ads) to understand how our site is used and whether our ads are working.

We use our cookie consent tool to give you control over which categories of cookies you allow:

• Strictly Necessary. These cookies are required for the site to function properly and cannot be turned off.
• Analytics. These cookies, set by Google Analytics, help us understand how visitors use our site so we can improve it. They are on by default, and you can turn them off at any time through the cookie consent tool.
• Advertising Measurement. These cookies, set by Google Ads, tell us when a visit that started from one of our ads leads to a phone call, email, or quote request. They are on by default, and you can turn them off at any time through the cookie consent tool.

We use Google Tag Manager to load these tools on our website; Google Tag Manager itself does not set cookies or collect personal information. We do not use cookies for remarketing or personalized advertising, and we do not sell your personal information to third parties.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Data Breach Notification

In the event of a breach of security safeguards involving your personal information that poses a real risk of significant harm, we will comply with our obligations under applicable laws, including Alberta’s Personal Information Protection Act (PIPA).

This may include notifying the Office of the Information and Privacy Commissioner of Alberta and affected individuals, where required.

We maintain procedures to assess, respond to, and mitigate potential data breaches in a timely manner.

7. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not market to or knowingly collect personal information from children.

Our Services are intended for adults; we do not market to or knowingly collect personal information from children under 13, and we will delete any such information promptly if notified at info@bentmetal.ca.

8. MARKETING COMMUNICATIONS AND YOUR CASL RIGHTS

In Short: We send marketing emails only to people who have consented. Every commercial email we send includes a working unsubscribe link, and we honour unsubscribe requests promptly.

Under Canada’s Anti-Spam Legislation (CASL), we send commercial electronic messages only with your express or implied consent. Every commercial email we send identifies us, includes our contact information, and provides a working unsubscribe mechanism. We process unsubscribe requests within 10 business days, as required by law.

To unsubscribe from our marketing emails, click the unsubscribe link at the bottom of any email, or contact us at info@bentmetal.ca. You will continue to receive transactional messages (such as quote responses, scheduling confirmations, and invoices) related to services you have requested or purchased.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

In some regions (such as Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a simple way to request human review. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

We will consider and act upon any request in accordance with applicable data protection laws.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

11. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us by email at: info@bentmetal.ca

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please fill out and submit a data subject access request.