Privacy Policy

Introduction

Welcome to https://commercial-roof-installation.storysurge.net (hereafter referred to as “the Company,” “we,” or “us”). We are committed to protecting your privacy and ensuring that your personal data is handled with the utmost care and in accordance with relevant data protection laws and regulations worldwide, including but not limited to:

Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
Quebec Law 25 on the protection of personal information in the private sector
The General Data Protection Regulation (GDPR) of the European Union (EU)
Brazil’s General Data Protection Law (LGPD)
California’s Consumer Privacy Act (CCPA/CPRA), California, USA
Colorado’s Consumer Privacy Act (CPA)
Utah’s Consumer Sales Privacy Act (UCPA)
Connecticut’s ConnectICUT Law (CTDPA)
Virginia’s Consumer Data Protection Act (VCDPA)
South Africa’s Protection of Personal Information Act (POPIA)

Scope

This privacy policy is applicable to all aspects of our online presence, including but not limited to, the https://commercial-roof-installation.storysurge.net website, mobile applications, online services, and products offered by us directly or through third parties under our control. It should be noted that this policy does not extend to external platforms, applications, or services linked from our site, which have their own privacy policies governing data collection and use.

Processing Activities

This document outlines our practices regarding the following:

User Accounts: When you create an account with us, we collect and store your account information, including your name, contact details, and login credentials.
Transactions: We process payment information when you make purchases from our online store or services. This includes cardholder data, billing addresses, and transaction history.
Website Interaction: Our website tracks user behavior through analytics tools to enhance user experience and understand how visitors engage with our content.
Communications: Personal data is collected when you choose to receive marketing communications, newsletters, or other updates from us via email, phone, or text message.

Personal Data Collection

We collect a range of personal information to provide and improve our services, as described below:

Account Information: This includes your full name, user ID, password (hashed and salted), and any profile details you choose to share.
Payment Details: We securely store cardholder data for processing transactions, including credit/debit card numbers, expiration dates, and CVV codes (only when necessary).
Financial Information: This may include bank account details, tax identification numbers, and other financial records required for billing or financial services.
Purchase History: Details of products or services purchased from us, including quantities, transaction dates, and purchase amounts.
Mobile Device Identifiers: Unique identifiers associated with your mobile device, such as IP addresses, device IDs, and location data (with user consent).
Location Data: Information about your geographical location when you interact with our services, often used to provide relevant local content.
Feedback and Reviews: Any comments, reviews, or ratings you submit through our platforms are also considered personal data.
Social Media Information: If you choose to log in or share content from social media platforms on our site, we may collect your social media profile information.
Product Preferences: Data about the products you view, search for, or add to your cart, including product specifications and customization options.

Cookies and Tracking Technologies

We utilize cookies and similar tracking technologies to enhance user experience and understand how visitors interact with our website. Here’s a breakdown:

Strictly Necessary Cookies: These are essential for the smooth operation of our services, enabling features like login sessions and language preferences.
Preference Cookies: Used to remember your settings and customization choices across our platform.
Analytics Cookies: These track user behavior on our site, helping us understand traffic patterns, improve performance, and enhance functionality.

Users can manage their cookie preferences through our Cookie Manager, allowing them to control which types of cookies are set.

Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, plus a reasonable period afterward for legal, tax, or business requirements. Once the retention period expires, we ensure that the data is securely deleted or anonymized.

Security Measures

Implementing robust security measures is paramount to protecting your personal data:

Encryption: We use encryption protocols to secure data transmission and storage, ensuring that sensitive information remains confidential.
Secure Third-Party Processing: For certain services, we engage trusted third-party processors who adhere to strict data protection standards.
Access Controls: Our systems have access controls in place to ensure that only authorized personnel can access personal data.

Children’s Privacy

We do not knowingly collect or solicit personal data from children under 18 years of age. If we learn that a child has provided us with personal information, we will take steps to delete such data and notify the relevant parties as required by applicable law.

Your Rights (Data Subject Rights)

Depending on your location, you have certain rights regarding your personal data, including:

Access: The right to request access to the personal data we hold about you and to know how it is being processed.
Rectification: Requesting corrections if your personal data is inaccurate or incomplete.
Erasure (Right to be Forgotten): Asking us to delete your personal data in certain circumstances, such as when processing is no longer necessary.
Restriction: Limiting the use of your personal data in specific situations, like challenging the lawfulness of data processing.
Data Portability: Receiving a copy of your personal data in a structured, commonly used format and transferring it to another controller.
Objection: Opposing the processing of your personal data for specific purposes or entirely.
Non-Discrimination: The right not to be subjected to automated individual decision-making that significantly affects you.

To exercise any of these rights, please contact our privacy team at your earliest convenience.

Changes to Privacy Policy

We reserve the right to update this privacy policy as needed to reflect changes in our practices or regulatory requirements. Any modifications will be posted on this page, and we encourage users to review it periodically.

Contact Information

For any queries related to this policy, data-related requests, or unsubscribe inquiries, please contact us:

Email: [email protected]

Postal Address: [Privacy Team’s Postal Address]

We appreciate your trust in sharing your personal data with us, and we are committed to handling it responsibly.