Privacy Policy

Effective date: June 23, 2026

Governing law: Ontario, Canada · PIPEDA · CASL

Pure Coatings Epoxy ("Pure Coatings," "we," "us," or "our") operates purecoatings.ca and its sub-pages (the "Site"). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit the Site, submit a quote request, interact with our advertisements, or otherwise engage with our services. By using the Site you consent to the practices described below.

We are committed to protecting your privacy in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and applicable Ontario privacy standards.

1. Information We Collect

1.1 Information You Provide Voluntarily

• Contact details — full name, email address, phone number.
• Project details — property type, approximate square footage, floor condition, city/municipality, and any details you include in a quote or contact form.
• Communications — records of emails, calls, or messages you send us.

1.2 Information Collected Automatically

• Usage data — pages visited, time on site, scroll depth, clicks, referring URL, and navigation path.
• Device and browser data — IP address, browser type and version, operating system, screen resolution, and device type.
• Cookies and similar technologies — session cookies, persistent cookies, pixel tags, and local storage identifiers as described in Section 3.

1.3 Advertising and Conversion Data

• Meta Pixel (Facebook / Instagram) — when you visit the Site after clicking a Facebook or Instagram ad, or when you complete a form on the Site, the Meta Pixel transmits event data (PageView, Lead, CompleteRegistration) to Meta Platforms, Inc. This may include your IP address, browser fingerprint, and the URL of the page where the event occurred. Meta uses this data to attribute conversions and to build lookalike audiences on our behalf.
• Google Ads / GA4 — Google Analytics 4 collects anonymised behavioural data. If you arrive via a Google Ads campaign, conversion tracking data is shared with Google.
• Hashed customer data — when we upload customer lists for Custom Audience matching, email addresses and phone numbers are hashed (SHA-256) before transmission to Meta or Google. We do not share raw personal data with these platforms for list matching.

2. How We Use Your Information

• To respond to quote requests, schedule on-site assessments, and deliver the services you requested.
• To send service-related communications — appointment confirmations, follow-up quotes, invoices, and warranty documents.
• To send marketing communications only if you have provided express or implied consent under CASL. You may unsubscribe at any time.
• To measure ad campaign performance, optimise our Facebook and Google ad spend, and create lookalike audiences of potential customers.
• To analyse website traffic, identify technical issues, and improve the Site's content and usability.
• To detect and prevent fraud, spam, and abuse.
• To comply with applicable laws, court orders, and contractual obligations.
• To enforce our Terms of Service and protect the rights, property, and safety of Pure Coatings, our customers, and the public.

We rely on your consent (for marketing and cookie-based tracking), contractual necessity (for service delivery), and legitimate interest (for fraud prevention and business analytics) as our lawful bases for processing.

3. Cookies and Tracking Technologies

We use the following technologies on the Site:

You may control cookies through your browser settings. Blocking certain cookies may impair Site functionality. Canadian residents may also opt out of interest-based advertising at youradchoices.ca.

4. Disclosure of Your Information

We do not sell, rent, or trade your personal information. We may share it only as follows:

• Service providers — Web3Forms (form relay), Google LLC (analytics and ads), Meta Platforms, Inc. (advertising), and Cloudflare, Inc. (infrastructure). Each is bound by contractual data-processing terms and their own privacy policies.
• Business successors — in the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to equivalent privacy protections.
• Legal authorities — when required by Canadian federal or provincial law, a court order, a regulator such as the Office of the Privacy Commissioner of Canada, or to protect the safety of any person.
• Professional advisors — lawyers, accountants, and insurers, bound by professional confidentiality obligations.

All third-party service providers are contractually prohibited from using your personal information for their own purposes beyond those described above.

5. Cross-Border Data Transfers

Meta Platforms, Inc. and Google LLC are based in the United States. Data transmitted to these platforms is subject to US law, including potential access by US authorities under the CLOUD Act. By using the Site and consenting to our tracking technologies, you acknowledge this cross-border transfer. We take reasonable contractual safeguards (Standard Contractual Clauses and Data Processing Agreements) to protect transferred data.

6. Data Retention

• Quote and contact form submissions — retained for the duration of the business relationship and for 7 years thereafter for warranty, tax, and legal record-keeping purposes.
• Marketing email lists — retained until you unsubscribe or withdraw consent.
• Google Analytics data — 14-month rolling retention per Google's default settings.
• Meta Pixel event data — retained by Meta per their data retention policies.
• Call records and correspondence — retained for 3 years after last contact.

7. Your Rights Under PIPEDA and CASL

As a Canadian resident you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request that inaccurate or incomplete information be corrected.
• Withdrawal of consent — withdraw consent to marketing communications or non-essential tracking at any time, subject to legal or contractual restrictions.
• Deletion — request deletion of your personal data where we have no overriding legal obligation to retain it.
• Complaint — lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca if you believe we have violated PIPEDA.

To exercise any of the above rights, email us at hello@purecoatings.ca with the subject line "Privacy Request." We will respond within 30 days as required by PIPEDA.

8. Security

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, and disclosure. These include HTTPS/TLS encryption, Cloudflare's edge security layer, and access controls limited to personnel who require the information to perform their duties. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

9. Children's Privacy

The Site is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

10. Third-Party Links

The Site may contain links to third-party websites (Google, Facebook, review platforms, etc.). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated by updating the effective date above and, where appropriate, by emailing known contacts. Continued use of the Site after the updated effective date constitutes acceptance of the revised policy.

12. Contact Our Privacy Officer