1. Definitions

1. “Atlas Sheetmetal Ltd.” or “Company” means Atlas Sheetmetal Ltd., an Ontario corporation.
2. “Website” means atlassheetmetal.ca.
3. “Personal Information” has the meaning set out in the Personal Information Protection and Electronic Documents Act (“PIPEDA”): information about an identifiable individual.
4. “Processing” means the collection, use, disclosure, storage, retention, or deletion of Personal Information.
5. “You” / “User” means an individual who visits the Website or engages our services.

2. Compliance Statement

Atlas Sheetmetal Ltd. complies with PIPEDA and applicable Ontario privacy legislation. Where our service providers are located outside Canada, we implement contractual and technical safeguards and provide notice of any cross-border transfers as described in this Policy.

3. What We Collect

Depending on how you interact with Atlas Sheetmetal Ltd., we may collect:

1. Identity & Contact Information: name, phone number, email address, mailing address, company name and role.
2. Business & Project Information: commercial kitchen layouts, specifications, equipment lists, installation site details, schedules, and related documentation.
3. Transactional Information: quotes, proposals, purchase orders, invoices, and payment metadata (we use third-party payment processors and do not store full credit card numbers).
4. Website & Device Data: IP address, browser type, device identifiers, pages viewed, time on page, referral source, session recordings/heatmaps, and cookie IDs.
5. Communications: messages submitted via web forms, email correspondence, call notes, and any attachments you provide.

4. How We Collect Personal Information

1. Directly from You when you submit forms, call or email us, or provide plans and specifications.
2. Automatically when you use the Website, through cookies, pixels, tags, and similar technologies (see Section 10 – Cookie Policy).
3. From Third Parties such as contractors, consultants, or suppliers, and from publicly available sources, where permitted by law and necessary for our services.

5. Purposes of Use

Atlas Sheetmetal Ltd. collects and uses Personal Information for the following purposes:

1. Inquiries and Quotes: responding to your requests, providing information, and preparing estimates or proposals for equipment and services.
2. Manufacturing and Project Delivery: designing, manufacturing, and supplying commercial kitchen equipment, coordinating installation, and providing related services.
3. Billing and Administration: issuing invoices, processing payments, accounting, tax compliance, and record-keeping.
4. Website Operation and Improvement: operating the Website, diagnosing technical issues, analyzing usage, and improving content and user experience.
5. Marketing and Advertising: sending you updates, product information, promotions, or other communications (where permitted by law and with consent), and measuring the effectiveness of campaigns.
6. Risk Management and Legal Compliance: preventing fraud and misuse, enforcing contracts, and meeting legal or regulatory requirements.
7. Recruitment and Vendor Management: processing applications from potential employees or subcontractors, and managing vendor relationships.

6. Legal Bases & Consent

Under PIPEDA, Atlas Sheetmetal Ltd. generally collects, uses, and discloses Personal Information with your consent or as otherwise permitted or required by law. We rely on:

1. Consent (express or implied, as appropriate) for most marketing communications and for collecting information via forms and Website technologies.
2. Contractual Necessity to perform our obligations under agreements with you or your organization.
3. Legitimate Business Interests such as maintaining security, preventing fraud, and improving our services, balanced against your privacy expectations.
4. Legal Obligations to comply with applicable laws, regulations, and professional obligations.

For commercial electronic messages, we comply with Canada’s Anti-Spam Legislation (CASL). You may withdraw consent to receiving marketing communications or to certain other uses of your Personal Information at any time by following unsubscribe instructions in our messages or contacting us directly.

7. Disclosure to Third Parties

Atlas Sheetmetal Ltd. may disclose Personal Information to third parties in the following circumstances:

1. Service Providers that support our operations, including:
   • website hosting and cloud infrastructure providers;
   • email delivery and customer relationship management (CRM) platforms;
   • payment processors and accounting software;
   • document management and e-signature platforms.
2. Marketing & Analytics Partners, including:
   • Meta (for Meta Pixel on Facebook/Instagram);
   • Google (for Google Analytics, Google Tags, and Google Tag Manager);
   • Microsoft Clarity (for session recordings and heatmaps).
3. Operational Partners such as fabricators, installers, logistics providers, and professional advisors (e.g., legal, accounting, insurance) who require limited Personal Information to assist in delivering our services.
4. Business Transactions if Atlas Sheetmetal Ltd. is involved in a merger, asset sale, financing, or similar transaction, subject to appropriate confidentiality protections and legal requirements.
5. Legal and Regulatory Authorities where necessary to comply with law, court orders, or to protect our rights, property, safety, or that of others.

Some of these third parties may be located outside Canada (including in the United States). In such cases, your Personal Information may be subject to the laws of those jurisdictions and accessible to their courts, law enforcement, and regulatory authorities.

8. Cross-Border Transfers

Atlas Sheetmetal Ltd. may transfer Personal Information to service providers and systems located outside Canada for hosting, backup, analytics, and related purposes. When we do so, we use contractual and technical safeguards designed to protect your Personal Information and require service providers to handle it in a manner that is consistent with this Policy and applicable Canadian law. However, your Personal Information may be subject to the laws of the foreign jurisdiction.

9. Retention

Atlas Sheetmetal Ltd. retains Personal Information only as long as necessary to fulfill the purposes described in this Policy or as required by law. In general:

1. Project and Financial Records (including contracts, invoices, and related documents) are typically kept for up to seven (7) years to meet legal, tax, and audit requirements.
2. Website Analytics and Advertising Data (such as cookie IDs and usage data) are kept for up to twenty-four (24) months, or shorter periods where our analytics partners apply shorter default retention periods.
3. General Inquiries and Communications (such as contact form submissions) are typically retained for up to twenty-four (24) months from the date of last interaction, unless a longer period is required in connection with a project or legal obligation.

When Personal Information is no longer required, we securely destroy, delete, or anonymize it in accordance with our data retention and destruction practices.

10. Cookie Policy

Atlas Sheetmetal Ltd. uses cookies and similar technologies on atlassheetmetal.ca to operate the Website, understand how it is used, and improve content and advertising.

1. Types of Cookies and Technologies:
   • Strictly necessary cookies for core site functionality and security.
   • Functional cookies to remember preferences and improve user experience.
   • Performance and analytics cookies (e.g., Google Analytics, Microsoft Clarity) to understand aggregate usage patterns, page performance, and user flows.
   • Advertising and tracking technologies (e.g., Meta Pixel, Google tags/Tag Manager) to help deliver relevant ads and measure campaign effectiveness.
2. Your Choices:
   • You can configure your browser to block or delete cookies, including those from Atlas Sheetmetal Ltd. and third parties.
   • Some features of the Website may not function properly if you disable certain cookies.
   • You can also manage some advertising preferences directly through your accounts with Meta and Google.
3. Analytics and Session Recording:
   • We use tools such as Google Analytics and Microsoft Clarity to gather aggregated, pseudonymized information about how visitors use the Website (for example, which pages are visited and how long visitors stay).
   • Where supported, IP addresses may be truncated or anonymized by our analytics providers.

11. Security

Atlas Sheetmetal Ltd. uses administrative, technical, and physical safeguards that are appropriate to the sensitivity of the Personal Information we hold. These measures include role-based access controls, encryption in transit (such as HTTPS), secure storage practices, and confidentiality obligations for personnel.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your Personal Information, we cannot guarantee absolute security.

12. Your Rights under PIPEDA

Subject to limited exceptions under PIPEDA and other applicable laws, you have the following rights in relation to your Personal Information held by Atlas Sheetmetal Ltd.:

1. Access: to request confirmation that we hold your Personal Information and obtain access to it.
2. Correction: to request correction of inaccurate or incomplete Personal Information.
3. Withdrawal of Consent: to withdraw consent to our use or disclosure of your Personal Information where consent is the basis for Processing (for example, for certain marketing activities).
4. Deletion/Anonymization: to request deletion or anonymization of your Personal Information where it is no longer required for the purposes for which it was collected, subject to our legal and contractual obligations.
5. Complaints: to raise a concern with us, and if not resolved, to file a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, please contact our Privacy Officer using the contact information in Section 15. We may take reasonable steps to verify your identity before responding to a request.

13. Children’s Privacy

The Website and services of Atlas Sheetmetal Ltd. are intended for business and professional audiences. We do not knowingly collect Personal Information from children under the age of 13. If you believe that a child under 13 has provided us with Personal Information, please contact us so we can take appropriate steps.

14. Updates to This Policy

Atlas Sheetmetal Ltd. may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page. The revised Policy is effective when posted on the Website.

15. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise your rights under PIPEDA, please contact: