PRIVACY POLICY

Last update of this privacy policy - January 25, 2024

Privacy Statement

Section 1 - Before using our site, please read this privacy policy carefully.

Spath.ca places a high value on the privacy of its users and visitors. To that end, this Privacy Policy (“Privacy Policy”) outlines how Spath Building Supplies gathers, uses, and shares Personal Information, as well as the data rights you may have in that Personal Information. This Privacy Policy is applicable to all Spath.ca users. This Privacy Policy does not supersede any existing contracts you have with us, nor any rights you may have under other relevant data privacy laws.

Prior to accessing or using our services, please read this policy carefully and ensure that you fully comprehend our practices regarding your Personal Information. If, after reading and fully understand this Privacy Policy, and you disagree with our practices, you must immediately leave and discontinue all use of any of our services. If you have any questions or concerns regarding this policy, please contact us.

Section 2 - What ‘Personal Information’ do we collect?

2.1. User information:
To provide you our services, we need to collect Personal Information pertaining to an identified or identifiable natural person (“Personal Information”). We collect Personal Information you provide us, data from your use of the services, and details from other sources. Below are the specific types of Personal Information we collect about you:

1. Information you provide us. When you sign up for our services, make a purchase in our online store (Spath.ca) or at our location (Rosedale, BC, Canada), subscribe to our newsletter, utilize any of our services; and/or when you contact us directly by any communication channel, you may furnish us with Personal Information. This may include name, email address, phone number, payment information, information provided in your communications with us, and Personal Information found in scanned identification documents (such as an ID card, driver’s license, passport, or official company registration documents).  

2. Information we collect when you use the services. When you visit, download, and/or use any of our services, we may collect aggregated usage Personal Information, such as Visitors’ and Users’ browsing and ‘click-stream’ activity on the services, session heatmaps and scrolls, non-identifying Personal Information regarding the Visitor’s or User’s device, operating system, internet browser, screen resolution, language and keyboard settings, internet service provider, referring/exit pages, date/time stamps, etc

3. Information we collect from other sources. We may receive Personal Information about you from third-party sources, such as i) security providers, fraud detection and prevention providers for example to help us screen out users associated with fraud, ii) social media platforms, when you log-in or sign-up using your social media account, we may receive Personal Information from that service (e.g., your username, basic profile Personal Information) and in some cases, we may collect Personal Information from lead enhancement companies which help us to improve our service offering; iii) advertising and marketing partners in order to monitor, manage and measure our advertising campaigns.

Section 3 - What do we do with your ‘Personal Information’?

We use your Personal Information for the following purposes:

1. To provide and operate the services. When you make a purchase from our store, we collect the personal information you provide to us as part of the buying and selling process. This includes information provided to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, with the understanding that it will be used for the specific purpose for which it was collected.

2. To further develop, customize, expand, and improve our Services, based on Users’ common or personal preferences, experiences and difficulties;

3. To provide our Users with ongoing customer assistance and technical support;

4. To be able to contact our Users with general or personalized service-related notices and promotional messages (as further detailed in Section 6 below);

5. To help us to update, expand and analyze our records to identify new customers;

6. To analyze our performance and marketing activities;

7. To create aggregated statistical data and other aggregated and/or inferred information, which we or our business partners may use to provide and improve our respective services;

8. To provide you with professional assistance.

9. To enhance our data security and fraud prevention capabilities; and

10. To adhere to relevant laws and regulations.
We may use techniques like “machine learning” (European law refers to this as “automated decision-making”) to help us improve our services. When we use machine learning, we either: (i) still have a human being involved in the process (and so are not fully automated); or (ii) use machine learning in ways that don’t have significant privacy implications. We may also use machine learning to help us monitor, identify, and suspend accounts sending spam, or engaging in other abusive or fraudulent activity.

Your Personal Information is utilized in accordance with the objectives specified in Section 3 where:

1. We need to use your Personal Information to fulfill a contract or to initiate a contract with you;

2. Our utilization of your Personal Information is essential to meet a pertinent legal or regulatory obligation that we are bound by; or

3. Our utilization of your Personal Information is essential to further legitimate interests and business objectives, provided that it is carried out in a manner that is proportionate and respects your privacy rights.

Section 4 - How we share your ‘Personal Information’

We may disclose your Personal Information to service providers and others (or otherwise allow them access to it) in the following ways and circumstances:

4.1.​ Spath may share the following types of Personal Information with Third Party Service Providers for a business purpose:

-identifiers, including name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.
 
-commercial Personal Information, for example Personal Information regarding products or services purchased, or obtained.

4.2. Law Enforcement, Legal Requests and Duties: Spath may reveal or grant access to any types of your Personal Information as outlined in this Privacy Policy in response to a legal demand, such as a subpoena, legal proceedings, search warrant or court order, or in compliance with applicable laws, if we have a good faith belief that the law requires us to do so, with or without notice to you.

4.3. Protecting Rights and Safety: Spath may share any types of your Personal Information as outlined in this Privacy Policy if we believe in good faith that this will help protect the rights, property or personal safety of Spath, any of our Users, or any member of the general public, with or without notice to you.

4.4. In relation to a modification in corporate authority: In addition, should Spath undergo any change in authority, including by means of merger, acquisition or purchase of substantially all of its assets, your Personal Information may be shared with the parties involved in such event so that you may have continued access to our products.

Section 5 - Where do we Store/Process your ‘Personal Information’?

5.1. Spath processes data about individuals globally and may transfer your Personal Information outside of your country. Ensuring the security, privacy, and confidentiality of your information is our primary concern. To achieve this, Spath conducts a thorough vetting process, which includes an assessment of the privacy laws in those countries to validate they have strong data protection laws.

5.2. User's personal information is controlled by Spath Building Supplies in Canada.

Section 6 - Use of cookies and other third-party technologies

We and our Third Party Service Providers utilize cookies and other similar technologies (“Cookies”) to enable the proper functioning of our Service, analyze our performance and marketing activities, and personalize your experience.

Please note that we do not alter our practices when we receive a “Do Not Track” signal in the HTTP header from a browser or mobile application, however, most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most browsers to notify you when you receive a cookie, or you may choose to block cookies with your browser.

Section 7 - Age of consent

By using this site, you confirm that you have reached the age of majority in your province, territory, or state of residence, or that you have reached the age of majority in your province, territory, or state of residence and have provided us your consent to allow any of your minor dependents to use this site.

Section 8 - Your entitlements regarding your 'Personal Information'

Spath considers it essential that all users have the ability to manage their Personal Information. Therefore, depending on how you utilize the Spath Services, you may have the right to request access to, receive a copy of, update, amend or delete, port certain Personal Information to another service, restrict, or object to certain uses of your Personal Information (for example, for direct marketing purposes). Furthermore, when we depend on your consent for the processing of your Personal Information (for instance, for direct marketing) you have the right to withdraw your consent at any time, and such withdrawal will take effect thereafter.
​
You have the right to lodge a complaint with your local supervisory authority for data protection (but we still recommend that you contact us first).

If you are a customer of Spath and would like to obtain a copy, access and/or request us to make corrections to the Personal Information that you have stored with us, or wish to request a list of what Personal Information (if any) pertaining to you that we disclosed to third parties for direct marketing purposes, please contact us. We will make reasonable efforts to honor your request promptly (unless we need further information from you to fulfill your request), subject to legal and other permissible considerations.

Please be aware that the complete removal of your account will result in the permanent deletion of all your Personal Information from Spath's databases. After the completion of this process, your account and all its data will be permanently deleted. And Spath will be unable to restore your account or retrieve your data in the future. If you contact us in the future, the system will not recognize your account and will be unable to locate the deleted account.

Section 9 - Questions and complaints

If you have any inquiries or issues regarding the collection, use, or disclosure of your Personal Information, or if you believe that we have not adhered to this Privacy Policy or relevant data protection laws, please reach out to us - our contact details are provided at the end of this Privacy Policy.

Our team of Data Protection Officers will investigate the complaint to determine if a breach has occurred and decide on any necessary actions to be taken. We treat every privacy complaint with the utmost seriousness and will exert all reasonable efforts to promptly address and resolve your complaint in accordance with applicable law.

You have the option to submit a complaint to your local supervisory authority for data protection at any time, however we recommend that you first contact us so that we can attempt to resolve the issue.

Section 10 - Data retention

We may retain your Personal Information for the duration of your active User Account, as outlined in this Privacy Policy, or as necessary to provide you with our Services.

We may continue to retain your Personal Information even after you deactivate your User Account and/or stop using any particular Services, as reasonably necessary to comply with our legal obligations, resolve disputes related to our Users, prevent fraud and abuse, enforce our agreements, and/or protect our legitimate interests.

To establish the appropriate retention period for Personal Information, we consider the quantity, nature, and sensitivity of such data, the potential risk of harm from unauthorized use or disclosure of such data, the purposes for which we process it, and the relevant legal requirements.

Section 11 - Security

Spath has implemented security measures intended to safeguard the Personal Information you provide to us, including physical, electronic, and procedural measures. Among other measures, we provide secure HTTPS access to most areas of our Services; the transmission of sensitive payment information, such as credit card numbers, through our designated purchase forms is safeguarded by an industry-standard SSL/TLS encrypted connection; additionally, we maintain a PCI DSS (Payment Card Industry Data Security Standards) certification on a regular basis. We also conduct regular monitoring of our systems to identify potential vulnerabilities and attacks. Furthermore, we continuously seek new methods and Third Party Services to further enhance the security of our Services and safeguard the privacy of our Visitors' and Users'.
Despite the measures and efforts taken by Spath, we cannot guarantee the absolute protection and security of your Personal Information, or any other information you upload, publish, or otherwise share with Spath. We encourage you to refrain from providing us with any sensitive Personal Information if you believe that its disclosure could cause you substantial or irreparable harm.

Section 12 - Changes to this privacy policy

We retain the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will be effective immediately upon their publication on the website.

Section 13 - Contacting us

If you have any inquiries regarding this Privacy Policy or wish to exercise any of your rights as outlined in Sections 8, please refer to those sections or contact us. We will strive to resolve any complaints regarding the use of your Personal Information in accordance with this Privacy Policy.

You may contact us at:
Phone: +1 (236) 312-4400
Email: james@spath.ca