Privacy Policy

ANROCK Contracting & Interiors Inc. (“ANROCK”, “we”, “us”, or “our”) is committed to protecting the privacy of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information in compliance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy legislation.

By submitting an inquiry or booking request through our website, you consent to the collection and use of your personal information as described in this policy.

1. What Information We Collect

We collect only the personal information necessary to provide our services. This may include:

• Contact information — your full name, phone number, and email address (email is optional at the time of booking).
• Appointment details — your preferred date, time, and service type.
• Project photos — photographs of your space that you voluntarily upload to help us prepare an accurate estimate.
• Project messages — any notes or descriptions you provide about your renovation project.
• Review content — if you submit a review, your name, service rating, and written feedback.

We do not collect payment card numbers, banking information, or government identification numbers through our website.

2. Why We Collect It

We collect and use your personal information for the following purposes:

• To process and confirm your consultation or appointment booking.
• To prepare accurate project estimates and renovation proposals.
• To contact you regarding your inquiry by phone or email.
• To schedule appointments and send reminders via Google Calendar.
• To respond to questions and provide customer service.
• To display approved reviews on our website (your name and review content only).
• To meet our legal and regulatory obligations.

We will not use your personal information for any purpose other than those listed above without obtaining your prior consent.

3. How We Store Your Information

Your personal information is stored securely in Supabase, a cloud database platform that provides encryption at rest and in transit, row-level security controls, and regular security audits. Access to your data is restricted to authorized ANROCK personnel only and is protected by authentication.

Project photos you upload are stored in secure cloud object storage and are accessible only to ANROCK staff for the purposes of project estimation and planning.

While we implement reasonable technical and organizational safeguards, no internet transmission is 100% secure. We encourage you to avoid sharing sensitive financial or government identification information through our website.

4. How Long We Keep It

We retain your personal information only as long as necessary for the purposes for which it was collected or as required by law:

• Booking and appointment data — retained for up to 2 years after the consultation or project completion date.
• Project photos — retained for the duration of the project and up to 1 year after project completion, then deleted unless you provide written consent to retain them.
• Reviews — retained indefinitely while displayed on our website; you may request removal at any time.
• Inactive inquiries — information from bookings that did not result in a project will be deleted after 12 months.

5. Who We Share It With

ANROCK does not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Google Calendar — appointment date, time, and your first name may be used to create calendar events for scheduling purposes. Google’s privacy policy governs their handling of this data.
• Service providers — our database and storage provider (Supabase) processes data solely on our behalf under appropriate data processing agreements.
• Legal requirements — we may disclose information if required by law, court order, or government authority.

No personal information is shared with marketing companies, data brokers, or unrelated businesses.

6. Your Rights Under PIPEDA

As a Canadian resident, you have the following rights regarding your personal information:

• Right of Access — you may request a copy of the personal information we hold about you.
• Right to Correction — you may request that we correct inaccurate or incomplete information.
• Right to Withdrawal of Consent — you may withdraw your consent to our use of your information at any time, subject to legal or contractual restrictions. Note that withdrawal may affect our ability to provide services to you.
• Right to Deletion — you may request that we delete your personal information, subject to our legal retention obligations.
• Right to Complain — if you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

To exercise any of these rights, please contact us using the details in Section 8. We will respond within 30 days.

7. Cookies and Website Analytics

Our website does not currently use third-party analytics services or advertising cookies. We may use essential session cookies required for secure authentication (e.g., admin login). We do not track your browsing activity across other websites.

8. Contact for Privacy Concerns

For any questions, concerns, or requests related to your personal information, please contact our Privacy Officer:

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of our website or services after changes constitutes acceptance of the updated policy.