Privacy Policy | SteelBuilt Corp

1. About This Privacy Policy

SteelBuilt Corp (referred to in this policy as SteelBuilt, we, us, or our) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website at steelbuiltcorp.ca, request a quote, contact us, or interact with us through our advertising on Facebook, Instagram, or other Meta platforms.

This policy is written to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal privacy law, along with the substantially similar provincial privacy laws of Alberta, British Columbia, and Quebec. It also satisfies the disclosure requirements set out in Meta's Lead Ads Terms of Service.

By using our website, submitting a quote request, or filling out a Meta lead form linked to one of our ads, you confirm that you have read and understood this Privacy Policy.

2. Who We Are

SteelBuilt Corp is a Canadian steel building manufacturer. We design, supply, and install custom steel and metal buildings for clients across Canada.

Legal name: SteelBuilt Corp
Head office: 413-37 Sandiford Drive, Stouffville, Ontario, L4A 3Z2
Phone: (905) 642-1012
Email: sales@steelbuiltcorp.ca
Website: steelbuiltcorp.ca

3. Information We Collect

We only collect personal information that we need to respond to your enquiry, prepare a quote, deliver a building, or improve how our website and advertising work.

3.1 Information You Provide Directly

When you contact us through our website, request a quote, send us an email, call us, or submit a Meta lead form, you may provide some or all of the following:

Your full name
Your email address
Your phone number
Your mailing or project address (province, city, postal code, or full address)
Company or business name, where applicable
Project details such as building type, size, intended use, timeline, and budget
Any additional information you choose to share in a message, comment, or attached file

3.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies, pixels, and similar tracking technologies. This includes:

Your IP address and general location (city or region level)
Browser type, device type, operating system, and screen size
Pages visited on our website, time spent on each page, and links clicked
The website or ad that referred you to us
Date and time of your visit

This information is used in aggregate to improve our website, measure the effectiveness of our advertising, and understand which buildings and topics our visitors are most interested in.

3.3 Information Collected Through Lead Forms on Meta and Google

If you click one of our ads on Facebook, Instagram, Google Search, YouTube, or Gmail and fill out the lead form attached to that ad, the platform will share the information you submit with us. This information typically includes your name, email address, phone number, location, and any answers to the questions we have included in the form.

By submitting a lead form linked to a SteelBuilt advertisement on Meta or Google, you acknowledge that the information you provide will be shared with SteelBuilt and governed by this Privacy Policy from the moment we receive it.

Meta's collection and use of your information on its platforms is governed by Meta's Privacy Policy at facebook.com/privacy/policy. Google's collection and use of your information is governed by Google's Privacy Policy at policies.google.com/privacy.

4. How We Use Your Information

We use the personal information you provide for the following purposes:

To respond to your questions and enquiries
To prepare and send you a quote, drawings, and project information
To schedule consultations, site visits, and delivery
To process orders and manage active projects
To send you project updates, service-related messages, and follow-up communications
To send you marketing communications about steel buildings, services, and offers, where you have given us your consent or where Canada's Anti-Spam Legislation (CASL) otherwise allows us to do so (see Section 8.4)
To improve our website, services, and customer experience
To measure and improve the performance of our advertising on Meta, Google, and other platforms
To comply with legal, tax, and regulatory obligations

We will not use your personal information for any purpose that is materially different from the ones listed above without first obtaining your consent.

5. How We Share Your Information

We do not sell your personal information. We share it only with the categories of third parties listed below, and only to the extent needed to operate our business.

5.1 Service Providers

We share information with trusted service providers who help us run our business, including:

Website hosting and infrastructure providers
Customer relationship management (CRM) and email platforms
Analytics providers, including Google Analytics
Advertising platforms, including Meta (Facebook and Instagram) and Google
Engineers, drafters, and trade partners directly involved in your project
Manufacturers, freight carriers, and installation crews where relevant to delivery
Payment processors and financial institutions

These providers are only permitted to use your information to perform the services we have asked of them, and are required to protect your information consistent with this Privacy Policy.

5.2 Advertising Partners (Meta and Google)

Our website uses tracking and remarketing tools from advertising partners, including the Meta Pixel and the Google Ads conversion and remarketing tags. These tools allow us to measure how our ads perform, build audiences, and show relevant ads to people who have visited our website or expressed interest in our buildings. The information shared through these tools is generally aggregated or hashed before being passed to the advertising partner.

Specifically, we use Google Ads remarketing and similar audience features. This means that third-party vendors, including Google, show our ads on websites across the internet. These third-party vendors, including Google, use cookies and device identifiers to serve ads based on someone's past visits to our website.

Meta's collection and use of your information on its platforms is governed by Meta's Privacy Policy, available at facebook.com/privacy/policy. Google's collection and use of your information is governed by Google's Privacy Policy, available at policies.google.com/privacy.

5.3 Legal and Safety Reasons

We may disclose personal information if we are required to do so by law, court order, or another legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

5.4 Business Transfers

If SteelBuilt is involved in a merger, acquisition, financing, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you and apply the protections of this Privacy Policy where required by law.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to keep the site working, measure how it is used, and improve the experience for visitors. The main categories of cookies and trackers we use are:

Strictly necessary cookies, which keep the site functioning correctly
Analytics cookies, including those set by Google Analytics, which help us understand how visitors use our site
Advertising and remarketing cookies, including the Meta Pixel and Google Ads tags, which allow us to measure the performance of our ads and show relevant ads on Facebook, Instagram, Google, and partner sites

6.1 How to Opt Out

You can control or opt out of these cookies in several ways:

Browser settings: most browsers allow you to block or delete cookies through their settings menu
Google: opt out of personalized Google ads at google.com/adsettings
Meta: opt out of personalized advertising on Facebook and Instagram by adjusting your ad preferences in your Meta account settings
Network Advertising Initiative: opt out of many third-party advertising vendors at once at optout.networkadvertising.org
Digital Advertising Alliance of Canada: Canadian visitors can opt out of interest-based advertising from participating companies at youradchoices.ca

Opting out of personalized advertising does not stop you from seeing ads. It means the ads you see will be less tailored to your interests.

7. Lead Form Disclosures (Meta and Google)

This section is provided to satisfy the disclosure requirements set out in Meta's Lead Ads Terms of Service and Google's policies for Lead Form assets.

If you submit information to SteelBuilt through a lead form attached to one of our advertisements on Facebook, Instagram, Google Search, YouTube, or Gmail, the following applies:

The data you submit will be shared with SteelBuilt by the platform (Meta or Google) and will be governed by this Privacy Policy from the moment we receive it
We will use the information you submit to follow up with you about the product or service the ad referred to, including providing a quote, sending requested information, scheduling a call, or answering your questions
We will not use the information for purposes that are materially different from those described in the ad and this Privacy Policy without first obtaining your consent
You can withdraw your consent at any time by contacting us at sales@steelbuiltcorp.ca and asking us to stop contacting you or to delete your information
Our advertisements and lead forms are not directed at minors, and we do not knowingly collect information from anyone under the age of 18 through Meta or Google lead forms

Meta's and Google's collection and processing of your information on their platforms, including before you submit a lead form, is governed by their own privacy policies.

8. Your Consent

Under PIPEDA, we rely on your consent to collect, use, and share your personal information.

8.1 Express Consent

In most cases your consent is express, meaning you actively choose to share your information with us. Examples of express consent include filling out our quote form, sending us an email, submitting a Meta lead form, or signing up for our newsletter.

8.2 Implied Consent

In some cases, we may rely on implied consent. For example, if you call us with a question about a quote, we will use your phone number to call you back without asking for separate written permission.

8.3 Withdrawing Consent

You can withdraw your consent at any time, subject to legal and contractual restrictions and reasonable notice. To withdraw consent, contact us using the details in Section 14. Withdrawing consent may affect our ability to continue providing certain services to you, and we will let you know if that is the case.

8.4 Compliance with Canada's Anti-Spam Legislation (CASL)

When we send marketing emails (referred to under Canadian law as commercial electronic messages or CEMs), we comply with Canada's Anti-Spam Legislation (CASL). This means:

We only send marketing emails where we have express consent (for example, a clear opt-in on one of our forms) or implied consent under CASL (for example, an existing business relationship within the past two years, or an inquiry about our products or services within the past six months)
Submitting a quote request, contact form, or Meta or Google lead form is treated as an inquiry under CASL. This gives us implied consent to follow up about that specific enquiry for six months. Adding you to a broader marketing list requires separate express consent from you
Every marketing email we send identifies SteelBuilt as the sender, includes our mailing address and contact information, and contains a clear unsubscribe link
We honour unsubscribe requests within 10 business days, at no cost to you
We keep records of consent for at least three years, as required by CASL

9. How Long We Keep Your Information

We keep your personal information only for as long as we need it for the purposes described in this Privacy Policy, or for as long as we are required to keep it by law.

Quote requests and project enquiries: typically up to 7 years to support repeat business, warranty questions, and tax records
Active project records: for the life of the project plus the period required by applicable law
Marketing contact lists: until you unsubscribe or ask us to remove your information
Website analytics and advertising data: in line with the retention settings of the underlying platforms (typically 14 to 26 months for Google Analytics and Meta)

When we no longer need your personal information, we securely delete it or anonymize it.

10. How We Protect Your Information

We use reasonable physical, technical, and organizational safeguards to protect your personal information against loss, theft, and unauthorized access, use, or disclosure. These safeguards include:

Secure password protection on systems containing personal information
Restricting access to personal information to staff and contractors who need it to do their job
Using reputable third-party platforms with strong security practices for hosting, email, CRM, and analytics
Encrypting data in transit through HTTPS on our website

No method of transmitting or storing data over the internet is 100% secure. While we work hard to protect your personal information, we cannot guarantee absolute security.

11. International Data Transfers

Some of our service providers, including Meta, Google, and certain hosting and email providers, are based outside Canada or store data on servers located outside Canada (often in the United States or the European Union).

When your personal information is processed outside of Canada, it may be subject to the laws of those jurisdictions, including lawful access requests by foreign governments, courts, and law enforcement agencies. We choose providers that apply privacy and security standards consistent with Canadian law and that contractually commit to protecting your information.

12. Your Rights

Under PIPEDA and substantially similar provincial laws, you have the right to:

Know what personal information we hold about you
Access that information and request a copy
Ask us to correct information that is inaccurate or incomplete
Ask us to delete your information, subject to legal and contractual exceptions
Withdraw your consent to our use of your information at any time
Unsubscribe from our marketing emails at any time using the unsubscribe link in those emails. We will action unsubscribe requests within 10 business days, at no cost to you
Make a complaint about how we have handled your information

To exercise any of these rights, please contact our Privacy Officer using the details in Section 14. We will respond within 30 days. We may need to verify your identity before acting on your request.

13. Children

Our website and services are intended for adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will take steps to delete it.

14. Privacy Officer and Contact

SteelBuilt has designated a Privacy Officer to oversee compliance with PIPEDA and this Privacy Policy. To exercise your rights, ask a question, or make a complaint about how we handle your personal information, please contact:

Attention: Privacy Officer, SteelBuilt Corp
Address: 413-37 Sandiford Drive, Stouffville, Ontario, L4A 3Z2
Email: sales@steelbuiltcorp.ca
Phone: (905) 642-1012

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada:

Website: priv.gc.ca
Phone: 1-800-282-1376
Mailing address: 30 Victoria Street, Gatineau, Quebec, K1A 1H3

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or the law. When we make a material change, we will update the Last Updated date at the top of this policy and, where appropriate, provide additional notice on our website. We encourage you to review this Privacy Policy periodically.