Privacy Policy

Campoli Custom Builds Inc. is a residential construction and renovation company headquartered in Barrie, Ontario, Canada. We are the “organization” and “data controller” responsible for your personal information as defined under PIPEDA.

Privacy Officer: Luca Campoli
Email: luca@campolicustombuilds.com
Phone: (647) 802-3381
Location: Barrie, Ontario, Canada

We collect personal information only for identified, legitimate purposes. The categories of information we may collect include:

a) Information You Provide Directly

• Contact details: Full name, email address, phone number, city/address
• Project details: Type of project, scope, vision, budget range, and timeline preferences submitted through our quote form
• Communications: Messages sent to us via email or phone

b) Information Collected Automatically

• Usage data: Pages visited, time spent on pages, referring URLs
• Device and browser data: Browser type, operating system, screen resolution
• IP address: Used to understand general geographic location (country/province level)
• Cookie data: See Section 5 (Cookies) for full details

c) Information We Do Not Collect

We do not collect sensitive personal information such as financial account numbers, Social Insurance Numbers, health information, or government-issued identification numbers through this website.

We use your personal information only for the purposes for which it was collected, or for purposes consistent with those purposes. Specifically, we use it to:

• Respond to your quote requests and project inquiries
• Provide you with a confirmation of your submission
• Prepare project proposals and cost estimates
• Communicate updates about your project or our services
• Improve our website functionality and user experience
• Comply with applicable legal and regulatory obligations
• Enforce our contractual terms and protect our legal rights

We do not: sell, rent, or trade your personal information to third parties for marketing purposes. We do not use your information for automated decision-making or profiling that produces legal or significant effects on you.

Under PIPEDA, we rely on the following legal bases to process your personal information:

• Consent: You provide consent when you voluntarily submit a quote request form or contact us. You may withdraw consent at any time (see Section 9).
• Contractual necessity: Processing necessary to fulfil a contract with you or to take steps before entering into a contract at your request.
• Legitimate interests: Operating and improving our business, responding to inquiries, and maintaining records — provided these interests are not overridden by your privacy rights.
• Legal obligation: Where processing is necessary to comply with applicable law.

Our website uses cookies — small text files stored on your device — to provide core functionality. We use only the following categories of cookies:

a) Strictly Necessary Cookies

These cookies are required for the website to function and cannot be switched off. They do not store personally identifiable information. Examples include session management and security tokens.

b) Preference Cookies

We store your cookie consent preference in your browser's local storage under the keycampoli_cookie_consentso we do not ask you again on repeat visits.

c) Analytics Cookies (if enabled)

We may use privacy-respecting analytics tools to understand aggregate site usage. These do not identify individual visitors. No advertising cookies or cross-site tracking cookies are used.

Managing Cookies

You can control cookies through your browser settings, or by clicking “Decline” on our cookie banner. Note that disabling strictly necessary cookies may affect website functionality. See allaboutcookies.org for guidance on managing cookies in your browser.

We may share your personal information with the following categories of recipients, and only to the extent necessary:

• Email delivery providers: We use Resend Inc. (a US-based email service provider) to transmit quote confirmation emails to you and internal notifications to us. Your name and email address are processed by Resend solely to deliver transactional emails. Resend processes data in accordance with GDPR and standard contractual clauses. You can review Resend's privacy policy at resend.com/privacy-policy.
• Web hosting:Our website is hosted on Vercel Inc. (US-based), which processes server logs and network data to deliver our website. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.
• Legal and regulatory authorities: Where required by law, court order, or government authority.
• Business transfers: In the event of a merger, acquisition, or sale of business assets, your information may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our website of any such change.

We do not sell, trade, or rent your personal information to any third party.

As noted above, some service providers (Resend, Vercel) are located in the United States. When your personal information is transferred outside Canada, it may be subject to the laws of that jurisdiction. We take appropriate contractual and technical safeguards to ensure your information is protected to a standard consistent with PIPEDA when processed outside Canada.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Quote inquiries: Retained for up to 2 years from last contact, or for the duration of a project relationship, whichever is longer
• Active client records: Retained for 7 years following project completion to comply with construction warranty and tax record obligations under Ontario law
• Website analytics data: Aggregated and anonymized; not retained in identifiable form beyond 26 months

When personal information is no longer required, it is securely deleted or anonymized in accordance with our data disposal procedures.

Subject to applicable legal exceptions, you have the following rights with respect to your personal information:

• Right of access: You may request a copy of the personal information we hold about you and information about how it is used and disclosed.
• Right of correction: You may request that inaccurate or incomplete personal information be corrected.
• Right to withdraw consent: You may withdraw consent to our processing of your personal information at any time, subject to legal or contractual restrictions. Withdrawal does not affect the lawfulness of processing before the withdrawal.
• Right to deletion: You may request that we delete your personal information where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to complain: You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca or with the Information and Privacy Commissioner of Ontario at ipc.on.ca.

To exercise any of these rights, please contact our Privacy Officer at luca@campolicustombuilds.com. We will respond within 30 days of receiving a request.

We comply with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages (CEMs) where we have your express or implied consent, as defined under CASL. Every CEM we send includes:

• Clear identification of Campoli Custom Builds Inc. as the sender
• Accurate contact information
• A working unsubscribe mechanism

Transactional emails sent in direct response to your quote request (such as submission confirmations) are not considered CEMs under CASL and do not require consent beyond your voluntary submission.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• HTTPS/TLS encryption for all data in transit
• Access controls limiting who can access personal information internally
• Use of reputable third-party providers with documented security practices
• Regular review of our data handling procedures

While we take these precautions, no method of transmission over the Internet is 100% secure. In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by PIPEDA.

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will take steps to delete it.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will update the “Last updated” date at the top of this page. For material changes, we will provide more prominent notice (such as a banner on our website or email notification to recent contacts).

Your continued use of our website after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our Privacy Officer: