ASM Millwork Privacy Policy

1. Introduction

ASM Millwork ("we", "our", "us") respects your privacy and is committed to protecting personal information collected through our website and services. This policy explains what data we collect, how we use it, and your rights. It is intended to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

2. What information we collect

We collect the following information:

• Quote form: your name, phone number, project type, budget range, and preferred contact method.
• Automatically: your IP address, browser type, the _fbp and _fbc cookies set by Meta's Pixel, and the pages you view and actions you take (such as tapping our phone number or scrolling through key sections).

We do not collect an email address or mailing address through this website, and our forms contain no email field.

3. How we use your information

• Schedule consultations and respond to inquiries
• Create designs, quotes, and contracts
• Measure and improve the effectiveness of our advertising
• Comply with legal obligations and prevent fraud

We contact you only through the method you select on our quote form (for example, a phone call, text message, WhatsApp, Instagram, or Messenger). Any marketing communications are sent in line with CASL, and you may withdraw consent at any time.

4. Legal basis for processing

We collect and process personal information with your knowledge and consent, except where permitted or required by law.

5. Sharing your information

We do not sell or rent your personal data. We share limited data only with the service providers that operate our advertising and analytics, as described in Sections 6, 7, and 8 (Meta Platforms Inc., Google, and Vercel), and where required by law.

6. Meta Pixel and Conversions API

Our website uses Meta Pixel and Meta Conversions API (CAPI) to measure the effectiveness of our advertising on Facebook and Instagram. These tools help us understand how visitors interact with our site after seeing our ads.

When you visit our site, the following data is collected and shared with Meta Platforms Inc.:

• Your IP address and browser type
• The _fbp and _fbc cookies set by Meta's Pixel code
• Pages you view and actions you take, such as tapping our phone number or scrolling through key sections

If you submit our quote form, hashed (one-way encrypted) versions of your phone number, name, and general location (city, province, and country) are also shared with Meta for ad matching only. We do not collect or send your email address. Hashed data cannot be reversed to identify you directly. Submitting the quote form is your affirmative consent to this data sharing.

You can opt out of Meta's use of your data for ad targeting in three ways:

• Manage your preferences through Facebook Ad Preferences
• Clear your browser cookies to remove the _fbp and _fbc identifiers
• Email us at info@asmill.ca with the subject "Privacy Request" to ask us to delete any data we hold and to remove your matched data from Meta's systems

7. Server-side event matching (Conversions API)

When you tap a contact link or submit our quote form, our server also sends event data directly to Meta's Conversions API. This server-side event includes hashed versions of the phone number, name, and general location you provide (where applicable), matched against Meta's systems to attribute the action to the ad that brought you to our site. No email address is collected or sent.

Server-side events are covered by the same opt-out options listed in Section 6. To request deletion of server-matched event data, email info@asmill.ca with the subject "Privacy Request".

8. Analytics and site measurement

We use Google Analytics 4 and Vercel Analytics to understand site traffic and usage patterns. These services collect anonymized usage data including page views and session duration. No personally identifiable information is included in these analytics reports.

9. Your rights

• Access or correct your data
• Withdraw consent to marketing communications
• Request deletion of personal data, subject to legal retention
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, email info@asmill.ca with the subject line "Privacy Request" and describe your request. We respond within 30 days.

10. Data retention

Personal information is retained only as long as necessary to provide our services and meet legal obligations, typically until the end of your project.

11. Security measures

We employ SSL encryption, firewalls, and role-based access controls to safeguard data.

12. Children's privacy

Our services are not directed to children under 18. If you believe a child has provided us data, contact us and we will delete it.

13. Policy updates

We may update this policy periodically. The revised version will be posted with a new date. Continued use of our site signifies acceptance of changes.

14. Contact us