Privacy & cookies

This policy covers the Hermetix Canada website and enquiries sent through its contact links. ‘We’, ‘us’ and ‘our’ mean the Canadian operator, whose registered legal identity and mailing address are pending confirmation. Hermetix Canada is the operating name used here; it is not a substitute for the legal entity’s name.

For privacy questions or requests, contact info@hermetix.co with ‘Privacy’ in the subject. The name or title and contact details of the person responsible for privacy will be added before publication. This policy does not cover a separate manufacturer, distributor or social platform’s independent activities.

Enquiries: the name, email address, phone number, topic, message, attachments and other information you choose to send us, together with ordinary email headers and our correspondence. The form prepares a message in your email application. It does not submit those fields to a website database; we receive the message only when you send it. Your email provider handles the draft and delivery under its own terms.

Website delivery: our host, Vercel, processes technical request information such as IP address, requested URL, time, browser and device details to deliver and protect the site. Records depend on the hosting and security configuration. The email provider, enabled hosting logs and their retention periods still need to be confirmed.

Your choices: a browser storage entry records your optional consent choices, notice version and times. If you allow an enabled analytics or marketing tool, it receives the browsing and device information described in the cookie inventory below. Information comes directly from you, your browser and those service providers.

There is currently no website account, online checkout, payment collection or newsletter signup. Contact details are not needed to browse. The form asks for a name and topic to prepare an enquiry; email, phone and message fields are optional. Without a way to reach you, we may be unable to respond. Please do not send payment credentials, identity documents or unnecessary sensitive information.

Enquiry information is used to answer questions, discuss your project, arrange a requested conversation and maintain related correspondence. Technical information supports website delivery, troubleshooting and protection against misuse. Consent records apply your choices. Optional analytics measures website use; optional marketing measures advertising and supports more relevant ads.

In Canada, we seek meaningful consent where required and limit use to appropriate purposes, subject to applicable legal exceptions. Sending an enquiry allows us to handle that enquiry; it does not enrol you in promotional messages or enable tracking.

Where the EU or UK GDPR applies, the proposed bases are: steps you request before a contract for relevant project enquiries; legitimate interests in answering general or business enquiries and keeping the site secure and functional; consent for optional analytics and marketing; and legal obligation where a specific applicable law requires processing. These bases and any required balancing assessments must be confirmed against actual business practices before publication.

Analytics and marketing are off by default. Accept all allows both optional purposes when the tools are enabled. Reject optional keeps them off. Customise lets you choose separately. Browsing, scrolling, reading terms or closing preferences does not give consent. Refusing optional tracking does not affect browsing or enquiries.

Use Cookie settings at any time to change or withdraw consent. Acceptance and rejection are remembered for 180 days on this browser, then we ask again. A material change to tools or purposes also requires a fresh choice. Clearing site storage clears the record. Choices do not automatically follow you to another browser or device.

Withdrawal stops future optional tracking here and removes accessible first-party cookies for these tools. The page may reload to stop code already running. Withdrawal does not invalidate earlier lawful processing, erase previously collected information or remove cookies on another provider’s domain. Email us for help with information already collected.

People handling your enquiry need access to the correspondence. Hosting and email providers process information to operate the website and communications. Vercel is the host; the business email provider and other support providers are pending confirmation. If your request needs a separate manufacturer, installer or distributor, we will explain the proposed disclosure and obtain consent where required before passing on your details.

Google receives analytics information only when its integration is enabled and you allow analytics. Meta receives marketing information only when its integration is enabled and you allow marketing. Their policies explain their additional processing. Information may also be disclosed where required or permitted by applicable law, including a valid legal demand or a necessary response to fraud or a security incident.

The current website has no data-broker integration. Meta advertising, if enabled, may count as ‘sharing’ for cross-context behavioural advertising or a ‘sale’ under some US privacy laws, even without payment. We therefore provide a separate marketing choice and a Do not sell or share control. Business-wide sharing practices must be confirmed before publication.

Hosting, email delivery and optional providers may process information outside your province or country, including outside Canada and Québec and in the United States. Privacy protections and lawful government access can differ. The countries, provider agreements and transfer safeguards for the Canadian operator’s accounts are awaiting verification.

Where applicable law requires a transfer assessment, an adequacy decision or contractual safeguards, the relevant arrangement must be established before the transfer and described here. Cookie consent is not a waiver of these requirements. Contact us for information about recipients, locations and copies or descriptions of applicable safeguards.

The consent preference expires after 180 days. The inventory lists expected browser cookie lifetimes; these are separate from a provider’s retention of information already collected.

For enquiries, retention criteria are the time needed to resolve the request, manage any resulting project relationship, meet applicable record-keeping obligations and handle an existing dispute or legal hold. Hosting records should be limited to operational and security needs. Information no longer needed should be deleted or irreversibly anonymised as permitted by law.

The operator’s deletion schedule, email and backup retention, hosting log settings and future Google/Meta account retention settings remain to be confirmed. No fixed retention period for those records is represented by this draft. Ask us about a particular record or request deletion using the contact above.

Safeguards must reflect the sensitivity of the information and include appropriate access controls, account protection and secure handling by providers. The operator’s procedures and incident-response responsibilities are pending verification. No website or email transmission can be guaranteed completely secure.

Please contact us if you suspect a privacy or security incident involving this website. Where a breach triggers legal duties, affected individuals and the relevant authority must be notified as required by applicable law.

Email info@hermetix.co to ask what personal information we hold about you, how it has been used or disclosed, to request a copy or correction, withdraw consent or raise a concern. Depending on the law and circumstances, you may also request deletion, restriction, portability or review of a decision. Québec law includes portability of certain computerised information, subject to its conditions.

Describe your request and your connection to us. We may ask for proportionate information to verify an access, correction or deletion request; do not send identity documents unless a necessary and secure method has been agreed. A marketing opt-out does not require an account or identity verification. An authorised representative may act where applicable law allows.

We will respond within the applicable legal period and explain any permitted extension, refusal, fee or exception, with available complaint or review routes. Retention required by law may limit deletion. Withdrawing information needed to answer an enquiry may prevent us from completing it. Exercising privacy rights does not require optional tracking consent.

Canada: PIPEDA and provincial privacy laws apply according to the activity and location. You may complain to the Office of the Privacy Commissioner of Canada or the applicable provincial regulator, including those in Québec, Alberta or British Columbia. Contacting us does not waive your complaint rights.

EEA and UK: where the relevant GDPR applies, you may request access, rectification, erasure, restriction or portability under its conditions, withdraw consent, and complain to a supervisory authority where you live or work or where an alleged infringement occurred. Any required local representative’s details will be added following the territorial-scope assessment.

Your right to object: where the EU or UK GDPR applies, you can object to processing based on legitimate interests because of your particular situation. You can object to direct marketing, including related profiling, at any time. Email us with ‘Privacy — objection’ or use the marketing control for this browser.

California and other US states: where a state privacy law applies to our activities, residents may have rights to know or access, correct, delete and obtain a portable copy, and to opt out of sale, sharing, targeted advertising or certain profiling. Rights can include limiting certain uses of sensitive information, using an authorised agent and appealing a denied request. We will not unlawfully discriminate for exercising these rights. Applicability, historical disclosures and any additional request channels must be confirmed before publication.

The footer’s Do not sell or share my personal information control opens preferences. Reject optional, or turn Marketing off and save, to stop this website’s optional advertising integration. When your browser exposes Global Privacy Control to the website, marketing stays off, including after an earlier acceptance. The signal does not change a separate analytics choice and applies to the browser using it.

The older Do Not Track setting is not used as a separate signal. You can reject all optional tools through our controls. Third-party services may collect activity across sites when you consent to their integration; their policies and account controls govern their independent services. Email us to request an opt-out or deletion beyond this browser.

Cookie permission is separate from permission for promotional email or SMS. This website has no marketing subscription. Any future promotional messaging programme must provide required sender details, lawful consent or another applicable basis, and an effective unsubscribe method.

The website is for people researching doors, architectural projects and business relationships. It is not directed at children. If you believe a child has sent unnecessary personal information, contact us so we can address it under applicable law. We do not use this website to make solely automated decisions with legal or similarly significant effects. Meta’s optional advertising profiling can influence the ads you see, as described above.

We will update this policy when information practices change and identify the effective date of the published version. Material changes will receive appropriate notice and fresh consent where required. An update does not turn on optional tracking or expand an earlier permission by itself.

External social-media and provider links lead to services with their own privacy practices. This policy does not replace their notices. Mandatory rights under the laws that apply to you remain available.