Privacy Policy

Riowell Security Inc. (“Riowell,” “we,” “our,” or “us”) is committed to protecting the privacy of individuals who interact with our website and services. This Privacy Policy describes how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.

1. Information We Collect

We collect personal information only when you voluntarily provide it or when it is automatically generated by your use of our website.

Contact Form Submissions

When you complete our contact or quote request form, we collect: your name, email address, phone number, company name (if provided), and the content of your message.

Website Usage Data

We collect anonymised analytics data about how visitors interact with our website, including pages visited, time on site, referring URLs, device type, and general geographic region. This data does not identify you personally.

Cookies

Our website uses a minimal set of cookies necessary for analytics and basic site functionality. We do not use advertising or tracking cookies. You may disable cookies in your browser settings; however, some features of the site may not function as intended.

2. How We Use Your Information

We use personal information we collect for the following purposes:

• To respond to your inquiries and provide the commercial security services you request.
• To prepare quotations, proposals, and service agreements.
• To follow up on leads and manage our business relationship with you.
• To send service-related communications (appointment reminders, installation updates, etc.).
• To improve our website content, user experience, and marketing.
• To comply with applicable laws and legal obligations.

We will not use your personal information for purposes other than those identified above without your consent, except where required or permitted by law.

3. CRM and Lead Management

Information submitted through our contact form is automatically entered into our internal Customer Relationship Management (CRM) system, hosted on servers we control. This allows our team to track inquiries, assign follow-up tasks, and manage your account efficiently. This information is accessible only to authorised Riowell staff.

4. Disclosure of Personal Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: Trusted third-party vendors who assist us in operating our website and delivering services (e.g., cloud hosting, email delivery), under strict confidentiality agreements.
• Legal requirements: Where required by law, regulation, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, provided the acquiring party agrees to honour this Privacy Policy.

5. Third-Party Services

Our website is hosted on Cloudflare Pages. Cloudflare may collect standard web log data (IP addresses, request metadata) as part of its infrastructure and security services. Cloudflare’s privacy practices are governed by their own privacy policy, available at cloudflare.com. We use analytics tools to understand aggregate website usage; all such data is anonymised prior to processing.

6. Data Storage and Security

We store personal information on secured servers and implement industry-standard technical and organisational safeguards, including encryption in transit (TLS), access controls, and regular security reviews. While no method of electronic transmission or storage is 100% secure, we take reasonable steps to protect your personal information against unauthorised access, disclosure, alteration, or destruction.

7. Retention

We retain personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for the duration of a business relationship and for a reasonable period thereafter for follow-up and record-keeping purposes.

8. Your Rights Under PIPEDA

Subject to applicable law, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Deletion: Request that we delete your personal information, subject to legal and contractual obligations.
• Withdrawal of consent: Withdraw consent to our use of your personal information for marketing purposes at any time.
• Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe your privacy rights have been violated.

To exercise any of these rights, please contact us using the details in Section 10 below. We will respond to all requests within 30 days.

9. Children’s Privacy

Our website and services are directed at businesses and commercial property owners. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. Contact Us

For questions, concerns, or requests related to this Privacy Policy, please contact our Privacy Officer:

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last updated” date at the top of this page will indicate when the most recent revision was made. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes your acceptance of the updated policy.