Privacy Policy

Introduction

EcoFrost Heating and Cooling ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services or visit our website. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario's privacy regulations.

Information We Collect

Personal Information

When you request our services or contact us, we may collect:

• Name and contact information (phone number, email address)
• Service address and billing address
• Payment information for processing transactions
• Service history and equipment information
• Photos or images you provide related to service requests
• Communication records (emails, service call notes)

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on our site
• Referring website information
• Device information

How We Use Your Information

We use the information we collect to:

• Provide HVAC installation, repair, and maintenance services
• Process payments and send invoices
• Schedule appointments and send service reminders
• Respond to your inquiries and service requests
• Send promotional materials (with your consent)
• Improve our services and customer experience
• Comply with legal obligations

Information Sharing

We do not sell, rent, or trade your personal information to third parties.

We may share your information only with:

• Trusted service providers who assist in our operations (under confidentiality agreements)
• Equipment manufacturers for warranty purposes
• Financial institutions for payment processing
• Government authorities when required by law
• Utility companies for rebate applications (with your consent)

Data Security

We implement industry-standard security measures to protect your personal information, including:

• Secure, encrypted data transmission (SSL/TLS)
• Restricted access to personal information on a need-to-know basis
• Regular security assessments and updates
• Secure storage of physical and electronic records

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you of any breach that may affect your personal information.

Your Rights

Under PIPEDA and Ontario privacy laws, you have the right to:

• Access your personal information we hold
• Request correction of inaccurate information
• Withdraw consent for marketing communications
• Request deletion of your personal information (subject to legal retention requirements)
• File a complaint with the Privacy Commissioner of Canada

Consent

We obtain your consent before collecting, using, or disclosing your personal information, except where permitted or required by law. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Service records may be retained for warranty purposes and to maintain equipment history. You may request deletion of your data, subject to our legal obligations.

Data Storage and Cross-Border Transfers

Your personal information is stored and processed in Canada. However, our website hosting infrastructure (Vercel) may process certain data (including server logs and website analytics) in the United States and European Union.

By using our services, you acknowledge that:

• Your data may be transferred to and processed in the United States, where it may be subject to access by U.S. courts, law enforcement, or government agencies under laws such as the CLOUD Act and FISA
• We have implemented contractual safeguards with our service providers to ensure your data receives comparable protection to Canadian standards
• We remain accountable for the protection of your personal information regardless of where it is processed

Data Breach Notification

In the event of a data breach that poses a real risk of significant harm to you, we will:

• Notify you as soon as feasible after becoming aware of the breach
• Provide information about the circumstances of the breach and the personal information involved
• Describe the steps we have taken to reduce the risk of harm and prevent future breaches
• Offer guidance on steps you can take to protect yourself

We will also report material breaches to the Office of the Privacy Commissioner of Canada as required.

Cookies and Tracking

Our website may use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. You can control cookies through your browser settings. Disabling cookies may affect some features of our website.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.