Privacy Policy

Effective Date: [Insert Date]

This Privacy Policy explains how brickmanpro.life ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website (the "Site"). This policy is designed to comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, the California Consumer Privacy Act (CCPA), and other applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

By using the Site, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Site.

1. Information We Collect

We may collect the following types of information:

Personal Information: Information that identifies you as an individual, such as your name, email address, postal address, phone number, and payment details when voluntarily provided (e.g., through forms, purchases, or account registration).
Technical Data: Includes your IP address, browser type, operating system, device information, and browsing behavior collected via cookies and similar tracking technologies.
Usage Data: Pages visited, time spent on the Site, links clicked, and other interaction data.
Third-Party Data: Information from social media platforms (if you log in via such services) or analytics providers.

2. How We Collect Your Information

We collect information through:

Direct Interactions: When you fill out forms, subscribe to newsletters, purchase products, contact customer support, or participate in surveys.
Automated Technologies: Cookies, log files, web beacons, and analytics tools (e.g., Google Analytics) to track your activity and improve user experience.
Third-Party Sources: Payment processors, marketing platforms, or social media networks (with your consent).

3. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

Consent: When you opt-in to marketing communications or cookie usage.
Contractual Necessity: To fulfill orders, provide services, or process payments.
Legitimate Interests: For analytics, fraud prevention, and improving our Site, provided your rights do not override these interests.
Legal Obligation: To comply with applicable laws, such as tax or anti-fraud regulations.

4. How We Use Your Information

We use your data for the following purposes:

To operate, maintain, and improve our Site and services.
To process transactions, send order confirmations, and manage accounts.
To send promotional emails, newsletters, or offers (with your consent, where required).
To respond to inquiries, support requests, or feedback.
To detect and prevent fraud, security breaches, or illegal activities.
To comply with legal obligations and regulatory requirements.

5. Disclosure of Your Information

We may share your personal data with:

Service Providers: Third-party vendors (e.g., payment processors, hosting services, email marketing platforms) who process data on our behalf under strict contractual agreements.
Legal Authorities: If required by law, court order, or to protect our rights or the rights of others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.
Consent: With your explicit consent for specific sharing purposes.

We do not sell your personal information to third parties for their own marketing purposes without your consent.

6. Cookies and Tracking Technologies

Our Site uses cookies, pixels, and similar technologies to enhance functionality and analyze usage. Types of cookies we use:

Essential Cookies: Necessary for the Site to function (e.g., session management).
Analytical Cookies: Collected data on how visitors use the Site (e.g., Google Analytics).
Marketing Cookies: Used to deliver targeted ads and track campaign performance.

You can manage cookie preferences via your browser settings or our cookie consent banner. Under GDPR, we obtain your explicit consent for non-essential cookies.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption (SSL/TLS), firewalls, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or as required by law. For example:

Transaction records: Retained for tax and accounting purposes for up to 7 years.
Marketing data: Retained until you unsubscribe or request deletion.
Cookie data: Retained for up to 24 months from last visit.

9. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights under GDPR:

Right to Access: Request a copy of your personal data we hold.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure: Request deletion of your data ("right to be forgotten").
Right to Restrict Processing: Limit how we use your data.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact us at [Insert Email Address]. We will respond within 30 days.

10. Your Rights Under CCPA (California)

If you are a California resident, you have the following rights under the CCPA:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected over the past 12 months.
Right to Delete: Request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out: Opt-out of the sale of your personal information (note: we do not sell personal information as defined by CCPA).
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a request, email us at [Insert Email Address] or call [Insert Phone Number]. We will verify your identity before processing. Authorized agents may submit requests on your behalf with proper documentation.

11. Canadian Privacy Rights (PIPEDA)

For users in Canada, we comply with PIPEDA. You have the right to:

Access and correct your personal information.
Withdraw consent for collection or use (subject to legal or contractual restrictions).
File a complaint with the Privacy Commissioner of Canada if you believe your rights have been violated.

12. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside your residence, including Canada and the United States. We ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place for data transfers under GDPR. For more details, contact us.

13. Third-Party Links

Our Site may contain links to third-party websites (e.g., payment gateways, social media). We are not responsible for their privacy practices. We encourage you to read their privacy policies before providing any personal data.

14. Children's Privacy

Our Site is not directed to children under the age of 16. We do not knowingly collect personal information from minors. If we become aware that a child has provided us with data, we will delete it immediately. Parents or guardians should contact us if they believe a child has submitted information.

15. Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Effective Date." For GDPR users, we may also notify you via email where required. Your continued use of the Site after changes constitutes acceptance.

16. Contact Information

For questions, concerns, or to exercise your privacy rights, please contact our Data Protection Officer (DPO) at:

Email: [Insert Email Address]
Postal Address: [Insert Physical Address, e.g., 123 Privacy Street, Toronto, ON M5X 1A1, Canada]
Phone: [Insert Phone Number]

We aim to respond within 30 days of receiving your request. If you are unsatisfied, you may lodge a complaint with your local data protection authority (e.g., the Office of the Privacy Commissioner of Canada or the relevant EU supervisory authority).

17. Governing Law

This policy is governed by the laws of Canada and the Province of Ontario, without regard to conflict of law principles. For users in the EU/EEA, additional protections under GDPR apply.

This Privacy Policy was last updated on [Insert Date].