1. Who We Are
[PLACEHOLDER: LEGAL ENTITY NAME, e.g. Green Flow Canada Inc.] ("Green Flow Canada", "we") is based at [PLACEHOLDER: MAILING ADDRESS], Vancouver, British Columbia. We're responsible for the personal information we collect through greenflowcanada.com and the requests you send us. This policy doesn't cover other websites we link to.
2. What We Collect
When you send us a request (a quote, a sample kit, a question or a household order), we collect:
- your name and email address;
- your phone number, company and role, if you give them;
- your province;
- the products, pack sizes, quantities and industry you choose;
- your message;
- a shipping address, for sample kits and household orders;
- whether you've agreed to hear from us about news and offers;
- the page you sent the form from, and the date and time.
When you visit the site, our hosting provider automatically records basic technical information (IP address, browser type, pages requested and the time) so it can deliver the site and keep it secure.
Analytics. [PLACEHOLDER: ANALYTICS — default text: "We don't use analytics or advertising cookies."]
What we don't collect. We don't take payments through the site. Please don't include sensitive information, such as health details, in the message box.
3. Why We Use It
We use your information to:
- answer your request and follow up on it;
- prepare quotes, and ship sample kits and orders;
- send documents you ask for, such as Safety Data Sheets or procurement letters;
- keep records of our business dealings;
- protect the site and filter spam;
- meet our legal obligations;
- send news and offers, only if you've agreed to receive them.
We don't use your information to make automated decisions about you, and we don't build profiles for advertising.
4. Your Consent
By sending a form, you agree to our using the information in it for that request. Marketing is separate: the box for news and offers is unticked by default, and we only email you if you tick it. Every marketing email includes an unsubscribe link, and you can also withdraw consent by writing to us. We act on unsubscribe requests within 10 business days. If you withdraw consent for a request that's still open, we may not be able to complete it.
5. Cookies and Similar Technologies
We don't use advertising or tracking cookies. The site uses only the storage it needs to work, such as keeping authorized staff signed in to our content editor. The spam check on our forms doesn't identify you. [PLACEHOLDER: If analytics is added, describe it here. Any tracking stays off until you turn it on.]
Some of our documents open on Google Drive. When you open them, Google's privacy policy applies.
6. Who We Share It With
We don't sell, rent or trade your personal information. We share it only with service providers that help us run the site and serve you. They're bound by contract to use it only for that purpose.
| Service provider | What they do for us | Where the data is processed |
|---|---|---|
| Lovable | Hosts the website | [PLACEHOLDER] |
| Supabase (via Lovable Cloud) | Stores form requests; staff sign-in | [PLACEHOLDER: HOSTING REGION] |
| Resend | Delivers request notifications to our inbox | United States |
| [PLACEHOLDER: EMAIL PROVIDER] | Our business email | [PLACEHOLDER] |
| Shipping carriers | Deliver sample kits and orders (name, address, phone) | [PLACEHOLDER] |
| Hosts downloadable documents, only if you open them | [PLACEHOLDER] |
[PLACEHOLDER: CONFIRM whether request details are shared with PlyntTech or any distribution partner. If so, name them and say why.]
We may also disclose information when the law requires it, or to a buyer or successor if our business is sold or merged, under the same protections.
7. Information Outside Canada
Some of our service providers store or process information outside Canada and outside Québec, including in the United States. While it's there, it's subject to local laws and may be accessible to authorities in that country. Before transferring information, we assess the protections in place, and we require providers to protect it contractually.
8. How Long We Keep It
- Requests that don't lead to a business relationship: [PLACEHOLDER: 24 months], then deleted or anonymized.
- Customer records: for as long as we do business together, and afterwards for as long as the law requires, for example for tax and accounting.
- Marketing consent: until you withdraw it.
- Server logs: [PLACEHOLDER: RETENTION].
9. How We Protect It
We use encrypted connections (HTTPS). Access is limited to authorized staff, and database rules keep form requests private. Our service providers maintain their own security safeguards. No system is perfectly secure. If an incident creates a real risk of significant harm to you, we'll notify you and the relevant privacy regulators, as required by law.
10. Your Rights
You can ask us to:
- tell you what personal information we hold about you, and give you a copy;
- correct information that's inaccurate or incomplete;
- delete your information, where we're not required to keep it;
- stop using it for marketing, or withdraw your consent;
- if you live in Québec, provide your information in a structured, commonly used format.
Write to the contact below. We may need to confirm your identity, and we'll reply within 30 days. There's no charge for most requests.
If you're not satisfied with our answer, you can contact:
- the Office of the Privacy Commissioner of Canada;
- the Office of the Information and Privacy Commissioner for British Columbia;
- if you live in Québec, the Commission d'accès à l'information.
11. Children
Our site is for businesses and adults. We don't knowingly collect personal information from anyone under 14.
12. Changes to This Policy
If we change this policy, we'll update the date at the top. If we make a significant change, we'll say so on this page.