Privacy Policy

1. Introduction

Coremax Solutions ("Coremax", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at coremax.ca, use our dealer portal, or interact with our services.

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. Information We Collect

Information You Provide

• Contact forms: Name, email address, phone number, company name, and message content
• Dealer applications: Company details, business number (HST), contact information, digital signature, and uploaded documents
• Dealer accounts: Login credentials (email and encrypted password), company information, and order history
• Newsletter: Email address

Information Collected Automatically

• Analytics data: Pages visited, time on site, referral source, and general location (city/country level) — collected via Google Analytics only if you consent
• Device information: Browser type, operating system, and screen resolution

3. Cookies & Local Storage

Cookies are small text files stored on your device by your browser. We also use local storage to remember your preferences. Below is a summary of what we use:

You can manage your cookie preferences at any time by clearing your browser cookies and revisiting the site. Analytics cookies are only set if you click "Accept" on our cookie banner. The session and reCAPTCHA cookies are essential to the functionality of the site and cannot be disabled.

4. How We Use Your Information

• To process dealer applications and manage dealer accounts
• To respond to contact form inquiries
• To send order confirmations and account-related emails
• To send newsletter updates (only if you subscribe)
• To analyze website traffic and improve our services (with consent)
• To protect against fraud and unauthorized access

5. Third-Party Services

We use the following third-party services:

• Google Analytics: Website traffic analysis (with consent). Google's Privacy Policy
• Google reCAPTCHA: Bot protection on forms. Google's Privacy Policy
• Resend: Transactional email delivery
• MongoDB Atlas: Secure cloud database hosting
• Vercel: Website hosting

We do not sell, rent, or share your personal information with third parties for marketing purposes.

6. Data Storage & Cross-Border Transfer

Your personal information may be stored and processed on servers located outside of Canada, including in the United States, through our third-party service providers (Vercel, MongoDB Atlas, Resend, Google). By using our website and services, you consent to the transfer of your information to these jurisdictions. We ensure that all service providers maintain appropriate security safeguards in accordance with PIPEDA requirements.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption on all pages
• Passwords are encrypted and never stored in readable form
• HTTP security headers to prevent common web attacks
• Input validation on all forms
• Role-based access controls for dealer and admin portals

8. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy. Dealer account data is retained for the duration of the business relationship. Contact form submissions are retained for up to 2 years. You may request deletion of your data at any time.

9. Children's Privacy

Our website and services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 13, we will take steps to delete it promptly.

10. Your Rights

Under Canadian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for data processing
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, please contact us using the information below.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the website after changes constitutes acceptance of the updated policy.