Privacy Policy

Pistis Contracting (“Pistis,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, how long we keep it, and the choices you have. It applies to pistiscontracting.com (the “Site”), to enquiries submitted through the Site, and to information we collect in the course of preparing estimates, proposals, and contracted work.

We are a general contracting practice based in the Greater Toronto Area, Ontario, Canada. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation. Where you contact us from outside Canada, we apply this Policy and process your information in Canada.

1. Who is responsible for your information

Pistis Contracting is the controller of personal information collected through the Site and our engagements. You can reach our privacy contact at hello@pistiscontracting.com.

2. Information we collect

We collect personal information in three ways: information you give us, information collected automatically, and information from third parties.

2.1 Information you give us

Enquiry and consultation forms. When you complete a contact, booking, or partner application form, we collect your name, email address, telephone number, postal address or municipality, and any information you choose to provide about your project (scope, timing, budget range, drawings, photographs).
Email and telephone correspondence. When you email or call us, we receive the contents of that communication and any attachments.
Engagement records. If we proceed to estimate or contracted work, we collect site addresses, access details, payment information processed by our bank or payment provider (we do not store full card numbers on our own systems), and records relating to scope, change orders, deficiency lists, and warranty matters.
Trade and supplier information. If you apply to our trade network through the partners form, we collect business contact details, qualifications, insurance and WSIB information, and references.

2.2 Information collected automatically

Server logs. Our hosting provider records standard request information including IP address, user-agent string, requested URL, referrer, date and time, and HTTP response code. These logs are used to operate and secure the Site.
Cookies and similar technologies. The Site uses a small number of cookies and equivalent storage mechanisms. Some are strictly necessary to deliver the Site (for example, to remember a session). Others are set by analytics and advertising tags described in Section 3.
Device and approximate location information. From your IP address and browser headers we, and the third parties identified below, may infer your approximate city or region, device type, browser, language, and operating system.

2.3 Information from third parties

We may receive personal information from referrers (for example, an architect, designer, or past client who introduces you to us), from publicly accessible sources (such as municipal property records when preparing an estimate), and from the advertising and analytics providers identified below in aggregated or hashed form.

3. Cookies, analytics, and advertising

The Site uses Google’s tag (gtag.js) for Google Ads conversion measurement under tag ID AW-18180857193. When you visit the Site, the Google tag may set cookies on your device, read existing Google cookies, and transmit information to Google about your interaction with our pages — including page URL, referrer, device and browser information, IP address, and, where applicable, conversion events such as completing a contact form.

Google acts as our service provider for these purposes and uses the information to provide measurement, reporting, and audience services to us, and may also use it for its own purposes as described in Google’s Privacy Policy and its Advertising policies. We do not transmit your name, telephone number, or email address to Google through the tag. If we ever implement enhanced conversions, we will do so using the hashed-data mechanism Google provides, after obtaining the consent required by law.

Your choices. You can opt out of Google’s use of cookies for personalised advertising at adssettings.google.com, and from many participating advertisers at youradchoices.ca. You can also block or delete cookies through your browser settings; doing so may affect how the Site functions.

4. How we use personal information

To respond to enquiries, prepare estimates and proposals, and arrange consultations.
To deliver and administer contracted services, including coordinating trades, scheduling site visits, processing payments, issuing invoices, and managing warranty and deficiency items.
To operate, secure, and improve the Site, including diagnosing technical issues, detecting fraud or misuse, and analysing usage in aggregate.
To send transactional communications (for example, replying to a request, confirming an appointment, or sending an estimate).
To send marketing communications where you have given consent under Canada’s Anti-Spam Legislation (CASL), or where we have an existing business relationship that permits such communications by law. You may unsubscribe at any time using the link in any commercial email or by writing to us.
To comply with legal, regulatory, insurance, tax, accounting, and dispute-resolution obligations, and to establish, exercise, or defend legal claims.

5. Legal basis and consent

Under Canadian law we rely on your express or implied consent to collect, use, and disclose personal information for the purposes set out in this Policy. By submitting a form, sending us an email, or engaging us to perform work, you consent to the practices described here. You may withdraw consent at any time on reasonable notice, subject to legal and contractual restrictions and the practical consequences of withdrawal (for example, we may be unable to continue providing a service). To withdraw consent, contact us at the address in Section 12.

6. How we share personal information

We share personal information only as needed and only with the categories of recipients listed below.

Service providers. We use vendors to operate the Site and our business, including hosting and content delivery (Vercel Inc.), transactional email delivery (Resend, Inc.), measurement and advertising (Google LLC), accounting and bookkeeping providers, document storage, and communications tools. Each provider is bound to use personal information only on our instructions and to keep it secure.
Trades, designers, and consultants. Where necessary to estimate or perform contracted work, we share relevant project information with the subcontractors, designers, engineers, and suppliers engaged on your project. We share only what is needed for them to do their job.
Professional advisors. Lawyers, accountants, auditors, and insurers, on a need-to-know basis.
Authorities. Municipal building departments, regulators, and law-enforcement or tax authorities where we are required by law to disclose information, where we are responding to a valid legal process, or where disclosure is necessary to protect rights, safety, or property.
Business transactions. In connection with a sale, merger, financing, or reorganisation of our business, personal information may be transferred to the counterparty subject to appropriate confidentiality and privacy protections.

We do not sell personal information, and we do not rent or otherwise make it available to third parties for their own marketing purposes.

7. International transfers

Some of our service providers store or process personal information outside of Canada, including in the United States. When personal information is held in another jurisdiction, it is subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement, and national-security authorities there. We use contractual and organisational measures to require providers to protect personal information to a standard comparable to what is required in Canada.

8. How long we keep information

We keep personal information only for as long as we need it for the purposes described in this Policy or as required by law. Typical retention periods are:

Unsuccessful enquiries: up to twenty-four (24) months after last contact, then deleted or anonymised.
Estimates and proposals not proceeded with: up to thirty-six (36) months from issue.
Contracted project records: for the duration of the engagement and for the longer of seven (7) years or the applicable limitation period for construction claims under Ontario law (including the Limitations Act, 2002 and the Construction Act).
Accounting, tax, and insurance records: as required by the Income Tax Act (Canada) and our insurers (generally seven (7) years).
Marketing consents and unsubscribe records: as required by CASL (currently three (3) years from the last commercial electronic message).
Analytics and advertising data: subject to the retention periods set by the relevant providers, which may be shorter or longer than the periods above.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorised access, disclosure, copying, use, or modification. These include encrypted connections to the Site (HTTPS), access controls, multi-factor authentication on key systems, and contractual protections with vendors. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security; you transmit information to us at your own risk.

10. Your rights and choices

You have the following rights, subject to limited exceptions in law:

Access. You may ask whether we hold personal information about you and request a copy.
Correction. You may ask us to correct information that is inaccurate or incomplete.
Withdrawal of consent. You may withdraw your consent to our continued use of your information, subject to legal and contractual restrictions.
Deletion. You may ask us to delete information that we no longer need to retain. We will honour the request unless we are required or permitted by law to keep it.
Unsubscribe. You may opt out of commercial electronic messages at any time using the unsubscribe link or by writing to us.
Complaint. You may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca if you believe we have not handled your information in accordance with PIPEDA. We ask that you first contact us so that we may try to resolve your concern directly.

To exercise a right, please write to us at hello@pistiscontracting.com. We may need to verify your identity before responding, and we will respond within the timeframes required by law (generally thirty (30) days under PIPEDA).

11. Children

The Site is intended for adults. We do not knowingly collect personal information from children under the age of sixteen (16). If you believe a child has provided personal information to us, please contact us and we will delete the information.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If a change is material, we will provide a more prominent notice (for example, an in-Site banner or an email to active clients). Your continued use of the Site after the effective date of the updated Policy constitutes acceptance of the changes.

13. How to contact us

Pistis Contracting
Greater Toronto Area, Ontario, Canada
Email: hello@pistiscontracting.com

This Policy is provided for general information about our privacy practices and does not constitute legal advice. If you have questions about how Canadian privacy law applies to your circumstances, please consult a qualified lawyer.