Tin Man Metal Roofing™ – Privacy Policy

Tin Man Metal Roofing™ (“Tin Man™”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website www.ontariometalroof.ca (the “Site”), contact us, request a quote, apply for financing, or use our services in Ontario, Canada.

By using our Site or services, you agree to this Policy. If you do not agree, please do not use the Site or services.

1) Who we are & how to contact us

Tin Man Metal Roofing™ (Ontario, Canada)
[Legal entity name]
Mailing address: Toronto, Ontario, Canada
Phone: 1-877-304-0637
Email (general & privacy): metalroofingexpertstoronto@gmail.com
Website: www.ontariometalroof.ca

If you are in Québec, you may also contact our designated person responsible for the protection of personal information at the same email.

2) What personal information we collect

Identity & contact: name, address, email, phone number, preferred language.

Property & project details: property address, roof measurements, photos/videos (including drone imagery with your permission), product preferences, notes from in-home consultations.

Quotes & contracts: estimates, invoices, warranty registrations, signatures.

Payment & financing: payment method (processed through third-party providers), limited billing data, financing application information submitted to financing partners (they may collect SIN, income, employment—handled under their policies).

Communications: messages, call recordings (if disclosed), appointment bookings, customer service history, survey responses, reviews/testimonials.

Website & device data: IP address, browser type, pages viewed, time on page, referring URLs, and cookie/pixel data for analytics and ads (see Cookies below).

Job applicants & subcontractors: résumés, qualifications, references, compliance documents, and background information necessary to assess suitability.

We collect personal information directly from you, from your interactions with us, from publicly available sources to verify addresses/permits, and from trusted third parties (e.g., financing partners, payment processors, analytics/advertising platforms, manufacturers for warranty registration).

3) Why we collect it (purposes)

Provide quotes, schedule appointments, and deliver roofing services.

Manage customer accounts, contracts, warranties, and service records.

Process payments and facilitate financing applications via partners at your request.

Communicate with you about your project, promotions (with consent), and service updates.

Improve our Site, products, and customer experience (analytics, quality assurance).

Personalize and measure our advertising (e.g., Google/Meta retargeting) where permitted.

Meet legal, regulatory, tax, insurance, and safety obligations; prevent fraud; enforce agreements.

4) Legal bases & consent (Canada)

We follow PIPEDA and applicable provincial laws (Ontario). We rely on your consent where required (e.g., marketing emails/texts, certain cookies, financing applications, photos of your property used in marketing). In some cases we may collect/use information without consent where allowed by law (e.g., to collect a debt, investigate fraud, comply with legal requests).

You can withdraw your consent at any time (see Section 11). For email/SMS marketing, use the unsubscribe link or reply STOP.

Note for Québec residents: If you engage us for projects in Québec or access our services from Québec, additional rights may apply under Law 25.

5) Cookies, analytics & ads

We use cookies and similar technologies to operate the Site and understand how it’s used.

Strictly necessary cookies (site functionality)

Analytics (e.g., Google Analytics 4) to understand traffic and improve the Site

Advertising/retargeting (e.g., Meta Pixel, Google Ads) to show relevant ads

Where required, we’ll present a cookie banner so you can manage preferences. Some third-party tools may process data outside Canada—see Section 8.
Your browser may offer “Do Not Track”; our Site currently does not respond to DNT signals.

6) When we share personal information

We do not sell personal information. We may disclose information to:

Service providers & subcontractors (installation crews, estimators, transport, IT/hosting, CRM, call center).

Payment processors & financing partners (e.g., banks, lenders) when you apply for financing or make payments.

Manufacturers to register product warranties.

Marketing & analytics providers operating under our instructions.

Professional advisors & insurers (legal, accounting, insurance).

Law enforcement or regulators when required by law or to protect our rights.

Business transactions: if we merge, sell assets, or restructure, information may be transferred under appropriate safeguards.

We require recipients to protect your information and use it only for authorized purposes.

7) Photos, videos & testimonials

With your permission, we may capture project photos/videos (including before/after and drone imagery) for quality control, safety documentation, or marketing. We will obtain consent before featuring identifiable images of your property in public marketing materials. You can withdraw consent later (see Section 11).

8) Cross-border transfers & data residency

Some providers may store or process information in provinces and countries outside Canada (e.g., the United States). While such data is subject to foreign laws, we use contractual and organizational safeguards to protect it.

9) Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information (e.g., role-based access, encryption in transit, secure credential practices). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10) Retention

Quotes & inquiries: up to 24 months from last contact

Contracts, invoices & warranty records: up to life of warranty (or longer if legally required)

Marketing preferences & consent logs: while active + up to 3 years

Website analytics data: per provider defaults or as configured to minimize retention

We securely destroy or anonymize data when no longer needed.