Privacy

• Asking for a quote sends us your contact details, the property you want work on and your answers. We use them to prepare your estimate and to do the work.
• Reading the site measures nothing unless you agree to it. Analytics stays switched off until you press Accept, and if you press Decline nothing loads at all.
• We never sell your information and we never release it for advertising.
• You can ask us what we hold about you, ask us to correct it, or ask us to delete it, and we will.

The quote form collects your name, phone number, email address, the address or town of the property, how you would rather be contacted, and your answers to the questions about the work. If you attach photographs or documents, we collect those too.

New enquiries are sent to our team by email and text message through service providers, and may be read by team members outside Canada.

While you are filling the form in, your answers are held in your own browser so you can close the tab and come back to them. That copy never leaves your device and is cleared when you submit.

Every submission is checked for automated abuse by Cloudflare Turnstile before it reaches us. That check looks at how the browser is behaving. It does not read what you typed.

The service area checker, where you type a town or postal code to see whether we work there, is answered entirely inside your browser from a list that came with the page. Nothing you type into it is sent to us, stored, or counted.

We would like to use Google Analytics 4 to understand how many people visit, which pages they read and how they found us. It is the only measurement on this site and there is nothing else running alongside it.

Until you press Accept, none of it exists on the page. No Google script is loaded, no request is made to Google, and no analytics cookie is set. This is not a tag sitting in a switched-off state. It is not there. If you press Decline it stays that way, and the site works exactly as it does now.

If you do accept, Google is sent:

• which pages you looked at, and when
• roughly where in the world you are, worked out from your IP address and reduced to a city. Google does not store the full address
• your browser, device type and screen size
• how you arrived, such as a search engine, another site, or a direct visit
• two things you might do: submitting a quote form, and tapping a phone number. For a submitted form we send which form it was, never a single one of your answers

Accepting also lets Google store a cookie in your browser, which gives that browser a random identifier so repeat visits can be counted as one person rather than several. Your name, phone number, email address and property address are never sent to Google. Nothing you type into a form is.

We use Google Consent Mode, which is the mechanism that tells Google what it is allowed to do. Everything is set to denied before the tag can run, and accepting changes exactly one of those settings, the one covering analytics storage. The three settings covering advertising stay denied and are never changed, because there is no advertising measurement on this site. We do not run Google Ads conversion tracking and we are not building an advertising profile of you.

The fonts and images this site uses are served from our own domain, so simply reading a page does not tell Google, or anyone else, that you were here.

The bar at the bottom of the screen asks once. Accept and Decline are the same size, the same colour and equally easy to press, there is no box ticked in advance, and ignoring it counts as no.

Your answer is remembered in your own browser. It is not a cookie, it is not sent to us, and we have no way of knowing what any individual chose. Because it lives in the browser, you will be asked again on a different device or after clearing your browsing data.

We use other companies to run parts of this. Each one gets only what its job needs, and none of them is allowed to use it for anything else.

• Vercel hosts the site and serves every page. Its servers keep the ordinary request records any web host keeps.
• Neon runs the database your enquiry is stored in.
• Cloudflare stores the photographs and documents you attach, and runs the spam check on the forms.
• Resend sends the confirmation email, which means it handles your email address and the reference number.
• Twilio sends the confirmation text message, which means it handles your phone number.
• Google receives the analytics described above, and only if you accepted it.
• The trades and suppliers working on your project, who get what they need to quote and to do the work, and nothing more.

Several of these hold data on servers outside Canada, mostly in the United States. While your information is there it is subject to that country’s laws, including access by its courts and authorities. Sending the form means agreeing to it being handled that way. If you would rather it were not, call us instead and we will take the details over the phone.

We do not sell your information, we do not trade it, and we do not release it to anyone for advertising.

• A quote request is kept while we prepare your estimate and for as long as you might reasonably come back to us about it. If the work does not go ahead and you would rather we did not keep it, ask and we will delete it.
• A project becomes a business record once you hire us. Canadian tax rules require those to be kept for six years from the end of the tax year they relate to, so a project file stays for that long.
• Files you upload are encrypted where they are stored and are deleted with the record they belong to.
• Analytics is held by Google for no longer than fourteen months.
• Your analytics choice stays in your browser until you change it or clear your browsing data.

When a record is deleted it is gone, along with anything you attached to it. All we keep is a dated line saying that a deletion happened and which member of staff did it. That line carries no name, no contact details and none of the contents.

The quote form has a separate box, never ticked in advance, for occasional renovation tips and project ideas. Asking us for a quote is not the same as asking to hear from us afterwards, and we treat them as two different questions, which is what Canada’s anti-spam law requires.

Every marketing message carries an unsubscribe link and our contact details. You can withdraw that consent at any time, by the link or by telling us, and it does not affect anything to do with your project.

If you send us a review we collect your name, your rating, what you wrote, the town and the kind of work, any photographs you attach, and contact details so we can confirm the review is genuinely yours. Contact details are never published.

Nothing appears on the site until a person has read and approved it. That is also true of comments on guides, where we collect the name you give, your email address and what you wrote. We never write a review ourselves and we never publish one that a customer did not send us.

You have the right to ask what we hold about you, to have a mistake corrected, and to have it deleted. Call 647-394-5886 or email info@behfarbuilding.ca, tell us what you are asking for, and we will answer within thirty days, which is the limit Canadian privacy law sets.

If your enquiry has a reference number, sending it makes the request much quicker to answer. We may ask a question or two to confirm it is really you before we hand anything over or delete anything.

If you are not happy with how we handled it, you can complain to the Office of the Privacy Commissioner of Canada.

Files you upload are encrypted where they are stored. The admin area that holds enquiries is limited to people who work here and needs a login. Our systems are built so that the contents of a form are never written into a log file, which is the most common way this sort of information leaks without anyone meaning it to.

Behfar Building is a construction company based in Newmarket, Ontario, serving York Region and the Greater Toronto Area. We are covered by Canada’s federal privacy law for commercial activity, PIPEDA. Reach us on 647-394-5886, by email, or through the contact page.

This policy was written by the people who built this website, from the code that runs it, rather than adapted from a template. That is why it names the companies involved and says what each one receives.

It has not yet been reviewed by a lawyer. We believe it is accurate and complete, and we would rather tell you that than not. If anything here looks wrong, or you think something is missing, tell us and we will correct it. If we change how any of this works we will change this page, and if the change affects what is collected we will ask for your analytics choice again rather than assume the old answer still applies.