Your information, handled with care.

When you request a quote, contact us or prepare an order, we may collect your name, email address, telephone number, company, project address, product selections, measurements, project notes and any files you choose to provide.

Optional click heatmaps group public-page click positions into coarse cells and daily totals by device layout for up to 90 days. These totals do not contain IP addresses or browser identifiers; screenshots, session recordings, forms and typed content are not collected. With your permission, our first-party analytics records the page visited, referring page, campaign parameters, approximate browser and device information, screen dimensions, and a random session identifier. If you accept optional analytics, we also store your full IP address with your visit so authorised administrators can review traffic and repeat network activity in our private dashboard. For visits recorded after accepting the updated notice, visitor records including full IP addresses are retained for up to 365 days, then deleted. Earlier full-IP records retain their original limit of at most 30 days. Declining analytics does not prevent catalogue browsing or requesting a quote. Hosting providers may separately process network addresses to deliver and secure the service.

If you accept the updated optional analytics choice and submit a form, our private Leads & Inquiries dashboard can associate your enquiry with pages visited, product links clicked and visible-page time from the same browser, including return visits. A random browser identifier in the signed preference cookie lasts up to 180 days; consented activity and linking context are retained for up to 365 days. Time a page is visible is an estimate of activity, not proof of attention.

A keyed hash of the IP address may also show possible activity matches within 24 hours of submission. These are marked uncertain because shared networks and VPNs can belong to multiple people. Neither an IP nor a browser identifier verifies personal identity. Earlier activity collected under an old analytics choice is not linked to enquiries. Declining analytics does not prevent submissions, and accepting analytics does not authorise marketing emails.

Our outreach emails may contain Palisaro links with a random reference associated with the business lead receiving the email. When one is requested, we retain compact daily totals of link requests, a likely-scanner count, the last landing-page path and request time for up to 90 days. These request counters do not store IP addresses, browser identifiers or full user agents, and do not establish who opened the link. Automated security scanners, forwarded emails and shared mailboxes can generate requests.

Only after you accept this updated optional analytics choice do we retain the reference in session storage and associate subsequent page visits, product-link clicks and visible-page duration in that tab with the outreach lead. This campaign association lasts up to 90 days and is shown to authorised administrators to understand product interest and follow up. It does not verify personal identity. The token contains no email address or other contact details, and is not passed to third-party analytics. Declining analytics prevents this browsing association and clears the optional session reference. You can change your choice through Cookie preferences.

• Respond to enquiries and prepare project quotations.
• Review product, delivery and installation requirements.
• Maintain business records and meet legal obligations.
• Protect the website, prevent misuse and diagnose technical problems.
• Understand website use and relevant enquiry product interests when analytics permission has been granted.

We do not sell personal information or use it for third-party behavioural advertising.

We ask for information needed to answer or fulfil your request. Optional analytics remains disabled until you choose “Accept analytics.” You can change that choice at any time through “Cookie preferences” in the footer.

Turning optional analytics off stops future collection and optional browser linking. It does not automatically erase information already collected; contact us to request access, correction or deletion. Withdrawing optional analytics does not prevent us from responding to your enquiry. You may withdraw other consent where legally permitted, although this may prevent us from completing a request that depends on that information.

We may use service providers for website hosting, secure data storage, communications, spam prevention, maps, analytics and project administration. They may process information only to provide services to Palisaro and must protect it appropriately.

Some providers may process information outside Ontario or Canada, where it may be subject to the laws of that jurisdiction. Google Maps or Places is contacted only when that feature is configured and used.

We keep personal information only as long as reasonably required for the purpose collected, warranty and business records, dispute handling, or legal obligations. Retention varies with the type and status of a project.

We use administrative, technical and physical safeguards appropriate to the information. No internet transmission or storage system can be guaranteed completely secure.

You may ask to access or correct personal information we hold about you, or ask how it has been used or disclosed, subject to applicable exceptions. We may need to verify your identity before responding.

Email contact@palisaro.com with “Privacy request” in the subject line. This address is also the contact for privacy questions and complaints. If we cannot resolve a concern, you may contact the Office of the Privacy Commissioner of Canada.

We may update this notice as our services or legal obligations change. The effective date above identifies the current version. Material changes will be presented prominently where appropriate.