Privacy Policy

1. Introduction

Cavemen Landscapes ("we", "us", "our", or the "Company") respects your privacy and is committed to protecting the personal information you provide to us. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Consumer Privacy Protection Act (CPPA) where applicable, and Ontario's provincial privacy legislation.

By using our website at cavemenlandscapes.com (the "Site") or engaging our services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Fill out our consultation request or contact forms (name, email address, phone number, property address)
• Schedule an appointment via our Calendly integration
• Communicate with us by phone, email, text message, or in person
• Enter into a contract for landscaping services
• Subscribe to our newsletter or marketing communications
• Leave a review or testimonial

2.2 Information Collected Automatically

When you visit our Site, we may automatically collect:

• Device and Browser Information: IP address, browser type and version, operating system, device type, screen resolution
• Usage Data: Pages viewed, time spent on pages, click patterns, referring URL, access times and dates
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking Technologies: See our Cookie Policy for details

2.3 Third-Party Sources

We may receive information about you from:

• Google Analytics and Google Business Profile
• Social media platforms (Facebook, Instagram) when you interact with our pages
• Calendly scheduling platform
• Referral partners or past clients who recommend our services

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Service Delivery: To provide, manage, and improve our landscaping design, construction, and maintenance services
• Communication: To respond to inquiries, schedule consultations, provide estimates, send project updates, and follow up on completed work
• Marketing: To send promotional materials, newsletters, seasonal offers, and service reminders (only with your express consent as required by CASL)
• Website Improvement: To analyze Site usage, optimize user experience, and improve our digital content
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Safety and Security: To protect against fraud, unauthorized access, and other illegal activities
• Business Operations: For invoicing, accounting, project management, warranty tracking, and record keeping

4. Consent

Under PIPEDA, we are required to obtain your consent before collecting, using, or disclosing your personal information. Consent may be:

• Express Consent: When you actively provide information through forms, phone calls, or written agreements
• Implied Consent: When you voluntarily provide information in the course of an existing business relationship
• Opt-Out Consent: For certain non-sensitive communications, where you can withdraw consent at any time

You may withdraw your consent at any time by contacting us at hello@cavemenlandscapes.com or calling (416) 836-3019. Withdrawal of consent may limit our ability to provide certain services.

5. Disclosure of Information

We may share your personal information with:

• Service Providers: Trusted third-party vendors who assist with website hosting (Vercel), email communications, scheduling (Calendly), analytics (Google), and payment processing
• Sub-contractors and Suppliers: When necessary to fulfil your landscaping project (limited to information required for service delivery)
• Legal Authorities: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

We retain personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Client records and project files: 7 years after project completion (in accordance with CRA requirements and warranty obligations)
• Marketing contacts: Until consent is withdrawn or the contact becomes inactive for 24 months
• Website analytics data: 26 months (Google Analytics default)
• Consultation form submissions: 12 months if no contract is entered

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted through our Site
• Secure hosting infrastructure via Vercel and Neon (SOC 2 Type II compliant)
• Access controls limiting employee access to personal information on a need-to-know basis
• Regular security reviews of third-party service providers
• Secure password hashing (bcrypt) for any account-related data

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

8. Your Rights Under Canadian Law

Under PIPEDA and applicable provincial legislation, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Withdrawal of Consent: Withdraw consent for collection, use, or disclosure of your personal information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca

To exercise any of these rights, contact our Privacy Officer at the details provided below. We will respond to verified requests within 30 days.

9. Children's Privacy

Our Site and services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

10. International Data Transfers

Some of our service providers (such as Vercel, Google, and Calendly) may store or process data in the United States. By using our Site, you acknowledge that your information may be transferred to, stored, or processed in jurisdictions outside Canada. We ensure that any such transfers comply with PIPEDA requirements and that adequate safeguards are in place.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Material changes will be communicated via a notice on our Site. We encourage you to review this page periodically for the latest information.

12. Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or our privacy practices, please contact: