Privacy policy

Who to contact

RM Windows & Doors uses the contact and project information you provide to handle your enquiry. For questions about this policy or your information, email rm.wd@yahoo.com with “Privacy request” in the subject, or call (647) 806-7013.

Information collected

The project form asks for your name, phone number, project city, service of interest and a description of the work. An email address is optional. The site also records your contact consent, submission time, enquiry reference and enquiry status. New submissions record the version of the privacy notice and the consent wording shown on the form.

Please include only information needed to discuss the project. Do not send payment card details, identity documents, medical information or another person’s private information through the form. A full street address is not required to begin an enquiry.

Hosting services may process technical information such as IP addresses, request times and browser information to deliver and protect the site. The form uses a temporary, hashed network identifier to limit repeated submissions; the raw IP address is not saved in the enquiry record.

How information is used

• To respond to your questions and discuss repair, replacement, installation or product options.
• To follow up on the project details and arrange next steps if you choose to proceed.
• To maintain an enquiry record and resolve related questions.
• To prevent spam, protect the service and address technical problems.

Your consent and choices

The form asks for permission to use your details to respond to your enquiry. This is not a newsletter subscription or consent to unrelated promotional messages. If you do not want to submit the form, you can contact RM directly by phone or email.

You may withdraw consent to further enquiry follow-up by contacting RM. This may limit the ability to continue with the enquiry. Some records may still need to be retained to meet legal or contractual requirements.

Newsletter subscriptions

The newsletter form and optional homepage popup ask for your email address and separate permission to receive tips, news and occasional offers from RM. We store the email address, signup source, consent wording and version, dates, subscription status and workflow delivery status. A quote request alone does not subscribe you.

If enabled by RM, subscription and unsubscribe records are sent to its configured automation or email service to manage the mailing list. Each newsletter must include an unsubscribe link. You can use that link or contact RM to withdraw consent. Unsubscribing from the newsletter does not cancel an existing project enquiry.

Consent and unsubscribe records may be retained to document your choice and prevent further marketing. Contact RM to ask about access, correction or deletion. An unsubscribed address is not automatically reactivated by another website signup; contact RM if you want to rejoin.

Service providers and disclosure

Website enquiry records are stored on the server used to host this website. Hosting and infrastructure providers process information needed to run and secure the service. An email you send directly is also processed by the email providers involved.

The website does not sell submitted information or operate advertising pixels. When RM enables an enquiry workflow, submitted contact details, project details, reference and consent record may be sent to its configured automation or customer-management service to notify the team, organise requests and follow up on that enquiry. This does not grant consent for unrelated marketing. Information may need to be disclosed where required by law or to address misuse of the service.

Service providers may process or store information outside Canada, where it may be subject to the laws of the country in which it is handled.

Retention and security

Enquiry records remain on file unless deleted. You can ask RM to review whether your enquiry information is still needed or request deletion. Records relating to agreed work, a dispute or a legal obligation may need to be retained even when an enquiry has ended.

Public visitors cannot browse submitted enquiries. The website uses encrypted HTTPS connections and limits access to stored records through authenticated admin access and the hosting platform. No online system can guarantee absolute security. Please use the contact details above if you believe your information has been mishandled.

Temporary form rate-limit records expire and are removed during later form submissions. Hosting providers manage their own operational logs and backup retention.

Access, correction and deletion requests

Contact RM to ask about the personal information held for your enquiry, request a correction, withdraw consent or request deletion, subject to applicable requirements. Include your enquiry reference if available and enough information to identify the enquiry. Identity may need to be confirmed before a record is disclosed or changed; do not send identity documents unless an appropriate process has been agreed.

If you have an unresolved privacy concern, you can seek information or make a complaint through the Office of the Privacy Commissioner of Canada.

Cookies and external links

No optional advertising or third-party analytics tools are installed on this website. The hosting platform may use technology needed for access and security. See the cookie and website storage notice. Instagram, Facebook and other external services have their own policies when you follow their links.

Form security checks

When RM enables Cloudflare Turnstile, the quote and newsletter forms use a security check. Cloudflare receives browser and connection information, and our server verifies the returned token with Cloudflare before accepting a submission. Invalid, expired or unverifiable checks are rejected. You can contact RM by phone or email if you cannot complete the check. See Cloudflare’s privacy policy.

Google Maps

The service-area map is embedded from Google and loads as you approach it on the page. Loading or interacting with the map connects your browser to Google, which may receive technical information such as your IP address and browser details and use cookies or similar technology. Google’s privacy policy applies to that service. The map shows the service area or the confirmed address published by RM. Check the visit instructions before travelling.

Administrator access

Staff sign-in uses a username and a salted password hash. The original password is not stored. An essential, HTTP-only session cookie keeps an administrator signed in for up to eight hours. Temporary hashed network identifiers limit sign-in attempts. The verified site owner can reset the admin login, which signs out existing sessions.

Changes to this policy

This policy may be updated when the site’s features or information practices change. The date above identifies the current version. A material new use of your information may require additional notice or consent as applicable.