Privacy Policy

Northern Contractor Network Inc., the holding company for Contruva (“Contruva”) is committed to protecting your privacy. This Privacy Policy (“Policy”) applies to those who visit the Websites owned and operated by Contruva, as well as users of our Service(s). This Privacy Policy describes how Contruva collects, uses, shares and secures the personal information you provide. It also describes your choices regarding use, access and correction of your personal information. The use of information collected through our Service(s) shall be limited to the purpose of providing the service for which the Customer has engaged Contruva.If you have questions or complaints regarding our privacy policy or practices,

please contact us at team@contruva.com

How Do We Collect, Use and Share Your Personal Information and Other Information?

We may collect the following personal information from you within the Websites:Contact Information, such as name, email address and phone number;Information about your business, such as company name, company size, business typeOther information such as End-user device models,IP address,Usage patterns are also captured by the Service(s).

We may use the personal information collected from within the Websites or when you use the Service(s) to:

Provide you with the Service(s)

Respond to customer service requests

Administer your accountSend you promotional and marketing communications

Respond to your questions and concernsSend you communication from the Service(s).

Assess the needs of your business to determine or suggest suitable productsSend you requested product or service information

Facilitate your transactions with other users when you use our Service(s)

Understand the how, what, where and why the system is being used to make improvements or correct issues.

When you provide us with personal information we will only use this information for the specific reason for which it is provided.

Except as outlined in this Policy, your information will never be sold to or shared with other companies or organizations for commercial purposes or otherwise. We may transfer personal information to our Group Companies and sub-contractors that help us provide our Service(s). Transfers to subsequent third parties are covered by the service agreements with our sub-contractors. Such sub-contractors may include third-party payment processors who process your credit card and other payment information for Contruva but are otherwise not permitted to store, retain or use such information.

Retention of Personal Information

We retain Personal Data we process for as long as an Account is active or as needed to provide the Service(s). If you wish to terminate your Account or request that we no longer use Your Data, please contact us at team@contruva.com. We will retain Your Data as necessary to comply with our legal obligations, maintain accurate financial and other records, resolve disputes, and enforce our agreements. We delete all Your Data on the expiry of 30 days after the termination of your Account, except as otherwise prohibited by applicable law.

Our Role: When We Control Data and When We Process It

Our responsibilities depend on whose personal information is involved. There are two distinct situations, and we treat them differently.

Information we control. When you visit our Websites, submit a form, contact us, subscribe to our communications, or otherwise deal with us as a prospective or current customer, we decide why and how that information is used. For this information we are the organization accountable under the Personal Information Protection and Electronic Documents Act (PIPEDA), and the controller for the purposes of the General Data Protection Regulation (GDPR) where it applies. This covers the contact details, business details, enquiry contents, marketing preferences and website usage data described in this Policy.

Information we process for our customers. When a Contruva customer uses the Service(s) to manage their own clients, leads, quotes and jobs, that customer decides why and how the information about those individuals is used. For that information we act as a service provider — a processor under the GDPR — and we handle it in accordance with our customer’s instructions and our agreement with them.

We store and process data, including personal information, in Canada and the United States, and in other countries through the service providers we use to operate and manage the Service(s). Where we transfer personal information outside your country of residence, we take the steps reasonably necessary to ensure it remains protected in accordance with this Policy and applicable law. Transfers out of the European Economic Area, where applicable, rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

With respect to the information we process on our customers’ behalf, we do not own, control or direct how it is used. We access it only as reasonably necessary to provide the Service(s) (including to respond to support requests), as otherwise authorized by our customers, or as required by law.

It shall be our customers’ responsibility to inform the End Users about and obtain necessary consent for any personal information that is collected through their use of the Service(s). As the processors of personal information on behalf of our customers, we follow their instructions with respect to the information they control to the extent consistent with the functionality of our Service(s). In doing so, we implement technical, physical and administrative measures against unauthorized processing of such information and against loss, destruction of, or damage to, personal information as more fully described under the section below entitled “Protection of Information”.

Analytics

Contruva uses third party software for analytics. Metrics information collected from your usage of the Service(s) is transmitted to the analytics provider. This information is used to evaluate how users use Contruva and to compile statistical reports on activity for us. We do not use our analytics tools to track or collect personally identifiable information (PII). We use analytics information in order to maintain, enhance, or add to the functionality of the Service(s) and to improve the experience for you. Anonymized and aggregated information and analysis may be made public where desired by Contruva. Our third party analytics providers will not share your PII or associate it with any other data held by them.

Use of Cookies

When you use our Websites or Service(s), we may store some information on your computer or mobile device, in the form of a “cookie” or similar technology such as Local Storage. We use these technologies to help you navigate the Websites and Service(s), and to remember your choices and your current session or application state.

On our public Websites, only strictly necessary storage is used by default. We use it to remember your cookie choices. Optional categories — external content embeds and marketing or optimization tools — load only after you choose to allow them. You can change or withdraw your choice at any time using the “Cookie settings” control that appears on every page. If you turn off cookies in your browser entirely, some features may not work.

Contruva customers have the responsibility to inform the individuals with whom they interact through the Service(s) about the cookies used by Contruva and by themselves, and should obtain those individuals’ consent where necessary.

Third Parties We Share Information With

We use the following third party service providers on our public Websites. Those marked optional load only after you consent through our cookie controls.

• Vercel Inc. — website and serverless function hosting. Processes request metadata including IP address. Necessary. United States and global edge locations.
• Google LLC (Google Maps) — map embeds on contact and location pages. Optional; blocked until you allow external content.
• Meta Platforms, Inc. (Meta Pixel) — advertising measurement and audience building. Optional; loads only with marketing consent.
• LeadConnector / HighLevel, Inc. — website optimization and lead capture tooling. Optional; loads only with marketing consent.
• Web3Forms — delivery of contact and onboarding form submissions to our team. When you submit either form, the details you typed, including your marketing preference, are sent to Web3Forms, which forwards them to us by email. Necessary to send us your enquiry.

We also use third party payment processors to handle payment information for the Service(s). They are not permitted to store, retain or use that information for any other purpose. This list may change as our tooling changes; we will update this Policy when it does.

Clear Gifs and Log Files

We and our third party partners use technologies such as web beacons in analyzing trends, administering the website, tracking users’ movements around the site, and gathering demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual and aggregated basis.

As is true of most websites and application services, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We link this automatically collected data to other information we collect about you.

Links to Third Party Sites

Our Websites contain links to other websites that are not owned or controlled by Contruva. Please be aware that we are not responsible for the privacy practices of such other websites or third parties. We encourage you to be aware when you leave our Websites and to read the privacy policies of each and every website that collects personal information.​

With Respect to using Google outbound email

Contruva utilizes your configured Gmail account exclusively for the purpose of sending outbound emails to your customers, utilizing your company domain. Should you not wish to utilize this feature, you may continue to employ the default outbound email address, team@contruva.com. For clarity we exclusively use the configured Gmail account for the sending of emails. We do not ingest, store, process or otherwise utilize any other Google account data.

Public Forums

Our Websites offer publicly accessible blogs or community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your personal information from our blog or community forum, contact us at team@contruva.com. In some cases, we may not be able to remove your personal information, in which case we will let you know that we are unable to do so and why.

Communications from the Websites

We send commercial electronic messages — newsletters, product news and offers — only where you have given us consent to do so, or where Canada’s Anti-Spam Legislation (CASL) otherwise permits it, such as during an existing business relationship. Where we rely on your express consent, you give it by ticking the optional marketing box on one of our forms; the box is never pre-ticked, and submitting a form without ticking it does not sign you up.

Every commercial message we send identifies us, gives our mailing address, and contains a working unsubscribe link that we action within 10 business days. You can also withdraw consent at any time by emailing team@contruva.com. We keep records of when and how consent was obtained.

Replying to your enquiry is not a commercial electronic message, and we will respond to you whether or not you opt in to marketing.

We will send you announcements related to the Service(s) on occasions when it is necessary to do so. For instance, if our Service(s) is temporarily suspended for maintenance, we might send you an email. Generally, you may not opt-out of communications which are not promotional in nature. If you do not wish to receive them, you may deactivate your Account.

Protection of Information

The Websites and Service(s) have industry standard security measures in place to protect against the loss, misuse, and alteration of the information under our control. When you provide us with sensitive information (such as credit card information or login credentials), we encrypt that information in transit using Transport Layer Security (TLS).

While there is no such thing as “perfect security” on the Internet, we take all reasonable steps to ensure the safety of your personal information. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Websites or via the Service(s) and any transmission is at your own risk. Once we receive your personal information, we will use strict procedures and security features to try to prevent unauthorized access.

Additionally, you retain all rights of ownership to your personal data we collect. Except as set forth herein under sections elaborating on use of your personal information above and legal disclosure below we will not sell or share your personal data with any third parties or use your personal data to compete with you. Your privacy and the privacy of your users are of utmost importance to us. If you have questions about our security you can contact us at team@contruva.com.

Corrections and Updates

Upon request Contruva will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. To request this information please contact us at team@contruva.com.

We allow users of the Service(s) or Website to access, update or modify their information themselves or by contacting us at team@contruva.com.

Your Privacy Rights and How to Exercise Them

Subject to applicable law, you may ask us to:

• confirm whether we hold personal information about you, and obtain a copy of it;
• correct personal information that is inaccurate or incomplete;
• delete personal information we no longer need to keep;
• withdraw a consent you previously gave, including consent to marketing communications or to optional cookies;
• receive your information in a portable format, or object to or restrict certain processing, where the GDPR or Quebec’s Law 25 applies to you.

To make a request, email team@contruva.com with “Privacy request” in the subject line. We will acknowledge your request and respond within 30 days, as PIPEDA requires. If we need more time, or if we cannot act on your request, we will tell you why and what your options are. We may need to verify your identity before acting.

Withdrawing consent does not affect processing we carried out before you withdrew it, and some information must be retained to meet our legal and financial record-keeping obligations.

If a request concerns information we hold on behalf of a Contruva customer — for example, if you are a client of a contractor who uses Contruva — please contact that business directly, as they decide how that information is used. If you contact us instead, we will refer your request to them.

Accountability and Our Privacy Officer

We have designated a Privacy Officer who is accountable for our compliance with this Policy and with applicable privacy law.

• Ethan Ruskin, Privacy Officer, Northern Contractor Network Inc.
• Email: team@contruva.com
• Telephone: +1 (647) 922-5436

If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, to the Commission d’accès à l’information du Québec if you are in Quebec, or to your local supervisory authority if the GDPR applies to you.

If There Is a Breach

We maintain procedures to detect, investigate and respond to security incidents involving personal information. If a breach of security safeguards creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you as soon as feasible, as required by PIPEDA. Where the GDPR applies, we will notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach. We maintain records of breaches as the law requires. Where we act as a service provider for a customer, we will notify that customer without undue delay so they can meet their own obligations.

Children's Personal Information

Contruva does not knowingly collect any personal information from minors under the age of 18. If you are under the age of 18, please do not submit any personal information through our Websites or Service(s).

Amendments

Amendments to this Policy will be posted to this URL and will be effective when posted. You should frequently visit this Policy to check for amendments. Your continued use of this Websites or the Service(s) following the posting of any amendment, modification, or change to this Policy shall constitute your acceptance of the amendments to this Policy. You can choose to discontinue use of the Websites or Service(s), if you do not accept the terms of this Policy, or any modified version of this Policy.

Legal Disclosure

We reserve the right to disclose your personal data as required by applicable law and when we believe that disclosure is necessary to protect our rights and/or to comply with a judicial proceeding, court order, or other legal process served on us. Your personal data will also be shared between our Group Companies for the activities permitted under this Policy.

Restructuring

In the event Contruva goes through a business transition, such as a merger or acquisition by another company, or sale of all or a portion of its assets, your user account and personal data will likely be among the assets transferred. You will be notified via team@contruva.com and via a prominent notice on our Websites of any such change in ownership or control. We may also disclose your personal information to any other third party with your prior consent.

Contacting Contruva

If you have any questions about this privacy policy or your dealings with the Contruva, you can contact us at team@contruva.com