How this website handles personal information.

Effective: July 30, 2026
Last updated: July 30, 2026

This policy is general information about NPCC Canada’s website privacy practices and is not legal advice.

Information we collect

When you submit an inquiry, NPCC Canada collects the information you choose to provide, such as your name, business contact details, company, project location, discipline, schedule information, message, and optional RFQ attachment. We also collect limited technical information, including IP address, browser information, and timestamps, for security and website operations.

Purposes and consent

We collect and use personal information with your knowledge and consent to review and respond to inquiries, evaluate potential project requirements, protect the website, maintain business records, and understand the effectiveness of our procurement communications. We do not sell personal information.

Use, disclosure, and service providers

Access is limited to personnel and service providers who need the information for the purposes described in this policy. Service providers may support website hosting, file storage, analytics, security, communications, or professional services and are expected to handle information only for authorized purposes. Information may also be disclosed when required or permitted by law.

Retention

The application attempts to delete attachments rejected during upload or associated with an unsuccessful submission; a deletion failure is logged for operational follow-up. A successful attachment remains associated with its inquiry while the inquiry is active. The repository provides an operator-run cleanup command for archived inquiries. The configured retention period, which defaults to 365 days, is measured from the inquiry’s latest update timestamp. Archiving normally updates that timestamp, and any later inquiry update restarts the period. Cleanup is not automatic unless the operator separately schedules the command. Failed deletions retain their file metadata for retry, and unsafe stored paths are skipped for review. Inquiry records are not automatically deleted by the application and are retained until an authorized administrator or documented operational process removes them. You may contact NPCC Canada to ask about retention or request deletion, subject to legal and operational requirements.

Safeguards

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. No method of electronic transmission or storage is completely secure, but we review and restrict access to reduce the risk of unauthorized access, use, alteration, or disclosure.

Access, correction, consent withdrawal, and complaints

You may ask whether NPCC Canada holds personal information about you and request access to or correction of that information, subject to applicable legal exceptions. You may withdraw consent for future uses where consent is the basis for processing, although this may affect the ability to respond or provide services. You may also raise a privacy complaint with NPCC Canada and, if it is not resolved, contact the applicable provincial or federal privacy regulator.

Processing outside Canada

Some service providers may process or store information outside Canada. In that case, the information may be subject to the laws of the jurisdiction where it is processed and may be accessible to courts, law-enforcement, or regulatory authorities in that jurisdiction.

Website analytics

NPCC Canada may record limited website-use information to protect the site and understand which public pages and corporate resources are used. Analytics are configured to avoid storing inquiry text, attachment contents, URL query strings, full referring URLs, or raw IP addresses in analytics records.

Privacy contact

Send privacy questions, rights requests, or complaints to admin@npccltd.ca.