Privacy policy

Last updated: October 19, 2026

This policy is provided under the Personal Information Protection and Electronic Documents Act (PIPEDA) and the ten fair information principles in Schedule 1 of that Act, together with Canada's Anti-Spam Legislation (CASL) where commercial electronic messages are concerned, to everyone who visits goodsbranding.com or uses our services.

1. Who is accountable

The organization accountable for the personal information collected through this site is:

Accountability for compliance rests with our Privacy Officer, who can be reached at the privacy address above. Write to that address for access requests, corrections, questions or complaints.

2. What information we handle

2.1 Information you give us

• First and last name
• Email address
• Phone number
• Postal code and city, and the address of the property if you give it to us
• Property type (detached, townhouse, condo, rural, commercial)
• Technical information about the existing system, heated floor area and consumption
• The type of work you are asking about and your timeline
• The free-text content of any message sent through the forms on this site

2.2 Information collected automatically

• IP address, recorded in the server logs
• Date and time of the request and the page the form was sent from
• Technical identifiers needed to run the session (see the cookie policy)

Fonts, stylesheets, icons and scripts are hosted on our own domain. The site also loads the Taboola/Realize pixel (Taboola.com Ltd.), which receives information about the visit and about the submission of a quote request in order to measure advertising campaign conversions. For opt-out options see Taboola's own notice at taboola.com/privacy-policy.

3. Why we collect it, and your consent

Under PIPEDA we identify the purposes before or at the time of collection, and we collect only what those purposes require:

• Answering enquiries and preparing quotes: to produce the quote, book the site visit and get back to you. Submitting the form with the consent box ticked is your express consent for this purpose.
• Performing the contract: managing the order, carrying out the work, issuing inspection documentation, service and maintenance.
• Legal obligations: invoicing, keeping accounting records, and records required under the Technical Standards and Safety Act, the federal Halocarbon Regulations and any rebate program you ask us to file for.
• Protecting the site and our rights: site security, preventing abuse of the forms, and establishing or defending a legal claim. PIPEDA permits these uses without separate consent in the circumstances set out in sections 7(2) and 7(3).
• Commercial messages: only where you have given express consent, as CASL requires. Every message carries a working unsubscribe link, and you can withdraw consent at any time.

Providing the information marked as required in the forms is necessary for us to reply: without it we cannot prepare a quote or contact you. You may withdraw your consent at any time on reasonable notice, subject to legal and contractual restrictions; we will explain the consequences before acting on a withdrawal.

4. Who sees your information

We do not sell, rent or trade your personal information to third parties for marketing purposes. It may be seen by:

• authorized staff of our organization, who are trained on their confidentiality obligations;
• our hosting and email provider, acting as a service provider under contract with comparable protection;
• our accountant and bookkeeper, for administrative requirements;
• trades or subcontractors engaged for specific parts of a job, limited to what they need to do the agreed work;
• Enbridge Gas, Save on Energy or another program administrator, when you ask us to support a rebate application on your behalf;
• law enforcement, regulators or courts, in the circumstances the law allows or requires.

5. Where it is stored, and cross-border transfers

Personal information is stored on servers in Canada. Some service providers, including the advertising measurement pixel, may process information in the United States or elsewhere, which means it can be subject to lawful access requests by foreign authorities. We use contractual measures to require a comparable level of protection, and this policy will be updated if the arrangements change.

6. How long we keep it

• Quote requests that do not lead to a contract: 24 months from the last contact.
• General enquiries: 12 months.
• Contract records and the technical file for the system: 7 years from completion of the work, in line with limitation periods and record-keeping obligations.
• Tax and accounting records: 6 years after the end of the tax year to which they relate, as the Income Tax Act requires.
• Server logs: a maximum of 12 months.
• Consent records and proof of consent: for the life of the consent and 3 years after it is withdrawn, as CASL recommends.

Once those periods expire, the information is destroyed, erased or irreversibly anonymized.

7. Your rights

Writing to [email protected] at any time, you can:

• Access: be told whether we hold personal information about you, what it is being used for and to whom it has been disclosed, and receive a copy.
• Correction: have inaccurate information corrected or incomplete information completed, and have the correction sent to anyone it was disclosed to.
• Deletion: ask us to delete information we no longer need, subject to the retention obligations above.
• Withdraw consent: withdraw consent to a use or disclosure on reasonable notice, subject to legal and contractual restrictions.
• Unsubscribe: stop commercial electronic messages at any time, with effect within 10 business days as CASL requires.
• Challenge compliance: raise a concern about how we handled your information with our Privacy Officer.

We respond to access requests within 30 days of receipt, as PIPEDA requires, and we will tell you if we need the permitted extension. Access is generally free; if a fee would apply we tell you the amount in advance and give you the option to withdraw the request.

8. Complaints to the regulator

If you believe we have handled your information improperly, please contact us first so we can look into it or correct an error. You also have the right to complain to the federal regulator:

9. Cookies

The site uses strictly necessary cookies and local storage, plus one advertising measurement cookie/pixel (Taboola/Realize). The detailed description is in the cookie policy.

10. Safeguards

We maintain physical, organizational and technological safeguards appropriate to the sensitivity of the information, to protect it against loss, theft, unauthorized access, disclosure, copying, use or modification: encrypted TLS/HTTPS connections, access control, regular system updates, backups and staff training. If a breach creates a real risk of significant harm, we will report it to the Privacy Commissioner and notify the affected individuals, as PIPEDA's breach reporting rules require.

11. Minors

Our services are intended for adults only. We do not knowingly collect information from anyone under 18. If we discover that we have inadvertently received information about a minor, we delete it promptly.

12. Changes

This policy may be updated to reflect legal, organizational or technical changes. The current version is always published on this page with the date it was last updated. Material changes will be flagged prominently on the site.

13. Contact

Thermex Heating and Air Conditioning Inc.
11 Dallas Rd
North York, ON M2R 2J3
Email: [email protected]
Phone: +1 416-500-1047