Effective date: 2026-01-15
This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with the Scaffold Insite platform (the "Service"). We are committed to safeguarding privacy and complying with applicable laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), substantially similar provincial laws, and relevant U.S. laws such as the California Consumer Privacy Act (CCPA) as amended by CPRA, where applicable.
We provide a cloud-hosted application for scaffold lifecycle and asset management. Our Service is hosted on cloud based infrastructure located primarily in Canada. Contact details are provided in the "How to contact us" section below.
This Policy applies to personal information we collect about platform users and individuals whose data is processed within the Service (e.g., employees, contractors). Where we act as a service provider/processor on behalf of a customer, we process personal information according to our customer agreements and their instructions.
We process personal information with consent (including implied consent by using the Service) and as necessary for legitimate interests such as security, fraud prevention, and product improvement. Where required, we seek express consent. You may withdraw consent at any time, subject to legal and contractual restrictions.
Primary hosting is in Canada on AWS. Limited sub-processor services (e.g., email delivery, error monitoring) may process data outside Canada and the U.S. where necessary and subject to appropriate safeguards and agreements.
We employ administrative, technical, and physical safeguards aligned with industry best practices, including encryption in transit and at rest, role-based access controls, audit logging, least privilege, secure software development practices, and regular vulnerability management.
We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customers may define retention periods for certain data sets; we provide tools to export or delete data where feasible.
Subject to applicable law, you may have rights to access, correct, update, port, or delete personal information, and to object to or restrict certain processing. Requests can be submitted via the contact methods below. We will verify your identity before fulfilling requests and may require assistance from your organization’s administrator.
The Service is not directed to children under 13 (U.S.) or under the age of consent in your jurisdiction. We do not knowingly collect personal information from children without appropriate consent.
We use cookies and similar technologies to keep you signed in, remember preferences, and analyze usage. You can control cookies via browser settings. Essential cookies are required for the Service to function.
We rely on select sub-processors to deliver the Service (e.g., AWS, email/SMS providers). All sub-processors are subject to written agreements imposing data protection obligations.
We may update this Policy periodically. Material changes will be communicated through the Service or by other appropriate means. Your continued use of the Service after changes take effect constitutes acceptance.
For questions or requests regarding this Policy or your personal information, contact: privacy@scaffoldinsite.com. You may also have the right to contact your provincial/territorial privacy commissioner or the Office of the Privacy Commissioner of Canada.