Privacy Policy
Last updated November 03, 2025
This Privacy Notice for Canadian Bavarian Millwork + Lumber Ltd (“we”, “us”, or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:
- Visit our website at https://canbav.ca or any website of ours that links to this Privacy Notice;
- Engage with us in other related ways, including any sales, marketing, or events.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@canbav.ca.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice. Use the table of contents below to jump to sections of interest.
- What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more in the What information do we collect? section.
- Do we process any sensitive personal information? Some information may be considered ‘special’ or ‘sensitive’ in certain jurisdictions (e.g., racial or ethnic origins, sexual orientation, religious beliefs). We do not process sensitive personal information.
- Do we collect any information from third parties? We do not collect any information from third parties.
- How do we process your information? We process your information to provide, improve and administer our Services, communicate with you, for security/fraud prevention, and to comply with law. See How we process your information.
- When and with whom do we share your personal information? We may share information in specific situations and with specific third parties — see When and with whom do we share.
- What are your rights? Depending on your location, applicable privacy law may give you certain rights. See What are your privacy rights?.
- How do you exercise your rights? The easiest way is via a data subject access request or by contacting us directly. See the contact section below.
TABLE OF CONTENTS
- WHAT INFORMATION DO WE COLLECT?
- HOW DO WE PROCESS YOUR INFORMATION?
- WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
- WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
- DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
- HOW LONG DO WE KEEP YOUR INFORMATION?
- DO WE COLLECT INFORMATION FROM MINORS?
- WHAT ARE YOUR PRIVACY RIGHTS?
- CONTROLS FOR DO-NOT-TRACK FEATURES
- DO WE MAKE UPDATES TO THIS NOTICE?
- HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
- HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions and may include:
- names
- phone numbers
- email addresses
- mailing addresses
- pictures
Sensitive Information. We do not process sensitive information.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for internal analytics and reporting.
Like many businesses, we also collect information through cookies and similar technologies. You can find out more in our Cookie Notice: canbav.ca/cookies.
The information we collect includes:
- Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services (e.g., IP address, device information, browser type, date/time stamps, pages and files viewed, searches, actions you take, device event information, error reports, hardware settings).
- Device Data. Information about your computer, phone, tablet, or other device used to access the Services (e.g., IP address, device and application identification numbers, location, browser type, hardware model, ISP/mobile carrier, operating system, system configuration).
- Location Data. Information about your device’s location, which can be either precise or imprecise. You can opt out by refusing access or disabling Location settings, though some Services functionality may be affected.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We may process your personal information for a variety of reasons, depending on how you interact with our Services, including:
- To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
- To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues.
- To fulfil and manage your orders. We may process your information to fulfil and manage orders, payments, returns, and exchanges made through the Services.
- To enable user-to-user communications. If you use offerings that allow communication with another user, we may process your information.
- To send marketing and promotional communications. We may process information for marketing purposes in accordance with your marketing preferences. You may opt out of marketing emails at any time.
- To deliver targeted advertising. We may process your information to develop and display personalised content and advertising tailored to your interests and location. See our Cookie Notice: canbav.ca/cookies.
- To post testimonials. We post testimonials on our Services that may contain personal information.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
In Short: We only process personal information when we have a valid legal reason (e.g., consent, contract, compliance with law, legitimate interest).
We may process your information if you have given us permission (express consent) or when permission can be inferred (implied consent). You may withdraw your consent at any time. In certain exceptional cases, applicable law may permit us to process information without consent (e.g., investigations, fraud detection, business transactions, legal obligations, identifying injured persons, etc.).
We may disclose de-identified information for approved research or statistics projects, subject to oversight and confidentiality commitments.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In Short: We may share information in specific situations and/or with the following third parties.
We may need to share your personal information in the following situations:
- Business Transfers. We may share or transfer information in connection with a merger, sale of company assets, financing, or acquisition of a portion of our business.
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We may use cookies and other tracking technologies to collect and store your information.
We use cookies and similar technologies (web beacons, pixels) to gather information when you interact with our Services. Some tracking technologies help us maintain security, prevent crashes, fix bugs, save preferences, and assist basic site functions. Third parties and service providers may also use tracking technologies for analytics and advertising. For details and how to refuse certain cookies, see our Cookie Notice: canbav.ca/cookies.
6. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to fulfil the purposes in this Privacy Notice, unless required or permitted by law to retain it longer.
When we no longer have a legitimate business need to process your personal information, we will delete or anonymize it, or if deletion isn’t possible (e.g., backup archives), we will securely store and isolate it until deletion is possible.
7. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age (or the equivalent age in your jurisdiction).
By using the Services, you represent that you are at least 18 or that you are the parent/guardian of such a minor and consent to the minor’s use. If we learn we’ve collected information from users under 18, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any such collection, contact us at info@canbav.ca.
8. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: In some regions (like Canada), you have rights to access and control your personal information, including requesting access, rectification, erasure, restriction, portability, and the right to object to processing.
If automated decisions produce legal or similarly significant effects, we will explain the main factors and provide a way to request human review. To exercise rights, contact us using the contact details below. We will consider and act upon requests in accordance with applicable laws.
Withdrawing your consent: If processing is based on consent, you may withdraw it at any time; this won’t affect processing done lawfully prior to withdrawal.
Opting out of marketing: Unsubscribe via the link in emails, reply “STOP” or “UNSUBSCRIBE” to SMS messages, or contact us. You may still receive service-related messages necessary for account administration.
For cookie options, see our Cookie Notice: canbav.ca/cookies.
If you have questions about your rights, email privacy@canbav.ca.
9. CONTROLS FOR DO-NOT-TRACK FEATURES
Most browsers and some mobile OS/apps include a Do-Not-Track (DNT) feature. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized.
10. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated ‘Revised’ date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may email us at info@canbav.ca or contact us by post at:
Canadian Bavarian Millwork + Lumber Ltd
9370 Smiley Road
Chemainus, British Columbia V0R1K4
Canada
12. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please fill out and submit a data subject access request.
