Lush Contracting Inc. ("Lush Contracting," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect through our website (the "Site"), how we use it, who we share it with, and the choices you have. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

1. What we collect

Information you give us. The only personal information this Site collects is information you choose to submit through our Request a Quote form. Depending on what you fill in, this may include: your name, company or organization, and role/title; email address and phone number; your preferred contact method (phone, email, or text); project details: address or municipality, scope of work, approximate size, estimated project value, site access conditions, requirements, timelines, and procurement details; notes you add, and any files you upload (drawings, specifications, or site photos).

Information collected automatically on form submission. When you submit the quote form, our server records: a one-way cryptographic hash of your IP address (we do not store your actual IP address), used solely to limit spam and abuse; and your browser's user-agent string (a technical description of your browser and device).

What we do not collect. This Site does not use advertising trackers, analytics services, or tracking pixels, and it does not sell personal information. Browsing the Site does not require you to provide any personal information. See our Cookie Policy for details on the limited browser storage we use.

2. How we use your information

We use the information you submit to: respond to your quote request and prepare an estimate; contact you by your preferred method about your project; route your request to the right estimator, including generating a short automated summary of your request (see Section 3); prevent spam and abuse of our forms; and keep business records related to inquiries and projects.

We rely on your consent, given when you submit the form, and on our legitimate business need to respond to the inquiry you initiate. We do not use your information for marketing unrelated to your request, and we comply with Canada's Anti-Spam Legislation (CASL): we will only contact you about the inquiry you sent us unless you separately consent to other communications.

3. Service providers we share information with

We do not sell, rent, or trade your personal information. We share it only with service providers who help us operate the Site, and only for the purposes above:

Supabase — hosts our website, database, and file storage, where quote submissions and uploaded files are stored securely
Resend — delivers your quote request to our office email (office@lushtbay.com)
Google Gemini — when you submit the quote form, the project details you provided are processed by an AI service to generate a short plain-language summary that helps our estimators respond faster. The summary is stored alongside your request. This information is not used to train AI models by us.

These providers may store or process information on servers located outside Canada (including the United States). While information is outside Canada, it may be subject to the laws of those jurisdictions. We use providers that maintain appropriate safeguards.

We may also disclose personal information if required by law, court order, or lawful government request, or to protect our legal rights.

4. File uploads

Files you upload with a quote request are stored in a private storage bucket that is not publicly accessible. Internal links our team uses to view your files expire automatically after 7 days; the files themselves are retained in secure storage in line with Section 5.

5. Retention

We keep quote submissions and related files for as long as reasonably necessary to respond to your inquiry, prepare and follow up on estimates, and meet legal, accounting, and business record-keeping requirements. When information is no longer needed, we delete it or de-identify it. Spam-prevention records (hashed IP entries) are only used to enforce short-term rate limits.

6. Safeguards

We use reasonable technical and organizational safeguards to protect personal information, including private (non-public) database and storage access rules, transport encryption (HTTPS), hashed IP storage, and access restricted to the people who need it to respond to you. No method of transmission or storage is 100% secure, but we work to protect your information appropriately given its sensitivity.

7. Your rights and choices

Under PIPEDA, you may:

access the personal information we hold about you;
correct inaccurate or incomplete information;
withdraw consent to our use of your information, subject to legal or contractual restrictions (for example, records we must keep); and
ask questions or complain about our privacy practices.

To exercise any of these rights, contact us using the details in Section 10. We will respond within the time required by law. You also have the right to complain to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).

8. Children's privacy

Our services and Site are directed at businesses, organizations, and adult property owners. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows the current version. Material changes will be posted on this page.

10. Contact us

Lush Contracting Inc. — Privacy Inquiries
Thunder Bay, Ontario
Email: office@lushtbay.com
Phone: (807) 630-6587