Privacy

Last updated: Aug 20, 2026

Privacy Policy

At Findoor North America Inc. ("we," "us," or "our"), we respect your privacy and are
committed to protecting the personal and project-related information you entrust to us. This
Privacy Policy outlines how we collect, use, store, share, and safeguard your information when
you purchase our products, utilize our door installation services, or interact with our website and
staff.
1. Comprehensive Taxonomy of Information Collection
In order to facilitate the precise engineering, bespoke fabrication, and structural integration of
custom architectural aperture solutions, Findoor North America Inc. systematically gathers a
robust dataset directly from the subject or through authorized intermediaries via multi-channel
telemetry, including but not limited to proprietary web portals, synchronous telephonic
consultations, and physical site-based assessments.
A. Personal &; Contact Information
● Primary PII and Jurisdictional Identifiers: This category encompasses full legal
nomenclature, verified primary and secondary residential or commercial billing domiciles,
precise geolocation coordinates for intended physical installation, verified telephonic
contact strings, and primary electronic mail routing addresses necessary for legal notice
and service delivery.
● Fiscal Transactional Metadata and Audit Logs: Includes historical procurement
records, granular invoice itemization, and authenticated payment preferences. It is
explicitly noted that primary financial instrument credentials (e.g., credit card PANs) are
transmitted via encrypted tunnels to PCI-DSS Level 1 service providers; Findoor at no
time retains unencrypted, raw fiscal credentials within its primary storage architecture.
B. Technical & Architectural Project Data
● Architectural Schematics and Structural Diagnostic Data: Comprehensive
acquisition of technical building blueprints, Computer-Aided Design (CAD) files,
structural engineering reports, high-resolution photographic documentation of the site
envelope, and precise dimensional verification logs required for structural load-bearing
analysis.
● Logistical Access and Security Protocols: Specific ingress instructions, temporary
physical security bypass codes (e.g., gate/alarm codes), and documented site entry
constraints essential for the safe and authorized deployment of installation personnel to
the designated property.
C. Communications

● Exhaustive archival records of all electronic correspondence, transcripts of customer
service interventions, metadata and summaries of oral telephonic communications, and
a complete chronological history of Short Message Service (SMS) transmissions, the
latter of which are strictly predicated upon the receipt of prior express written consent
(PEWC).
2. Legitimate Business Necessity for Data Processing
Data processing activities are strictly limited to those purposes which are functionally requisite
for the execution of contractual obligations and the advancement of legitimate business
interests inherent in the provision of industrial-grade architectural solutions, specifically:
● Contractual Fulfillment and Project Lifecycle Management: The administration of
procurement cycles, technical customization of products to client specifications,
scheduling of logistical deployments, and the execution of mechanical installation
procedures at the designated site.
● Structural Integrity and Engineering Validation: Methodical review of architectural
drawings to verify structural compatibility, ensure adherence to regional building codes,
confirm safety compliance, and facilitate the precision selection of load-rated hardware
components.
● Transactional and Jurisdictional Communication: Dissemination of real-time status
updates, legally mandated notifications, appointment verifications, and professional
responses to service-related inquiries or formal warranty claims.
● Long-term Liability and Warranty Administration: Maintaining immutable records to
ensure the efficacy of future maintenance cycles, safety inspections, and the
administration of long-term product warranty covenants.
3. Data Storage, Encryption, and Security
Findoor employs a defense-in-depth cybersecurity posture to safeguard personal identifiers and
proprietary architectural intellectual property against unauthorized exfiltration, compromise, or
destruction.
● Siloed, Air-Gapped and Hardened Infrastructure: All sensitive datasets, including
building drawings, are localized on private, hardened server architectures with intrusion
detection systems (IDS) active.
● Cryptographic Assurance (Transit and Rest): All data is obfuscated using AES-256 or
equivalent cryptographic standards while at rest within our storage arrays and TLS 1.3 or
higher during any necessary network transit to prevent illicit interception.
● Principle of Least Privilege (PoLP) Access Control: Administrative and structural
data access is restricted exclusively to vetted personnel—specifically project engineers
and lead installers—whose roles necessitate such access, governed by strict identity
and access management (IAM) protocols.

4. Information Sharing & Third Parties
Findoor expressly warrants and represents that it does not engage in the sale, rental,
monetization, or unauthorized dissemination of PII or architectural datasets to third-party
marketing aggregators.
Sharing is restricted to a strictly defined subset of functional necessity under the following legal
frameworks:
● Ancillary Operational Service Providers: Vetted vendors providing critical
infrastructure support (e.g., PCI-compliant payment gateways, secure IT hosting) who
are contractually bound by Data Processing Agreements (DPAs) that meet or exceed
statutory privacy requirements.
● Authorized Subcontractors (Limited Scope): Where specialized site labor is required,
disclosure is limited to the physical site location and the specific architectural details
necessary to perform the designated task, with no further access granted to the broader
customer profile.
● Compulsory Legal Compliance: Findoor may disclose information when compelled by
valid legal process, including judicial subpoenas, warrants, or regulatory mandates
under the Personal Information Protection and Electronic Documents Act (PIPEDA) or
relevant U.S. federal and state statutes.
Mobile / SMS Privacy Notice
No mobile-originated telephony data or SMS opt-in consent metadata will be shared with, sold
to, or used by third parties or affiliates for independent marketing or promotional objectives; this
data remains siloed for transactional and service alerts only.
5. Data Retention
Findoor adheres to a strict data retention schedule, maintaining contact records, transactional
history, and structural schematics only for the duration required to achieve the following legally
defined objectives:
1. Facilitate the exhaustive completion of installation, structural testing, and initial post-
installation service cycles.
2. Maintain operational records for the duration of all express and implied product
warranties and to facilitate future maintenance mandates.
3. Comply with statutory fiscal, taxation, and legal recordkeeping requirements mandated
by Canadian and United States federal revenue agencies.
6. Your Privacy Rights & Choices

In accordance with the Personal Information Protection and Electronic Documents Act
(PIPEDA) in Canada and relevant US privacy frameworks, data subjects are afforded the
following non-negotiable rights:
● Right of Access and Portability: The right to request and receive a structured,
machine-readable transcript of all personal information and architectural project data
currently under our stewardship.
● Right to Rectification: The right to demand the immediate correction or
supplementation of any inaccurate or incomplete PII or project-related documentation.
● Right to Erasure (Right to be Forgotten): The right to request the permanent deletion
of personal data, provided such request does not conflict with statutory retention
requirements or active contractual liability periods.
● Right to Object or Restrict Processing: The right to opt out of secondary data
processing activities via the "Unsubscribe" mechanism or by transmitting the STOP
keyword for SMS alerts, thereby rescinding prior consent for non-transactional
correspondence.
7. Contact Our Privacy Team
If you have questions, concerns, or requests regarding this Privacy Policy or how your building
drawings and personal information are handled, please contact us:
● Privacy Officer / Support Team: Edward Bryan
● Email: info@findoor.ca
● Phone: 866-338-8308
● Mailing Address: Box 12 Site 8 RR1, Westerose, AB, Canada T0C 2V0