Privacy Policy | Instant Aggregates

This Privacy Policy explains what personal information Instant Aggregates collects, how we use and share it, how long we keep it, and the rights you have under Canadian and United States privacy laws. It applies to instantaggregates.com and to any quote, order, or delivery arranged by us.

1. Who We Are and How to Reach Us

"Instant Aggregates," "we," "us," and "our" refer to the business operating instantaggregates.com and providing aggregate sourcing and delivery coordination services. We are the "controller" (or "business," depending on the jurisdiction) of the personal information described in this Policy.

Privacy questions, requests, and complaints may be directed to our Privacy Officer:
Phone: 250-893-1020
Mail: Instant Aggregates, Attn: Privacy Officer, British Columbia, Canada.
Website: instantaggregates.com/contact

2. Information We Collect

We collect the following categories of personal information:

Information you give us. Name, business name, phone number, email address, delivery address or job-site location, materials and quantities requested, project details you share, payment and billing information (typically handled by a third-party payment processor), written correspondence, and anything else you choose to send us.

Information generated when you use our Services. Quote requests, order history, delivery records, scale tickets, invoices, call records, SMS records, and emails exchanged with us.

Technical and device data. IP address, approximate location derived from IP, device and browser type, operating system, referring URLs, pages viewed, dates and times, and similar log data.

Anti-spam and security data. Signals collected by Cloudflare Turnstile and similar tools to tell humans from bots and to protect our forms and systems.

Cookies and similar technologies. Our site uses a minimal set of first-party cookies and local storage items necessary for the site to function and for anti-abuse protection. We do not use advertising or cross-site tracking cookies today. If that changes we will update this Policy and, where required, ask for consent.

We do not knowingly collect "sensitive" personal information as defined under California, Colorado, or other US state laws, and we do not ask for government ID, social insurance numbers, social security numbers, or precise geolocation.

3. How We Use Personal Information

We use personal information to:

prepare and deliver quotes, arrange and coordinate deliveries, and otherwise provide the Services;
process payments, invoice, collect amounts owing, and maintain accounting and tax records;
communicate with you about your quote, order, delivery, or account by phone, SMS, or email;
respond to questions, feedback, warranty or damage claims, and disputes;
operate, secure, maintain, test, and improve the website and our internal systems;
detect and prevent fraud, abuse, spam, and other unlawful activity;
send, with your consent where required, marketing and promotional messages about products, service areas, and offers we think may interest you;
comply with applicable law, respond to lawful requests, and establish or defend legal claims.

4. Legal Bases (Canada and Similar)

In Canada, we rely on your consent (express or implied) for most collection, use, and disclosure, as permitted by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws, including British Columbia's Personal Information Protection Act, Alberta's Personal Information Protection Act, and Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25). We may also rely on exceptions permitted by those laws, such as for contractual performance, fraud prevention, legal compliance, and internal business purposes that a reasonable person would consider appropriate.

5. How We Share Personal Information

We share personal information only as described below.

Suppliers and carriers. Pits, quarries, yards, haulers, trucking companies, and drivers engaged to fulfill your order receive the details they need (for example, name, phone, delivery address, materials, quantity, and site notes) to load, dispatch, and deliver.

Service providers (processors). We use third parties to run parts of the website and our operations, including:

Cloudflare, Inc. — hosting (Cloudflare Pages / Workers), content delivery, DNS, bot and abuse protection (Turnstile), and security logs;
Resend — transactional email delivery;
payment processors engaged from time to time to process payments;
telecommunications and SMS providers;
accounting, bookkeeping, analytics, and IT providers;
lawyers, insurers, and professional advisors.

These providers are contractually bound to use personal information only to provide services to us and to protect it with appropriate safeguards.

Legal, safety, and compliance. We may disclose personal information when we reasonably believe it is required by law, subpoena, court order, or other legal process; to establish, exercise, or defend legal claims; to protect the rights, property, or safety of Instant Aggregates, our customers, suppliers, carriers, or the public; or to investigate or prevent fraud, spam, or security incidents.

Business transactions. If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, personal information may be transferred to the successor or acquirer as part of that transaction, subject to appropriate confidentiality protections.

With your consent. We share personal information for any other purpose disclosed to you at the time and with your consent.

We do not sell your personal information. We do not sell personal information for money, and we do not "share" personal information for cross-context behavioural advertising, as those terms are defined under California and similar US state laws. We have not done so in the preceding 12 months and do not knowingly sell or share personal information of anyone, including those under 16.

6. International and Cross-Border Transfers

We are based in Canada. Some of our service providers are located in the United States or other jurisdictions. As a result, personal information may be transferred to, stored, processed, or accessed in jurisdictions outside your province, state, or country. While personal information is outside your jurisdiction, it may be subject to the laws of that jurisdiction and accessible to courts, law enforcement, and national security authorities of that jurisdiction. By using the Services, you acknowledge and consent to such transfers. We use contractual and technical safeguards with our providers to protect personal information during transfer and storage.

7. How Long We Keep Personal Information

We keep personal information only as long as reasonably necessary for the purposes for which it was collected, to provide the Services, to comply with legal, tax, accounting, and record-keeping obligations, and to establish, exercise, or defend legal claims. Typical retention periods are:

quote requests with no order: up to 24 months;
order, invoice, and delivery records: at least 7 years, to meet tax and commercial law requirements;
marketing contact list: until you unsubscribe, plus a reasonable suppression period;
website security logs: up to 12 months.

When retention is no longer required, personal information is deleted, anonymized, or securely destroyed.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, use, disclosure, alteration, and loss. These include TLS encryption in transit, access controls, least-privilege principles, anti-abuse protection on our forms, and careful selection of service providers. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.

9. Children

Our Services are intended for businesses and for adults buying materials for their own projects. We do not knowingly collect personal information from children under 13 (or the equivalent age under applicable law, such as 14 in Quebec or 16 under certain other regimes). If you believe a child has provided us with personal information, contact us and we will delete it.

10. Marketing Communications and Your Choices

With your consent (or where otherwise permitted), we may send you marketing emails or SMS about our Services. You can opt out at any time by:

clicking the unsubscribe link in any marketing email;
replying STOP to a marketing SMS;
calling us at 250-893-1020.

Even if you opt out of marketing, we may still contact you about quotes, orders, deliveries, invoices, and other transactional or service-related matters.

We comply with Canada's Anti-Spam Legislation (CASL), the US CAN-SPAM Act, the Telephone Consumer Protection Act (TCPA), and applicable state telemarketing and do-not-call rules. We maintain an internal do-not-call and do-not-contact list.

11. Cookies, Analytics, and Tracking

Our website uses a minimal set of first-party cookies and local storage items strictly necessary for the site to work and for basic security (including anti-bot verification via Cloudflare Turnstile). We do not currently use third-party advertising, retargeting, or cross-site tracking cookies. If we add analytics or advertising technologies in the future, we will update this Policy and, where required, display a consent banner.

Most browsers let you control cookies through their settings. Because we do not currently track users across sites, we do not respond to "Do Not Track" or Global Privacy Control (GPC) signals differently than described in this Policy; however, if you are a resident of a state where GPC is a valid opt-out signal for sale or sharing, we treat it as such to the extent any such activity ever occurs.

12. Your Rights — Canada

Subject to exceptions in applicable law, residents of Canada have rights to: (a) access the personal information we hold about them; (b) ask us to correct inaccurate or incomplete personal information; (c) withdraw consent for collection, use, or disclosure (subject to legal or contractual limits); and (d) make a complaint to our Privacy Officer.

Quebec residents (Law 25). In addition to the above, you have the right to (i) be informed of the categories of personal information collected and the purposes, (ii) request de-indexation or cessation of dissemination in certain circumstances, (iii) receive computerized personal information you provided in a structured, commonly used technological format (portability), and (iv) be informed about decisions based exclusively on automated processing that produces legal or similarly significant effects (we do not currently make such decisions).

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca), the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca), the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca), or the Commission d'accès à l'information du Québec (cai.gouv.qc.ca), as applicable.

13. Your Rights — United States (All States)

Depending on your state of residence, you may have some or all of the following rights under state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Colorado Privacy Act (CPA), the Virginia Consumer Data Protection Act (VCDPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), the Texas Data Privacy and Security Act (TDPSA), the Oregon Consumer Privacy Act (OCPA), and the comprehensive privacy laws of Montana, Delaware, Iowa, Indiana, Tennessee, New Jersey, New Hampshire, Nebraska, Minnesota, Maryland, Kentucky, Rhode Island, and other states with similar laws in force:

Right to know / access the categories and specific pieces of personal information we collected about you, the sources, the purposes, and the categories of third parties we shared it with;
Right to delete personal information we have about you, subject to exceptions;
Right to correct inaccurate personal information;
Right to data portability — receive a copy in a portable, machine-readable format;
Right to opt out of the sale or sharing of personal information and of targeted advertising. As noted in Section 5, we do not sell or share personal information or use it for targeted advertising;
Right to limit the use of sensitive personal information. We do not collect sensitive personal information for purposes requiring a limitation right;
Right to non-discrimination for exercising your rights — we will not deny Services, charge different prices, or provide different quality because you exercised a privacy right;
Right to appeal a denial of a rights request. If we deny a request, our response will describe how to appeal. If your appeal is denied, you may contact the Attorney General of your state.

How to submit a request. Residents (or authorized agents acting on their behalf) can submit a verifiable consumer request by phone at 250-893-1020 or through our contact page. To protect your information, we will ask for enough detail to verify your identity and the scope of the request. We will acknowledge within 10 business days and substantively respond within 45 days (extendable by another 45 days with notice where permitted).

14. California Notice at Collection and Additional Disclosures

For California residents, this section is our "notice at collection" under the CCPA/CPRA.

Categories collected (last 12 months): identifiers (name, email, phone, IP); customer records (billing address, payment details processed by our processor); commercial information (quote and order history); internet or network activity (site interactions, logs); geolocation (general, from IP or from the delivery address you provide); and professional or employment information to the extent you provide business details.

Sources: directly from you, automatically from your device, from our service providers, and sometimes from suppliers or carriers fulfilling your order.

Business or commercial purposes: as described in Section 3.

Categories disclosed for a business purpose: as described in Section 5. We disclose identifiers, customer records, commercial information, and internet/network activity to our service providers and, where needed to fulfill orders, to suppliers and carriers.

Sale or sharing of personal information: we do not sell personal information and we do not share it for cross-context behavioural advertising. We have not sold or shared personal information of anyone (including minors under 16) in the preceding 12 months.

Retention: as described in Section 7.

"Shine the Light" (Cal. Civ. Code § 1798.83). California residents may request, once per year, a list of third parties to whom we disclosed personal information for the third parties' direct marketing purposes. We do not disclose personal information to third parties for their direct marketing.

15. Nevada and Other State-Specific Notices

Nevada (SB 220). Nevada residents have the right to direct us not to sell certain covered personal information. We do not sell covered information. To submit a verified request, call us at 250-893-1020.

Washington "My Health My Data" Act. We do not knowingly collect "consumer health data" as defined by that Act.

Other states. Residents of any other US state with applicable comprehensive privacy legislation have the rights summarized in Section 13, to the extent those laws apply.

16. Automated Decision-Making and Profiling

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing (profiling). If we introduce such processing in the future, we will update this Policy and, where required, provide notice and an opt-out.

17. Third-Party Links

Our website may link to third-party sites (for example, suppliers, industry references, or mapping services). We are not responsible for their privacy practices. Review their privacy policies before providing personal information.

18. Breach Notification

If a security incident involving personal information occurs and notification is required by law, we will notify affected individuals and the applicable regulator (including the Office of the Privacy Commissioner of Canada, provincial commissioners, and US state attorneys general) as and when required by PIPEDA, provincial laws (including Quebec Law 25), US state data breach notification laws, and any other applicable rule.

19. Accessibility

We strive to make our website and this Policy accessible. If you need this Policy in an alternative format, call us at 250-893-1020.

20. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date above shows when it was last revised. If we make material changes, we will give additional notice where required (for example, by email or by a prominent notice on the website). Your continued use of the Services after the update takes effect is acceptance of the updated Policy.

21. How to Contact Us or Make a Privacy Request

To ask a privacy question, make a request under Section 12 or 13, withdraw consent, unsubscribe, or file a complaint, contact our Privacy Officer using the details in Section 1. We will respond within the timelines required by the applicable law.