Privacy Policy

Effective date: [October 24, 2026]

This website, [www.qmf.com], is operated by [Quality Metal Fabricators Ltd.] (“QMF”, “we”, “us”), 55 Steinway Blvd., Toronto, Ontario, Canada M9W 6H6.

We respect your privacy. This policy explains what personal information we collect through this website, why we collect it, and the choices you have. It applies to our website only. Information we receive through purchase orders, contracts or supplier relationships is handled under those agreements and our internal policies.

We have named a Privacy Officer who is responsible for how we handle personal information. You can contact them with any question, request or complaint:

• Privacy Officer: [Name or title]
• Email: [[email protected]]
• Phone:416.675.7777
• Mail: Attn: Privacy Officer, [Quality Metal Fabricators Ltd.], 55 Steinway Blvd., Toronto, ON M9W 6H6

Information you give us. When you use our contact form, we collect:

• First and last name
• Email address (required)
• Telephone number (optional)
• Your message (required), and anything you choose to include in it, such as your company name, job title or project details

If you email or call us, we collect the information you choose to share.

Information collected automatically. Like most websites, our web host records basic technical information when you visit, such as your IP address, browser type, the pages you view and the date and time of your visit. We use this to keep the site running and secure.

Information from third parties. We do not buy personal information or collect it from data brokers.

Please share only what we need to respond to you. Do not send drawings, specifications or technical data that are controlled goods, ITAR-controlled, or export-controlled through our contact form or by regular email. Contact us first, and we will arrange a secure way to receive them.

We use your information to:

• Respond to your questions and requests for quotes
• Discuss and plan a project with you
• Keep a record of our communication with you
• Keep our website working, secure and free from spam or misuse
• Meet our legal, regulatory and contractual obligations

We will not use your information for any other purpose without your consent, unless the law allows or requires it. We do not sell or rent your personal information.

When you send us a message, you consent to our using your information to respond to you as described in this policy. If we ever want to use it for something new, we will ask first.

You can withdraw your consent at any time by contacting our Privacy Officer, subject to legal or contractual limits. If you withdraw consent, we may not be able to respond to your request or provide a quote.

We reply to inquiries you send us. We will not add you to a marketing or newsletter list unless you clearly agree to it. If we send you marketing emails in the future, every message will identify us, give our contact information and include an easy way to unsubscribe. We process unsubscribe requests within 10 business days, as required by Canada’s Anti-Spam Legislation (CASL), and we keep records of the consent you gave.

A cookie is a small file a website saves in your browser.

• Essential cookies: Our website may use a small number of cookies needed for it to work and stay secure. These cannot be turned off.
• Analytics cookies: [We do not currently use analytics cookies.] / [We use (Google Analytics) to understand how visitors use our site. These are off until you agree through our cookie banner, and you can change your choice at any time using the “Cookie settings” link in the footer.]
• Third-party embeds: Our Contact page shows a map from Google Maps. When the map loads, Google may collect your IP address and set its own cookies. Google’s use of that information is governed by Google’s Privacy Policy.

You can also block or delete cookies in your browser settings. Some parts of the site may not work properly if you do.

We share personal information only with service providers who help us run our website and business, and only as much as they need. They include:

• Website hosting: WP Engine (servers may be located in the United States or elsewhere)
• Email and IT providers: [e.g., Microsoft 365 / Google Workspace]
• [CRM or form tools: name, if used]
• [Analytics: Google, if used]

These providers must protect your information and use it only to provide services to us. We may also disclose information if the law requires it (for example, a court order), or as part of a sale or merger of our business, under confidentiality protections.

Some of our service providers store or process information outside Canada, including in the United States. While it is there, the information is subject to the laws of that country, and authorities there may be able to access it. We use contracts and other measures to protect it. Contact our Privacy Officer to learn more about our service providers outside Canada.

We keep personal information only as long as we need it for the purposes above or as the law requires. In general:

• Inquiries that do not become a project: up to [2 years] after our last contact
• Customer and project records: as long as required by our contracts, quality standards and the law (for example, tax rules and customer traceability requirements)
• Website server logs: as set by our hosting provider, usually [30–90 days]

When we no longer need information, we securely delete or destroy it, or make it anonymous.

We use reasonable safeguards suited to the sensitivity of the information. These include:

• Secure (HTTPS) connections to our website
• Access limited to staff who need it
• Password protection and security updates on our systems
• Service providers chosen for their security practices

No website or email system is 100% secure, so please do not send sensitive information through our contact form.

If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, as required by law. [If Quebec applies: and the Commission d’accès à l’information du Québec.] We keep a record of every breach.

You have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or incomplete
• Withdraw consent to our use of your information
• Ask how your information has been used and shared
• Complain about how we have handled your information

To make a request, contact our Privacy Officer. We may need to confirm your identity first. We will respond within 30 days. Access is free in most cases; if a fee applies, we will tell you in advance. If we cannot give you access to some information, we will explain why, unless the law prevents us from doing so.

Please contact our Privacy Officer first so we can try to resolve your concern. If you are not satisfied, you can contact:

• Office of the Privacy Commissioner of Canada: gc.ca · 1-800-282-1376
• [If Quebec applies: Commission d’accès à l’information du Québec: gouv.qc.ca]

Our website is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

Our site may link to other websites. We are not responsible for their privacy practices, so please read their policies.

Questions about this policy? Contact our Privacy Officer at [[email protected]] or 1.416.675.7777.

We may update this policy from time to time. The “Effective date” at the top shows when it last changed. If we make a significant change, we will post a notice on our website.