Scope and accountability
This policy applies to personal information handled through EIFS.ca websites, accounts, dashboards, support, email and marketplace operations. It does not govern an independent participant's own website, contract or privacy practices.
EIFS.ca is accountable for personal information under its control and limits collection, access, use, disclosure and retention to documented purposes. Privacy questions and challenges may be submitted through Support with the Privacy category or to info@eifs.ca for attention of the Privacy Officer.
Information collected and sources
EIFS.ca handles account identity and contact information; login, session and device-security data; Company membership and profile information; Project, Response, invitation, award and message data; support requests; uploaded files; publication and moderation records; membership and billing references; consent records; and minimized operational, fraud-prevention and analytics events.
Information is obtained directly from users, from authorized Company members, from marketplace activity, from service providers, and from public business sources selected for legitimate marketplace verification. Public-source information is not automatically treated as accurate or as consent for unrelated marketing.
Payment-card details are entered directly with the configured payment provider and are not stored by EIFS.ca. Exact Project addresses, private messages, credential evidence and private files are permission-restricted and are not public profile data.
Purposes, consent and public visibility
Information is used to create and secure accounts; provide requested marketplace functions; authorize Company and Project access; moderate and publish approved content; deliver transactional messages; prevent abuse and fraud; administer memberships; provide support; comply with law; and measure real product reliability and use.
EIFS.ca seeks meaningful consent where consent is required and explains material purposes at or before collection. Optional marketing consent is separate from account or transactional communications and may be withdrawn without losing ordinary account access.
Only fields explicitly intended for an approved public profile, Project summary, listing or publication are made public. Public content may be indexed and copied by search engines or third parties. Removing it from EIFS.ca cannot guarantee removal of copies already made elsewhere.
Sharing and service providers
Information is disclosed to authorized marketplace participants according to workflow permissions; to hosting, database, email, storage, malware-scanning, maps, analytics, support and payment providers acting for EIFS.ca; to professional advisers; in a permitted business transaction; or to authorities and other organizations where law permits or requires it.
Providers receive only the information reasonably required for their service and are expected to protect it contractually and technically. Processing or storage may occur outside a user's province or country, including Canada and the United States, where information may be subject to lawful access by local authorities.
EIFS.ca does not sell personal information or publish private account contact details as a data-broker product. Any future advertising or new category of disclosure requires policy and consent review before activation.
Retention, safeguards and incidents
Information is retained only as long as needed for the identified purpose and the documented retention schedule. Different periods apply to accounts, active transactions, security records, consent evidence, financial records, backups and legal holds. Data that is no longer required is deleted, anonymized or securely isolated.
Safeguards include role- and tenant-based access controls, secure sessions, transport encryption, private storage, upload quarantine and scanning, rate limits, audit records, provider-secret separation, backups and monitored operational events. No system can guarantee absolute security.
Suspected privacy incidents are contained, investigated, documented and assessed. Where applicable law requires it, EIFS.ca will notify affected individuals and regulators as soon as feasible and will retain required breach records.
Individual choices and requests
Subject to applicable law and identity verification, an individual may request information about the existence, use and disclosure of their personal information; access or a portable copy; correction; withdrawal of consent; deletion; or a review of a privacy decision through Support.
Withdrawal or deletion may not apply where information is required for an active contract, another person's rights, fraud and security prevention, legal obligations, dispute evidence, immutable financial records or a valid legal hold. EIFS.ca will explain a material refusal and available escalation route.
Browser preferences and non-essential analytics choices may be changed through the available consent controls. Marketing email can be stopped using the unsubscribe link in every message; transactional security and account messages may still be sent when necessary to provide the service.
Children, changes and complaints
EIFS.ca is a business marketplace and is not directed to children. A person who has not reached the age of majority must not create a business account or submit personal information through the platform.
Material privacy-policy changes will be posted with a new version and date and, where required, communicated directly or presented for renewed consent. Questions or complaints should first be directed to the Privacy Officer through Support or info@eifs.ca; individuals may also contact the privacy regulator with jurisdiction.