Privacy Policy

Effective Date: May 12, 2026
Operated by: Redwoodcore INC., Quebec, Canada
Privacy Officer: privacy@supplysolution.ca

Redwoodcore INC. ("we", "us", "our") operating Supply Solution (supplysolution.ca) is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and protect your information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25 / Bill 64).

1. Privacy Officer

We have designated a Privacy Officer who is accountable for our compliance with this Policy and applicable privacy law. You may contact our Privacy Officer at:
privacy@supplysolution.ca
Redwoodcore INC., Quebec, Canada

2. What Personal Information We Collect

We collect personal information necessary to operate our platform and provide our services, including:

Account information: Name, email address (courriel), password (hashed), phone number, company name, business number;
Order and transaction information: Billing address, shipping address, order history, payment method (we do not store full card numbers);
Business information (B2B): Company registration documents, HST/GST number, credit application information;
Communication records: Support messages, quote requests, RFQ correspondence;
Technical data: IP address, browser type, device information, pages visited, session duration (via cookies and analytics tools);
Marketing preferences: Communication consent status, email preferences.

3. How We Collect Information

We collect information:

Directly from you when you register, place an order, or communicate with us;
Automatically through cookies and analytics tools when you use our platform;
From third parties such as payment processors and shipping carriers (limited to what is necessary for the transaction).

4. How We Use Your Information

We use your personal information to:

Create and manage your account;
Process orders, payments, and returns;
Communicate with you about your orders, account, and our services;
Send transactional emails (order confirmations, shipping notifications, invoices);
Send promotional communications where you have provided consent (you may withdraw consent at any time);
Verify business credentials for B2B and vendor accounts;
Improve our platform through analytics;
Detect, prevent, and investigate fraud and security incidents;
Comply with legal obligations.

5. Legal Basis for Processing

We process your personal information based on:

Contract performance: To fulfill orders and provide our services;
Consent: For marketing communications and non-essential cookies;
Legitimate interests: For fraud prevention, security, and platform improvement;
Legal obligation: To comply with tax, accounting, and regulatory requirements.

6. Disclosure of Personal Information

We do not sell your personal information. We may share your information with:

Marketplace Vendors: Only the information necessary to fulfill your order (shipping address, order details);
Payment processors: Encrypted payment data for transaction processing;
Shipping carriers: Delivery information to complete your order;
Service providers: IT infrastructure, analytics, and email service providers operating under data processing agreements;
Legal and regulatory authorities: When required by law, court order, or to protect our rights.

Where personal information is transferred outside of Canada, we ensure equivalent protection through contractual safeguards.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for essential platform operation, analytics, and (with your consent) personalization and marketing. Please refer to our Cookie Policy for details. You may manage cookie preferences through your browser settings or our cookie consent tool.

8. Retention of Personal Information

We retain personal information for as long as necessary to provide our services and comply with legal obligations:

Active account data: For the duration of the account plus 7 years after account closure (for tax and accounting compliance);
Transaction records: 7 years (CRA requirement);
Marketing consent records: Until consent is withdrawn plus 3 years;
Technical logs: Up to 12 months.

9. Your Rights

Under PIPEDA and Quebec Law 25, you have the right to:

Access: Request a copy of the personal information we hold about you;
Correction: Request correction of inaccurate information;
Withdrawal of consent: Withdraw consent for non-essential processing at any time;
Portability (Quebec Law 25): Request your data in a structured, commonly used format;
Deletion: Request deletion of your personal information where we have no legal obligation to retain it;
Complaint: File a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the Commission d'accès à l'information du Québec (CAI).

To exercise any of these rights, contact our Privacy Officer at privacy@supplysolution.ca. We will respond within 30 days.

10. Data Breach Notification

In the event of a privacy breach that creates a real risk of significant harm, we will notify affected individuals and the relevant regulatory authority as required by PIPEDA and Quebec Law 25, within the timeframes required by law (72 hours to the CAI under Quebec Law 25).

11. Children's Privacy

Our Platform is not directed to children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us personal information, please contact us immediately.

12. CASL Compliance

We send commercial electronic messages (CEMs) only to those who have provided express or implied consent in accordance with Canada's Anti-Spam Legislation (CASL). Every CEM includes a clear unsubscribe mechanism. You may withdraw consent at any time by clicking "Unsubscribe" in any of our emails or by contacting us at privacy@supplysolution.ca.

13. Privacy Impact Assessments

Pursuant to Quebec Law 25, we conduct Privacy Impact Assessments (PIAs) before implementing new projects or technologies that involve the collection or use of personal information, particularly where personal information is communicated outside of Quebec.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on this page. Your continued use of our Platform after the effective date of changes constitutes acceptance of the updated Policy.

15. Contact and Complaints

For privacy inquiries, access requests, or complaints:
Privacy Officer, Redwoodcore INC.
Quebec, Canada
privacy@supplysolution.ca

You also have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI) at www.cai.gouv.qc.ca or the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.