Privacy Policy

1. Who we are and what this policy covers

2595385 Ontario Inc., doing business as Enviroshake ("Enviroshake", "we", "us"), makes composite roofing products at 1130 Wellington Street, Dresden, Ontario, Canada N0P 1M0. This policy explains how we collect, use, share and protect personal information. It applies to:

• our website at https://www.enviroshake.com (the "Site");
• the Enviroshake Pro Portal for contractors;
• customers, prospective customers and others who contact us by phone, email or in person.

"Personal information" means information about an identified or identifiable person. Depending on where you live, this may be called "personal data".

Privacy contact. Our President is responsible for privacy at Enviroshake and acts as the person in charge of the protection of personal information. Send privacy questions and requests, including requests to access or delete your information, to info@enviroshake.com, call 1-866-423-3302, or write to the address above, marked "Attention: President (Privacy)".

2. Information we collect

Information you give us

• Website forms (contact, quotes, samples, brochures, consultations, installer search, lunch-and-learn, quiz, warranty registration): name, email, phone, address, customer type, how you heard about us, project details and your message. Warranty registration may also include photos you upload.
• Pro Portal: if you register, the email address and password you use to sign in; we collect nothing else through the Pro Portal. Pro Portal sign-in is managed by Google Firebase Authentication. Passwords are stored by Firebase in encrypted form and are not visible to Enviroshake.
• Phone calls: if you request a call-back through the widget on our Site, the call is handled by responseiQ and may be recorded. Other calls to Enviroshake are not recorded.
• Email and other messages you send us.

We do not collect payment card information through the Site.

Information sent with website forms

When you submit a form, the Site also sends how you found us: campaign tags (UTM parameters), advertising click identifiers from Google and Microsoft (gclid, gbraid, wbraid, msclkid), the first page you landed on and the referring website. Your browser stores these for up to 30 days so they can be attached to a form you submit later.

Information collected automatically

When you use the Site, we and our service providers collect your IP address, browser and device type, operating system, approximate location (country or region), pages viewed, links clicked, time on the Site and the website that referred you. This is collected through cookies and similar technologies described in section 4.

3. How we use information

• Respond to enquiries, send samples, quotes and brochures, and connect you with installers, using your form and contact details. Legal basis*: steps at your request before a contract; legitimate interests.
• Process orders and warranty registrations, using your contact, project and warranty details and photos. Legal basis*: contract.
• Run the Pro Portal and verify sign-ins, using your account details. Legal basis*: contract.
• Send newsletters and marketing emails, using your email address. Legal basis*: consent (unsubscribe any time).
• Understand how the Site is used and improve it, using analytics data. Legal basis*: consent where required; otherwise legitimate interests.
• Measure and improve our advertising, including showing ads to past visitors, using advertising cookies, click identifiers and form attribution data. Legal basis*: consent where required; otherwise legitimate interests.
• Handle call-back requests made through the Site, using your phone number and call recordings. Legal basis*: legitimate interests.
• Protect the Site and forms from spam and abuse, using security signals. Legal basis*: legitimate interests.
• Meet legal obligations and defend claims, using any relevant information. Legal basis*: legal obligation; legitimate interests.

*Legal bases apply to people in the EEA, UK and Switzerland. We will ask for your consent before using personal information for a new purpose where the law requires it. We do not make decisions about you based solely on automated processing.

4. Cookies and similar technologies

Cookies are small files stored by your browser. We also use similar technologies such as local storage and tracking pixels. We group them into three categories:

• Strictly necessary: runs the Site, protects forms from spam and remembers your cookie choice. Examples: cc_cookie (your choice), Cloudflare Turnstile. Lasts up to 6 months.
• Analytics: shows us how visitors use the Site (Google Analytics). Examples: _ga, _ga_*, _gid. Lasts up to 2 years.
• Advertising: measures ad results and shows our ads to past visitors (Google Ads, Microsoft Advertising, responseiQ). Examples: _gcl_au, _gcl_ls, _uetsid, _uetvid, responseiQ storage. Lasts up to 13 months.

Your choices depend on where you are

• EEA, UK, Switzerland and Quebec: analytics and advertising stay off unless you choose "Accept all" or switch them on.
• Everywhere else: analytics and advertising are on by default. You can turn them off with "Reject all" or in Cookie settings.

You can change your choice at any time with the Cookie settings link at the bottom of every page. We remember your choice for 6 months, then ask again. When you turn a category off, we delete its cookies from your browser. You can also block cookies in your browser settings, though some Site features may then not work.

Pages with embedded videos or social content (YouTube, Elfsight, FlippingBook) may let those providers set their own cookies when the content loads. Their privacy policies apply.

5. Who we share information with

We share personal information with service providers that help us run our business. They may use it only to provide their services to us.

• Webflow: website hosting; stores warranty form submissions. United States.
• Salesforce (Account Engagement / Pardot): receives form submissions; our customer relationship management system. United States.
• Google (Analytics, Ads, Maps, Firebase): Site analytics, advertising measurement, address autocomplete on forms, Pro Portal sign-in. United States.
• Microsoft Advertising: advertising measurement. United States.
• responseiQ: call-back widget, call recording and visit tracking. Outside Canada (see the provider's privacy policy).
• Cloudflare: Site delivery and form spam protection (Turnstile). United States.
• Email service providers: sending emails. Location varies by provider.

We also share information with installers or dealers when you ask to be connected with one.

Advertising partners. When advertising cookies are on, Google and Microsoft receive information about your visit and may combine it with other information they hold to measure and target ads. Under some US state laws this can count as "selling" or "sharing" personal information. See section 7 for how to opt out.

Apart from the providers listed above, we do not sell or share personal information with anyone. We may disclose information if required by law, to protect our rights, or as part of a sale, merger or reorganisation of our business.

6. Transfers, retention, security and children

International transfers. We are based in Canada, and several service providers store information in the United States. Information processed in another country may be accessible to courts, law enforcement and national security authorities there. For information about people in the EEA, UK or Switzerland, Canada has an adequacy decision for commercial organisations. Transfers to US providers rely on appropriate safeguards, such as the EU-US Data Privacy Framework and its UK and Swiss extensions where the provider is certified, or standard contractual clauses.

How long we keep information.

• Customer and enquiry records: the length of our relationship, plus 3 years.
• Pro Portal accounts: until the account is closed, then deleted.
• Call recordings: the period set by responseiQ.
• Form attribution data in your browser: 30 days.
• Cookies: see section 4.

We may keep information longer where the law requires it or to resolve disputes. When we no longer need it, we delete or anonymise it.

Security. The Site uses encrypted (HTTPS) connections, and access to personal information is limited to staff who need it for their work. No system is perfectly secure, so we cannot guarantee the security of information sent to us online.

Children. The Site and the Pro Portal are not intended for children, and we do not knowingly collect their personal information. If you believe we have, contact us and we will delete it.

7. Your rights and choices

To make any request below, email info@enviroshake.com. We may ask you to confirm your identity first. We will respond within the time the law allows, usually 30 days. You will not be treated differently for using your rights.

Everyone

• Ask what personal information we hold about you and get a copy.
• Ask us to correct inaccurate or incomplete information.
• Withdraw consent, for example to marketing emails (use the unsubscribe link) or cookies (use Cookie settings). Some services may not work without certain information.

Canada, including Quebec

You may complain to the Office of the Privacy Commissioner of Canada. In Quebec you may also ask us to stop disseminating your information, to de-index it, or to receive it in a structured, commonly used technological format, and you may complain to the Commission d'accès à l'information. Tracking technologies are off by default for visitors in Quebec (see section 4).

EEA, UK and Switzerland

You also have the right to erasure, to restrict processing, to data portability, and to object to processing based on our legitimate interests or for direct marketing. You may complain to your local data protection authority.

United States

Depending on your state, you may have the right to know, access, correct and delete your personal information, and to opt out of the sale or sharing of personal information for targeted advertising. To opt out, click Cookie settings and turn off Advertising, or email info@enviroshake.com.

8. Changes to this policy and how to contact us

We may update this policy from time to time. We will post the new version on this page with a new "last updated" date. If a change materially affects how we use your information, we will notify you by email where we have your address, or on the Site.

Questions or requests:
President (Privacy), Enviroshake
1130 Wellington Street, Dresden, ON N0P 1M0, Canada
Email: info@enviroshake.com
Toll free: 1-866-423-3302 · Phone: 1-519-380-9265

Last updated: October 1, 2026