Privacy policy

RTI Cabinets Privacy Policy — Copy & Paste Ready

Instructions: Replace Section 5 and Section 8 of your current policy with the versions below. Add Sections 13–16 after your current Section 11 (before "Complaints"). Update "Last Updated" at the top to today's date.

5. Sharing of Personal Information

We do not sell personal information.

We share personal information only in the following circumstances:

a) Service Providers and Processors

We share limited personal information with trusted service providers who perform functions on our behalf. Each provider is contractually required (or bound by their published privacy terms) to process data only for the purposes we specify and to safeguard it appropriately.

The service providers we currently use include:

Commerce & Operations

Shopify Inc. — e-commerce platform, order processing, payments, customer accounts. Privacy Policy: https://www.shopify.com/legal/privacy
Shopify Payments — payment processing. Privacy Policy: https://www.shopify.com/legal/privacy
Hulk Form Builder (HulkApps) — contact form submissions, including names, emails, phone numbers, and project details. Privacy Policy: https://www.hulkapps.com/pages/privacy-policy
EasyRoutes Local Delivery — delivery routing and customer delivery details. Privacy Policy: https://www.easyroutes.app/privacy
Zigpoll — post-purchase customer satisfaction surveys. Privacy Policy: https://www.zigpoll.com/privacy

Marketing & Email

Shopify Email (operated by Shopify Inc.) — email marketing, customer newsletters, and promotional communications. Privacy Policy: https://www.shopify.com/legal/privacy

Advertising & Analytics

Google LLC — Google Ads, Google Analytics, Google Workspace, Google & YouTube app. Used for advertising, analytics, and conversion measurement, including Enhanced Conversions (which uses hashed email addresses for attribution matching). Privacy Policy: https://policies.google.com/privacy
Meta Platforms, Inc. — Facebook and Instagram advertising. Pixel tracking and Conversions API may process hashed contact details for ad attribution. Privacy Policy: https://www.facebook.com/privacy/policy

Data Integration & Analytics

Coupler.io — data integration platform used to consolidate analytics from our marketing and e-commerce tools. Privacy Policy: https://www.coupler.io/privacy-policy
Anthropic PBC (Claude AI) — AI-powered business analytics assistance. Data queried through Claude is not used to train AI models. Privacy Policy: https://www.anthropic.com/legal/privacy

If we add, remove, or change service providers in ways that materially affect how personal information is handled, we will update this list.

b) Advertising and Analytics

We use services such as Google Ads, Google Analytics, and Meta (Facebook and Instagram) to understand how visitors use our Site, measure advertising effectiveness, and deliver relevant advertising.

These services may collect or receive:

IP address
Device and browser information
Pages visited and interactions
Hashed contact identifiers (for example, hashed email addresses) for conversion attribution and custom audience targeting, where permitted by law

We do not share your raw name, phone number, or email address with advertising platforms in plaintext form. Hashed identifiers are one-way cryptographic transformations used only to match conversion data and cannot be reversed to recover the original information.

You may opt out of certain advertising personalization at any time:

Google Ads Settings: https://adssettings.google.com
Meta Ad Preferences: https://www.facebook.com/settings?tab=ads

c) Third-Party Partners (With Consent Only)

With your explicit consent, we may share limited personal information (such as your name and contact details) with trusted third-party partners (for example, countertop suppliers, installers, or dealers) only for the purpose of providing services or quotes you have requested. You are never required to consent to such sharing, and refusal will not affect your ability to work with RTI Cabinets.

d) Legal Requirements

We may disclose personal information where required by law, regulation, court order, subpoena, or to protect our legal rights, property, or safety, or that of our customers or others.

e) Business Transfers

If RTI Cabinets is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

8. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Policy, or as required by applicable law. Specific retention periods include:

Contact form submissions (no purchase): 24 months from submission
Customer order records: 7 years (for tax, warranty, and legal compliance)
Customer email and marketing list data: Until consent is withdrawn or 36 months of inactivity
Website analytics data (non-identifying): Up to 26 months (Google Analytics default)
Customer support correspondence: 36 months from last contact
Backup copies: Up to 90 days after primary deletion

When personal information is no longer required, we securely delete, anonymize, or aggregate it. You may request earlier deletion of your personal information at any time; we will comply unless retention is required by law (for example, tax records).

13. International Data Transfers

Your personal information may be stored, processed, or accessed outside of Canada, including in the United States, the European Union, and other jurisdictions where our service providers operate. These jurisdictions may have data protection laws that differ from those of Canada.

Specifically, the following service providers process data outside Canada:

United States: Shopify, Google, Meta, Anthropic, Zigpoll, HulkApps, EasyRoutes
European Union / Other: Coupler.io

When personal information is transferred outside Canada, it may be subject to legal requirements in those jurisdictions, including lawful access by government authorities. We take reasonable steps to ensure that our service providers provide an equivalent level of protection through contractual safeguards, industry-standard encryption, and access controls.

By using our Site or providing information to us, you acknowledge that your information may be transferred to and processed in these jurisdictions.

14. Automated Processing and AI-Assisted Decision-Making

We use automated systems and artificial intelligence tools to support our business operations, including:

Advertising targeting and bidding — Google Ads and Meta use machine learning to optimize ad delivery and measure conversions.
Conversion attribution — Automated matching of hashed email addresses and anonymous identifiers to measure marketing performance (e.g., Google Enhanced Conversions).
Analytics and reporting — AI-assisted analysis of aggregated business and marketing data, including through Anthropic's Claude platform.
Email marketing — Automated segmentation and send-time optimization through Shopify Email.

These automated systems support our marketing, analytics, and operational decisions but do not make final decisions about pricing, product availability, customer eligibility, credit, or any matter producing significant legal or similar effects on you without human involvement.

You may request additional information about any automated processing involving your personal information by contacting us.

15. Quebec Residents — Additional Rights Under Law 25

If you are a resident of Quebec, the Act respecting the protection of personal information in the private sector (Law 25) provides you with additional rights:

Right to access your personal information held by us
Right to rectify inaccurate, incomplete, or ambiguous personal information
Right to withdraw consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
Right to data portability — to receive your personal information in a structured, commonly used, technological format, and to have it transferred to another organization where technically feasible
Right to be informed about any automated decision-making involving your personal information, and to request that a human review such a decision
Right to request de-indexing or cessation of dissemination of personal information in certain circumstances

Management Team Contact: For privacy-related inquiries, requests, or complaints, please contact our Management Team:

Email: info@rticabinets.ca Address: 396 Clarence Rd, Brampton, Ontario L6W 1T5

To exercise any of these rights, please contact us using the details above. We will respond within the time limits required by applicable law (generally 30 days under PIPEDA and Law 25).

16. Cross-Border Customer Inquiries

Customers residing outside Canada may have additional rights under their local privacy laws. We honour reasonable requests to access, correct, or delete personal information, regardless of residency, subject to applicable legal exceptions and verification of identity.