This Privacy Policy explains how personal information is collected, used, stored, and disclosed when you visit or make a purchase through www.aafghvac.com.

1. Data Controller

For personal data processed through this website, the data controller is:

AAFG HVAC INC.
49 Thorncliffe Park Dr, East York, ON M4H 1J6, Canada
Email: deflector@aafghvac.com
Telephone: +1 6477612852

2. Information We Collect

Depending on how you use the website, we may collect information such as:

• Name and contact details;
• Billing and delivery information;
• Order and transaction details;
• Information provided when contacting us;
• Website usage information;
• Cookie and similar technology information where applicable.

We collect only information reasonably required for the relevant purpose.

3. How We Use Personal Information

Personal information may be used to:

• Process and manage orders;
• Process payments;
• Communicate with customers regarding orders or enquiries;
• Provide customer support;
• Maintain records relating to transactions;
• Operate and maintain the website;
• Meet applicable legal and regulatory requirements.

Personal information is not used for purposes incompatible with the purpose for which it was collected unless permitted or required by applicable law.

4. Payment Processing by Stripe

Payments made through the website are processed by Stripe.

Stripe acts as an independent payment service provider in connection with payment processing. When you make a payment, information required to process the transaction may be provided directly to Stripe or processed through Stripe’s payment services.

Depending on the payment method used, information processed by Stripe may include your name, email address, billing or delivery address, payment method information, transaction amount, purchase information, and related transaction details.

Stripe processes personal data in accordance with its own privacy documentation and applicable legal requirements. Stripe’s current Privacy Policy explains how it collects, uses, retains, and discloses personal data.

We do not request customers to provide complete payment card details to us by email or through customer service messages.

5. Cookies

The website may use cookies and similar technologies for necessary website functions and, where permitted, for other purposes.

A Cookie banner is provided to give customers a choice regarding non-essential cookies.

Non-essential cookies are used only after the customer clicks “Accept” on our Cookie banner to provide consent, where consent is required by applicable law.

Further information is available in our Cookie Policy.

6. Disclosure of Personal Information

Personal information may be disclosed to service providers where reasonably required to operate the website, process transactions, provide requested services, or meet legal requirements.

This includes Stripe, where required to process payments and related transaction information.

Service providers are expected to process personal information only for the relevant purposes and in accordance with applicable requirements.

7. Data Retention

Personal information is retained only for as long as reasonably required for the purpose for which it was collected, or for a longer period where required or permitted by applicable law.

Our general retention approach is:

• Customer and order information: retained for the period reasonably required to administer the transaction, provide customer support, maintain appropriate business records, and meet applicable legal requirements.
• Payment and transaction records: retained for the period required for transaction administration, accounting, legal, regulatory, and record-keeping purposes.
• Customer communications: retained for as long as reasonably required to address the enquiry, maintain relevant records, or meet applicable legal requirements.
• Cookie and consent records: retained for the period reasonably required to record and manage the relevant consent or preference.
• Website usage information: retained only for the period required for the relevant operational or analytical purpose.

When personal information is no longer required for its identified purpose and no legal or legitimate record-keeping requirement applies, it will be deleted, erased, or anonymised in accordance with applicable requirements.

This approach reflects the Canadian requirement to retain personal information only as long as necessary for its identified purposes and the European storage limitation principle.

8. Privacy Rights

Where applicable under Canadian or European privacy legislation, individuals may have rights concerning their personal information, including rights to request access to information held about them, request correction of inaccurate information, withdraw consent where processing is based on consent, and request deletion where the applicable legal requirements are met.

Requests may be submitted using the contact details provided below.

9. Data Protection

Personal information is handled using measures appropriate to the nature and sensitivity of the information and the purposes for which it is processed.

Access to personal information is limited where appropriate, and information that is no longer required is subject to deletion, erasure, or anonymisation procedures.

Canadian privacy guidance requires safeguards appropriate to the sensitivity of personal information and supports procedures governing retention and disposal.

10. Changes to This Privacy Policy

This Privacy Policy may be updated when our information practices, website functions, service arrangements, or applicable legal requirements change.

The latest version will be published on this page with its effective date.

11. Contact Information

For questions or requests concerning personal information, please contact:

AAFG HVAC INC.
49 Thorncliffe Park Dr, East York, ON M4H 1J6, Canada
Email: deflector@aafghvac.com
Telephone: +1 6477612852