What we collect, and why

ChainBuild360 provides a web application that contractors and suppliers use to place, deliver, receive and record construction material orders. This notice covers this website and the application at app.chainbuild360.ca and pilot.chainbuild360.ca.

On this website: when you request pilot access, the name, work email, company, role, project size and message you enter, and the fact and time of your consent.

In the application: your name, work email and a protected (hashed) form of your password; your company’s name and city; and the business records your company creates — projects, site addresses and receiving contacts, purchase orders, receipts, documents and photos you upload, dispute messages, and the history of who did what and when.

Technical records needed to run the service securely: sign-in attempts with IP address and browser type, and a sign-in cookie that keeps you logged in.

This website sets no advertising or analytics cookies; it only remembers your light or dark display choice in your own browser. We do not sell your information. We do not hold or move money, and we do not collect bank or card details.

To reply to your request and, with your consent, to contact you about the pilot; to provide the application to you and the company you work for; to show the other party to an order the records of that order; and to keep the service secure and investigate misuse.

Records of an order are shared between the buyer and the supplier on that order. They are not visible to other companies. A supplier’s qualification documents (such as insurance or licences) are visible to the buyers that supplier is connected with or has a pending connection with.

ChainBuild360 staff who operate the service can view records and help users regain access to their accounts; that access is logged.

Information is stored with our hosting provider, Cloudflare. The main database is kept in North America, which may include the United States; sign-in sessions and uploaded files are held on Cloudflare’s network, which operates in many countries. Information stored outside Canada may be accessible to authorities under the laws of that country. Cloudflare processes it on our behalf and under our instructions.

Pilot requests: until the pilot selection is complete or you ask us to delete them. Accounts and order records: for as long as your company uses the service, and afterwards for as long as the parties to an order may reasonably need the record, unless a shorter period is agreed in writing. The order history is designed so that entries cannot be silently changed or removed: corrections are added as new entries, and names recorded in past entries remain part of that history.

You can ask to see the personal information we hold about you, to have it corrected, or to have it deleted where we are not required to keep it. You can withdraw your consent to be contacted at any time. If you use the application through your employer, we may refer your request to them.

If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada.