Privacy policy

1. Who we are

BidWorks Inc. ("BidWorks", "we", "us") operates this website and is the organization responsible for the personal information described here.

Mailing address BidWorks Inc. 57 Arbour Crest Close NW Calgary, Alberta T3G 4G9 Canada

Privacy contact To be confirmed: contact address, e.g. privacy@bidworks.ca

We are based in Alberta, Canada. This policy is written to meet the Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and Canada's Anti-Spam Legislation (CASL).

2. What this policy covers

This policy covers the BidWorks marketing website only. The BidWorks application is not yet available. When it launches it will have its own privacy terms covering the information organizations put into it, and this policy will be updated to say so.

3. What we collect, and why

We collect personal information in one place: the demo request and design partner sign-up form. We do not collect anything else, and there is no account to create.

What	Required	Why we need it
Name	Yes	To address you properly when we reply
Work email	Yes	To reply, and to send you the confirmation email
Work mobile	No	Only if you would rather we called
Company	Yes	To understand who is asking
Role (owner, prime contractor, contractor)	Yes	Determines what we show you and how BidWorks would apply
Number of field offices	No	Helps us estimate what BidWorks would cost your organization
What you are trying to fix	No	So the first conversation is useful

Alongside your answers we record: the exact consent wording you agreed to, the date and time you agreed, your IP address at that moment, and how you reached the site (for example a referring link). The consent record exists because Canadian anti-spam law requires us to be able to prove consent was given, and the referral source tells us which of our efforts are working.

We do not collect payment information, government identifiers, or any sensitive personal information. We do not ask you to create a password.

4. How we use it

Only for these purposes:

1. To reply to your request and arrange a demonstration.
2. To send you a confirmation email asking you to confirm your subscription.
3. To send you occasional email about BidWorks and its launch, if and only if you ticked the consent box and then confirmed.
4. To understand, in aggregate, who is interested in BidWorks so we build the right product.

We do not use your information to make automated decisions about you. We do not build profiles of you beyond what you told us.

5. Consent, and how to withdraw it

The consent checkbox on our form is unticked by default. Ticking it is your choice, and you can submit the form without it if you only want us to reply to your enquiry.

If you consent to marketing email, we send a confirmation email first and only add you once you confirm. This is express consent under CASL.

You can withdraw consent at any time, using the unsubscribe link in any email we send, or by contacting us at the address in section 1. We act on withdrawal promptly and in any case within 10 business days, which is the CASL limit. Withdrawing marketing consent does not stop us replying to a question you asked us directly.

6. Who we share it with

We do not sell your personal information. We do not share it for anyone else's marketing.

We use a small number of service providers who process information on our behalf, under contract, and only for the purposes above:

Provider	What they do	Where
Supabase	Stores the form submissions in our database	To be confirmed: region
Resend	Sends the confirmation and any later email	To be confirmed: region
Vercel	Hosts the website	United States and global edge network

Information stored or processed outside Canada may be accessible to the courts, law enforcement and national security authorities of that country. That is a requirement to disclose under Alberta PIPA, and it is true of most cloud services. To be confirmed: whether to select a Canadian Supabase region, which would remove this exposure for the database itself.

We may also disclose information if the law requires it, or to protect our rights, but we have no other routine disclosures.

7. How long we keep it

• If you become a customer or an active conversation: for as long as that relationship continues, and then for the period our records obligations require.
• If you asked for a demo and nothing came of it: To be confirmed: retention period. 24 months is a common and defensible choice for a pre-launch business.
• Consent records: for at least three years after consent is withdrawn, because CASL puts the burden of proving consent on us.

We delete or anonymise information once it is no longer needed.

8. How we protect it

The database is not readable from a browser. Access is restricted to our server, using row level security and a key that is never exposed to the public site. Traffic is encrypted in transit. Access is limited to people who need it.

No system is perfectly secure, and we do not claim otherwise. If a breach ever occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada, as the law requires.

9. Cookies and tracking

This site does not use advertising cookies, tracking pixels, or third-party analytics that follow you across other websites.

To be confirmed: Vercel's built-in analytics is currently deferred. If it is turned on later, note that it is cookieless and aggregate, and update this section.

10. Your rights

Under Canadian privacy law you can:

• Ask what we hold about you, and get a copy.
• Correct anything inaccurate or incomplete.
• Withdraw consent to marketing, at any time.
• Ask us to delete your information, subject to any records we must keep.
• Complain, to us first, and then to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta if you are not satisfied.

Write to the privacy contact in section 1. We respond within 30 days, which is the statutory limit, and there is no charge for a reasonable request.

11. Children

This site is for people doing their jobs at industrial and contracting businesses. It is not directed at children and we do not knowingly collect information from anyone under 18.

12. Changes to this policy

If we change this policy we update the date at the top. If a change materially affects how we handle information you have already given us, we will tell the people affected directly rather than relying on you to notice.

13. Contact

To be confirmed: contact address BidWorks Inc., 57 Arbour Crest Close NW, Calgary, Alberta T3G 4G9, Canada