Legal

Privacy Policy

Effective May 12, 2026

VK Hardware Concepts Ltd. ("VK Hardware", "we", "our", "us") respects your privacy. This policy explains what personal information we collect when you visit vk-hardware.ca, create an account, place an order, or contact us — and how we use, store, and share it.

VK Hardware Concepts Ltd. is the data controller. Our registered address is 2333 Wyecroft Rd., Unit 11, Oakville, Ontario, Canada L6L 6L4. Contact: info@vk-hardware.ca.

1. Information We Collect

Information you give us directly

• Account information: name, email address, phone number (optional), password (hashed; we never see plain-text passwords).
• Order and shipping information: billing address, shipping address, order history, items purchased, quantities.
• Trade-program applications: business name, professional role, project details, trade references.
• Communications: emails, contact-form submissions, consultation requests.

Information from third-party sign-in providers

If you choose to sign in with Google or Apple, we receive a limited set of profile data from that provider:

• Google Sign-In: your name, email address, profile picture URL, and Google account ID. We use this only to create or sign you into your VK Hardware account. We do not access your Gmail, Drive, contacts, or any other Google service. We comply with the Google API Services User Data Policy, including its Limited Use requirements.
• Apple Sign In: your name (only on first sign-in if you choose to share it) and your email address (either real or Apple's private relay alias). We never receive your Apple ID password or other Apple-account data.

Information collected automatically

• Site analytics: page views, referring URL, browser type, device class, screen size, anonymized IP address, country.
• Cookies and local storage: required to keep your cart, session, and login state. Analytics cookies are optional and can be declined.
• Server logs: request timestamps and paths, retained 30 days for security and debugging.

Payment information

Card payments are processed by Square Inc. When you check out, your card number, expiry, and CVV are transmitted directly to Square's secure servers. We never see, store, or transmit full card numbers; we receive only the last four digits and a transaction reference for our records.

2. How We Use Your Information

• To create and maintain your VK Hardware account.
• To process orders, take payment, and arrange shipping.
• To send transactional email — order confirmations, fulfillment updates, password resets, and trade-application responses.
• To respond to inquiries, provide quotes, and deliver trade-program services.
• To improve our site, product selection, and customer experience (in aggregate, anonymized form).
• To send marketing email — only if you explicitly opt in. You can unsubscribe at any time via the link in every marketing email.
• To comply with legal obligations including tax records, fraud prevention, and lawful information requests.

3. Who We Share Information With

We do not sell your personal information. We share only the minimum necessary with:

• Square Inc. — payment processing.
• Supabase Inc. — authentication, account database, and back-end services.
• Resend Inc. — transactional and marketing email delivery.
• Vercel Inc. — website hosting.
• Google Analytics / Tag Manager — site analytics (anonymized).
• UPS, Canada Post, and other shipping carriers — to deliver your order.
• Legal authorities — if compelled by valid legal process.

All third-party processors are bound by data-protection agreements limiting their use of your data to providing services to VK Hardware.

4. Your Rights and Choices

Under Canadian privacy law (PIPEDA) and provincial equivalents, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and personal data (see Section 5).
• Withdraw consent for marketing communications at any time.
• Port your data to another service in a machine-readable format.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email info@vk-hardware.ca. We will respond within 30 days.

5. Account Deletion

You may delete your VK Hardware account at any time. To request deletion:

• Email info@vk-hardware.ca from the address tied to your account with subject line "Account Deletion Request".
• We will confirm and process within 7 business days.
• Order records will be retained for 7 years to meet Canada Revenue Agency tax-record requirements, but will be unlinked from your personal profile.
• Any active sign-in connections (Google, Apple) will be revoked. You may also revoke our access from your Google Account permissions page or your Apple ID settings.

6. Data Retention

• Account data: retained while your account is active; deleted on request.
• Order records: retained 7 years for tax compliance.
• Analytics data: retained 26 months.
• Marketing list: retained until you unsubscribe, plus a 30-day audit window.
• Server logs: retained 30 days.

7. Security

We use industry-standard security measures including TLS 1.2+ encryption for all data in transit, encrypted database storage, hashed passwords (bcrypt or stronger), and least-privilege access for staff. Payment data never touches our servers. Despite these measures, no method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. International Transfers

Some of our service providers operate servers outside Canada (the United States, primarily). When your information is transferred outside Canada, it is protected by data-processing agreements requiring equivalent protections.

9. Cookies and Tracking

Essential cookies (cart, session, login state) cannot be disabled without breaking core site functionality. Analytics and marketing cookies can be declined via your browser settings or our cookie banner if displayed.

10. Children

vk-hardware.ca is intended for adults (18+). We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us information, please contact us so we can delete it.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. We will notify registered users by email of any changes that materially reduce your rights.

12. Contact Us

If you have questions about this policy or your data: