Privacy Policy

1. Scope and commitment

e-nviroGreen Inc. (“e-nviroGreen,” “we,” “us” or “our”) is responsible for personal information under its control. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information through https://www.e-nvirogreen.com, related forms, the Client Portal, email communications, partner and contributor processes, and other commercial interactions.

This Policy is designed to reflect applicable Canadian private-sector privacy requirements, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and, where applicable, substantially similar provincial privacy laws.

2. Accountability

Our Privacy Officer oversees this Policy, privacy governance, inquiries, access requests, complaints and incident response. Other personnel and service providers handle personal information only as required for authorized duties and subject to appropriate obligations.

3. Personal information we may collect

Depending on how you interact with us, we may collect:

• Identity and contact information, such as name, title, company, mailing address, email address and telephone number;

• Project and quote information, including project type, location, scope, budget, timeline, room or unit information, preferences and requirements;

• Files and project materials, such as drawings, specifications, schedules, photographs, product information, reference files and communications;

• Account information, including username, authentication data, access permissions and security records;

• Business and professional information for suppliers, manufacturers, partners, contributors, applicants and other contacts;

• Communications, support requests, meeting information, approvals and records of decisions;

• Marketing preferences and records of consent or withdrawal;

• Payment, billing or transaction information where applicable, generally processed through authorized financial or payment-service providers;

• Device and technical information, such as IP address, browser, device type, operating system, referring pages, timestamps and security logs; and

• Cookie, analytics and preference information described in our Cookie Notice.

We do not intentionally request highly sensitive personal information through general Website forms. Please do not submit health information, government identifiers, payment-card data, passwords or other highly sensitive information unless we specifically request it through an approved secure process.

4. Sources of personal information

We collect personal information directly from you, from your authorized organization or representative, through Website and portal activity, from business contacts and references you authorize us to contact, and from service providers or publicly available business sources where permitted by law.

5. Purposes for collection, use and disclosure

We may use personal information to:

• Respond to inquiries, consultation requests and support requests;

• Receive and assess quotes, project briefs, partner applications and contributor submissions;

• Prepare budgets, proposals, options, presentations and other requested materials;

• Create and administer accounts, permissions and the Client Portal;

• Coordinate projects, procurement, vendors, deliveries, documentation, approvals and communications;

• Conduct due diligence and verify business, product, certification or reference information;

• Provide services and administer contracts, invoices, records and relationships;

• Operate, secure, troubleshoot, analyze and improve the Website and our workflows;

• Prevent fraud, misuse, unauthorized access and other security threats;

• Send newsletters or promotional communications where we have the required consent or other lawful basis;

• Comply with legal, regulatory, insurance, tax, audit and dispute-resolution obligations; and

• Carry out other purposes that we identify at or before collection, or that are otherwise permitted by law.

6. Consent and choices

We seek meaningful consent appropriate to the sensitivity of the information and the reasonable expectations of the individual. Some collection and use are necessary to respond to a request, provide a service, administer a contract or secure our systems. Optional uses, such as marketing or non-essential cookies, are presented separately where required.

You may withdraw consent for optional activities at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal may limit our ability to provide a requested feature or service. We will explain material consequences where appropriate.

7. Marketing and commercial electronic messages

We send commercial electronic messages in accordance with applicable Canadian anti-spam requirements. Marketing consent is separate from acceptance of required service or privacy notices. Each marketing email will identify the sender, provide required contact information and include a working unsubscribe mechanism.

You may unsubscribe using the link in a message or by contacting info@e-nvirogreen.com. We may continue to send non-promotional messages required for an inquiry, account, security matter, transaction, project or legal obligation.

8. Cookies, analytics and similar technologies

We use cookies and similar technologies for essential operation, security, preferences, analytics and, where enabled, marketing. Non-essential technologies are subject to the choices described in our Cookie Notice and consent interface.

You can change your preferences through the Website’s cookie settings. Browser controls may also block or delete cookies, but doing so may affect functionality.

9. AI-assisted processing and automated tools

Where enabled and appropriately disclosed, we may use automated or AI-assisted tools to extract, organize, classify, compare or summarize project and business information, identify missing fields, support document review or improve workflow efficiency.

We apply human review where decisions affect a project, proposal, relationship or material outcome. We do not use solely automated processing to make decisions that produce legal or similarly significant effects on individuals unless we provide the notice and rights required by applicable law.

We do not authorize confidential client project documents to be used to train public or general-purpose AI models unless the client has separately agreed in writing.

10. Disclosure of personal information

We may disclose personal information to:

• Cloud hosting, website, email, CRM, communications, analytics, security, document-management and IT service providers;

• Payment processors, financial institutions, insurers, auditors and professional advisers;

• Contractors, consultants, manufacturers, suppliers, logistics providers, installers and other project participants where necessary for an authorized project or request;

• Business partners or references where you direct or authorize the communication;

• Government, regulatory, law-enforcement or judicial authorities where required or permitted by law; and

• A potential purchaser, investor, lender, successor or adviser in connection with a financing, reorganization, merger, sale or other business transaction, subject to appropriate safeguards.

We do not sell personal information. We do not disclose personal information for another organization’s independent marketing without appropriate consent.

11. Service providers and information outside Canada

Some service providers may store or process information outside your province or outside Canada, including in the United States or other jurisdictions. Information in another jurisdiction may be subject to lawful access by courts, law-enforcement or governmental authorities there.

We use contractual, organizational and technical measures appropriate to the circumstances and remain accountable for personal information transferred to service providers for processing. You may contact our Privacy Officer for information about relevant service-provider practices.

12. Retention and destruction

We retain personal information only as long as reasonably necessary for identified purposes and legal, contractual, tax, insurance, audit, limitation-period, security and recordkeeping requirements.

Retention varies by record type. For example, unsuccessful general inquiries may be retained for a shorter period than project contracts, financial records, consent records, security logs or records needed to establish, exercise or defend legal claims. When information is no longer required, we securely destroy, delete or anonymize it as appropriate.

13. Accuracy

We take reasonable steps to keep personal information accurate, complete and current for the purposes for which it is used. Please notify us of material changes to your contact, account or project information.

14. Safeguards

We use administrative, technical and physical safeguards appropriate to the sensitivity, amount, format and use of the information. Measures may include access controls, authentication, encryption in transit, secure hosting, logging, backups, malware protection, contractual confidentiality, staff controls and incident-response procedures.

No system is completely secure. You are responsible for protecting your credentials and using approved secure channels for sensitive material.

15. Privacy incidents

We maintain procedures to assess, contain, investigate, document and respond to suspected privacy incidents. Where a breach creates a real risk of significant harm or another applicable reporting threshold is met, we will notify affected individuals and regulators as required. We maintain required records of privacy breaches.

16. Your privacy rights

Subject to legal exceptions and identity verification, you may request:

• Information about whether we hold personal information about you and how it has been used or disclosed;

• Access to your personal information;

• Correction of inaccurate or incomplete information;

• Withdrawal of consent for optional uses;

• Information about our policies, service providers and complaint process; and

• Where applicable, portability of computerized information you provided, cessation of dissemination or de-indexation, and other rights provided by provincial law.

Send requests to legal@e-nvirogreen.com. We may request information necessary to verify identity and authority. We will respond within the period required by applicable law or explain any permitted extension, refusal or fee.

17. Complaints and challenging compliance

You may raise a privacy concern with our Privacy Officer at legal@e-nvirogreen.com. We will acknowledge, investigate and respond appropriately. You may also have the right to contact the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator.

18. Children and minors

The Website and services are directed to adults and business representatives. We do not knowingly collect personal information from children. A parent or guardian who believes a child has provided information should contact us.

19. Third-party websites

Our Website may link to third-party websites or services. Their privacy practices are governed by their own notices and are not controlled by this Policy.

20. Changes to this Policy

We may update this Policy to reflect changes in law, technology, vendors or our practices. We will post the revised Policy with a new effective date and provide additional notice for material changes where appropriate.

21. Contact the Privacy Officer

Privacy Officer e-nviroGreen Inc. Toronto, Ontario, Canada Email: legal@e-nvirogreen.com Website: https://www.e-nvirogreen.com