Privacy policy

Last updated: September 11, 2020

Compliance on Record Inc. d/b/a/ CORFix (“CORFix”/“we”/“us”/“our”) owns and operates the website located at www.corfix.com (“Website”), and any subdomains used in connection with or related to the same, and the CORFix mobile application (the “App”). CORFix is committed to protecting your privacy. This Privacy Policy describes how we collect, store, use and distribute information about our users through the Website, App and Service (as defined in our Terms of Service). Our Service is provided to business customers who have registered for an account with us (“Account Owners”) and any information collected via the Website, App and Service from or about Account Owners’ employees and contractors will be made available to the applicable Account Owner and will be used by such Account Owner according to their privacy policy.


A Note About Children. You must be at least 18 years old to use the Website and App. We do not intentionally gather Personal Information (defined in Collection of Information below) from visitors who are under the age of 13. If a child under 13 submits Personal Information to CORFix and we learn that the Personal Information is the information of a child under 13, we will attempt to delete the information as soon as possible. If you believe that we might have any Personal Information from a child under 13, please contact us at privacy@corfix.com.

A Note to Users Outside of Canada. The Service is currently intended only for use in ensuring compliance on record within the construction industry in North America. If you are not resident in Canada or the USA, by visiting the Website and providing us with data, you acknowledge and agree that your Personal Information may be processed for the purposes identified in this Privacy Policy. In addition, your Personal Information may be processed in the country in which it was collected and in other countries, where laws regarding processing of Personal Information may be less stringent than the laws in your country.

Lawful processing: We process your personal information only to the extent necessary for the performance of our obligations to you, which is in providing the Services to you under our Terms of Service at www.corfix.com/terms.html. We set out below the type of Personal Information that we collect and how we use it. Except as set forth in this Privacy Policy, your Personal Information will not be used for any other purpose without your consent. We will not actively collect Personal Information for the purpose of sale or marketing in a way that specifically identifies the individual. In other words, we don’t sell customer lists. You may withdraw your consent to our processing of your Personal Information at any time. However, withdrawing consent may result in your inability to continue using the Website, App and/or the Services.

Collection of Information: Unless you have otherwise given us appropriate consent, we collect, use and disclose only such information as is required to enable us to manage your account, to provide the Service, to maintain our customer/visitor lists, to respond to your inquiries or provide feedback, for identification and authentication purposes and for service improvement. We will also have access to Personal Information if you are an employee, contractor or are otherwise a person engaged to provide services for or on behalf of one of our customers and whose consents and authorizations are required in connection with compliance records. We will maintain the confidentiality of any contact information you provide to us on signing up for our Service or contacting us with questions or for further information and we will use it only for the purposes for which we have collected it (subject to the exclusions and disclosures we have listed below), unless you agree that we may disclose it to other third parties.

Two types of information may be collected through the Website, App and our Service: Personal Information (as defined by applicable laws) and non-personal information. This Privacy Policy does not extend to the collection, use or disclosure of non-personal information which is not limited by applicable privacy laws.

Collection and Use of Information: We collect the following information for the following purposes:

  • Registration Data. When you register to use the Service, we ask for information such as your full legal name, company name (if applicable), email address, billing address and credit card information. This information will be used to administer your account, for billing, verification and authentication purposes and to contact you in relation to the same.

  • Content You Make Available. You have the ability to upload compliance records, templates and other content to the Website and/or App. The content that you make available will be accessible to the Account Owner.

  • Location Data. Once you download the App, the App will request access to your device location. If you grant the App access to your device location, we will be able to track the physical location of your device using GPS and WiFi signals. We use this information to provide the Service. You can remove the App’s access to your device location at any time by changing your privacy settings on your device, and you may also permit the App to only track your location at specific times by changing your privacy settings within the App. Not enabling access to your device location may limit the features and functionality of the Service that you can use. Location data will be available to the Account Owner.

  • Metadata: We collect and use various metadata derived from your use of the Service. For example, if you electronically sign a document using the App, we also collect the time that that document was signed. Such metadata will also be made available to the Account Owner.

  • Transactional Notifications: We provide notifications for certain activities relating to your use of our Service despite your indicated e-mail preferences, for example we may send you notices of any updates to our Terms of Service or Privacy Policy.

  • Marketing Communications: If you opt-in to receive marketing communications from us, we will keep you up to date on our products and services. You may withdraw your consent to receiving marketing communications from us at any time by following the opt-out instructions in each communication.

  • Statistics: We also collect statistics about use of the Service which we use for analytics including predictive analytics. Aggregate statistics that do not personally identify an individual will be kept by us and such aggregate statistics may be made available to other members or third parties. CORFix may disclose industry trends related our customers, which are derived from use of the Service, that do not include any Personal Information.

  • Analytics Services: In addition to the tracking technologies we place, other companies may set their own cookies or similar tools when you visit our Website. This includes third party analytics services (“Analytics Services”), that we engage to help analyze how users use the Website, as well as third parties that deliver content or offers. We may receive reports based on these parties’ use of these tools on an individual or aggregate basis. We use the information we get from Analytics Services only to improve our Website and Services. The information generated by the Cookies or other technologies about your use of our Website and Services (the “Analytics Information”) is transmitted to the Analytics Services. The Analytics Services use Analytics Information to compile reports on user activity. The Analytics Services may also transfer information to third parties where required to do so by law, or where such third parties process Analytics Information on their behalf. Each Analytics Services’ ability to use and share Analytics Information is restricted by such Analytics Services’ Terms of Service and Privacy Policy. By using our Website and Services, you consent to the processing of data about you by Analytics Services in the manner and for the purposes set out above.

  • System Logs & Cookies: Cookies are used by us to track content usage and traffic on the Website and App. A cookie is a feature of your web browser that consists of a text file that is placed on your hard disk by a web server. Cookies help us compile aggregate statistics about usage of this Website and App, such as how many users visit the Website, how long users spend viewing the Website, and what pages are viewed most often. This information is used to improve the content of the Website and App. You can set your browser to notify you when you are sent a cookie. This gives you the chance to decide whether or not to accept it. If you disable cookies, you may not be able to take advantage of all the features of the Website, App or Services. Your IP address is reported by your web browser whenever you visit a page on the Website. This information is recorded together with your registration information on our databases.

    How We Respond to Do Not Track Signals. We do not currently respond to “do not track” signals or other mechanisms that might enable users to opt out of tracking on our Site.

  • Third-Party Links: The Website and App may contain links to other third-party websites that are not owned or controlled by us. Such third-party websites are governed by the terms and conditions and privacy policies of such third-party providers and we are not involved in any interaction or transaction between you and such third parties. We encourage you to read the privacy policies of every website you visit. The links to third party websites or locations are for your convenience and do not signify our endorsement of such third parties or their products, content or websites.

  • Third Party Partner Integrations: Optional third-party add-ons may be offered by our integration partners from time to time. Data shared with third party integration partners is subject to the privacy policies and terms of service of such third parties.

If we plan to use your Personal Information in future for any other purposes not identified above, we will only do so after informing you by updating this Privacy Policy. See further the section of this Privacy Policy entitled ‘Amendment of this Policy’.

Disclosures & Transfers: We have put in place contractual and other organizational safeguards with our agents (see further below) to ensure a proper level of protection of your Personal Information (see further Security below). In addition to those measures, we will not disclose or transfer your Personal Information to third parties without your permission, except as specified in this Privacy Policy (see further Important Exceptions below).

As at the date of this Privacy Policy, we share Personal Information about you in respect of the Website, App or Service only with our service providers and partners which include website hosting, cloud service providers, document management providers, analytics providers, email marketing providers and payment processors. Our service providers may host data worldwide and accordingly your Personal Information may be available to governments worldwide under a lawful order, irrespective of the safeguards we have put in place for the protection of your Personal Information.

From time to time we may employ third parties to help us improve the Website, App and/or the Service. These third parties may have limited access to databases of user information solely for the purpose of helping us to improve the Website, App and/or the Service and they will be subject to contractual restrictions prohibiting them from using the information about our members for any other purpose.

Important Exceptions: We may disclose your Personal Information to third parties without your consent if we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other Website or App members, other users of the Service, or anyone else (including the rights or property of anyone else) that could be harmed by such activities. We may disclose Personal Information when we believe in good faith that such disclosure is required by and in accordance with the law.

We may also disclose your Personal Information in connection with a corporate re-organization, a merger or amalgamation with another entity, a sale of all or a substantial portion of our assets or stock, including any due diligence exercise carried out in relation to the same, provided that the information disclosed continues to be used for the purposes permitted by this Privacy Policy by the entity acquiring the information.

Security: The security of your Personal Information is important to us. We use commercially reasonable efforts to store and maintain your Personal Information in a secure environment. We take technical, contractual, administrative, and physical security steps designed to protect Personal Information that you provide to us. We have implemented procedures designed to limit the dissemination of your Personal Information to only such designated staff as are reasonably necessary to carry out the stated purposes we have communicated to you.

When you provide credit card or other payment information to pay for CORFix subscriptions, your credit card and financial information is processed by a third-party service provider, Stripe, and the terms of the Stripe Privacy Policy will apply to the treatment of your personal information by Stripe (see further www.stripe.com/ca/privacy). CORFix does not store and does not have access to detailed credit card details.

You are also responsible for helping to protect the security of your Personal Information. For instance, never give out your email account information or your password for the Service to third parties.

Retention: We will keep your Personal Information for as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with you. We may retain certain data as necessary to prevent fraud or future abuse, or for legitimate business purposes, such as analysis of aggregated, non-personally identifiable data, account recovery, or if required by law. All retained personal information will remain subject to the terms of this Privacy Policy. If you request that your name be removed from our databases, it may not be possible to completely delete all your Personal Information due to technological and legal constraints.

Amendment of this Policy: We reserve the right to change this Privacy Policy at any time. If we decide to change this Privacy Policy in the future, we will send you an email or in-App notification. Any non-material change (such as clarifications) to this Privacy Policy will become effective on the date the change is posted and any material changes will become effective 30 days from their posting on the Website or App. Unless stated otherwise, our current Privacy Policy applies to all Personal Information that we have about you. The date on which the latest update was made is indicated at the top of this document. We recommend that you print a copy of this Privacy Policy for your reference and revisit this policy from time to time to ensure you are aware of any changes. Your continued use of the Website, App or Service signifies your acceptance of any changes. You should consult this Privacy Policy regularly for any changes.

Access & Accuracy: You have the right to access the Personal Information we hold about you in order to verify the Personal Information we have collected in respect to you and to have a general account of our uses of that information. Upon receipt of your written request, we will provide you with a copy of your Personal Information although in certain limited circumstances, we may not be able to make all relevant information available to you such as where that information also pertains to another user. In such circumstances we will provide reasons for the denial to you upon request. We will endeavor to deal with all requests for access and modifications in a timely manner.

We will make every reasonable effort to keep your Personal Information accurate and up-to-date, and we will provide you with mechanisms to update, correct, delete or add to your Personal Information as appropriate. As appropriate, this amended Personal Information will be transmitted to those parties to which we are permitted to disclose your information. Having accurate Personal Information about you enables us to give you the best possible service.

Contact Us: You can help by keeping us informed of any changes such as a change of address or telephone number. If you would like to access your information or would otherwise like to exercise any of your rights in respect of your personal information (whether as set out above or otherwise), if you have any questions, comments or suggestions of if you find any errors in our information about you, please contact us at: privacy@corfix.com.