Privacypolicy.

Effective date: November 6, 2026

Henley Contracting Ltd. ("Henley", "we", "us") builds custom homes, cottages, additions and renovations in Durham Region and the City of Kawartha Lakes, Ontario. This policy explains what personal information we collect through henleycontracting.com, by phone and text, and in the course of our work, how we use it, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

1. Information we collect

When you tell us about your project

• Your name, mobile phone number, email address (optional) and the town or city of the project.
• Your project details: project type and anything you choose to write about the project.
• Your consent choices, and the date, time and page where you gave them.

When you apply or reach out through Work With Us

• Contact details, company name and trade, and the answers you give on the form.
• Any file you attach, such as a resume, capabilities sheet or proposal.

When you call or text us

• Your phone number, the date, time and length of calls, text messages and voicemails.
• Calls to and from our business phone numbers may be recorded. Recordings and voicemails may be transcribed and summarized automatically by our phone provider's tools. We use these to keep accurate notes about your project, follow up on what was discussed and train our team.

When you are a client

• Contact details, the property address, and project records such as plans, selections, schedules, photos, invoices and messages.
• If we invite you to the client portal: your login email and a hashed password.

Automatically, when you visit the website

• How you arrived at the site: the referring page, the first and last page you landed on, campaign tags (UTM) and ad click IDs (such as Google's gclid or Meta's fbclid). We keep these with your inquiry so we know which advertising works.
• A one-way scrambled (hashed) version of your IP address, used only to stop spam and repeated form submissions. We do not store your IP address itself with your inquiry.
• Website statistics we keep ourselves: pages viewed, time on page, clicks on our phone number, email and buttons, device type, browser, screen size, language and time zone. These are linked to a random visitor number, not to your name, email or IP address.
• Information collected by the analytics and advertising tools described in section 5 (Google Analytics, Google Ads, the Meta Pixel and HubSpot).

We do not collect payment card information through the website.

2. How we use your information

• To answer your inquiry, call or text you about your project, and arrange a meeting.
• To prepare designs, estimates, proposals and contracts, and to build and support your project, including warranty work.
• To review job applications and supplier, trade and community requests.
• To send occasional project ideas and updates, only if you ticked the optional box. You can unsubscribe at any time.
• To understand which pages and ads bring people to us, measure our advertising, and improve the website.
• To protect the website from spam and misuse, and to meet our legal, tax and accounting obligations.

3. Consent

• The project form asks for your consent to call or text you about your project. This is needed for us to reply.
• Consent to receive updates is separate and optional, and is never pre-ticked.
• You can withdraw your consent at any time by emailing info@henleycontracting.com, replying STOP to a text, or using the unsubscribe link in any email. Withdrawing consent does not affect information we must keep by law, or work under an existing contract.

4. Who we share it with

We do not sell or rent your personal information. We share it only with:

• Our team: the people at Henley who need it to answer you or run your project.
• Service providers who process information for us under contract:
  • HubSpot (customer relationship management: inquiries, contacts and follow-up)
  • Quo (formerly OpenPhone), our phone and text messaging provider, including call recording, transcription and summaries
  • Google (Google Analytics and Google Ads)
  • Meta (the Meta Pixel, for Facebook and Instagram advertising)
  • our website host, and our email, office, project management and accounting software providers
• Project partners: designers, engineers, trades and suppliers working on your project, with only what they need to do their part.
• Authorities: when the law requires it, for example building permits or tax records.

Some of our service providers store information outside Canada, including in the United States. Information stored outside Canada is subject to the laws of that country.

5. Cookies, analytics and advertising tools

Needed for the website to work

• henley_session: keeps forms working securely. Deleted when you close your browser.
• hc_attr: remembers how you first arrived at the site (campaign tags and click IDs) for 30 days, so it can be attached to an inquiry you send.

Our own website statistics

• hc_vid, hc_sid (stored in your browser's local storage, not cookies): a random visitor number and visit number for our own website statistics. They are not shared with anyone. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, our statistics do not run.

Google Analytics

• Measures how visitors use the website (pages viewed, how long, device type, approximate location) and counts inquiries.
• Cookies: _ga and _ga_<ID>, kept for up to 2 years.
• You can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout.

Google Ads conversion tracking

• When you reach our website from a Google ad, Google records the ad click (gclid) and tells us if it led to an inquiry, so we can measure and improve our ads.
• Cookies: _gcl_au (and _gcl_aw after an ad click), kept for up to 90 days.
• You can manage Google's ad personalization at adssettings.google.com.

Meta Pixel (Facebook and Instagram)

• Tells Meta when someone who saw or clicked our Facebook or Instagram ad visits the website or sends an inquiry, so we can measure our ads and show them to people likely to be interested.
• Cookies: _fbp (and _fbc after an ad click), kept for up to 90 days.
• You can manage this in your Facebook or Instagram ad settings.

HubSpot tracking

• Lets us see which pages a visitor viewed before sending an inquiry, so that history appears with the inquiry in our customer relationship system.
• Cookies: hubspotutk and __hstc (up to 6 months), __hssc (30 minutes) and __hssrc (until you close your browser).

You can block or delete cookies and site data in your browser settings. The website still works, but forms may ask you to try again.

6. How long we keep it

• Inquiries that do not go ahead: up to 3 years, so we can follow up if you come back to us, then deleted.
• Clients and projects: for as long as needed for warranty, tax, legal and insurance purposes, which is usually at least 7 years after the project ends.
• Call recordings, transcripts, summaries and text messages: kept with the inquiry or project they relate to, on the same schedule.
• Job applications: up to 12 months, unless you join our team.
• Website statistics: 26 months.
• Website security logs: 30 days.

7. How we protect it

The website uses an encrypted connection (HTTPS). Inquiries, applications and attached files are kept in a private system that only authorized Henley staff can open. Passwords are stored hashed (scrambled one way), so no one at Henley can read them. No system is perfectly secure, but we take reasonable steps to protect your information and limit who can see it.

8. Your rights

• Ask what personal information we hold about you and get a copy.
• Ask us to correct information that is wrong.
• Withdraw consent, or ask us to delete information we no longer need.

Email us and we will reply within 30 days. We may ask you to confirm your identity first. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

9. Children

This website is meant for adults planning a building project. We do not knowingly collect information from children under 16.

10. Changes to this policy

We may update this policy as our services, tools or the law change. The effective date at the top shows when it last changed.

11. Contact us

Privacy questions or requests:
Privacy Officer, Henley Contracting Ltd.
Oshawa, Ontario · By appointment only · Serving Durham Region and Kawartha Lakes
Email: info@henleycontracting.com
Phone: (905) 576-9714