Privacy Policy

This is a demonstration website built by CNC Marketer for a fictional company, Tollaston Machinery. No real transactions, quotes, or service requests are processed here.

1. Introduction

Tollaston Machinery Inc. ("Tollaston", "we", "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, and how we safeguard it. We serve customers in both Canada and the United States, so this policy is written to meet Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL), and the United States’ CAN-SPAM Act and applicable state privacy laws (such as California’s CCPA/CPRA).

2. Information We Collect

We collect personal information that you voluntarily provide when you interact with our website:

• Contact and quote forms: name, email address, phone number, company name, and message content.
• Parts quote requests: name, email address, and the parts you select for quoting.
• AI chat assistant: conversation messages and, if you choose to share them, your name, email, and company name for follow-up purposes.

We also collect analytics data automatically when you visit our website. This includes pages viewed, approximate geographic region (country level), browser type, and referring URL. Your IP address is shortened before it is stored, so it identifies a network rather than your device, and our own analytics use an anonymous visitor identifier so that repeat visits can be counted without storing personally identifiable information.

3. How We Use Your Information

Personal information you provide is used for the following purposes:

• Responding to your inquiries and providing requested quotes.
• Processing parts quote requests and coordinating with our team.
• Following up on leads generated through our AI chat assistant.
• Improving our website content, services, and user experience.

We will never use your personal information for purposes beyond what is described here without obtaining your consent first.

4. Cookies and Analytics

Our website uses a small number of cookies to function properly:

• Essential cookies: required for core website functionality, such as theme preference (light/dark mode) and admin session management.
• First-party analytics cookies: an anonymous visitor identifier, stored by us, used to understand aggregate website traffic patterns and repeat visits. It is not linked to your identity unless you submit a form or share your contact details through the chat.
• Google services (only with your consent): if you choose “Accept All” on our cookie banner, we load Google Analytics and Google Ads measurement, which set their own cookies to help us understand how the site is used and measure our advertising. These services are off by default and never load if you choose “Essentials Only.”

You can change your choice at any time using the “Cookie preferences” link in the footer. Withdrawing consent stops these services and expires Google’s cookies on this site.

5. AI Chat Assistant

Our AI-powered chat assistant uses Anthropic’s language models to answer questions about our machines, services, and parts. Conversations are logged on our servers for quality improvement and to help our team follow up on inquiries. Chat transcripts are associated with anonymous session identifiers, not with your identity, unless you voluntarily provide your contact details through the chat.

Conversation data sent to the AI provider (Anthropic) is processed under their data usage policy and is not used to train their models.

6. Information Sharing

We do not sell, rent, or trade your personal information to third parties for marketing or any other purpose. We may share your information only in the following circumstances:

• With our manufacturer partners when necessary to fulfil a quote or service request you have made.
• With service providers who assist us in operating our website and conducting our business, under strict confidentiality obligations.
• When required by law or to protect our rights, property, or safety.

7. Marketing Communications

If you sign up to receive marketing emails from us, we obtain your consent as required by Canada’s Anti-Spam Legislation (CASL) and comply with the United States’ CAN-SPAM Act. Every marketing message identifies us as the sender and includes a working unsubscribe mechanism. You can withdraw consent at any time by using that link or by contacting us directly, and we will action the request without delay.

8. Data Retention

We retain personal information from contact and quote forms for as long as necessary to complete the transaction or inquiry, and for a reasonable period afterward for follow-up and record-keeping purposes. Individual visit records are kept for our own analytics: the shortened IP address and browser type are removed after 13 months, and the anonymous identifiers are never linked to your identity unless you submit a form or share your contact details through the chat. Aggregate statistics are kept indefinitely. AI chat session logs are retained for up to 12 months.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), secure server infrastructure, access controls, and regular security reviews.

10. Your Privacy Rights

Under Canadian privacy law (PIPEDA), you have the right to:

• Know what personal information we hold about you and how it is used.
• Request access to your personal information in our records.
• Request correction of inaccurate or incomplete personal information.
• Withdraw consent for the collection or use of your personal information, subject to legal or contractual restrictions.

If you are a resident of a US state with its own privacy law (such as California’s CCPA/CPRA), you have similar rights to know, access, correct, and delete your personal information, and the right not to be discriminated against for exercising them. We do not sell personal information.

To exercise any of these rights, please contact us using the information below. We will respond to your request within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, the "Effective" date at the top of this page will be updated. We encourage you to review this page periodically.

12. Contact

If you have questions about this Privacy Policy or wish to make a privacy-related request, please contact us at [email protected] or call 905-555-0142.

Tollaston Machinery Inc.
1180 Tempering Drive
Vaughan, ON L4K 0M5
Canada