Privacy Policy

1) What we collect

You provide: name, username, email, password (hashed), phone (optional), location, trade/skills, experience, education, certifications, availability, photos, links, messages, employer details (company, role), and billing info routed via Stripe (we don’t store full card numbers).

Automatically: IP, device/browser, pages/events, approximate location, cookies.

From third parties: payments/billing from Stripe; email delivery status from our email provider; analytics.

2) How we use it (purposes)

• Operate, secure, and improve the Service; authenticate; prevent abuse/fraud.
• Facilitate talent discovery (search, shortlists, messaging).
• Process payments and manage subscriptions (invoices, Customer Portal).
• Communicate (transactional notices; with consent, marketing).
• Analytics, research, troubleshooting.
• Comply with legal obligations.

We do not sell personal information. We may use de-identified or aggregated data for analytics.

3) Consent & CASL

• We rely on consent (express or implied) and limited statutory exceptions permitted by Canadian law (e.g., fraud prevention, investigations). You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.
• Marketing emails are sent only with consent required by CASL. Each commercial electronic message includes our identification and a functional unsubscribe link. You can withdraw consent at any time (unsubscribe link or email support@constructpro.co). Transactional emails are not subject to marketing opt‑out.

4) Disclosure

We share with service providers under contract (hosting, email, analytics, payments), other users as expected by the Service (e.g., candidate profiles visible to employers), for legal/safety reasons, or during business transactions (e.g., merger). Processors must protect data and act only on our instructions. See DPA (Annex A) for typical sub‑processors.

5) International transfers

Your information may be processed outside Canada (e.g., the United States) and subject to foreign laws. We use contractual and technical safeguards appropriate to the sensitivity of the information. Québec users: For transfers outside Québec, we assess privacy risks as required by Law 25 and implement protective measures.

6) Security

We use reasonable administrative, technical, and physical safeguards (TLS, access controls, hashing, least‑privilege). No method is 100% secure.

• We maintain records of security incidents and notify affected individuals and regulators where required by law (e.g., PIPEDA real risk of significant harm; Québec risk of serious injury).
• We will provide prompt notice to customers of any privacy breach that poses such a risk and cooperate in investigations/notifications.

7) Retention

We retain personal information only as long as necessary for stated purposes or as required by law, then delete or de‑identify it. We may retain limited logs for security, fraud prevention, or legal record‑keeping.

8) Your rights

You may request access to, correction of, or deletion of your personal information, and ask questions about our practices. Contact support@constructpro.co. We may verify identity and, where permitted, charge a reasonable fee for copies. We respond to access/correction requests within 30 days (or explain any permitted extension).

Québec: You may also request de‑indexation or cessation of dissemination in certain cases (Law 25), and request data portability for certain computerized personal information you provided, in a structured, commonly used technological format, including transmission to an authorized third party.

If we can’t resolve your concern, you may contact the Office of the Privacy Commissioner of Canada or, in Québec, the Commission d’accès à l’information (CAI).

9) Cookies

We use essential cookies (auth, security), preferences, and analytics. See our Cookie Policy for details and controls.

Where required, we will obtain consent for non‑essential cookies—and for Québec users, we obtain express consent before setting tracking cookies. Your banner should allow accepting or declining non‑essential cookies and block them by default until consent.

10) Children

Not for children under 16. If a child provided data, contact us to delete it. Québec: if we ever collect information about a minor under 14, we will obtain parent/tutor consent; individuals age 14+ may consent themselves.

11) Changes

We’ll post updates with a new Effective Date and notify of material changes.

Contact: support@constructpro.co | 1325 Lower Water Street, Suite 918, Halifax, NS

12) Automated decision‑making

If we use automated processing to make a decision about you (for example, candidate matching/ranking), we will inform you, explain the principal factors and parameters, and offer a way to submit observations or request a review by a person, as required by Québec law.

Acceptable Use Policy (AUP)

Effective date: November 1st, 2025

This AUP forms part of the Terms of Service.

You agree not to:

1. Break the law or others’ rights (IP, privacy, publicity, contractual).
2. Upload illegal, infringing, defamatory, obscene, hateful, or harassing content.
3. Discriminate or solicit discriminatory hiring criteria based on protected characteristics (e.g., race, national/ethnic origin, colour, religion, age, sex, sexual orientation, gender identity/expression, marital/family status, disability).
4. Impersonate others, misrepresent identity/qualifications, or submit fraudulent credentials.
5. Send spam or commercial electronic messages without consent (CASL), harvest emails, or operate lead‑gen farms.
6. Request or store sensitive personal information (e.g., health, union membership, religion, SIN) unless strictly necessary and lawful.
7. Attempt to bypass security, rate limits, or access non‑public data; introduce malware or scrape at scale.
8. Interfere with Service availability or load (e.g., abusive automation).
9. Use the Service to build a competing dataset or product.
10. Post jobs or messages that are misleading, illegal, or unsafe.

We may remove content, suspend accounts, and notify authorities where required.

Cookie Policy (Canada)

Effective date: November 1st, 2025

We use cookies and similar technologies to operate and improve ConstructPro.

What we use

• Essential (required): authentication/session, security (e.g., CSRF), basic site features.
• Preferences: remember choices (e.g., theme, language).
• Analytics/Performance: measure usage to improve (aggregated).
• (Optional) Marketing: only with consent; we do not run cross‑site behavioral ads.

Your choices

Browser controls allow you to delete or block cookies. Blocking essential cookies may break the site.

For non‑essential cookies, we will present consent choices (and for Québec users, express consent before setting tracking cookies). You can change preferences anytime via [Cookie Settings link]. Non‑essential cookies are blocked by default until consent.

Contact: support@constructpro.co

Data Processing Addendum (DPA, Canada, B2B Employers)

Effective date: November 1st, 2025

This DPA is between [Employer Legal Name] (“Customer”) and [Company Legal Name] (“ConstructPro”) and forms part of the Terms/Agreement when Customer uses paid employer features.

1) Roles & scope

• For personal information Customer inputs about candidates, team members, and billing contacts, Customer is the “organization”. ConstructPro acts as a service provider/processor under applicable laws.
• ConstructPro will process personal information only to provide the Service, per Customer’s documented instructions.

2) ConstructPro obligations

• Process only on documented instructions; notify Customer if an instruction violates applicable law.
• Ensure confidentiality by personnel bound to appropriate obligations.
• Implement appropriate technical and organizational security measures (see Annex B).
• Assist Customer with reasonable requests to honor individual rights, security, and privacy assessments (including Law 25 transfer assessments for Québec).
• Notify Customer without undue delay of any privacy breach posing a real risk of significant harm / risk of serious injury, and cooperate in investigations/notifications.
• Maintain records of processing and make them available upon reasonable request.
• Delete or return personal information upon termination (subject to legal retention).

3) Sub‑processors

ConstructPro may use sub‑processors (e.g., hosting, email, payments) listed in Annex A, imposing data protection terms no less protective than this DPA. ConstructPro will provide at least 30 days’ advance notice of changes to sub‑processors; if Customer raises a reasonable, specific objection that cannot be resolved in good faith, Customer may terminate the affected services and receive a pro‑rata refund.

4) Cross‑border transfers

ConstructPro may process personal information in Canada, the United States, or other locations where ConstructPro or sub‑processors operate. ConstructPro will ensure a level of protection appropriate to the sensitivity of the information and, for Québec, conduct transfer assessments and include protective contractual measures as required by Law 25.

5) Customer responsibilities

Customer is responsible for obtaining all necessary consents and providing notices to individuals; for lawful collection and instructions; and for its own security controls (e.g., access management).

6) Audits

Upon reasonable written request (no more than annually, and after a material incident), ConstructPro will provide available third‑party reports or respond to a security questionnaire. On‑site audits require reasonable notice and confidentiality, and are limited to once per year.

7) Data return & deletion

Upon termination or expiry, Customer may request an export of personal information within 30 days. ConstructPro will delete personal information within 60 days thereafter, subject to legal retention.

8) Liability

Each party’s aggregate liability under this DPA is limited as set out in the Agreement/Terms.

9) Term

This DPA remains in force for the duration of the Agreement and thereafter as needed for post‑termination obligations.