Privacy Policy

Information We Collect

• Contact details you provide, name, email, phone, region, and project details, when you submit a quote, contact, catalogue, or newsletter form.
• Account information if you create an account or save a design: your email and the home designs you create in the 3D home builder. A design saved without an account is kept under a guest session or in your own browser's storage.
• Commercial planner layouts. The commercial planner keeps your layout in your own browser's storage, not in an account. If you make a share link, the layout is written into the link itself, so anyone with the link can open it. If you ask for a quote from the planner, the link and a summary of the layout are sent to us with your contact details.
• Usage data collected automatically through analytics (e.g. pages viewed, device/browser type, approximate location). See Service Providers We Use below for what each tool collects.
• The messages you type into the website chat assistant. See Website Chat below.
• Job application details if you apply for a position: your name, email, phone number, anything you write about your experience, and the resume file you attach. See Job Applicants below.

How We Use Your Information

• To respond to inquiries and prepare quotes, proposals, and project details.
• To create and manage your account and the designs you save.
• To operate, secure, and improve our website and services.
• When you ask us for a quote or a brochure, or contact us through a form on this website, to send you the brochure or information you requested, and to reply and follow up about that inquiry for up to 6 months. You can ask us to stop at any time.
• To send our newsletter and project updates, only if you tick the newsletter box on a form or sign up for the newsletter. The box is never ticked for you. We keep a record of when you ticked it and the words beside it. Every newsletter includes an unsubscribe link, and you can unsubscribe at any time.
• To assess job applications and contact applicants about the role they applied for and comparable openings.

Job Applicants

When you apply for a position through our careers pages, we collect your name, email address, phone number, anything you choose to write about your experience, and the resume or CV file you attach.

• Why we collect it. To assess your application for the position you applied for, to contact you about it, and to consider you for comparable openings during the retention period below. We do not use it for marketing and you are never added to a mailing list by applying.
• Where it is stored. Application details are held in our private database and resume files in private storage, both hosted by Supabase in Canada. Neither is publicly accessible. Only Herauf staff who are involved in hiring can open them.
• How long we keep it. Twelve months from the date you apply, after which the application and the resume file are deleted automatically. If you are hired, your information moves into your employment record and is kept under our employment record practices instead.
• Who else sees it. Nobody outside Herauf, other than our hosting provider as described above. A notification email telling us an application has arrived is delivered through Web3Forms; your resume file is not attached to it.
• Your choices. You can ask us to delete your application and resume at any time, before the twelve months are up, by emailing the address below. Applying is voluntary, and you can withdraw at any point.

Service Providers We Use

We do not sell or trade your personal information. We share limited data only with trusted providers who help us run the site and our business, under agreements that require them to protect it:

• Vercel, website hosting, plus Vercel Web Analytics and Speed Insights, which count page views and measure how fast pages load, without cookies.
• Supabase, secure database and authentication for accounts and saved designs.
• Google Analytics, website usage analytics (pages viewed, device and browser, approximate location), using cookies that identify your browser rather than you by name. United States.
• Lot previews, when you open the lot tool, Google Maps (where configured) receives your address searches, map coordinates and connection information to show satellite imagery and 3D terrain. If you choose Use my location and permit it, your current coordinates are sent to Google for a nearby address. The keyless alternative uses OpenStreetMap for address lookup and Esri for imagery. Lot coordinates remain in your current builder session and are not included in analytics events. Google handles its data under Google's Privacy Policy.
• Google Ads, measuring which of our ads lead to enquiries. When you submit a form, the email address, phone number and name you entered are sent to Google in hashed form so Google can match the enquiry to an ad click (Enhanced Conversions). If you arrived from a Google ad, the ad click ID is kept with your enquiry so we can later report qualified leads and customers back to Google Ads. See our Cookie Policy and Google's privacy policy.
• Umami, first-party analytics hosted by our web contractor. It counts page views and site events (such as a form started or a phone number tapped), with the referring site, browser, device type and approximate location. It does not use cookies, and we never send it your name, email address or phone number.
• Resend, delivery of the emails we send: the brochure or information you requested, follow-ups about your enquiry, quotes, and notifications to our own inbox. United States.
• Mailchimp, our newsletter list, only when you have asked to join it as described above. United States.
• Twilio, instant text alerts to our staff about a new enquiry, containing your name, phone number, the project type and the form you used. It is not used to text you. United States.
• Cloudflare Turnstile, a bot check on our forms and the chat assistant, which reads signals from your browser and connection (such as your IP address and browser characteristics) to tell people from automated spam. United States.
• Google (Gemini) and Anthropic, the AI providers that write the chat assistant's replies from the messages you type. United States. See Website Chat below.
• Web3Forms, delivery of form submissions to our inbox.
• Instagram, Facebook and YouTube, our own recent posts shown on the home page, and videos or links you choose to open. Our server collects the posts and serves their images from this website, so seeing the feed does not send your IP address to Meta or Google. Opening a post, or playing a YouTube video, takes you to that platform, which then handles your information under its own privacy policy. United States.
• Subcontractors or partners where genuinely required to deliver a project, and authorities where required by law.

Google Analytics and the Google Ads tag do not run on our staff dashboard or on customer account pages.

Where Your Information Is Processed

Some of the providers above store or process information outside Canada, mainly in the United States. While it is there, it is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities.

Data Retention

We keep personal information only as long as necessary for the purposes above, to maintain your account while it is active, and to meet legal, accounting, or reporting requirements. Job applications and resumes are deleted twelve months after they are submitted, as described under Job Applicants. You can ask us to delete your information at any time (see below).

Data Security

We use appropriate technical and organizational measures, including encryption in transit and access controls, to protect your information against unauthorized access, loss, or misuse. No method of transmission or storage is perfectly secure, but we work to safeguard your data.

Your Rights

• Request access to the personal information we hold about you.
• Request correction or deletion of your data.
• Withdraw consent or opt out of communications at any time.

To exercise any of these, email us using the contact below. We respond to requests for access to your personal information within 30 days.

How to Complain

If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it. You can also complain to a privacy regulator:

• Office of the Privacy Commissioner of Canada, priv.gc.ca
• Office of the Information and Privacy Commissioner for British Columbia, oipc.bc.ca
• Office of the Information and Privacy Commissioner of Alberta, oipc.ab.ca

Children's Privacy

Our website and services are intended for adults. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy from time to time. The “Last updated” date above reflects the most recent revision.

Contact Us

For questions or requests about this policy or your information, contact info@heraufmodular.com or call 1.639.382.4106.

Questions about privacy: info@heraufmodular.com (attention: Privacy).