Privacy & Data Residency Policy
How 905WOOD.COM SALES protects your data under Canadian federal privacy law
PIPEDA COMPLIANT
Governing law: Personal Information Protection and Electronic Documents Act (PIPEDA), S.C. 2000, c. 5. All personal information collected through the 905WOOD Digital Refinery is handled in strict accordance with PIPEDA's 10 fair information principles.
1. Data We Collect
When you request a quote, book a bin, or interact with the Digital Refinery platform, we may collect: your name, company name, email, phone number, site address, project details, and waste classification data. For Decoupled Billing customers, we also process weight tickets and CIRCIL Levy calculations.
2. Canadian Data Residency — Mandatory
AlloyDB AI — northamerica-northeast2 (Montreal)
All compliance data processed through the Digital Refinery — including Ontario Regulation 347 manifests, RPRA Hazardous Waste Program Registry submissions, TCLP test results, and chain-of-custody records — resides exclusively in Google AlloyDB deployed in the northamerica-northeast2 (Montreal) region. This is a hard architectural constraint, not a preference. RPRA regulatory data never leaves Canadian soil.
3. How We Use Your Data
Processing bin rental requests and Decoupled Billing invoices. Generating Certificate of Origin and Diversion Pass documentation. Compliance with O.Reg 347 manifesting requirements. Carbon Dividend (CORC) certificate generation for your Scope 3 reporting. Communicating service updates via Twilio Cloud PBX (voice, SMS, WhatsApp).
4. Explainable Compliance
The Digital Refinery uses Google Gemini and Vertex AI Pipelines to classify wood waste at the Compliance Gate. Every AI-driven classification decision is logged with full decision lineage via Vertex ML Metadata, citing specific O.Reg 347 waste codes. You have the right to request a human-readable explanation of any automated decision affecting your service.
5. Third-Party Processors
Stripe (payment processing, PCI-DSS Level 1), Twilio (communications), Google Cloud Platform (infrastructure, Montreal region), Chatbase (AI-assisted customer support). All processors are bound by data processing agreements compliant with PIPEDA requirements.
6. Your Rights
Under PIPEDA, you have the right to: access your personal information, request correction of inaccurate data, withdraw consent (subject to legal obligations), and file a complaint with the Office of the Privacy Commissioner of Canada. Contact sales@905wood.com for any privacy request.
7. Cookies
We use essential cookies for session management and platform functionality. Analytics cookies help us improve the Digital Refinery experience. You can manage cookie preferences in your browser settings.
8. Data Retention
Compliance records (O.Reg 347 manifests, TCLP results, chain-of-custody logs) are retained for 7 years per Ontario regulatory requirements. Billing records follow CRA retention guidelines. All other personal data is deleted upon request or after 24 months of inactivity.
Last updated: April 2026