Privacy Policy

Electroless Nickel Technologies Inc. ("ENTech", "we", "us", or "our") is a Canadian-owned and operated surface finishing company incorporated and operating in the Province of Ontario, Canada. We provide electroless nickel plating, aluminum anodizing, chrome coating, electrolytic nickel plating, black oxidizing, and industrial roller services to aerospace, defence, medical, and industrial clients across North America.

We are the data controller responsible for your personal information collected through our website enplating.ca and through our business operations. This Privacy Policy is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

We collect personal information only to the extent necessary to conduct our business and serve our clients. The categories of information we may collect include:

We use the personal information we collect exclusively for legitimate business purposes. Specifically, we use your information to:

• Process and fulfil ordersto prepare quotations, process purchase orders, perform coating services, and deliver completed parts.
• Communicate with youto respond to enquiries, provide order updates, issue invoices, and follow up on outstanding matters.
• Maintain quality and compliance recordsto satisfy our obligations under Nadcap, AS9100D, ISO 9001:2015, and the Controlled Goods Program, including traceability documentation.
• Improve our servicesto analyse website usage patterns and customer feedback to enhance our processes and user experience.
• Send relevant business communicationsto notify you of service updates, capability expansions, or certification renewals that may affect your orders. You may opt out at any time.
• Comply with legal obligationsto meet our obligations under applicable Canadian federal and provincial law, including tax, export control, and defence-related regulations.
• Protect our business intereststo detect, investigate, and prevent fraudulent transactions or other illegal activities.

Under PIPEDA and applicable Canadian privacy law, we process your personal information on the following legal bases:

• Consentwhere you have expressly provided consent, such as subscribing to communications or submitting a contact form.
• Contractual necessitywhere processing is required to fulfil a contract with you, such as processing a purchase order or delivering a service.
• Legal obligationwhere we are required by law to collect or retain certain information, including under the Defence Production Act (Controlled Goods Program), tax legislation, and quality management standards.
• Legitimate interestswhere processing is necessary for our legitimate business interests, such as maintaining business records, preventing fraud, and improving our services, provided these interests do not override your privacy rights.

We do not sell or share your personal information with third parties for commercial purposes. We may share your information only in the following limited circumstances:

• Service providerstrusted third-party vendors who assist us in operating our website, managing our ERP system, or processing payments, bound by confidentiality agreements and permitted to use your data only as directed by us.
• Regulatory and accreditation bodiessuch as the Performance Review Institute (PRI/Nadcap), Perry Johnson Registrars, and Public Works and Government Services Canada, where disclosure is required to maintain our certifications or comply with the Controlled Goods Program.
• Legal authoritieswhere required by a court order, subpoena, or applicable law, or where necessary to protect the rights, property, or safety of ENTech, our clients, or the public.
• Business transfersin the event of a merger, acquisition, or sale of all or part of our business assets, your information may be transferred as part of that transaction, subject to equivalent privacy protections.

Our website may use cookies and similar tracking technologies to improve your browsing experience and help us understand how visitors use our site.

• Essential cookiesrequired for the website to function correctly, such as session management and security tokens. These cannot be disabled.
• Analytics cookiesused to collect anonymised data about how visitors interact with our website (e.g., pages visited, time on site). We may use tools such as Google Analytics for this purpose.
• Preference cookiesused to remember your settings and preferences to improve your experience on return visits.

You may control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. We do not use cookies for advertising or cross-site tracking purposes.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention practices are as follows:

• Customer and order recordsretained for a minimum of 7 years following the completion of an order, in accordance with Canadian tax and business record-keeping requirements.
• Quality and compliance recordsretained in accordance with the requirements of our Nadcap, AS9100D, and ISO 9001:2015 certifications, typically a minimum of 10 years for aerospace-related records.
• Controlled Goods Program recordsretained as required under the Defence Production Act and associated regulations.
• Website enquiry and contact dataretained for up to 3 years from the date of last contact, unless a business relationship is established.
• Website analytics dataretained in anonymised or aggregated form for up to 26 months.

When personal information is no longer required, it is securely destroyed or anonymised in accordance with our data disposal procedures.

Under PIPEDA and applicable Canadian privacy law, you have the following rights with respect to your personal information:

• Right of accessyou have the right to request a copy of the personal information we hold about you, subject to certain legal exceptions.
• Right to correctionyou may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to withdraw consentwhere processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.
• Right to complainyou have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca if you believe your privacy rights have been violated.
• Right to be informedyou have the right to know what personal information we collect, how we use it, and with whom we share it, as described in this policy.

To exercise any of these rights, please contact us in writing at the address below. We will respond to all verified requests within 30 days in accordance with PIPEDA requirements.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Access controlspersonal information is accessible only to authorized personnel who require it to perform their job functions.
• Secure communicationsour website uses SSL/TLS encryption for data transmitted between your browser and our servers.
• Physical securityour facility at 36 Taber Road, Etobicoke is secured with controlled access, consistent with our Controlled Goods Program registration requirements.
• Employee trainingall staff with access to personal information receive training on our privacy and data handling obligations.
• Incident responsewe maintain procedures to detect, investigate, and respond to privacy breaches, including notification obligations under PIPEDA's breach reporting requirements.

Our website may contain links to third-party websites, including our certification bodies (such as eAuditNet.com for Nadcap verification) and industry resources. These websites operate independently and are governed by their own privacy policies.

We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policy of any external site you visit. The inclusion of a link on our website does not constitute an endorsement of that site's privacy practices.

Our website and services are directed exclusively at business professionals and are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

If we become aware that we have inadvertently collected personal information from a person under 18 years of age, we will take prompt steps to delete such information from our records. If you believe we may have collected information from a minor, please contact us immediately at info@enplating.ca.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services following the posting of any changes constitutes your acceptance of those changes.

For significant changes that materially affect how we use your personal information, we will make reasonable efforts to notify affected individuals directly where we hold contact information for them.