Hill Supplies website – privacy policy

This page explains what hillsupplies.com collects when you visit it, why, and who sees it. The Hill Supplies app used by our staff and drivers has its own privacy policy.

What the website collects

Your account – if you have one

Your name, email address, phone number and company, and the Hill Supplies customer account your login belongs to. Your password is never stored: only a one-way scrambled form of it that cannot be turned back into the password.

Orders and account activity

Your cart, the orders and quotes you send, your ship-to addresses and delivery instructions, and the PO and job references you enter. These go into our business system, as they would if you called or came in. Signed in, you can see your account's orders, invoices, statements and proof-of-delivery records.

The pages you visit

Our server records each page viewed and each form sent: the time, the page, whether it worked, the network address it came from and the browser's description of itself, and – when you are signed in – your login and customer account. What you type into a form is not recorded, with one exception: the email address typed on the sign-in page, so a failed sign-in can be looked into. We use this to keep the site working and secure and to answer questions about an account.

Google Analytics

The site uses Google Analytics to count visits and see which pages are used, so we can improve the site. Google receives the page visited, the address it came from, and general information about your browser, device and approximate location, and sets its own cookies to recognise a returning browser. We do not send Google your name, email, account or orders. Google handles this information under Google's privacy policy, and may process it outside Canada. You can block it with Google's opt-out browser add-on or your browser's privacy settings; the site works the same without it.

Cookies

• Sign-in – keeps you signed in. It ends when you sign out, or after 30 days without a visit.
• Early access – before the site opens to everyone, remembers that a tester has been let in. It lasts a year.
• Google Analytics – described above.

Our own cookies hold no personal information and are not used for advertising. Blocking them stops sign-in from working; nothing else changes.

What we do not do

• No advertising, and no tracking for advertising.
• We do not sell or rent any of this information.

Who sees it

• Hill Supplies – our sales, office and delivery staff, to look after your account and orders.
• Other users of your company's account – people your company has given a login see its orders, invoices and deliveries.
• Service providers: Microsoft 365 sends our email (account invitations, password resets and messages about your orders); Google, for Google Analytics as described above.
• Anyone the law requires us to share it with.

Where it is kept, and for how long

The website runs on our hosted server in Toronto, and account and order information is kept on Hill Supplies' own servers in Canada. Orders, invoices and deliveries are business records and are kept as such. Your account is kept until you or your company ask us to close it. The record of pages visited is kept for one year.

Your choices

• You can ask to see the information we hold about you, or to correct it, or to close your account.
• You can block Google Analytics, as described above.

Questions

Contact Hill Supplies at 157 Crosby Avenue, Richmond Hill, Ontario L4C 2R3 · 905-883-0633 · sales@hillsupplies.com. We handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If we change this policy, the new version will be posted here with a new effective date.