Privacy Policy

1. Purpose & Scope

This Privacy Policy describes how D&D Marine Industrial Welding & Fabrication (“D&D Welding”, “we”, “us”, or “our”) collects, uses, retains, and protects personal and commercial contact information gathered through our public website (ddwelding.ca), quote request forms, and operational customer portal.

We respect your privacy and handle all customer records in accordance with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Nova Scotia commercial standards.

2. Information We Collect

We only collect information necessary to evaluate project feasibility, provide itemized written quotes, execute on-site welding and fabrication services, and process commercial invoices. This includes:

• Contact Information: Full name, company or vessel name, business email address, and primary telephone number.
• Project & Site Details: Job description, vessel or facility location, equipment specifications, site access details, and project scheduling preferences.
• Field Documentation: Job progress photographs, weld inspection records, QA/QC documentation, and client sign-off signatures captured on-site.
• Billing & Payment Records: Billing address, tax exemption certificates (where applicable), payment method confirmation, and transaction receipts.

3. How Information Is Used

Information collected is used strictly for operational commercial purposes:

• Reviewing inbound quote and intake requests and delivering itemized estimates.
• Dispatching mobile welding rigs and qualified personnel to commercial dockside or plant locations.
• Communicating project updates, schedule confirmations, and emergency repair availability.
• Issuing itemized commercial invoices and recording accounts receivable reconciliation.
• Complying with provincial trade safety, tax, and CRA reporting obligations.

4. Protection of Payment Information

We do not store or process raw credit card numbers or sensitive banking credentials on our web servers. Online credit card payments and checkout sessions are handled securely by Stripe, a certified PCI Service Provider Level 1. Direct Interac e-Transfers are processed directly through your financial institution.

5. Third-Party Service Providers

We do not sell, rent, trade, or monetize customer information. We share data only with infrastructure providers bound by confidentiality and security agreements to support our service delivery:

• Database & Hosting: Supabase and Vercel for encrypted database storage and application hosting.
• Transactional Communications: Resend for quote delivery, confirmation notices, and invoice delivery.
• Payment Infrastructure: Stripe for PCI-compliant credit card processing.

6. Your Rights & Contact Information

Commercial customers may request access to their stored contact records, request corrections to inaccurate project records, or inquire about data retention by contacting our designated privacy officer: