Privacy Policy and Notice at Collection
Effective and last updated: July 29, 2026
This policy explains how Supership Co. ("Supership," "we," "us," or "our") handles personal information when you visit supership.to, contact us, request information or a quote, subscribe to communications, apply for a role, or otherwise interact with us in Canada or the United States.
This policy is a general description of our practices. Specific services, contracts, or local laws may provide additional terms or rights.
Information we collect and why
We limit collection to information reasonably needed for the purposes described below. Please do not include sensitive personal information in an open text field.
| Category and examples | Source | Purposes |
|---|---|---|
| Identifiers and contact details: name, email address, phone number, company, postal address, and online identifiers. | You, your organization, and site technology. | Respond to inquiries and quote requests, provide services, manage relationships, send requested communications, and maintain security. |
| Inquiry, commercial, and professional information: message content, service interests, business needs, transaction or account details, and job application information. | You, your organization, or a referral source. | Assess and respond to requests, prepare proposals, deliver and improve services, recruit, keep business records, and meet legal obligations. |
| Internet and device activity: IP address, browser and device type, page views, referral source, approximate location inferred from IP, and interactions with the site. | Our hosting and security providers; analytics and advertising providers only after the applicable permission. | Operate, secure, troubleshoot, and measure the site; understand aggregate use; and, with permission, measure campaigns and support interest-based advertising. |
| Preference records: cookie choices, consent version, timestamp, and Global Privacy Control status. | Your browser and your choices. | Remember and demonstrate your privacy choices. |
Cookies, analytics, advertising, and Global Privacy Control
Essential site technology supports security, forms, navigation, and remembering your privacy choices. Google Analytics is optional analytics technology. Google Ads and Meta Pixel are optional advertising technology. We block these non-essential technologies until you make a choice; rejecting them does not prevent you from using the site. Google Tag Manager is disabled entirely pending a container-level privacy audit.
Advertising technology may allow Google and Meta to receive identifiers and internet activity for campaign measurement or interest-based advertising. California law may treat this disclosure as "sharing" even when no money changes hands. Supership does not sell personal information for money.
We recognize a browser-enabled Global Privacy Control ("GPC") signal as a request to opt out of sale or sharing for advertising. When GPC is present, advertising technology remains off. You can review or change available choices at any time:
We do not currently respond to the older "Do Not Track" signal because there is no consistent industry standard for it.
How we disclose information
We disclose personal information only as reasonably necessary for the purposes above, subject to appropriate contractual, technical, and organizational controls where applicable.
| Recipient | Role and information involved |
|---|---|
| Vercel and website security providers | Device, log, and request information needed to deliver and protect the site. |
| Cloudinary | Normal request information associated with delivery of site images or media where a Cloudinary-hosted asset is used. |
| Cloudflare Turnstile | Security and device signals used to distinguish people from automated abuse when a protected form is submitted. |
| Resend | Contact and newsletter form details used to deliver messages to our team. |
| Google Analytics | Internet and device activity for site measurement, only when analytics is accepted. |
| Google Ads and Meta | Online identifiers and internet activity for advertising measurement and interest-based advertising, only when advertising is accepted and GPC is not active. |
| Professional advisers, transaction parties, authorities, or courts | Information reasonably necessary for advice, a business transaction, legal compliance, fraud prevention, safety, or the protection of rights. |
Service providers may process information in Canada, the United States, or other countries where they operate. Information may therefore be subject to the laws and lawful access processes of those places.
Retention
We keep personal information only as long as reasonably needed for the identified purpose, legal requirements, dispute resolution, and security. Our website retention schedule uses the following targets, after which information is deleted, de-identified, or securely archived unless a longer period is required:
- Contact and quote inquiries: up to 24 months after the last interaction.
- Newsletter information: until you unsubscribe, plus a limited suppression record to honour the request.
- Cookie preference records stored in your browser: up to 180 days.
- Security and server logs: generally up to 30 days, with longer retention for a documented security or legal need.
- Analytics and advertising records: according to the shortest practical provider setting and our account configuration, subject to your withdrawal of permission.
- Contract, transaction, tax, and legal records: for the period required by applicable law or a legitimate claim.
Your choices and privacy rights
Canada
Subject to applicable Canadian privacy law, you may request access to or correction of your personal information, withdraw consent for future use or disclosure, and challenge our compliance. Withdrawal does not affect processing already completed and may limit a service that depends on the information. You may also complain to the Office of the Privacy Commissioner of Canada or the relevant provincial regulator.
California
Where the California Consumer Privacy Act applies, California residents may request to know the categories or specific pieces of personal information collected, request deletion or correction, opt out of sale or sharing, and limit certain uses of sensitive personal information. We do not use or disclose sensitive personal information through this site for purposes that require a right to limit. We will not discriminate against you for exercising an applicable privacy right.
In the preceding 12 months, the site may have collected the categories described above and disclosed them for the listed business purposes. With permission, identifiers and internet activity may have been shared with Google or Meta for cross-context behavioural advertising. We do not knowingly sell or share the personal information of people under 16.
Other United States jurisdictions
Residents of other states may have similar rights to access, correct, delete, obtain a copy of, or opt out of certain processing of personal information, depending on applicable law.
How to make a request
Email legal@supership.to with "Privacy Request" in the subject line and describe the request and your jurisdiction. We may need to verify your identity using information related to your interaction with us. Authorized agents may submit requests where permitted by law; we may request proof of authority. If we deny a request, you may ask us to reconsider by replying to our decision.
Security, children, and automated decisions
We use administrative, technical, and physical safeguards appropriate to the nature of the information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
This business-to-business site is not directed to children under 16, and we do not knowingly collect their personal information. We do not use website information to make decisions that produce legal or similarly significant effects solely by automated means.
Changes to this policy
We may update this policy as our practices or legal obligations change. We will post the revised policy here, update the date above, and provide additional notice where required.
Contact our privacy lead
Questions, requests, or complaints may be sent to legal@supership.to or mailed to:
Canada fulfillment center
73 Millwick Dr, Unit A
North York, Ontario M9L 1Y4
Canada
United States fulfillment center
924 Via Alondra
Camarillo, CA 93012
USA