Privacy Policy
FORM+ Design Ltd. — Privacy Policy
Last updated: Oct 20, 2025
1. Who we are
FORM+ Design Ltd. (“FORM+”, “we”, “us”, “our”) provides curated fixtures and related services via formplusdesign.com and our customer portals. Our registered address is FORM+ Design Ltd. 108-19155 38 Avenue Surrey British ColumbiaV2P 0E7.
How to contact us about privacy: [email protected]
2. Scope
This policy explains how we collect, use, disclose, and protect personal information (information about an identifiable individual) across our websites, customer portals, and communications, in compliance with BC’s Personal Information Protection Act (PIPA) and Canada’s PIPEDA. If you are located in jurisdictions with additional rights (e.g., Quebec, EU/EEA, UK, California), see Section 12 for region-specific notices.
3. What we collect
We collect the following categories of personal information:
Identity & contact data: name, company, job title, shipping/billing address, phone, email.
Account & transaction data: project lists, saved products, quotes, orders, invoices, shipment history.
Communications: emails, support requests, notes you add to orders/shipments.
Technical & usage data: device, browser, IP address, pages viewed, clicks, referring/exit pages, time on page, and cookie IDs.
Marketing preferences: your newsletter/marketing choices.
Professional data (B2B): business role, organization, project details you choose to share.
Sensitive data: we do not intentionally collect sensitive personal information (e.g., health, biometric) on public areas. If we must process biometrics or other sensitive data in limited contexts, we apply heightened safeguards and purpose limitation.
4. How we collect it
Directly from you (forms, checkout, creating an account, email, support).
Automatically via cookies, pixels, and similar technologies when you use our sites/portals.
From service providers/partners (e.g., payment processors, freight carriers) to complete transactions or deliver services (see Section 8).
From publicly available business sources for B2B outreach (where permitted by law).
5. Why we use your information (purposes)
Provide our services: create/manage accounts/projects, process orders, ship products, handle returns/warranty, and provide customer support.
Operate and secure our sites/portals: diagnostics, fraud prevention, authentication, and service quality.
Improve and develop: analyze usage to improve products, content, and logistics workflows.
Communicate: transactional emails (orders, shipments, receipts), service notices, and—if you’ve consented—marketing messages/newsletters. Under CASL, marketing emails require consent and must include identification and an unsubscribe link.
Legal/compliance: record keeping, audits, enforcing terms, and meeting legal requirements.
6. Our legal basis (how consent works)
In Canada, we generally rely on your consent (express or implied) for collection, use, and disclosure, except where an exemption applies (e.g., legal, security, fraud). You can withdraw consent subject to legal/contractual limits and reasonable notice. We follow the OPC’s guidance on meaningful consent (clear purposes, timing, and control).
If you are in the EU/UK, our legal bases include contract necessity, legitimate interests, consent, legal obligations, and vital interests where applicable; details appear in Section 12.
7. Cookies and similar technologies
We use necessary cookies for core functionality and (if enabled) analytics/marketing cookies for performance and personalization. You can control cookies via your browser settings and (where required) our consent banner. If you’re in the EU/UK, we’ll request consent before setting non-essential cookies.
8. How we share information
We share personal information with trusted service providers who assist us in operating our business (e.g., website hosting, cloud platforms, payment processors, shipping carriers, email providers, analytics). These providers may only use your data to perform services for us and must protect it contractually. We may disclose information to authorities where required by law or to protect our rights, users, or the public. We do not sell personal information.
9. International transfers
Our service providers may be located outside your province or country. When transferring data internationally, we use safeguards that are appropriate in the circumstances (e.g., contractual protection, access controls). If you are located in the EU/UK, we rely on appropriate transfer mechanisms where applicable.
10. How long we keep information
We retain personal information only as long as necessary to fulfill the purposes described above—e.g., to complete orders, meet legal/accounting obligations, resolve disputes, and enforce agreements—then securely delete or anonymize it. For EU/UK users, we disclose retention periods or the criteria used to determine them.
11. Security
We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information—for example, role-based access, encryption in transit, vulnerability management, staff training, and vendor due diligence. No method is 100% secure, but we continually improve our controls.
12. Your rights
Canada (PIPA & PIPEDA): You have the right to access and correct your personal information, to withdraw consent (with limits), and to ask about our use and disclosure of your information. To exercise rights, contact info@formplusdesign.com. You may also contact the Office of the Information and Privacy Commissioner for BC or the Office of the Privacy Commissioner of Canada.
Quebec residents (Law 25): If we offer goods/services to persons in Quebec, we will comply with Law 25, including designating a privacy lead, providing transparency about cross-border transfers, performing privacy impact assessments where required, honoring enhanced consent rules for sensitive information, and handling automated decision disclosures. Contact us to exercise your rights or to obtain our governance policies.
EU/EEA & UK (GDPR): You have rights to access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time. You also have the right to lodge a complaint with your supervisory authority. When we collect data directly, we provide the Article 13 information; when collected from other sources, Article 14 applies.
Email marketing (CASL): You may unsubscribe at any time via the link in our emails or by contacting us. Our commercial electronic messages identify our business and provide our contact details, as required by CASL.
California residents (if applicable): If we become subject to the CCPA/CPRA, we will publish a California-specific notice describing categories of personal information collected, purposes, your rights (including access, deletion, correction, and opt-out of “selling”/“sharing” for cross-context behavioral advertising), and how to exercise them.
13. Children
Our services are not directed to children under the age of 13, and we do not knowingly collect children’s personal information. If you believe a child has provided personal information to us, contact us to request deletion.
14. Third-party links
Our site may link to third-party sites (e.g., carriers, payment processors). Their privacy practices are governed by their own policies.
15. Changes to this policy
We may update this policy from time to time. Material changes will be highlighted on this page with a new “Last updated” date.
16. How to contact us
Privacy contact:
info@formplusdesign.com
Mailing address:
FORM+ Design Ltd.
108-19155 38 Avenue
Surrey British Columbia
V2P 0E7
