Privacy Policy

01 Who we are and what this covers

Maple MPSS Inc. (“Maple MPSS”, “we”, “us”) is a Canadian company with its head office in Burlington, Ontario and a delivery office in Chennai, Tamil Nadu, India. We provide offshore sourcing services and AI services to manufacturers in North America.

This policy explains how we handle personal information (information about an identifiable individual) that we collect through www.maplempss.com and through the business correspondence that follows from it. It is written to meet our obligations under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and follows the ten fair information principles set out in that Act.

Business contact information used solely to communicate with you about your employment or profession (your work email, work phone, job title and employer) is exempt from parts of PIPEDA. We have chosen to describe how we treat it here anyway, because most of what we receive is exactly that.

This policy does not govern personal information we process on behalf of a client under a signed services agreement. In that situation the client is the organisation accountable for the information and its own privacy policy applies; we act on the client’s instructions under the terms of that agreement.

02 The personal information we collect

Information you send us directly

The contact form on our Contact page opens a message in your own email application, addressed to info@maplempss.com. There is no form processor, no database and no third-party form service between you and us. The fields are assembled into an email that you send. We receive whatever that email contains, which is normally:

• your name;
• your company;
• your email address;
• your phone number, if you choose to give it;
• the message you write, and any drawings, specifications, quotes or other files you attach.

Because your own email client sends the message, your email provider handles it under its own privacy terms before it reaches us. The same is true if you email or telephone us directly instead of using the form.

Information collected automatically

Our host records standard server logs for every request: IP address, date and time, the page requested, referring page, and browser user-agent string. These are used for security, abuse prevention and diagnosing faults. We do not use them to build profiles of visitors.

If you accept cookies, Google Analytics also collects usage information. Clause 05 sets out exactly what that involves.

What we do not collect

• We do not ask for, and have no use for, sensitive personal information: health information, financial account details, government identifiers, or information about race, religion, political opinion, sexual orientation or biometrics.
• We do not buy contact lists or personal information from data brokers.
• We do not run advertising pixels, retargeting tags, session recording, heatmapping or cross-site tracking of any kind.
• Our fonts are served from our own domain rather than a font CDN, so simply loading a page does not disclose your IP address to a third party.

The interactive tools on our AI Services page

The demonstrations on the AI Services page run entirely inside your browser. Anything you type into them stays on your device, is not transmitted to us or to anyone else, and is discarded when you close the tab.

03 Why we collect it

PIPEDA requires us to identify our purposes at or before the time of collection. We collect and use personal information only for the following:

• To answer you. Responding to an enquiry, preparing a quotation, and the back-and-forth that goes with it.
• To deliver work. Managing a sourcing or AI engagement you have asked us to carry out, including sourcing parts against your drawings and coordinating delivery.
• To keep our records. Maintaining correspondence, quotations and contracts as business records, and meeting tax, customs and accounting obligations.
• To run and secure the website. Serving pages, keeping the site available, and investigating abuse or attack.
• To understand what is read. Aggregate analytics, and only where you have accepted cookies.

If we ever want to use your information for a purpose that is not on this list, we will describe the new purpose and obtain your consent before doing so.

04 Consent, and how to withdraw it

We rely on your express consent when you send us an enquiry: the act of writing to us is what tells us we may use your details to reply. We rely on your express consent for analytics cookies, given by clicking “Accept” on the cookie notice.

We rely on implied consent for the limited set of server-log information described in clause 02, which is necessary to serve the page you requested and to keep the site secure.

You may withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice. Write to info@maplempss.com and we will stop using your information for the purposes you name. We will tell you plainly if withdrawing consent means we can no longer provide a service you have asked for. For example, we cannot quote a part without holding the drawing and a way to reach you.

Withdrawing consent does not require us to delete records we are obliged to retain (clause 08), and it does not apply retroactively to disclosures already properly made.

To change your cookie choice specifically, use the button in clause 05: no email required.

05 Cookies and analytics

A cookie is a small file a website asks your browser to store. This site uses two categories, and only one of them is optional.

Strictly necessary: always on

We store a single entry in your browser’s local storage, named maple-cookie-consent, recording whether you accepted or declined analytics. It holds one word, never leaves your device, and exists only so we do not have to ask you again on every page. Nothing in it identifies you.

Analytics: off until you accept

We use Google Analytics 4 (property G-V57XC9FJTQ), provided by Google LLC, to understand which pages are read and how visitors arrive. The Google Analytics script is not loaded, and no Google cookie is set, until you click “Accept” on the cookie notice. If you decline, or simply never answer, no request is ever made to Google from this site.

If you do accept, Google Analytics sets the following:

Through this, Google receives your IP address, the pages you view, the approximate time on each, your referring source, and general device and browser characteristics. Google Analytics 4 does not store IP addresses and derives only a coarse, city-level location from them before discarding them. We have not enabled Google Signals, advertising features, or data sharing with other Google products. We see only aggregate reports; we cannot use Google Analytics to identify an individual visitor.

Google processes this data on servers in the United States and other countries (see clause 07). Google’s own handling is governed by the Google Privacy Policy.

Changing your mind

Your choice is not final. Use the button below to clear it: the cookie notice will reappear, any analytics cookies already set will be deleted, and you can choose again.

Change my cookie choice

You can also block cookies in your browser settings, or install Google’s Analytics Opt-out Browser Add-on, which stops Google Analytics on every site you visit. This site does not respond to the Do Not Track browser signal, because no consistent industry standard for honouring it was ever settled. We gate analytics on the notice instead, which is stricter.

06 Who we share it with

We disclose personal information only in the situations below, and only the minimum needed in each.

• Within Maple MPSS. Between our Burlington and Chennai offices, to the people working on your enquiry or engagement.
• Service providers. Third parties who process information on our behalf, under contract, limited to what they need to perform their function. The current ones are listed below.
• Suppliers and logistics partners. Where fulfilling your order requires it, for example, giving a manufacturing partner a drawing, or giving a freight forwarder a delivery address and a contact name for customs clearance.
• Professional advisers. Our accountants, auditors, insurers and lawyers, where they need it and are bound by professional confidentiality.
• Where the law requires it. In response to a valid court order, subpoena, warrant or other lawful demand from an authority with jurisdiction; to collect a debt owed to us; or where PIPEDA otherwise permits disclosure without consent.
• In a business transaction. If Maple MPSS is sold, merged or reorganised, information may transfer to the successor, which would remain bound by this policy or one materially equivalent.

Our service providers

Our email is handled by a commercial email provider, and our correspondence with you sits in those mailboxes. We will name the provider on request.

If we engage a new service provider that handles personal information, we will update this table.

07 Storage and processing outside Canada

PIPEDA does not prohibit transferring personal information outside Canada. It requires us to be transparent about it and to remain accountable for the information wherever it goes. We are telling you here, and we remain accountable.

Specifically:

• India. Our Chennai office is part of Maple MPSS. Staff there work on sourcing and delivery, and access enquiries and project correspondence in the course of that work.
• United States. Our website host and, where you have accepted cookies, Google Analytics operate from the United States.

We use contractual and technical means to give information a comparable level of protection wherever it is handled. If you would prefer that your enquiry not be accessible from our India office, say so in your message and we will keep it to the Burlington team; be aware this may slow our response.

08 How long we keep it

We keep personal information only as long as it serves the purpose it was collected for, or as long as the law requires, whichever is longer.

When a retention period ends we delete the information or render it anonymous. Where we have used information to make a decision about you, we retain it long enough for you to be able to challenge that decision.

09 How we protect it

We apply safeguards appropriate to the sensitivity of the information, which, for engineering drawings and commercial terms, we treat as commercially sensitive even where it is not personally sensitive:

• The entire site is served over HTTPS; connections are encrypted in transit.
• Access to correspondence and project files is limited to the people who need it to do their work.
• Accounts holding personal information are protected by strong authentication.
• Staff in both offices are bound by confidentiality obligations covering client information.
• We keep the amount of personal information we hold deliberately small. The most effective safeguard on this site is that there is no form database to breach.

No safeguard is absolute, and we cannot guarantee the security of information transmitted over the internet. Ordinary email is not a secure channel; if you need to send us something genuinely confidential, tell us first and we will arrange a secure method.

If a breach of security safeguards occurs that creates a real risk of significant harm to you, we will report it to the Privacy Commissioner of Canada and notify you as soon as feasible, as PIPEDA requires, and we will keep a record of the breach.

10 Keeping it accurate

We keep personal information as accurate, complete and up to date as is necessary for the purposes it is used for. We do not routinely update contact details on our own initiative, because doing so would mean collecting more information than we need. If your details change and it matters to work we are doing for you, tell us and we will correct our records.

11 Your right to see what we hold

On written request, you have the right to be told whether we hold personal information about you, what we use it for, and to whom it has been disclosed, and to be given access to that information.

Write to info@maplempss.com with “Access request” in the subject line. We may ask for enough information to confirm your identity, and we will use anything you provide for that purpose only. We will respond within 30 days. If we need longer, we will tell you before day 30, explain why, and give you a new date. Access is free unless a request is unusually costly to fulfil, in which case we will tell you the cost in advance and you may withdraw the request.

If you show us that information we hold is wrong or incomplete, we will correct it. Where the correction is disputed, we will note the substance of the dispute on the file. Where the record has been disclosed to a third party in the past year, we will pass the correction or notation on to them.

We may refuse access in the limited circumstances PIPEDA allows, for example where granting it would reveal personal information about another person, disclose commercially confidential information, or where the information is protected by solicitor-client privilege. If we refuse, we will tell you in writing, give our reasons, cite the relevant provision, and explain how to complain.

12 Children

This is a business-to-business website aimed at people acting in a professional capacity. It is not directed at children, and we do not knowingly collect personal information from anyone under the age of majority in their province or territory. If you believe a minor has sent us personal information, contact us and we will delete it.

13 Other sites we link to

Our footer links to our LinkedIn, YouTube and Instagram pages, and this policy links to Google. Those links load nothing until you click them. There are no embedded posts, players or widgets anywhere on this site, so those companies learn nothing about your visit unless you choose to follow a link.

Once you leave www.maplempss.com, this policy no longer applies. Each of those services handles your information under its own privacy policy, over which we have no control and for which we accept no responsibility.

14 Changes to this policy

We may update this policy as our practices, service providers or legal obligations change. The current version always carries an effective date at the top of the page. If we make a change that materially affects how we handle information we already hold about you, we will take reasonable steps to tell you directly rather than relying on this page alone. Continuing to use the site after a change takes effect means you accept the updated policy.

15 Questions, and how to complain

We have designated an individual accountable for our compliance with this policy and with PIPEDA. Direct any question, access request, correction or complaint to:

We will acknowledge your complaint, investigate it, and tell you what we found and what we did about it. If we were wrong, we will say so and correct our practices.

If you are not satisfied with our response, you have the right to complain to the federal regulator:

Residents of Quebec, British Columbia and Alberta may also have recourse to their provincial privacy regulator.

Terms of Use  ·  Contact Maple MPSS