Get in touch with us today! Call us toll-free at 1.866.754.4111 or email us at [email protected]
Get in touch with us today! Call us toll-free at 1.866.754.4111 or email us at [email protected]
Effective Date: September 9, 2026
At REM Web Solutions Inc. (“REM”, “we”, “our” or “us”), we are committed to maintaining the trust and confidence of our customers, website visitors and the individuals whose personal information is handled through our services.
This Privacy Policy explains how we collect, use, disclose, protect and retain personal information when you visit the REM Web Solutions website, communicate with us, use our services or otherwise interact with REM.
REM is based in Kitchener, Ontario, Canada. For our ordinary commercial activities in Canada, our privacy practices are governed principally by the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy legislation.
This Policy also explains the circumstances in which REM may process personal information on behalf of our website and application customers.
We may collect personal information that you voluntarily provide to us, including your:
Our current website contact forms, for example, may request your first name, last name, email address, phone number, the nature of your enquiry and comments.
When you visit our website, our servers and technology providers may also automatically process technical and usage information such as your IP address, browser and device type, operating system, referring page or website, pages visited, timestamps and information generated through cookies or similar technologies.
Although this type of information may not directly include your name, it can still constitute personal information in some circumstances. The Office of the Privacy Commissioner of Canada specifically notes that an IP address may be personal information, particularly when combined with information such as the page visited and date and time of the visit.
We collect information in several ways, including when you:
We use personal information for purposes that include responding to enquiries; preparing quotes and proposals; delivering, managing and supporting our services; communicating with customers; managing accounts and billing; administering our website and systems; detecting or preventing security incidents; improving our website, products and services; understanding website usage; fulfilling legal or contractual obligations; and carrying out marketing activities where permitted by law.
We limit the collection, use and disclosure of personal information to purposes that are identified, reasonable and appropriate in the circumstances, and we seek meaningful consent where required. PIPEDA requires organisations to explain what personal information is collected, the purposes involved, relevant third-party sharing and significant consequences so that consent can be meaningful.
When you submit information through a form on our website, the information you enter may be transmitted to and stored within REM systems or approved service providers so that we can respond to the purpose for which the form was submitted.
This may include contact forms, quote requests, support requests, newsletter registrations, event registrations, file-upload forms or other website content forms.
Information submitted through a form is used for the purpose indicated at the time of submission and for reasonably related purposes such as follow-up communications, customer service, security, record keeping and the management of an existing or prospective business relationship.
Please do not submit sensitive personal information through a general website form unless REM has specifically requested it and the form is intended for that purpose.
REM uses cookies and similar technologies to provide website functionality, remember preferences, protect the website, understand website usage and, where enabled, support advertising or marketing activities.
Cookies are small pieces of information stored by your browser or device. Depending on their purpose, technologies used on our website may include:
Where we provide privacy or cookie controls, you may use those controls to manage the available categories. You may also be able to control cookies through your browser settings. Disabling certain technologies may affect some website functions.
The type of consent or control applied to a technology may vary according to its purpose, the nature of the information involved and the privacy requirements applicable to the visitor’s jurisdiction. Under PIPEDA, meaningful consent is generally required for the collection, use and disclosure of personal information, while the appropriate form of consent depends on factors such as sensitivity, reasonable expectations and risk.
We use Google Tag Manager (GTM) to help manage website tags and technologies. GTM itself is primarily a tag-management platform. Google states that GTM may collect aggregated diagnostic information about tag firing but, apart from normal HTTP logs and diagnostic information, does not collect, retain or share information about visitors to customer websites such as pages visited. Other technologies deployed using GTM may collect information in accordance with their own functions and settings.
We may use Google Analytics (GA) to understand website traffic and usage. Depending on our configuration and your privacy choices, GA may process information about pages viewed, sessions, device and browser characteristics, referral information and other website interactions.
GA normally uses first-party cookies, including the _ga cookie, to distinguish pseudonymous users and sessions. Google states that Analytics processes IP addresses when collecting data but does not log or store individual IP addresses.
REM configures analytics with the intention that names, email addresses, phone numbers and the contents of contact forms are not intentionally sent to Google Analytics as analytics data. Because website URLs, event parameters, data-layer values and third-party tags can affect what information is transmitted, REM reviews tracking configurations as part of its privacy and analytics practices.
Where Google Consent Mode or comparable controls are used, Google tags may change their behaviour according to consent settings. For example, Google states that when analytics storage is denied, analytics cookies are not read or written, although limited measurements without cookies can be sent in certain Consent Mode configurations.
REM may use advertising, conversion-measurement or remarketing technologies in connection with our marketing activities.
When these technologies are enabled, they may use cookies, device identifiers, advertising identifiers or similar signals to measure advertising activity or help present advertising to people who have previously interacted with our website.
Because behavioural advertising can involve persistent identifiers and information about browsing activity, interests and interactions, we treat it separately from basic website functionality and general site analytics.
Where consent is required by applicable law, these technologies are subject to the applicable consent choices or privacy controls.
We may send emails in response to enquiries, in connection with existing customer relationships, to provide service or account information, or for marketing and promotional purposes where permitted by law.
Commercial electronic messages sent by REM are managed in accordance with Canada’s Anti-Spam Legislation (CASL). CASL generally requires the appropriate form of consent, sender identification information and an unsubscribe mechanism for commercial electronic messages.
You may unsubscribe from marketing emails by using the unsubscribe mechanism contained in the message or by contacting REM. Service-related or transactional communications that are necessary to manage an active customer relationship may continue where permitted by law.
REM designs, develops, hosts and supports websites and web applications for customers. Those websites and applications may collect personal information through contact forms, quote forms, registration forms, newsletter forms, secure areas, ecommerce functions, custom applications and other content forms.
In these situations, the REM customer generally determines what information is requested from its users and the business purposes for which that information is collected. REM may receive, transmit, store, access or otherwise process the information where necessary to provide website development, application development, hosting, database, maintenance, troubleshooting, support or related services.
REM does not use personal information processed on behalf of a customer for unrelated REM purposes.
REM customers are responsible for identifying the purposes for which they collect personal information through their websites, providing the required privacy notices and obtaining any consent required for their collection and use of the information, except to the extent that REM has expressly agreed in writing to perform a particular function on the customer’s behalf.
Where REM processes personal information for a customer, REM uses the information as necessary to provide the contracted services and follows applicable contractual, security and privacy obligations. PIPEDA’s accountability principle requires organisations to protect personal information under their control, including information transferred to another organisation for processing.
A person seeking access to, correction of or another privacy request concerning information submitted to a REM customer’s website should normally contact the organisation operating that website. REM will cooperate with its customer as appropriate to help respond to a valid privacy request relating to information hosted or processed by REM.
REM’s website and the websites and applications we develop may integrate with third-party tools and services. These can include analytics platforms, advertising platforms, mapping services, CAPTCHA and anti-abuse services, email and newsletter platforms, payment processors, shipping providers, customer relationship management systems, social-media services, APIs, widgets, plug-ins and other externally operated technologies.
Third-party providers operate their own products and may collect, use, store or disclose information in accordance with their own privacy policies, terms, settings and technical requirements.
Where REM selects a third-party service provider to process personal information under REM’s control, REM takes reasonable measures appropriate to the circumstances to protect that information. The OPC expects organisations transferring personal information for processing to assess the provider and use contractual or other measures to provide a comparable level of protection.
Some service providers used by REM or by our customers may process or store personal information outside Ontario or outside Canada.
Personal information handled in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies or government authorities in accordance with applicable law.
PIPEDA does not prohibit organisations from using service providers outside Canada, but the transferring organisation remains accountable for personal information under its control and is expected to use contractual or other means to provide an appropriate level of protection and to be transparent about cross-border processing.
REM retains personal information only for as long as reasonably necessary to fulfil the identified purpose, provide our services, maintain appropriate business and security records, meet contractual requirements, resolve disputes or satisfy legal obligations.
Retention periods may vary according to the type of information and the context in which it was collected.
Where personal information is no longer required, REM will delete, destroy or anonymise it as appropriate, subject to technical backup cycles, legal requirements, security needs and contractual obligations.
Information processed on behalf of REM customers may be retained or deleted in accordance with the customer agreement, the customer’s instructions and REM’s applicable backup and retention processes.
REM takes reasonable administrative, technical and organisational measures appropriate to the sensitivity of the information to protect personal information against loss, theft and unauthorised access, disclosure, copying, use or modification.
These safeguards may include restricted access, authentication controls, encrypted communications, network and database controls, system monitoring, backups, employee procedures and other security practices appropriate to the service.
PIPEDA requires organisations to protect personal information using safeguards appropriate to its sensitivity.
No method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure, and REM cannot guarantee absolute security.
REM maintains procedures for identifying, containing, investigating and responding to suspected privacy and security incidents.
Where a breach of security safeguards involves personal information under REM’s control, REM will assess whether the circumstances create a real risk of significant harm to an individual. Where the legal threshold is met, PIPEDA requires reporting to the Office of the Privacy Commissioner of Canada and notification to affected individuals as soon as feasible.
REM maintains records of breaches as required by applicable law. PIPEDA’s Breach of Security Safeguards Regulations require organisations to keep a record of every breach of security safeguards for 24 months after determining that the breach occurred, whether or not the breach met the threshold for notification.
Where REM is processing personal information on behalf of a customer, REM will also communicate and cooperate with that customer in accordance with the circumstances and applicable contractual obligations.
REM’s website and services are directed primarily to businesses and organisations and are not intended for children under the age of 13.
We do not knowingly seek personal information directly from children under 13 through our general business website. The Office of the Privacy Commissioner of Canada takes the position that, except in exceptional circumstances, consent from a parent or guardian is required for individuals under 13 who cannot provide meaningful consent themselves.
Customer websites developed or hosted by REM may serve different audiences. The REM customer is responsible for determining whether additional privacy requirements relating to children or youth apply to its website or service.
Subject to PIPEDA and other applicable law, you may ask REM for access to personal information about you that is under REM’s control and request correction of inaccurate or incomplete information.
You may also withdraw consent to certain uses of your personal information, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect REM’s ability to provide a product or service where the information is necessary for that purpose.
REM will respond to PIPEDA access requests as quickly as reasonably possible and ordinarily no later than 30 days after receiving a valid request, subject to the extensions and exceptions permitted by law.
You may also ask REM about the retention or deletion of information that is no longer required for its identified purposes. Unlike the GDPR, PIPEDA should not be described as creating an unrestricted standalone “right to be forgotten”; retention, withdrawal, access and deletion requests must be considered in the context of the purposes for which information is required and applicable legal or contractual obligations. PIPEDA requires organisations to establish appropriate retention and destruction practices.
Where your request concerns personal information that REM processes on behalf of one of our customers, we may refer the request to that customer or work with the customer to respond, depending on which organisation controls the relevant personal information.
REM is based in Canada. Where the General Data Protection Regulation (GDPR) or other European data-protection requirements apply to REM’s processing of your personal data, you may have additional rights depending on the circumstances, including the right to:
GDPR rights vary according to the legal basis and circumstances of the processing; they are not all absolute. European Commission guidance confirms rights including access, rectification, erasure, restriction, portability and objection.
Where applicable, REM may process personal data on the basis of consent, performance of a contract, compliance with legal obligations or legitimate interests, as permitted by the GDPR.
A person to whom the GDPR applies may also have the right to lodge a complaint with the applicable supervisory authority.
Questions about this Privacy Policy, REM’s personal-information practices, or requests to access or correct personal information can be directed to:
Privacy Officer
REM Web Solutions Inc.
72 St. Leger Street, Unit 2
Kitchener, Ontario N2H 6R4
Canada
Email: [email protected]
Telephone: 519-884-4111
Toll-Free: 1-866-754-4111
REM’s current public website confirms this business address and contact information.
If we cannot resolve a PIPEDA privacy concern to your satisfaction, you may have the right to raise the matter with the Office of the Privacy Commissioner of Canada.
REM may update this Privacy Policy from time to time to reflect changes in our website, services, technologies, legal requirements or privacy practices.
Changes will be posted on this page and the effective date will be updated accordingly. We encourage users to review this Policy periodically.
Where a significant change affects the way personal information is collected, used or disclosed, REM will take additional steps to provide notice or obtain consent where required. The OPC recommends obtaining consent when organisations make significant changes involving new purposes or new third-party disclosures.