Last updated: 2026-05-19
1. Data controller
Construction GFL inc. (cgfl.ca) is the data controller for personal information collected on this site. Address: 9550 Place Jade, Brossard, QC J4Y 3C1. For privacy questions, contact info@cgfl.ca or (450) 444-4477.
2. Information collected
We collect what you submit through the contact, quote, application and commercial-account forms: name, email, phone, company, message content, and relevant experience (for applications).
3. Purposes
Information is used to: (a) respond to your requests (quotes, deliveries, services); (b) evaluate job applications; (c) manage commercial accounts; (d) communicate file-related information; (e) meet applicable legal obligations.
4. Your rights (Law 25)
Under Quebec's Act modernizing legislative provisions for personal-information protection (Law 25), you have the right to: access your information, request rectification, request deletion, withdraw consent, know which third parties received your data, and file a complaint with the Commission d'accès à l'information du Québec.
5. Cookies
This site uses essential cookies for site function. With your consent (cookie banner), analytics and marketing cookies may also be enabled. Adjust preferences via the "Manage cookies" link in the footer.
6. Sharing with third parties
Your information may be shared with service providers acting on our behalf under confidentiality obligations. We do not sell your personal information. Our principal sub-processors are:
- Cloudflare (United States / global edge) — static hosting (Cloudflare Pages) and operational technical logging (anonymized access logs).
- Aspyn AI Inc. (Longueuil, Quebec) — secure relay of form submissions to our internal email recipients (the forms.aspyn.ai service).
- Cloudflare Turnstile (Cloudflare Inc.) — privacy-respecting anti-bot verification, with no persistent cookies and no advertising-profile tracking.
- Google Tag Manager + Google Analytics (Google Ireland Ltd. / Google LLC, United States) — tag management and audience measurement. No tag fires until you give explicit consent via the cookie banner (Google Consent Mode v2 default-denied). If you decline or do not respond, no data is transmitted to Google.
7. Security and retention
We implement reasonable technical and organizational measures to protect your information. Records are retained as long as needed for the purposes above or as required by applicable laws.