Privacy Policy
CECO Environmental Website Privacy Policy
Last updated: May 5, 2025
INTRODUCTION
CECO Environmental Corp. (“CECO”) respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
This policy describes the types of information we may collect from you or that you may provide when you visit any of the following websites: https://www.cecoenviro.com; https://www.compasswater.com;
https://ds21.kr; https://www.efmequipment.com; https://eisuk.co.uk/index.html; https://envirocare.com;
https://general-rubber.com; https://www.indexwater.com; https://inteliair.co.uk; https://www.kem
cosystems.com; https://www.trnscnd.com; https://wakefieldacoustics.co.uk; https://westernairducts.co.uk;
https://cecovent.com; https://www.cecocertified.com; https://www.wk-asia-pacific.com/index_en.aspx;
https://cecovent.com; https://www.verantis.com/; https://profireenergy.com/ (collectively, our
“Website”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.
CCPA NOTICE: We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Any terms defined in the CCPA have the same meaning when used in this Privacy Policy.
This policy applies to information we collect:
- On this Website.
- In email, text, and other electronic messages between you and this Website.
It does not apply to information collected by:
- Us offline or through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries); or
- Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Website.
Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you acknowledge that you have read this Privacy Policy. This policy may change from time to time (see CHANGES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES) and we encourage you to check the Privacy Policy periodically for updates. Please ensure to read the additional information set out in Section 6 if you reside in the European Economic Area (EEA) or the United Kingdom (UK).
This privacy policy is provided in a layered format so you can click through to the specific areas set out below. Please also use the Glossary to understand the meaning of some of the terms used in this privacy policy.
- IMPORTANT INFORMATION AND WHO WE ARE
- THE DATA WE COLLECT ABOUT YOU
- LEGAL BASIS AND HOW WE USE YOUR PERSONAL DATA
- DISCLOSURES OF YOUR PERSONAL DATA
- DATA SECURITY
- DATA RETENTION
- YOUR LEGAL RIGHTS
- EU/UK GDPR ADDENDUM
- IMPORTANT INFORMATION AND WHO WE ARE
PURPOSE OF THIS PRIVACY POLICY
This privacy policy tells you how CECO collects and processes your personal data through your use of this Website, including any data you may provide through this Website, including when you request information from us.
This Website is not intended for children and we do not knowingly collect data relating to children.
You should read this privacy policy together with any other privacy policy or fair processing statement we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.
CONTROLLER
CECO is made up of different legal entities. This privacy policy is issued on behalf of the CECO group of companies so when we mention, ”CECO”, “we”, “us” or “our” in this privacy policy, we are referring to the relevant company within the CECO group identified as controller for processing your data. CECO ENVIRONMENTAL CORP. is the controller and responsible for this Website.
If you have any questions about this privacy policy, including any requests to exercise any rights you may have, please contact us by clicking HERE or via the details set out below.
CONTACT DETAILS
If you have any questions about this privacy policy or our privacy practices, please contact our privacy office in the following ways:
Full name of legal entity: | CECO ENVIRONMENTAL CORP. |
Email address: | |
Postal address: | Privacy Office CECO ENVIRONMENTAL CORP.5080 Spectrum Drive, Suite 800EAddison, TX 75001 United States of America |
You have the right to make a complaint at any time to the applicable supervisory authority for data protection issues in your particular country. We would, however, appreciate the chance to resolve your concerns before you file such a complaint.
CHANGES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES
We keep our privacy policy under regular review. This version was updated on the “Last updated” date listed above. Historic versions can be obtained by contacting us. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
THIRD-PARTY LINKS
This Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.
- THE DATA WE COLLECT ABOUT YOU
Personal data, or personal information, means any information about an individual from which it is possible to identify that individual. It does not include data from which it is not longer possible to identify an individual (anonymous data).
We may collect, use, store and transfer the following kinds of personal data (as categorized by CCPA):
- Identifiers you provide directly such as first and last name, company name, email address, postal address, and/or phone number.
- Identifiers collected through use of the Website, such as unique online or device identifiers, IP address, device or session IDs and information regarding your system configuration (operating system and version), network, and connected hardware (e.g., computer or mobile device and carrier) and software applications (e.g., other applications installed on mobile device).
- Commercial information about users, such as records of products, goods or services purchased, obtained, or considered by users,
- Internet and other network activity, such as browsing and search history; and interactions with a website or application.
We do not collect customer record information; protected classification characteristics under California law; biometric information; geolocation data; sensory data; professional or employment information; non-public education information; or inferences drawn from other personal information.
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific Website feature.
We do not collect any Special Categories of Personal Data about you (such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offenses.
The information we collect on or through our Website may include:
- Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website, subscribing to our mailing list, or requesting further services. We may also ask you for information when you report a problem with our Website.
- Records and copies of your correspondence (including email addresses), if you contact us.
- Your search queries on the Website.
As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
- Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
- Information about your computer and internet connection, including your IP address, operating system, and browser type.
We also receive personal data about you from various third party processors that perform services for us or provide tools for the Website, including through the use of cookies, pixels, beacons, and similar tracking technologies. The personal data collected on our behalf or otherwise provided to use by third party processors includes your IP address, actions you take on our Website, and pages you visit on our Website. We do not generate personal data about Website users.
- LEGAL BASIS AND HOW WE USE YOUR PERSONAL DATA
LEGAL BASIS
We will use your personal data when the law allows us to; most commonly, in the following circumstances:
- Where we need to perform the contract, we are about to enter into or have entered into with you.
- To provide you with information, products, or services that you request from us.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal obligation.
- Where you have provided your consent. You have the right to withdraw consent to marketing at any time with effect for the future by contacting us or clicking HERE
PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA
We use your personal data for the following business purposes and based on the following legitimate interests:
Business Purpose | Legitimate Interest |
To register you as a new customer or potential customer | Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
|
To process and correctly deliver anything you order from us | Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
|
To manage our relationship with you, including notifying you of updated terms or privacy policy | Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
|
To inform you of products or services we believe might interest you | Marketing our products: We use your information as necessary to pursue our legitimate interests in marketing our products to you. For example, where permitted by digital marketing law, we may contact you by email to let you know of products you might be interested in.
|
To enable you to participate in a prize draw, competition or survey | Marketing our products: We use your information as necessary to pursue our legitimate interests in marketing our products to you. For example, where permitted by digital marketing law, we may contact you by email to let you know of products you might be interested in.
|
To administer and protect our business and this Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | Providing, improving and developing our products: We use your information as necessary to pursue our legitimate interests in tailoring and improving our products. For example, we may send you a survey or questionnaire to understand your experience in purchasing from us.
|
To use data analytics to improve our Website/products/services/marketing/customer relationships and experiences | Providing, improving and developing our products: We use your information as necessary to pursue our legitimate interests in tailoring and improving our products. For example, we may send you a survey or questionnaire to understand your experience in purchasing from us.
|
To make suggestions and recommendations to you about goods or services that may be of interest to you | Marketing our products: We use your information as necessary to pursue our legitimate interests in marketing our products to you. For example, where permitted by digital marketing law, we may contact you by email to let you know of products you might be interested in.
|
To respond to any legal requests, you may make | Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
|
To ensure we comply with the law | Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
|
As described to you when collecting your personal information or, to the extent the processing is subject to CCPA, as otherwise set forth in the CCPA.
| Performing services for or on behalf of our clients, including maintaining or servicing accounts, providing customer service, client communications, client relationship management, processing or fulfilling transactions, verifying identity information, processing payments, and other services
|
The information we collect automatically does not directly reveal your identity but may be linked with your IP address or unique identifiers. In these cases, we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service and advertising, including by enabling us to:
- Estimate our audience size and usage patterns.
- Store information about your preferences, allowing us to customize our Website according to your individual interests.
- Speed up your searches.
- Recognize you when you return to our Website.
MARKETING
We provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
PROMOTIONAL OFFERS FROM US
We may use your personal data to identify products, services, and offers that we think may interest you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you opted to receive that marketing.
THIRD-PARTY MARKETING
We will get your express opt-in consent before we share your personal data with any third party processors for marketing purposes.
OPTING OUT
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you OR by contacting us at any time OR by clicking HERE. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us for the purposes of any product/service purchase, or warranty registration.
COOKIES
The website uses cookies and other technologies (e.g. pixels, scripts) (together “Cookies”). Cookies are used to make this website user-friendly, effective and secure. Cookies are, for example, small text files that are stored on your terminal device and contain personal data such as personal settings and login information.
We use the following categories of Cookies:
- Analytics Cookies: These Cookies allow us to track visits and website usage so that we can measure and improve the performance of our website. They help us understand which pages are the most or least popular, or to record error messages on the website. All analysis based on this information is aggregated.
- Functional Cookies: These Cookies allow us to improve the functionality and personalization of the website. They ensure that your website preferences (e.g., settings or filters) are maintained and help us to include third-party services on the website. Any analysis performed based on this information is aggregated.
- Advertisement Cookies: These Cookies help us to better analyze the impact of our website and your interests, e.g. to show you personalized advertising or put other content on our or other websites. These may be displayed on our website or on third-party websites. In particular, the Cookie collects information about your browsing activities to understand which topics are relevant to you.
- Necessary Cookies: These Cookies are necessary for the functioning and management of the website and cannot be disabled in our systems. They are usually set based on your input, such as when you set your Cookie preferences, log in, or fill out forms. You can set your browser to block these cookies, but then some parts of the website will not work.
We use first- and third-party Cookies. First-party Cookies come from our platform and send information only to us; third-party Cookies are placed on our website by third parties and send information about your device to other companies that recognize the Cookie. We use session Cookies, which are only stored for individual online sessions and are deleted when you close your browser; and persistent Cookies, which are deleted when they reach their expiry date or are deleted by the user.
We place Necessary Cookies to provide you with a tele media service or other equivalent information society service expressly requested by you. The subsequent processing of Necessary Cookies is based on our legitimate interest to provide you with a technically optimized, user-friendly and appropriate website or your consent (as applicable). We use other Cookies only with your consent. Where we rely on consent, you can withdraw your consent at any time with effect for the future, e.g. by managing your Cookie settings on the website.
A list of Cookies used by our website can be found in the following:
Cookie category | Cookie name | Cookie lifetime | Cookie description |
Necessary | wpEmojiSettingsSupports | Session | WordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user’s browser can display emojis properly. |
Necessary | Rc::a | Never Expires | This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks. |
Necessary | Rc::c | Session | This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks. |
Necessary | __cf_bm | 1 hour | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
Necessary | _cfuvid | Session | Calendly sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services. |
Necessary | ak_bmsc | 2 hours | This cookie is used by Akamai to optimize site security by distinguishing between humans and bots |
Necessary | ASP.NET_SessionId | Session | Issued by Microsoft’s ASP.NET Application, this cookie stores session data during a user’s website visit. |
Necessary | wordpress_test_cookie | Session | WordPress sets this cookie to determine whether cookies are enabled on the users’ browsers. |
Necessary | JSESSIONID | Session | New Relic uses this cookie to store a session identifier so that New Relic can monitor session counts for an application. |
Necessary | YSC | Session | YouTube sets this cookie to track the views of embedded videos on YouTube pages. |
Necessary | VISITOR_INFO1_LIVE | 6 months | YouTube sets this cookie to measure bandwidth, determining whether the user gets the new or old player interface. |
Necessary | VISITOR_PRIVACY_METADATA | 6 months | YouTube sets this cookie to store the user’s cookie consent state for the current domain. |
Necessary | yt.innertube::requests | Never expires | YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen. |
Necessary | yt.innertube::nextId | Never expires | YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.
|
Necessary | yt-remote-device-id | Never expires | YouTube sets this cookie to store the user’s video preferences using embedded YouTube videos.
|
Necessary | ytidb::LAST_RESULT_ENTRY_KEY | Never expires | YouTube sets this cookie to store the last search result entry that was clicked by the user. This information is used to improve the user experience by providing more relevant search results in the future. |
Necessary | yt-remote-connected-devices | Never expires | YouTube sets this cookie to store the user’s video preferences using embedded YouTube videos. |
Necessary | yt-remote-session-app | Session | YouTube sets this cookie to store user preferences and information about the interface of the embedded YouTube video player. |
Necessary | yt-remote-cast-installed | Session | YouTube sets this cookie to store the user’s video player preferences using embedded YouTube video. |
Necessary | yt-remote-session-name | Session | YouTube sets this cookie to store the user’s video player preferences using embedded YouTube video. |
Necessary | yt-remote-fast-check-period | Session | YouTube sets this cookie to store the user’s video player preferences for embedded YouTube videos. |
Analytics | _ga_* | 1 year 1 month 4 days | Google Analytics sets this cookie to store and count page views. |
Analytics | _ga | 1 year 1 month 4 days | Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. |
Analytics | calltrk_session_id | 6 months | This cookie is set by the Provider CallRail. This cookie is used for storing an unique identifier for a user browser session. It is used for tracking the number of phone calls generate from the website. |
Analytics | _gid | 1 day | Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website’s performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously. |
Analytics | _gat_UA-* | 1 minute | Google Analytics sets this cookie for user behaviour tracking. |
Analytics | s_cc | Session | Adobe Analytics sets this cookie to determine whether or not cookies are enabled in the user’s browser. |
Analytics | vuid | 1 year 1 month 4 days | Vimeo installs this cookie to collect tracking information by setting a unique ID to embed videos on the website.
|
Advertisement | c | 6 months 2 days | Rubicon Project sets this cookie to control the synchronization of user identification and the exchange of suer data between various ad services. |
Advertisement | uuid | 1 year 1 month | MediaMath sets this cookie to avoid the same ads from being shown repeatedly and for relevant advertising. |
Functionality | Calltrk_referrer | 6 months | This is a functionality cookie set by CallRail. This cookie is used to store the referring URL. It helps to accurately attribute the visitor source when displaying a tracking phone number. |
Functionality | Calltrk_landing | 6 months | This is a functionality cookie set by CallRail. This cookie is used to store the landing page URL. It helps to accurately attribute the visitor source when displaying a tracking phone number. |
We also use third-party technologies with your consent. You can find a list below:
Name | Description |
Google Search Console | This is used to help us maintain, monitor, and improve the website’s presence in Google search results. |
Google Analytics | This is used to help us analyze and improve website traffic and user engagement. |
Act-On | This is used to improve the user experience, provider services, and market to users. |
Google Ads | This is used to match website content with search keywords. |
CallRail | This is used to help determine the marketing channels that generate more calls. |
You can also use our website without Cookies, but you might not be able to use our website to its full extent or to use certain functionalities.
CHANGE OF PURPOSE
Unless required or permitted by law, we will use your personal data only for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
- DISCLOSURES OF YOUR PERSONAL DATA
We may share your personal data with certain third parties on condition that we require all third parties to respect the security of your personal data and to treat it in accordance with the law. We use our best efforts to prevent third parties from using personal data for their own purposes, including by imposing contractual restrictions of their use of personal data.
We may disclose personal information that we collect or you provide as described in this privacy policy:
- To our subsidiaries and affiliates.
- To contractors, service providers, and other third parties we use to support our business.
- To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of CECO’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by CECO about our users is among the assets transferred.
- To fulfill the purpose for which you provide it, to the recipients with whom you request we share your personal data.
- For any other purpose disclosed by us when you provide the information, to the recipients with whom you request we share your personal data.
- With your consent, to the recipients with whom you request we share your personal data.
We may also disclose your personal information:
- To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
- To enforce or apply our terms of service and other agreements, including for billing and collection purposes.
- If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of CECO, our customers, or others.
Under the CCPA, we do not share or sell personal information (as such terms are defined under CCPA). In certain circumstances, in the prior 12 months, we may have disclosed for a business purpose your personal information to our service providers. The categories of personal information we may have disclosed for a business purpose include identifiers collected directly from you, identifiers collected through use of the Website, and internet and other network activity.
- DATA SECURITY
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. We use our best efforts to prevent third parties from using personal data for their own purposes, including by imposing contractual restrictions of their use of personal data.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
- DATA RETENTION
HOW LONG WILL YOU USE MY PERSONAL DATA FOR?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if there is reason believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
To the extent provided for by law, you can ask us to delete your data: see Your Legal Rights below for further information.
If we have a legal basis, we can also anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
- YOUR LEGAL RIGHTS
Depending on your place of residence, applicable data privacy laws may provide you with additional rights regarding our use of your personal information. If the processing of your data is subject to EU/UK GDPR, please refer to Section 9 that informs you about the rights you have with regard to the processing of you personal data. To the extent the processing of your data is subject to CCPA, the following applies:
California Privacy Rights
The CCPA provides California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Right to Know and Data Portability
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the “right to know”). Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Correct, or Delete), we will disclose to you:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting that personal information.
- The categories of third parties with whom we share that personal information.
- If we disclosed your personal information for a business purpose, the personal information categories that each category of recipient obtained.
- The specific pieces of personal information we collected about you (also called a data portability request).
Right to Correct
You have the right to request that we correct any inaccurate personal data we maintain about you.
Right to Delete
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the “right to delete”). Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Correct, or Delete), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
We will delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.
Exercising Your Rights to Know, Correct, or Delete
To exercise your rights to know, correct, or delete described above, please submit a request by either:
- Calling us at +1 (214) 272-5300
- Emailing us at [email protected]
- Utilizing the webform linked in this Privacy Policy.
Only you, or someone legally authorized to act on your behalf, may make a request to know, correct, or delete related to your personal information. You may also make a request to know, correct, or delete on behalf of your child.
You may only submit a request to know twice within a 12-month period. Your request to know, correct, or delete must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.
Response Timing and Format
We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact [email protected].
We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Other California Privacy Rights
California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected].
Additional State Privacy Rights
Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:
- Confirm whether we process their personal information.
- Access and delete certain personal information.
- Correct inaccuracies in their personal information, taking into account the information’s nature processing purpose (excluding Iowa and Utah).
- Data portability.
- Opt out of personal data processing for:
- targeted advertising (excluding Iowa);
- sales; or
- profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
- Either limit (opt-out of) or require consent to process sensitive personal data.
The exact scope of these rights may vary by state. To exercise any of these rights, please submit a request by either:
- Calling us at +1 (214) 272-5300
- Emailing us at [email protected]
Quebec and Alberta Privacy Rights
Residents of Quebec and Alberta have the following rights regarding their personal data:
- Right to be informed
- Right to access
- Right to rectification
- Right to erasure
- Right to withdraw consent
- Right to restrict processing
- Right to data portability (Quebec only)
To exercise any of these rights, please submit a request by either:
- Calling us at +1 (214) 272-5300
- Emailing us at [email protected]
- EU/UK GDPR ADDENDUM
To the extent the processing of your personal data is subject to the European Union (“EU”) General Data Protection Regulation (“EU GDPR”) or UK General Data Protection Regulation (“UK GDPR”), the following terms apply in addition to the above Sections:
LEGITIMATE INTEREST
Where we collect, use, disclose and otherwise process your information based on legitimate interests, we rely on the legitimate interest set forth in the “LEGAL BASIS AND HOW WE USE YOUR PERSONAL DATA” section above.
OBLIGATION TO PROVIDE PERSONAL DATA
You are neither legally nor contractually obliged to provide your personal data. However, if you do not provide certain personal data we may not be able to provide our services or respond to your requests.
YOUR LEGAL RIGHTS
If you are located in the EU/EEA or UK, to the extent provided for by law, you have the right:
- To access the personal information we maintain about you.
- To receive a copy of the information we process about you.
- To correct your personal information.
- To have your personal information erased.
- To object to or restrict how we process your personal information.
- To request your personal information be transferred to a third party in a structured, commonly used, machine-readable format, where technically feasible. Note that this right only applies to personal data which you initially provided consent for us to use or where we used the personal data to perform a contract with or provide services to you.
- To withdraw any consent you may have given us to process your personal information with effect for the future. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
You have a general right to object, on grounds relating to your situation, if we process your personal data based on our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. |
You also have the right to lodge a complaint with a supervisory authority in your applicable Member State. In the UK, you have the right to lodge a complaint with the Information Commissioner’s Office.
If you wish to exercise any of the rights available to you or to obtain any other information under applicable law, such as a copy of a legitimate interests balancing test, please click HERE or contact us by sending an email to CECO under the below email address.
INTERNATIONAL DATA TRANSFERS
CECO may, if necessary to fulfill the purpose for processing the personal data, or if required by law or regulation, share your personal data with other CECO companies and third parties/suppliers outside the EEA/UK.
You can obtain a copy of the specifically applicable or agreed safeguards for ensuring the appropriate level of data protection, please use the contact information in the Your Rights and Choices section above.
COOKIES
Please see our “COOKIES” section above for information about the cookies used on our website.
ADDITIONAL CONTACT INFORMATION FOR EU AND UK RESIDENTS
CECO has designated individuals who receive emails directed to the [email protected] inbox and are the contacts to handle all data subjects’ requests and complaints.
GLOBAL HEADQUARTERS
5080 Spectrum Drive
Suite 800E
Addison, TX 75001
USA
Phone: 214-272-5300
Fax: 214-351-0194