Privacy Policy

CECO Environmental Website Privacy Policy

 Last updated:  May 5, 2025

INTRODUCTION

CECO Environmental Corp. (“CECO”) respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

This policy describes the types of information we may collect from you or that you may provide when you visit any of the following websites: https://www.cecoenviro.com; https://www.compasswater.com;
https://ds21.kr; https://www.efmequipment.com; https://eisuk.co.uk/index.html; https://envirocare.com;
https://general-rubber.com; https://www.indexwater.com; https://inteliair.co.uk; https://www.kem
cosystems.com; https://www.trnscnd.com; https://wakefieldacoustics.co.uk; https://westernairducts.co.uk;
https://cecovent.com; https://www.cecocertified.com; https://www.wk-asia-pacific.com/index_en.aspx;
https://cecovent.com; https://www.verantis.com/;  https://profireenergy.com/ (collectively, our
“Website”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

CCPA NOTICE: We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Any terms defined in the CCPA have the same meaning when used in this Privacy Policy.

This policy applies to information we collect:

• On this Website.
• In email, text, and other electronic messages between you and this Website.

It does not apply to information collected by:

• Us offline or through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries); or
• Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Website.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you acknowledge that you have read this Privacy Policy. This policy may change from time to time (see CHANGES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES) and we encourage you to check the Privacy Policy periodically for updates. Please ensure to read the additional information set out in Section 6 if you reside in the European Economic Area (EEA) or the United Kingdom (UK).

This privacy policy is provided in a layered format so you can click through to the specific areas set out below. Please also use the Glossary to understand the meaning of some of the terms used in this privacy policy.

1. IMPORTANT INFORMATION AND WHO WE ARE
2. THE DATA WE COLLECT ABOUT YOU
3. LEGAL BASIS AND HOW WE USE YOUR PERSONAL DATA
4. DISCLOSURES OF YOUR PERSONAL DATA
5. DATA SECURITY
6. DATA RETENTION
7. YOUR LEGAL RIGHTS
8. EU/UK GDPR ADDENDUM

1. IMPORTANT INFORMATION AND WHO WE ARE

PURPOSE OF THIS PRIVACY POLICY

This privacy policy tells you how CECO collects and processes your personal data through your use of this Website, including any data you may provide through this Website, including when you request information from us.

This Website is not intended for children and we do not knowingly collect data relating to children.

You should read this privacy policy together with any other privacy policy or fair processing statement we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.

CONTROLLER

CECO is made up of different legal entities. This privacy policy is issued on behalf of the CECO group of companies so when we mention, ”CECO”, “we”, “us” or “our” in this privacy policy, we are referring to the relevant company within the CECO group identified as controller for processing your data.  CECO ENVIRONMENTAL CORP. is the controller and responsible for this Website.

If you have any questions about this privacy policy, including any requests to exercise any rights you may have, please contact us by clicking HERE or via the details set out below.

CONTACT DETAILS

If you have any questions about this privacy policy or our privacy practices, please contact our privacy office in the following ways:

You have the right to make a complaint at any time to the applicable supervisory authority for data protection issues in your particular country.  We would, however, appreciate the chance to resolve your concerns before you file such a complaint.

CHANGES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES

We keep our privacy policy under regular review. This version was updated on the “Last updated” date listed above.  Historic versions can be obtained by contacting us.  It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

THIRD-PARTY LINKS

This Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you.  We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.

2. THE DATA WE COLLECT ABOUT YOU 

Personal data, or personal information, means any information about an individual from which it is possible to identify that individual.  It does not include data from which it is not longer possible to identify an individual (anonymous data).

We may collect, use, store and transfer the following kinds of personal data (as categorized by CCPA):

• Identifiers you provide directly such as first and last name, company name, email address, postal address, and/or phone number.
• Identifiers collected through use of the Website, such as unique online or device identifiers, IP address, device or session IDs and information regarding your system configuration (operating system and version), network, and connected hardware (e.g., computer or mobile device and carrier) and software applications (e.g., other applications installed on mobile device).
• Commercial information about users, such as records of products, goods or services purchased, obtained, or considered by users,
• Internet and other network activity, such as browsing and search history; and interactions with a website or application.

We do not collect customer record information; protected classification characteristics under California law; biometric information; geolocation data; sensory data; professional or employment information; non-public education information; or inferences drawn from other personal information.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific Website feature.

We do not collect any Special Categories of Personal Data about you (such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offenses.

The information we collect on or through our Website may include:

• Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website, subscribing to our mailing list, or requesting further services. We may also ask you for information when you report a problem with our Website.
• Records and copies of your correspondence (including email addresses), if you contact us.
• Your search queries on the Website.

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.

We also receive personal data about you from various third party processors that perform services for us or provide tools for the Website, including through the use of cookies, pixels, beacons, and similar tracking technologies. The personal data collected on our behalf or otherwise provided to use by third party processors includes your IP address, actions you take on our Website, and pages you visit on our Website. We do not generate personal data about Website users.

3. LEGAL BASIS AND HOW WE USE YOUR PERSONAL DATA 

LEGAL BASIS

We will use your personal data when the law allows us to; most commonly, in the following circumstances:

• Where we need to perform the contract, we are about to enter into or have entered into with you.
• To provide you with information, products, or services that you request from us.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.
• Where you have provided your consent. You have the right to withdraw consent to marketing at any time with effect for the future by contacting us or clicking HERE

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA

We use your personal data for the following business purposes and based on the following legitimate interests:

The information we collect automatically does not directly reveal your identity but may be linked with your IP address or unique identifiers. In these cases, we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service and advertising, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Website according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Website.

MARKETING

We provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

PROMOTIONAL OFFERS FROM US

We may use your personal data to identify products, services, and offers that we think may interest you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).

You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you opted to receive that marketing.

THIRD-PARTY MARKETING

We will get your express opt-in consent before we share your personal data with any third party processors for marketing purposes.

OPTING OUT

You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you OR by contacting us at any time OR by clicking HERE.  Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us for the purposes of any product/service purchase, or warranty registration.

COOKIES

The website uses cookies and other technologies (e.g. pixels, scripts) (together “Cookies”). Cookies are used to make this website user-friendly, effective and secure. Cookies are, for example, small text files that are stored on your terminal device and contain personal data such as personal settings and login information.

We use the following categories of Cookies:

• Analytics Cookies: These Cookies allow us to track visits and website usage so that we can measure and improve the performance of our website. They help us understand which pages are the most or least popular, or to record error messages on the website. All analysis based on this information is aggregated.
• Functional Cookies: These Cookies allow us to improve the functionality and personalization of the website. They ensure that your website preferences (e.g., settings or filters) are maintained and help us to include third-party services on the website. Any analysis performed based on this information is aggregated.
• Advertisement Cookies: These Cookies help us to better analyze the impact of our website and your interests, e.g. to show you personalized advertising or put other content on our or other websites. These may be displayed on our website or on third-party websites. In particular, the Cookie collects information about your browsing activities to understand which topics are relevant to you.
• Necessary Cookies: These Cookies are necessary for the functioning and management of the website and cannot be disabled in our systems. They are usually set based on your input, such as when you set your Cookie preferences, log in, or fill out forms. You can set your browser to block these cookies, but then some parts of the website will not work.

We use first- and third-party Cookies. First-party Cookies come from our platform and send information only to us; third-party Cookies are placed on our website by third parties and send information about your device to other companies that recognize the Cookie. We use session Cookies, which are only stored for individual online sessions and are deleted when you close your browser; and persistent Cookies, which are deleted when they reach their expiry date or are deleted by the user.

We place Necessary Cookies to provide you with a tele media service or other equivalent information society service expressly requested by you. The subsequent processing of Necessary Cookies is based on our legitimate interest to provide you with a technically optimized, user-friendly and appropriate website or your consent (as applicable). We use other Cookies only with your consent. Where we rely on consent, you can withdraw your consent at any time with effect for the future, e.g. by managing your Cookie settings on the website.

A list of Cookies used by our website can be found in the following:

We also use third-party technologies with your consent. You can find a list below:

You can also use our website without Cookies, but you might not be able to use our website to its full extent or to use certain functionalities.

CHANGE OF PURPOSE

Unless required or permitted by law, we will use your personal data only for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

4. DISCLOSURES OF YOUR PERSONAL DATA

We may share your personal data with certain third parties on condition that we require all third parties to respect the security of your personal data and to treat it in accordance with the law. We use our best efforts to prevent third parties from using personal data for their own purposes, including by imposing contractual restrictions of their use of personal data.

We may disclose personal information that we collect or you provide as described in this privacy policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of CECO’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by CECO about our users is among the assets transferred.
• To fulfill the purpose for which you provide it, to the recipients with whom you request we share your personal data.
• For any other purpose disclosed by us when you provide the information, to the recipients with whom you request we share your personal data.
• With your consent, to the recipients with whom you request we share your personal data.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our terms of service and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of CECO, our customers, or others.

Under the CCPA, we do not share or sell personal information (as such terms are defined under CCPA). In certain circumstances, in the prior 12 months, we may have disclosed for a business purpose your personal information to our service providers. The categories of personal information we may have disclosed for a business purpose include identifiers collected directly from you, identifiers collected through use of the Website, and internet and other network activity.

5. DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. We use our best efforts to prevent third parties from using personal data for their own purposes, including by imposing contractual restrictions of their use of personal data.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

6. DATA RETENTION

HOW LONG WILL YOU USE MY PERSONAL DATA FOR?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if there is reason believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

To the extent provided for by law, you can ask us to delete your data: see Your Legal Rights below for further information.

If we have a legal basis, we can also anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

7. YOUR LEGAL RIGHTS  

Depending on your place of residence, applicable data privacy laws may provide you with additional rights regarding our use of your personal information. If the processing of your data is subject to EU/UK GDPR, please refer to Section 9 that informs you about the rights you have with regard to the processing of you personal data. To the extent the processing of your data is subject to CCPA, the following applies:

California Privacy Rights

The CCPA provides California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Right to Know and Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the “right to know”). Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Correct, or Delete), we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting that personal information.
• The categories of third parties with whom we share that personal information.
• If we disclosed your personal information for a business purpose, the personal information categories that each category of recipient obtained.
• The specific pieces of personal information we collected about you (also called a data portability request).

Right to Correct 

You have the right to request that we correct any inaccurate personal data we maintain about you.

Right to Delete 

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the “right to delete”). Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Correct, or Delete), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

Exercising Your Rights to Know, Correct, or Delete

To exercise your rights to know, correct, or delete described above, please submit a request by either:

• Calling us at +1 (214) 272-5300
• Emailing us at [email protected]
• Utilizing the webform linked in this Privacy Policy.

Only you, or someone legally authorized to act on your behalf, may make a request to know, correct, or delete related to your personal information. You may also make a request to know, correct, or delete on behalf of your child.

You may only submit a request to know twice within a 12-month period. Your request to know, correct, or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.

Response Timing and Format 

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact [email protected].

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination 

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Other California Privacy Rights 

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected].

Additional State Privacy Rights

Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Correct inaccuracies in their personal information, taking into account the information’s nature processing purpose (excluding Iowa and Utah).
• Data portability.
• Opt out of personal data processing for:
  • targeted advertising (excluding Iowa);
  • sales; or
  • profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).

• Either limit (opt-out of) or require consent to process sensitive personal data.

The exact scope of these rights may vary by state. To exercise any of these rights, please submit a request by either:

• Calling us at +1 (214) 272-5300
• Emailing us at [email protected] 

Quebec and Alberta Privacy Rights 

Residents of Quebec and Alberta have the following rights regarding their personal data:

• Right to be informed
• Right to access
• Right to rectification
• Right to erasure
• Right to withdraw consent
• Right to restrict processing
• Right to data portability (Quebec only)

To exercise any of these rights, please submit a request by either:

• Calling us at +1 (214) 272-5300
• Emailing us at [email protected] 

8. EU/UK GDPR ADDENDUM

To the extent the processing of your personal data is subject to the European Union (“EU”) General Data Protection Regulation (“EU GDPR”) or UK General Data Protection Regulation (“UK GDPR”), the following terms apply in addition to the above Sections:

LEGITIMATE INTEREST

Where we collect, use, disclose and otherwise process your information based on legitimate interests, we rely on the legitimate interest set forth in the “LEGAL BASIS AND HOW WE USE YOUR PERSONAL DATA” section above.

OBLIGATION TO PROVIDE PERSONAL DATA

You are neither legally nor contractually obliged to provide your personal data. However, if you do not provide certain personal data we may not be able to provide our services or respond to your requests. 

YOUR LEGAL RIGHTS

If you are located in the EU/EEA or UK, to the extent provided for by law, you have the right:

• To access the personal information we maintain about you.
• To receive a copy of the information we process about you.
• To correct your personal information.
• To have your personal information erased.
• To object to or restrict how we process your personal information.
• To request your personal information be transferred to a third party in a structured, commonly used, machine-readable format, where technically feasible. Note that this right only applies to personal data which you initially provided consent for us to use or where we used the personal data to perform a contract with or provide services to you.
• To withdraw any consent you may have given us to process your personal information with effect for the future. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

You also have the right to lodge a complaint with a supervisory authority in your applicable Member State. In the UK, you have the right to lodge a complaint with the Information Commissioner’s Office.

If you wish to exercise any of the rights available to you or to obtain any other information under applicable law, such as a copy of a legitimate interests balancing test, please click HERE or contact us by sending an email to CECO under the below email address.

INTERNATIONAL DATA TRANSFERS

CECO may, if necessary to fulfill the purpose for processing the personal data, or if required by law or regulation, share your personal data with other CECO companies and third parties/suppliers outside the EEA/UK.

You can obtain a copy of the specifically applicable or agreed safeguards for ensuring the appropriate level of data protection, please use the contact information in the Your Rights and Choices section above. 

COOKIES

Please see our “COOKIES” section above for information about the cookies used on our website.

ADDITIONAL CONTACT INFORMATION FOR EU AND UK RESIDENTS

CECO has designated individuals who receive emails directed to the [email protected] inbox and are the contacts to handle all data subjects’ requests and complaints.