Legal
Privacy policy
Last updated 21 August 2026.
Who we are
This Privacy Policy is issued by csr eco solutions Inc. ("Company," "we," "us," or "our"), located at 545 King Street W, Suite 338, Toronto, ON M5V 1K4, Canada. The Company provides office decommissioning, furniture diversion, and ESG reporting services globally. This Policy governs the collection, use, disclosure, and retention of personal information acquired through this website.
The Company complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable Canadian provincial privacy legislation, and, where applicable to individuals located in the European Union and the United Kingdom, the General Data Protection Regulation (GDPR and UK GDPR).
Data Collection
Information collected includes name, business email address, organization name, geographic location, service interest, and message content. Inquiries are routed to quotes@csrecosolutions.com.
Quote Requests
Information collected includes name, business email address, organization name, geographic location, service interest, and message content. Inquiries are routed to quotes@csrecosolutions.com.
Charity Registration
Information collected includes organization name, email address, jurisdiction, registration status, tax receipt capability, religious or political affiliation, and supplementary notes. Submissions are routed to donations@csrecosolutions.com.
Special Category Data (GDPR Article 9)
Submission of religious or political affiliation constitutes special category data. Provision of this information is strictly optional and used solely to evaluate eligibility for specific donation programs or tax compliance frameworks. Processing is based on explicit user consent granted upon form submission.
Purpose and lawful basis for processing
Personal data is processed to evaluate inquiries, deliver quotations, assess charitable eligibility, and execute donation-matching services. Processing relies on the following legal bases:
- The user's explicit consent provided upon webform submission.
- The legitimate business interests of the Company in responding to inbound commercial inquiries.
- Compliance with applicable legal and statutory obligations.
Cookies and web analytics
This website utilizes Google Analytics 4 (GA4) to evaluate website traffic, usage patterns, and technical performance. GA4 deploys cookies to transmit aggregated usage metrics to servers operated by Google LLC, located in the United States.
The Company does not deploy third-party advertising pixels, engage in behavioral remarketing, sell user data, or cross-reference web analytics with personal form submissions.
Users may manage cookie preferences or opt out of GA4 tracking through browser privacy settings or by installing the official Google Analytics Opt-out Browser Add-on.
Retention and Disclosure
Personal data is retained for twenty-four (24) months from the date of last interaction, after which it is securely deleted, unless extended retention is required for legal, tax, or regulatory compliance.
Data is shared strictly on a need-to-know basis with:
- Designated email infrastructure providers handling form transmissions.
- Analytics processors (Google LLC).
- Vetted third-party contractors bound by contractual data protection obligations to perform logistics or decommissioning services.
- Law enforcement or regulatory authorities when compelled by statutory requirement or valid legal process.
International data transfers
Personal data collected by the Company may be stored or processed in jurisdictions outside the user's home country, including the United States. Cross-border transfers under the GDPR rely on appropriate transfer mechanisms, including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs).
Data Subject Rights
Subject to jurisdiction, individuals possess statutory rights regarding their personal data:
| Right | Under GDPR Standard | PIPEDA Equivalent |
|---|---|---|
| Access | Obtain verification and copies of personal data processed. | Access personal information on record. |
| Erasure | Request deletion ("right to be forgotten"). | Request deletion, subject to statutory exceptions. |
| Restriction | Limit specific processing activities. | Withdraw consent for ongoing processing. |
| Portability | Receive personal data in a structured, machine-readable format. | N/A |
| Portability | Receive your data in a portable, machine-readable format | No direct equivalent |
| Objection | Object to processing based on legitimate interests or withdraw consent. | Withdraw consent subject to legal or contractual restrictions. |
| Lodge Complaint | File a regulatory complaint with a Supervisory Authority. | ile a complaint with the Office of the Privacy Commissioner of Canada (OPC). |
To exercise any applicable statutory rights, direct inquiries to: dpo@csrecosolutions.com.
Direct Marketing & Communication
Registered charitable entities may receive notification emails concerning equipment availability. Recipients may opt out of future communications at any time via the unsubscribe mechanism embedded in the email or by contacting
Minors
This website is directed exclusively at commercial entities and adult representatives. We do not knowingly collect personal data from individuals under sixteen (16) years of age.
Amendments and Contact
If we make a material change to this policy, we'll update the "last updated" date at the top of this page. We encourage you to check back periodically.
Questions or complaints
The Company reserves the right to modify this Privacy Policy at any time. Updated versions will be posted with a revised effective date. Inquiries or formal data requests should be directed to dpo@csrecosolutions.com.