Privacy policy

In short

Who is responsible

DecksToronto (deckstoronto.com) is operated by SD Decking Inc., the company behind Composite Deck Shop, the deck-specialty store that began as Decks Toronto in 2009. SD Decking Inc. is responsible for the personal information collected on this site, and our privacy contact is accountable for how it is handled. Read more about DecksToronto.

Privacy contact: SD Decking Inc., attention Privacy, 71 Buttermill Avenue, Vaughan, ON L4K 3X2. Phone: (416) 623-7158.

What we collect

Information you give us

• Material quote and installation requests: your name, email and phone number, city or postal code, preferred contact method, and the project details you choose to add, such as deck size, materials, timing and whether you need installation.
• Deck cost estimates: the calculator runs in your browser. If you attach an estimate to a quote request, it travels to the form in the page address and reaches us only when you submit the form.
• Sample requests: your name and contact details, the samples you choose, your city or postal code, and your pickup store or shipping preference. We confirm the full shipping address separately.
• Emails and calls: whatever you choose to tell us when you write or phone.

Please do not send payment card numbers or government ID through this site. We never ask for them here.

Information collected automatically

Like any website, our hosting provider receives technical information when you visit, such as your IP address, browser type, the page requested and the time. It is used to deliver pages, keep the site secure and block abuse.

We also use Google Analytics to see how the site is used: which pages are read, how visitors found us (for example, a search engine or a link), the type of device and browser, and the approximate location, such as the city. Its cookies (named _ga) let it recognize a returning browser for up to two years. It does not tell us who you are, and Google Analytics does not log or store IP addresses. Google signals and ad personalization are turned off, and this site does not set advertising cookies.

Google Analytics is on unless you turn it off. Visitors in Quebec, the European Economic Area, the United Kingdom and Switzerland start with it off and can turn it on. Use Cookie settings at the bottom of any page: turning analytics off takes effect at once and deletes its cookies from your browser. A small cookie, dt_consent, remembers your choice for a year. You can also use Google's opt-out browser add-on.

How we use it

• to answer your question or prepare the quote you asked for;
• to arrange samples for pickup or shipping;
• to refer an installation request to an installer, only when you ask for installation help;
• to follow up on that same request;
• to see, in totals, which pages are read and how visitors find the site, so we can improve it;
• to protect the site and our forms from spam and abuse;
• to meet legal, tax and accounting obligations.

If we want to use your information for a new purpose, we will ask you first.

Your consent

By sending a request, you agree that we may use your details for the purposes above. You can withdraw your consent at any time by contacting us, although we may then be unable to complete a request that depends on it.

Analytics cookies need no request from you, but you can turn them off at any time with Cookie settings, and the site works the same without them.

In line with Canada's anti-spam legislation, we will only send you newsletters or promotions if you have given express consent, and every such message will include a way to unsubscribe. Replies about your own request are not marketing.

Who we share it with

• Composite Deck Shop, our sister store under the same ownership, which prepares material quotes and handles orders and samples.
• An installer, only if you ask for installation help. We may refer your request to Delta Decks, an affiliated installation company, or to another installer, and share only what they need to respond.
• Service providers who work for us, such as website hosting and analytics, email and shipping carriers. They may use your information only to provide their service to us.
• Authorities, where the law requires it.

We do not sell, rent or trade personal information.

Storage outside Canada

Some of our service providers store or process information outside Canada, including in the United States. While it is there, it is subject to the laws of that country and may be accessed by its courts, law enforcement and national security authorities.

Third-party services on this site

• Hosting and security: the site is served through Cloudflare, which processes technical data to deliver pages and stop attacks. To block automated spam, the forms use a hidden field and a timing check. Short-lived coded request counters help limit abuse.
• Analytics: Google Analytics measures visits as described under What we collect. See how Google uses information from sites that use its services.
• Request handling: submitted requests are sent to our team by email; the website does not keep a copy. Our team receives your contact and project details by email so the appropriate person can respond. These tools may process data outside Canada.
• Fonts: fonts are hosted with this site; loading them does not contact Google Fonts.
• Live prices: guides that show Composite Deck Shop prices ask compositedeckshop.com for current product data from your browser.
• Videos: embedded videos use YouTube's privacy-enhanced mode and load only when you press play. From then on, YouTube's privacy policy applies.
• Links: links to Composite Deck Shop carry tags that show which guide you came from. Links to manufacturers and other sites lead to pages with their own privacy policies.

How long we keep it

We keep personal information only as long as we need it, then delete it or remove the details that identify you:

• Quote, installation and sample requests that do not lead to an order: up to 24 months after our last contact with you, so we can answer follow-up questions about the same project.
• Orders and invoices: for as long as Canadian tax law requires business records to be kept, generally six years after the end of the tax year they relate to.
• Technical and security logs kept by our hosting provider: a short period, usually days or weeks, unless they are needed to investigate abuse.
• Analytics data in Google Analytics: 14 months, then Google deletes it. Our reports keep only totals.
• A request to delete your information is handled within 30 days, except for records we must keep by law.

How we protect it

Information travels to us over an encrypted connection. Access is limited to the people who need it to handle your request, and our service providers are expected to protect it to a comparable standard. No method of transmission or storage is completely secure, but we take reasonable steps to prevent loss, misuse and unauthorized access.

Your rights

You can ask us to:

• tell you what personal information we hold about you and how it has been used and shared;
• correct information that is inaccurate or incomplete;
• delete information we no longer need, or withdraw your consent.

Send your request by mail to the address above or call us at (416) 623-7158. You can also use our contact page. We may need to confirm your identity first, and we will reply within 30 days.

Concerns and complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also contact the Office of the Privacy Commissioner of Canada.

Changes to this policy

We will update this page when our practices change, for example when we add a new service, and change the effective date at the top. Significant changes will be noted here. Our terms of use and disclaimer cover the rest of how the site may be used.

Changes on October 29, 2026: we added Google Analytics and the cookie notice.