Last Updated: August 12, 2026 — Back to Homepage
BulkBuy, the developer and operator of this website, together with Bulk Buy Canada Inc (referred to collectively in this policy as the Company, we, our, or us), is committed to protecting the privacy of every individual who interacts with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at https://www.bulkbuy.lat, engage with our computer systems design and related services, or otherwise communicate with us.
The Company operates in the Computer Systems Design and Related Services industry, which falls within the broader Professional, Scientific, and Technical Services sector. Our business involves systems architecture planning, cloud infrastructure integration, custom software development, IT consulting, network security services, and data analytics solutions. The nature of our work often requires us to handle technical data, business communications, and client information with the highest standards of confidentiality and integrity.
By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision of this policy, please discontinue use of our website and services immediately. We encourage you to review this policy periodically, as it may be updated from time to time to reflect changes in our practices or applicable legal requirements.
We collect several categories of information in the course of providing our services. The specific types of information we gather depend on the nature of your interaction with us and the services you request. Below is a comprehensive description of the categories of information we may collect.
Personal Identification Information. When you contact us through our website forms, send us an email, or call our office, we may collect your full name, email address, telephone number, company name, job title, and any other personal details you voluntarily provide. This information enables us to respond to your inquiries, prepare proposals, and deliver the services you have requested.
Technical and Usage Data. When you visit our website, our servers automatically collect certain technical information including your Internet Protocol address, browser type and version, operating system, referring URLs, pages visited, time and date of your visit, time spent on each page, and other diagnostic data. This information helps us understand how visitors use our website, diagnose technical issues, and improve our online presence.
Business and Project Information. In the course of delivering our computer systems design and related services, we may receive detailed business information from our clients, including system architecture documents, network diagrams, infrastructure specifications, software requirements, data models, and other technical materials. While much of this information is business-oriented rather than personal in nature, it may sometimes include the personal details of client personnel who are involved in the project.
Communication Records. We maintain records of all communications between you and the Company, including emails, phone call summaries, meeting notes, and messages submitted through our website contact forms. These records allow us to provide consistent service, track project progress, and maintain a clear history of client interactions and decisions.
Financial and Payment Information. For clients who engage our services, we may collect billing addresses, payment method details, transaction histories, and related financial information necessary for invoicing and payment processing. We work with reputable third party payment processors and do not store full credit card numbers or banking credentials on our own systems.
We gather information through a variety of methods, each designed to be transparent and consistent with the purpose for which the information is provided. Understanding how your data enters our systems is an important part of understanding your privacy rights.
Direct Collection from You. The primary and most transparent method of collection occurs when you voluntarily provide information to us. This includes filling out the contact form on our website, sending us an email at reply@bulkbuy.lat, calling our office at +1 (224) 788-3384, engaging in project discussions with our consulting team, or submitting documentation as part of a service engagement. In each of these scenarios, you control what information you share with us.
Automated Collection Through Website Technology. When you browse our website, certain information is collected automatically through standard web technologies such as server logs, cookies, web beacons, and similar tracking mechanisms. These technologies capture technical data about your device and browsing behavior without requiring any active input from you. Further details about our use of cookies and tracking technologies are provided in the Cookies and Tracking Technologies section of this policy.
Collection from Third Parties. In some instances, we may receive information about you from third party sources. For example, if a colleague at your organization provides your contact details as a project point of contact, or if we receive publicly available business information from professional networking platforms, industry databases, or trade publications. In all cases, we handle such information in accordance with this Privacy Policy.
Collection During Service Delivery. As we perform our computer systems design and integration services, we inevitably encounter and process information about client systems, networks, and operations. This information is handled exclusively for the purpose of delivering the contracted services and is subject to the confidentiality provisions of our service agreements with each client.
The information we collect serves specific and legitimate business purposes. We are transparent about how we use your data and ensure that every use aligns with the reason the information was originally provided or with a compatible purpose permitted by applicable law.
Service Delivery and Fulfillment. The core reason we collect personal and business information is to provide the computer systems design services you have requested. This includes using your contact details to communicate about project timelines, deliverables, and milestones; using technical specifications you provide to design and build solutions; and using payment information to process invoices for services rendered.
Communication and Customer Support. We use your contact information to respond to inquiries, provide technical support, send service-related notifications, and keep you informed about the status of ongoing projects. We may also send occasional updates about new services, industry insights, or company news, but only where you have consented to receive such communications or where legitimate interest provisions apply.
Website Improvement and Analytics. Technical and usage data collected through our website helps us understand how visitors interact with our pages. We analyze aggregated browsing patterns to identify popular content, detect usability issues, optimize page performance, and enhance the overall user experience. This analysis is performed on anonymized and aggregated data wherever possible.
Legal Compliance and Protection. We may use or disclose information as required by applicable law, regulation, legal process, or governmental request. We also use information to enforce our Terms of Service, investigate potential violations, protect the rights and safety of the Company, our clients, and the public, and defend against legal claims or disputes.
Business Operations. Internally, we use aggregated and de-identified data for business planning, financial reporting, resource allocation, and strategic decision-making. These internal uses do not involve the disclosure of personal information outside the Company and are designed to improve our operational efficiency and service quality.
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required to comply with legal, regulatory, accounting, or reporting obligations. The specific retention period depends on the nature of the information and the context in which it was collected.
Contact form submissions and correspondence are typically retained for the duration of our business relationship plus a reasonable period thereafter to allow for follow-up and reference. If a business relationship does not materialize after initial contact, we will delete or anonymize your information within a reasonable timeframe, generally not exceeding twenty-four months from the date of last communication.
Technical and usage data collected through automated means is retained for analytical purposes for a period of up to twenty-six months, after which it is either deleted or fully anonymized. Information related to completed projects is retained in accordance with the terms of our service agreements and applicable professional standards, which may require retention for several years after project completion.
When the retention period expires, we securely delete, destroy, or anonymize the information using industry-standard data destruction methods. If complete deletion is not technically feasible for certain backup or archival systems, we implement measures to ensure the information is removed from active use and isolated from further processing.
We implement and maintain a comprehensive set of administrative, technical, and physical security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security program is regularly reviewed and updated to address evolving threats and industry best practices.
Technical Safeguards. We employ encryption protocols for data in transit and at rest, including Transport Layer Security for all web communications and AES-256 encryption for stored sensitive information. Our infrastructure includes network firewalls, intrusion detection and prevention systems, endpoint protection software, and regular vulnerability scanning. Access to systems containing personal information is protected by multi-factor authentication and role-based access controls.
Administrative Safeguards. All Company personnel receive regular training on data protection principles, privacy compliance requirements, and security best practices. Access to personal information is restricted to employees and contractors who have a legitimate business need to access such data. Our internal policies define clear protocols for data handling, incident reporting, and breach notification.
Physical Safeguards. Our physical infrastructure is housed in secure, access-controlled facilities with environmental controls, surveillance systems, and redundant power and network connectivity. Physical access to servers and data storage equipment is strictly limited to authorized operations personnel.
Despite these measures, no method of electronic storage or transmission over the Internet is completely secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee its absolute security. In the event of a data breach that affects your personal information, we will notify you and relevant regulatory authorities in accordance with applicable legal requirements.
Bulk Buy Canada Inc is headquartered in Canada, and our primary operations and data processing activities are conducted within Canada. However, as a provider of computer systems design services to clients around the world, and through our use of global cloud infrastructure providers, your information may be transferred to, stored in, or processed in jurisdictions outside your country of residence.
When we transfer personal information across international borders, we implement appropriate safeguards to ensure that the data receives a level of protection consistent with this Privacy Policy and applicable data protection laws. These safeguards may include entering into standard contractual clauses approved by relevant regulatory authorities, conducting data transfer impact assessments, and verifying that recipients maintain adequate security measures.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you should be aware that the data protection laws in Canada and other jurisdictions to which we may transfer your information may not provide the same level of protection as the laws in your home country. By using our services, you consent to the transfer of your information to countries outside your country of residence, including Canada, for the purposes described in this policy.
If you are a resident of California or another jurisdiction with specific data transfer requirements, additional rights and disclosures may apply. Please refer to the Your Privacy Rights and Choices section and relevant supplements to this policy for more information.
Depending on your jurisdiction, you may have specific rights regarding your personal information. We are committed to honoring these rights and providing you with meaningful control over your data. Below is a summary of the rights that may apply to you.
Right to Access. You have the right to request confirmation of whether we process your personal information and, if so, to obtain a copy of that information along with details about how we use and share it. We will provide this information in a structured, commonly used, and machine-readable format where technically feasible.
Right to Rectification. If you believe that personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement that information. We will respond to such requests promptly and make the necessary corrections in our active databases.
Right to Erasure. In certain circumstances, you may request that we delete your personal information. This right is not absolute and may be subject to exceptions, such as when retention is necessary for compliance with a legal obligation, establishment or defense of legal claims, or completion of a contracted service.
Right to Restrict Processing. You may request that we limit the processing of your personal information under certain conditions, such as when you contest the accuracy of the data or object to its processing. During the restriction period, we will store but not otherwise process the relevant information.
Right to Data Portability. Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your personal information in a portable format for transmission to another service provider of your choice.
Right to Object. You have the right to object to the processing of your personal information for direct marketing purposes, and in certain other circumstances, including where processing is based on legitimate interests. We will honor all valid objections and cease the relevant processing activities.
Exercising Your Rights. To exercise any of the rights described above, please contact us using the details provided in the Contact Information section. We will respond to your request within the timeframe required by applicable law, typically within thirty days. We may need to verify your identity before processing your request and may request additional information to help us locate the relevant records.
Our website and services are designed for business professionals and organizations. We do not knowingly collect, use, or disclose personal information from children under the age of thirteen, or under the applicable age of digital consent in relevant jurisdictions. Our services are not directed toward children, and we have no intention of collecting information from individuals who are not of legal age to enter into binding contracts.
If we become aware that we have inadvertently collected personal information from a child without verified parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us promptly using the contact details provided in this policy so that we can take appropriate action.
We encourage parents and guardians to monitor the online activities of their children and to instruct their children never to provide personal information through websites or online services without permission. The protection of young people in the digital environment is a responsibility shared by service providers, parents, educators, and the broader community.
Our website may contain links to third party websites, applications, or services that are not owned or controlled by Bulk Buy Canada Inc. This Privacy Policy applies solely to information collected by our own website and services. We are not responsible for the privacy practices, content, or security of any third party websites that you may access through links on our site.
We encourage you to review the privacy policies of any third party services before providing them with your personal information. The inclusion of a link on our website does not constitute an endorsement of that third partys privacy practices or the content available on their site. Your interactions with third party websites are governed by their respective terms and policies, not by ours.
Embedded Content and Integrations. Our website may incorporate embedded content or integrations from third party platforms, such as maps, videos, or social media widgets. These embedded elements may collect data about you, use cookies, embed additional third party tracking, and monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to that third party website. We recommend that you log out of third party accounts before interacting with embedded content if you have privacy concerns.
Payment Processors. For clients who make payments for our services, we use reputable third party payment processors to handle financial transactions. These processors collect and process payment information directly and are subject to their own privacy policies and data security standards, including PCI DSS compliance where applicable. We do not receive or store your complete payment card details.
Do Not Track is a privacy preference that you can set in your web browser to signal to websites that you do not want your browsing activity to be tracked. At this time, our website does not respond to Do Not Track signals sent by browsers due to the lack of a universally accepted standard for how such signals should be interpreted and implemented.
While we do not alter our data collection and use practices in response to Do Not Track signals, you do have control over tracking through the cookie management options described in the Cookies and Tracking Technologies section of this policy. By adjusting your browser settings to block or limit cookies, you can effectively manage the extent to which your browsing activity on our website is tracked.
We continue to monitor developments in privacy standards and regulations regarding Do Not Track and similar mechanisms. If an industry-wide consensus or legal requirement emerges regarding how to interpret and respond to Do Not Track signals, we will update our practices and this policy accordingly. In the meantime, we remain committed to transparency about our data collection practices as described throughout this Privacy Policy.
For users in jurisdictions that require specific recognition of tracking opt-out signals, such as the Global Privacy Control recognized under certain U.S. state privacy laws, we will process such signals as valid requests to opt out of the sale or sharing of personal information where applicable. As stated elsewhere in this policy, we do not sell personal information in the traditional sense of that term.
We reserve the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our information practices, legal requirements, or service offerings. When we make material changes to this policy, we will notify you by posting a prominent notice on our website, sending an email to the address we have on file for you if applicable, or through other appropriate communication channels.
The date at the top of this policy indicates when it was last revised. Changes become effective immediately upon posting unless a later effective date is specified. Your continued use of our website and services after the posting of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms, except where applicable law requires us to obtain your explicit consent to the changes.
We encourage you to review this Privacy Policy periodically, especially before providing us with new personal information or engaging in new types of interactions with the Company. If you disagree with any changes to this policy, your sole remedy is to discontinue use of our website and services and to request deletion of your personal information in accordance with the Your Privacy Rights and Choices section above.
If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, we welcome you to reach out to us through any of the channels listed below. We take privacy matters seriously and will respond to your inquiry promptly and thoroughly.
By Email. You may contact our privacy team by sending an email to reply@bulkbuy.lat. We monitor this inbox regularly and will acknowledge receipt of your message within one to two business days. For sensitive inquiries, you may request a secure communication channel in your initial email.
By Telephone. You may call us at +1 (224) 788-3384 during regular business hours. If your call is not answered immediately, please leave a detailed message including your name, contact number, and the nature of your privacy inquiry, and we will return your call as soon as possible.
By Mail. Written correspondence regarding privacy matters may be sent to the following address:
Bulk Buy Canada Inc
1033-511 Lacolle Way
Orleans - K4A 5B6
Canada (CA)
When corresponding by mail, please include a return address and sufficient detail about your inquiry to allow us to provide a complete and accurate response. We recommend using a trackable delivery method for time-sensitive privacy requests.
This Privacy Policy and all matters arising out of or relating to the collection, use, disclosure, and protection of personal information by the Company shall be governed by and construed in accordance with the laws of the Province of Ontario, Canada, and the federal laws of Canada applicable therein, without regard to principles of conflict of laws.
Any disputes or claims arising from or in connection with this Privacy Policy, including disputes relating to the validity, breach, or termination of this policy and disputes relating to data processing activities, shall be subject to the exclusive jurisdiction of the courts located in Ottawa, Ontario, Canada. By using our services, you irrevocably consent to the jurisdiction and venue of such courts for the resolution of any such disputes.
If any provision of this Privacy Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision shall be severed from the policy, and the remaining provisions shall remain in full force and effect to the fullest extent permitted by law.
This Privacy Policy is drafted in the English language. Any translation of this policy into another language is provided for convenience only, and the English language version shall prevail in the event of any inconsistency or discrepancy between the English version and any translation.