Privacy Policy

Effective July 11, 2026. This policy explains what Kaplex Industries Inc.(“Kaplex”) does with personal information in Kaplex Groundwork. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA).

The short version

Groundwork handles two kinds of people: builders and trades who apply and pay, and homeowners who asked to be connected to a builder.
We sell homeowner introductions. If you are a homeowner who asked to be connected, your name, contact details, property address, and lot analysis are given to a builder who pays us a fee for that introduction. That is our business model, and you consented to it when you asked to be connected.
We introduce a homeowner only to a builder or a trade — never to a realtor, a property or strata manager, or a mortgage broker.
We never disclose a homeowner who did not ask to be connected. There is no cold list.
Marketing email is a separate, optional, unticked box. Unsubscribe in one click, any time.
Ask us and we’ll show you everything we hold about you, correct it, or delete it — within 30 days, free.

1Who’s responsible

Kaplex Industries Inc. is responsible for the personal information in our custody and control. We have designated a privacy officer who is accountable for our compliance with this policy:

Symon Kaplan, Privacy Officer
Kaplex Industries Inc., 212–1939 Lee Avenue, Victoria, BC V8R 4W9, Canada
info@kaplexindustries.com · 250-580-1350

If you have a question, a request, or a complaint about your privacy — whether you are a builder, a trade, or a homeowner — that is the person to write to. We answer.

2The two kinds of people in Groundwork

Groundwork sits between two groups, and it handles their information very differently. Read the part that applies to you.

Builders & trades: You apply for a seat, we verify you, you pay us, and you claim leads. We hold your business and contact details so we can run your membership. We do not sell your information to anyone.
Homeowners: You told Kaplex you want to build on your property and asked to be connected to a builder. We hold what you gave us, and — because that is what you asked for — we disclose it to a builder who pays us a fee for the introduction. Section 5(a) explains exactly what that means.

3What we collect

From builders and trades

Application details: Your name, company, trade or role, email, phone, and whatever you tell us in the notes field.
Verification details: Your business licence, trade certification, WorkSafeBC standing, and insurance — what we need to confirm you are who you say you are and can lawfully do the work.
Membership and billing: Your seat tier, status, and the leads you claim. Payments run through Stripe: they hold your card details, we do not. What we store is a Stripe customer and subscription reference — never a card number.
Referral activity: If you use or hold a referral code, we record the code, who it introduced, and the commission that accrues on it — so we can pay you correctly.
Consent record: The exact wording of each consent you gave, the time, your IP address, and your browser string. Canadian anti-spam law requires us to be able to prove consent; this is how we do it.

About homeowners

Contact details: Their name, email, and phone number — given to us by the homeowner.
Property address: The address of the property they want to build on, and what they told us about the project.
Lot analysis: What our software worked out about the parcel from public data — ParcelMap BC boundaries, municipal open data and adopted bylaws, BC Assessment characteristics. This is public information about a property, joined to a person who asked us to look it up for them.
Consent record: The wording the homeowner agreed to, and when — including their consent to be introduced to a builder.

From everyone

Standard server logs kept by our host — IP address, timestamp, browser, page requested — to keep the site up and stop abuse. We don’t ask for, and don’t want, anyone’s SIN, banking details, or date of birth. Please don’t send them.

4Why we collect it

We identify our purposes before or at the moment we collect. They are:

To run the network — take applications, verify licensing and insurance, approve seats, run the portal, and bill you.
To grade a property — match a homeowner’s address against public parcel and bylaw data and work out what it could support.
To make the introduction the homeowner asked for — offer their lead to our members, and, when a member claims it, disclose the homeowner’s details to that member in exchange for a fee.
To pay referral commissions to the person whose code brought a member in.
To send you marketing about Groundwork, but only if you ticked the optional consent box.
To keep the service working and honest — security, fraud and abuse prevention, and improving the accuracy of our grading in aggregate.
To meet our legal obligations, including keeping proof of consent and our tax records.

If we ever want to use information for a genuinely new purpose, we will ask first.

5Who we give it to

a. Homeowner information goes to a builder, and the builder pays us for it

This is how Groundwork makes money, and we are not going to dress it up. When a homeowner asks Kaplex to connect them with someone who can build, we offer that homeowner to the builders and trades in our network as a priced lead. When one of them claims it, we disclose the homeowner’s name, email, phone number, property address, and our analysis of their lot to that member, and that member pays Kaplex a fee — currently between a few hundred and several thousand dollars, depending on the size of the project.

In plain words: a homeowner’s personal information is disclosed to a licensed builder in exchange for money. A homeowner who asks to be connected is consenting to exactly that. If that is not what you want, do not ask to be connected — and if you already have, tell us and we will withdraw you before any introduction is made.

The limits on it, which we hold ourselves to:

Only homeowners who asked. We never disclose a homeowner who did not raise their hand. There is no cold list, and we do not scrape people into one.
Only to builders and trades. A lead is never sold or given to a real-estate licensee, a rental property manager, a strata manager, a mortgage broker, or a lead-generation reseller.
Exclusively, once. A lead is claimed by one member. We do not sell the same homeowner to a queue of contractors who will all call them.
The member takes on their own duties. Under our Terms of Service, a member who receives a homeowner’s information must use it only for that project, must never resell or share it, must not add the homeowner to any marketing list without getting the homeowner’s own consent, and is independently accountable under PIPA and CASL.

b. Service providers who run the plumbing

These companies process data on our behalf, under contract, only to provide their service to us:

Vercel — hosts the site and keeps the server logs.
Supabase — the Postgres database applications, members, leads, and consent records are stored in.
Stripe — takes the payments. Stripe holds card details; Kaplex never sees or stores a card number.
Resend — delivers our email, including portal login links and member notices.
Telegram — carries internal operational alerts to our team (a new application, a claim, a payment).
Map tile providers — serve the basemap imagery behind the map on our pages. They see the standard request information a browser sends when it loads an image.

Some of these providers store or process data outside Canada, including in the United States. While it is there, it may be accessible to foreign courts, law enforcement, and government under that country’s laws. We use them because they are the standard tools for running a service like this, and we hold them to contractual protection of the data — but you are entitled to know where it goes, and now you do.

c. When the law requires it

If we are legally compelled — a court order, a subpoena, a lawful demand from a regulator — we will comply, and we will not give more than is required. If our business is ever sold or merged, personal information may transfer as part of it, and the buyer would be bound by this policy.

d. What we never do

We do not sell, rent, or trade a builder’s or a trade’s information to anyone. We do not sell any personal information to advertisers, data brokers, or list resellers. We do not build an audience and sell access to it. The only disclosure we are paid for is the one described in 5(a), to a member, for a homeowner who asked for it.

6Consent — and taking it back

You give us your information knowingly, by typing it into a form, and that is your consent to use it for the purposes in section 4. Where the information is sensitive or the disclosure is significant — such as the homeowner disclosure in section 5(a) — we ask for express, unbundled consent, at the point of collection, in words that say what will actually happen.

Marketing email is always separate. The marketing box is never pre-ticked, and ticking it is never a condition of applying, of getting a seat, or of receiving a report. That is express consentunder Canada’s Anti-Spam Legislation (CASL), and we log the exact wording you agreed to so that both of us can prove what was said.

You can withdraw consent at any time. Click unsubscribe in any email, or write to info@kaplexindustries.com. We stop. A homeowner can withdraw from being introduced at any time before a member claims their lead — after that, the introduction has already happened and the builder holds the information under their own obligations, so we will tell you who has it and help you make the request to them. Withdrawing consent for marketing does not stop us replying to something you asked us about, and it does not affect what we must keep by law.

7How long we keep it — and how to get it deleted

Applications that don’t become members: kept for 24 months from your last contact with us, then deleted.
Member records: kept while you are a member, and for 7 years after your seat closes — the period our tax and business records must be kept for.
Homeowner leads that were never claimed: kept for 24 months, then deleted or anonymized.
Homeowner leads that were claimed: the record of the claim — who claimed it, when, and for how much — is kept for 7 years, because it is a record of a sale. Ask us and we will minimize the personal details in it once the project is done.
Consent records: kept for 3 years after consent is withdrawn. CASL requires us to be able to prove we had permission, and this record does that. We keep it even if you ask us to delete everything else — that is a legal obligation, and it works in your favour.
Unsubscribe list: kept indefinitely. If you unsubscribe, we have to remember that you did, or we would email you again by accident. It is the one list you can’t ask to come off.
Server logs: our host’s standard short retention schedule.

After that we delete or anonymize. We may keep aggregated, de-identified statistics — for example, how many Victoria lots support a four-unit build — which cannot be traced back to a person.

To request deletion

Email info@kaplexindustries.com with the subject “Delete my data”. We will confirm it is you, delete what we can, and tell you plainly what we had to keep and why. We do it within 30 days, free of charge.

8Cookies and tracking

Groundwork does not run advertising trackers, ad pixels, or third-party analytics.We don’t follow you around the internet, and we don’t sell an audience.

The site sets only what it needs to function:

a member session cookie after you sign in to the portal, so you stay signed in;
a referral cookie if you arrived through a member’s referral link, so the right person is credited for the introduction;
the essential cookies our hosting and security layer set to keep the site up and safe.

If we ever add analytics, we will update this section before we turn it on.

9How we protect it

everything travels over an encrypted connection (HTTPS/TLS);
data sits in an access-controlled Postgres database, encrypted at rest by our provider, reachable only by a least-privilege application role — the public keys on the website can read none of it;
the portal signs you in with a short-lived, single-use email link, not a password you might reuse;
a homeowner’s contact details are hidden until the moment a lead is claimed — members browsing the board see the grade and the area, not the person;
only the people who need information to do their job can reach it;
we collect as little as possible in the first place. The best way to protect information is not to have it.

No system is perfectly secure, and we won’t pretend otherwise. If a breach ever creates a real risk of significant harm, we will notify the people affected and the Office of the Privacy Commissioner of Canada, as the law requires.

10Seeing and correcting your information

You have the right to see the personal information we hold about you, to be told how we have used it and who we have disclosed it to, and to have it corrected if it is wrong. A homeowner may ask us which member received their information, and when — and we will tell them.

Email info@kaplexindustries.com. We verify who you are and respond within 30 days, free of charge. In the rare case we can’t give you something — because it would reveal another person’s information, or it is protected by legal privilege — we will tell you why.

We keep information accurate and current, but we rely on you: if something changes, tell us.

11If you’re not happy with us

Start with our privacy officer at info@kaplexindustries.com. We investigate every complaint, and if we got it wrong we fix it and change what we do.

If you are still not satisfied, you can escalate — and you do not need our permission to:

the Office of the Privacy Commissioner of Canada (PIPEDA), or
the Office of the Information and Privacy Commissioner for British Columbia (BC PIPA).

12Changes to this policy

If we change this policy in a way that matters, we will update the effective date at the top and, where it is reasonable, tell you directly. We will never quietly start using information we already hold for a new purpose without asking.

This policy works alongside our Terms of Service.

13Contact

Symon Kaplan, Privacy Officer
Kaplex Industries Inc.
212–1939 Lee Avenue, Victoria, BC V8R 4W9, Canada
info@kaplexindustries.com · 250-580-1350