Privacy Policy

Last updated: August 26, 2025

This Privacy Policy explains how IronOak Power Inc. (“IronOak Power,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit ironoakpower.com, contact us, request a quote, or use our residential and commercial solar and energy services across Canada and the United States.

By using our website or services, you agree to this Privacy Policy.

1. Who we are and how to contact us

  • Controller: IronOak Power Inc.

  • Website: https://www.ironoakpower.com

  • Email: info@ironoakpower.com

  • Mailing address: 51 Curtis St, Picton, ON K0K 2T0 Canada

You may contact us using the details above for any privacy questions or to exercise your rights described below.

2. Scope and jurisdictions

This Policy covers personal information collected in Canada and the United States. We aim to meet or exceed the requirements of Canada’s federal Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws where they apply, and the major US state privacy laws governing consumer data. Where local laws impose stricter requirements, we will comply with those requirements.

3. Information we collect

Information you provide to us

  • Identity and contact details: name, email, phone number, address, service location, preferred contact method.

  • Project and property information: roof type, photos or video of property and meter, shade and structural details, utility provider, utility account information required for interconnection, historical usage if you provide it, access instructions.

  • Pre-qualification and financing: information needed to determine eligibility for financing or incentives, including income range or credit-related information that you provide. We do not store full payment card numbers if you pay through a third-party processor.

  • Communications: inquiries, quote requests, emails, calls, texts, meeting notes, survey responses, testimonials, and reviews.

  • Employment inquiries: if you apply for a job, we collect resume and application data.

Information collected automatically

  • Device and usage data: IP address, browser type, device identifiers, pages visited, time on site, referring pages.

  • Cookies and similar technologies: session cookies, analytics, advertising and social pixels. See “Cookies and targeted advertising” below.

Information from third parties

  • Lead sources and partners: referrals from installers, contractors, channel or affiliate partners, marketplaces, and comparison sites.

  • Financing and incentive partners: lenders, financing platforms, utilities, government or utility incentive programs, and permitting authorities.

  • Marketing and analytics providers: ad platforms, analytics services, and social networks in line with their policies and your settings.

4. How we use personal information

We collect and use personal information to:

  • Provide and manage services: consult, design, permit, finance, install, interconnect, monitor, and service solar and related energy systems.

  • Prepare quotes and proposals: assess site conditions, energy usage, savings potential, incentives, and eligibility.

  • Coordinate with third parties: utilities, AHJs and inspectors, permitting offices, rebate and net metering programs, equipment suppliers, subcontractors, and financing partners.

  • Communicate with you: respond to inquiries, schedule site assessments, send project updates, invoices, and service notices.

  • Improve our website and services: analytics, troubleshooting, quality assurance, and product or service development.

  • Marketing and remarketing: show or measure ads and promotions, subject to your choices and applicable laws.

  • Comply with law, enforce agreements, and protect safety, property, and rights.

For Canadian users, we collect, use, and disclose personal information with consent except where otherwise permitted by law and only for purposes that a reasonable person would consider appropriate in the circumstances.

5. Disclosures and categories of recipients

We disclose personal information to:

  • Installers, subcontractors, and suppliers to perform site assessments, installations, and service.

  • Utilities, permitting authorities, and government or utility incentive programs to process applications, inspections, interconnection, and rebates.

  • Financing partners and lenders that you choose to engage with for loans, leases, or PPAs.

  • Service providers and processors that host our website, store data, provide CRM, communications, analytics, security, and payment processing.

  • Professional advisors such as auditors, accountants, and legal counsel.

  • Business transfers in connection with mergers, acquisitions, or asset sales.

  • Law enforcement or regulators when required by law or to protect rights and safety.

We require service providers to protect personal information and use it only for our instructions.

6. Cookies and targeted advertising

We use cookies, pixels, and similar technologies for website functionality, analytics, and advertising. This may include Google Analytics, Google Ads, Microsoft Advertising, Meta, LinkedIn, or similar platforms.

Your choices:

  • Browser controls: you can block or delete cookies using browser settings, which may impact site functionality.

  • Advertising choices: you can adjust ad settings with the platforms you use. Where required by law, we will offer an in-site opt-out for targeted advertising and honor recognized browser signals that indicate an opt-out preference where mandated.

  • Canada Anti-Spam Legislation (CASL): we obtain consent for commercial electronic messages. You can unsubscribe at any time.

  • US CAN-SPAM and TCPA: email and SMS marketing will follow applicable consent and opt-out requirements. To stop SMS, reply STOP.

7. Children’s privacy

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

8. International and cross-border transfers

We may store and process personal information in Canada, the United States, or other countries where our service providers operate. These locations may have different privacy laws than your jurisdiction. We use contractual and technical safeguards appropriate to the sensitivity of the information. Inquiries about our cross-border practices can be sent to our Privacy Officer.

9. Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy and to meet legal, accounting, or reporting requirements. We use criteria such as project life cycle, warranty durations, regulatory obligations, and limitation periods to determine retention. When no longer required, we securely delete, de-identify, or anonymize information.

10. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls, encryption in transit, secure hosting with reputable providers, employee training, and vendor diligence. No method of transmission or storage is fully secure. If we experience a breach, we will comply with applicable notification obligations.

11. Your rights

Canada

Subject to exceptions under applicable law, you may:

  • Request access to your personal information and obtain details about how it has been used or disclosed.

  • Request correction of inaccurate information.

  • Withdraw consent to the extent permitted by law. Withdrawal may limit our ability to provide services that rely on that information.

To exercise these rights, contact our Privacy Officer using the information above. We will respond within 30 days or as otherwise permitted by law. You may also file a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

United States (state privacy laws)

Depending on your state of residence, you may have rights to:

  • Know and access the categories and specific pieces of personal information we have collected.

  • Correct inaccuracies.

  • Delete personal information.

  • Opt-out of the sale of personal information and the sharing or processing of personal information for targeted advertising.

  • Opt-out of certain profiling decisions that produce legal or similarly significant effects.

  • Obtain a portable copy of your personal information.

  • Appeal a decision if we deny your request.

How to exercise your US rights:

  • Submit a request to info@ironoakpower.com

  • We will verify your identity, which may require information reasonably necessary to confirm you are the account holder or authorized agent.

  • We will respond within 45 days, subject to permitted extensions. If we deny your request, you can submit an appeal at [appeals@ironoakpower.com], and if you remain unsatisfied you may contact your state Attorney General.

California-specific disclosures (CPRA)

  • Categories collected: identifiers and contact information, commercial information related to quotes and projects, internet or electronic activity, geolocation derived from your service address, professional or employment-related information you provide for financing, and inferences drawn for service suitability.

  • Sensitive personal information: we do not use or disclose sensitive personal information for purposes that require a “Limit the Use of My Sensitive Personal Information” link under California law.

  • Sale or sharing: we do not sell personal information for money. We may engage in targeted advertising that is considered “sharing” under California law. You can opt out by using our “Do Not Sell or Share My Personal Information” link and by enabling a recognized opt-out preference signal in your browser, which we honor where required.

  • Non-discrimination: we will not discriminate against you for exercising your rights. If we offer referral or marketing programs that could be considered financial incentives, we will provide required notices and obtain opt-in consent.

12. Financing, incentives, utilities, and permitting

If you choose to pursue financing, rebates, tax credits, or utility interconnection:

  • We disclose the minimum necessary information to lenders, utilities, permitting authorities, inspectors, and incentive administrators to process your application, interconnection, inspections, and benefits.

  • These parties are independent controllers of your information and have their own privacy policies. Review their policies before proceeding.

13. Third-party links and social features

Our website may link to third-party websites, plug-ins, or social media. We are not responsible for their content or privacy practices. Review their privacy policies before providing information.

14. Changes to this Policy

We may update this Policy to reflect changes to our practices or applicable laws. We will post the updated Policy on this page with a new “Last updated” date. Material changes will be communicated through reasonable means.

15. How to make a request or complaint

  • Email: info@ironoakpower.com

  • Mail: 51 Curtis St, Picton, ON K0K 2T0 Canada

  • Canada: you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

  • United States: you may contact your state Attorney General.