Privacy Policy
Data Privacy and Cookies Policy
Version 1.0 — effective October 19, 2026
Introduction
Command Tubular Products Ltd, 406 - 22nd Avenue, Nisku, Alberta T9E 7W8, Canada ("Command", "we", "us") runs the website commandtubular.com. Command is responsible, as data controller, for the personal data collected through this website.
We respect your privacy and handle personal data in line with the data protection laws that apply to us and to you, including, where applicable, Alberta's Personal Information Protection Act (PIPA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the EU General Data Protection Regulation (GDPR), US state laws such as the Texas Data Privacy and Security Act, and the data protection laws of the United Arab Emirates and Saudi Arabia.
This policy explains what personal data we collect through the website, why, how long we keep it, who receives it and what rights you have.
Definitions
- Personal data: any information about an identified or identifiable person, such as a name, e-mail address or IP address.
- Device: the equipment you use to visit the website, such as a computer, tablet or smartphone.
- You / User: any person who visits the website and whose personal data may be collected.
1. How we collect personal data
We collect personal data in two ways: automatically, through your device when you browse the website, and directly, when you send us a message through the contact form.
1.1 Cookies
Cookies are small text files a website stores on your device. We use them to make the website work, to remember your cookie choice and, only if you accept, to measure how the website is used. When you first visit, a banner lets you accept or reject non-essential cookies. You can change your choice at any time with the "Privacy & Cookies Policy" tab at the bottom of every page, or by deleting cookies in your browser settings (Chrome, Edge, Firefox and Safari all offer this). Rejecting cookies does not stop the website from working.
| Service | What it does | Cookies set on our website | Kept for | Type | Provider |
|---|---|---|---|---|---|
| Cookie banner (CookieYes / GDPR Cookie Consent) | Records whether you accepted or rejected non-necessary cookies | viewed_cookie_policy, CookieLawInfoConsent, cookielawinfo-checkbox-necessary, cookielawinfo-checkbox-non-necessary | 12 months | Necessary | CookieYes Limited |
| Google Analytics (through MonsterInsights) | Visitor statistics | _ga, _ga_E47XSC3QD9 | 2 years | Analytics: set only after you click Accept, removed if you later refuse | Google LLC |
| WP Engine and Cloudflare | Host the website and deliver it quickly and securely | Security cookies such as __cf_bm, when needed | Up to 30 minutes | Necessary | WP Engine Inc.; Cloudflare Inc. |
| Wordfence | Protects the website from attacks and spam | None for visitors (only for logged-in administrators) | – | Necessary | Defiant Inc. |
| Google Fonts | Displays the website's typeface | None; your browser connects to Google's servers | – | – | Google LLC |
| LinkedIn post feed (Tagembed) | Shows our latest LinkedIn posts on the home page | None on our website; the provider may set its own | Provider's policy | Third party | Tagembed; LinkedIn |
| Video player (YouTube) | Plays the home page background video | None on our website; YouTube may set its own | Provider's policy | Third party | Google LLC (YouTube) |
| Interactive maps (amCharts) | Draws the maps of our locations and service network | None | – | – | amCharts |
Until you click Accept, Google Analytics runs without cookies and cannot recognise you between visits. If you reject cookies, or later switch analytics off in the cookie settings, any Google Analytics cookies already on your device are removed.
1.2 Links to other websites
The website links to other websites, such as Google Maps and LinkedIn. We do not share your personal data with those websites, and we are not responsible for how they handle it. Please read their own privacy policies.
2. Why we process personal data, and what we collect
| Purpose | Personal data | Legal basis (visitors in the EU/UK) |
|---|---|---|
| Answer your enquiry, prepare quotes and follow up | Name, company, e-mail, phone, the team you want to reach (sales, technical support or finance) and your message | Steps you asked for before a contract; our legitimate interest in replying to business enquiries |
| Run the website and keep it secure | IP address, browser and device type, pages requested, date and time | Our legitimate interest in a safe, working website |
| Measure and improve the website | Pages viewed, visit length, approximate country, device type (Google Analytics) | Your consent, given in the cookie banner |
| Handle requests to exercise your privacy rights | The details you give us in your request | Legal obligation |
| Meet other legal obligations | Any of the above, where the law requires it | Legal obligation |
We do not ask for sensitive data such as payment details or identity documents (except proof of identity for a rights request, see section 7). We do not sell personal data or use it for automated decisions about you.
3. How long we keep personal data
| Data | Kept for |
|---|---|
| Contact-form enquiries (the e-mails we receive) | 3 years after our last contact with you |
| Cookie consent record | 12 months, then the banner asks again |
| Google Analytics data | 14 months from collection |
| Server and security logs | Up to 1 year |
| Privacy rights requests and our replies | As long as needed to show we handled them, then deleted |
We delete personal data earlier if you ask us to and no legal reason requires us to keep it, or if the website is closed.
4. Who receives personal data, and transfers outside your country
- Command teams: your enquiry goes to the Command people best placed to answer it. They may work for Command Tubular Products Ltd or for another Command group company in the United States, France, the United Arab Emirates or Saudi Arabia.
- Service providers (processors): companies that host, secure and support the website on our behalf: WP Engine (hosting), Cloudflare (delivery and security), Defiant (Wordfence security), CookieYes (cookie banner), Automattic (Akismet, which checks contact-form messages for spam) and Google (analytics and fonts). They may use the data only to provide their service to us, under our instructions, and must keep it secure and confidential.
- Transfers: because Command and these providers operate in several countries, your data may be processed outside the country where you live, mainly in the United States. When data leaves the EU, UK or another country that restricts transfers, we rely on recognised safeguards such as the European Commission's standard contractual clauses or the provider's certification under the EU-US Data Privacy Framework.
5. When we disclose personal data
We do not sell, rent or trade personal data. Apart from the recipients in section 4, we disclose it only:
- with your consent;
- when the law, a court or a public authority lawfully requires it;
- to protect our rights, our website or other people's safety, for example to investigate an attack on the website;
- to a buyer or successor if all or part of Command's business is sold or reorganised, under this same policy.
6. Security
We protect personal data with technical and organisational measures suited to the risk:
- the whole website runs over an encrypted connection (HTTPS);
- a web application firewall and malware scanning (Wordfence and Cloudflare) block attacks;
- the website is hosted on a managed platform with daily backups;
- administrator accounts are limited to the people who need them, and staff who handle enquiries must keep them confidential.
No website can be made completely secure. If you think your data has been put at risk through our website, please tell us at privacy@commandtubular.com.
7. Your rights
Depending on where you live, you may have the right to:
- know whether we hold personal data about you and get a copy of it;
- have it corrected, completed or updated;
- have it deleted;
- object to or restrict how we use it;
- withdraw consent you gave, for example to analytics cookies, at any time;
- receive it in a structured, portable format;
- not be treated differently for using these rights.
How to make a request: e-mail privacy@commandtubular.com, or write to Command Tubular Products Ltd, Attn: Privacy, 406 - 22nd Avenue, Nisku, Alberta T9E 7W8, Canada. Say which right you want to use and include enough information for us to confirm your identity (we may ask for proof of identity before acting, to protect your data).
We will reply within 30 days, or sooner if the law in your country requires it. If we need longer, we will tell you why. If you are not satisfied with our answer, you can complain to the data protection authority where you live, for example the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, the CNIL in France or the Texas Attorney General.
8. Applicable law
This policy is governed by the laws of the Province of Alberta and the federal laws of Canada that apply there. This does not take away any rights you have under the data protection laws of the country where you live.
9. Entry into force and updates
This policy takes effect on the date shown at the top. We may update it when our website, our services or the law change. We will publish the new version on this page with its new date and version number, and for significant changes we will add a notice on the website.
10. Questions and contact
For any question about this policy or how we handle personal data:
- E-mail: privacy@commandtubular.com
- Post: Command Tubular Products Ltd, Attn: Privacy, 406 - 22nd Avenue, Nisku, Alberta T9E 7W8, Canada
- Phone: +1 780-955-9331