Privacy Policy
Plain talk: you send us project info so we can price your material. This page says exactly what we collect, why, who helps us handle it, and what you can ask us to do with it.
Who is responsible for your information
- Burnaby Blacktop Ltd — Metro Vancouver, British Columbia, Canada. BBX is its construction-materials disposal & recycling service; Burnaby Blacktop receives and works the information you submit. 236.427.4748 · [email protected] · burnabyblacktop.ca.
- A&M Capital, S.A. de C.V. — San Salvador, El Salvador. Operates the dirtgone.net platform as technology provider.
Together they are responsible for the personal data collected through this site under El Salvador's Personal Data Protection Law (Legislative Decree No. 144). We also work to meet applicable Canadian privacy law — PIPEDA and British Columbia's Personal Information Protection Act.
What we collect
- Contact & company details you type into the intake form — your name, company, phone and email; the site contact; your environmental consultant; the billing payer; waste-manifest and Letter of Engagement signers; company head-office address.
- Project details — material type and condition, rough quantity, site address and city (plus map coordinates if you pick an address suggestion), timing, trucking and disposal preferences, and your notes.
- Files you attach — photos of the material and project reports (lab analytical, Phase 1, Phase 2, QP determination).
- Payment preference only — whether you'd rather pay by card or bank wire. We never ask for, collect or store card numbers or banking details through this site.
- Waitlist email — if you sign up for grand-opening updates on the home page.
Why we use it
To do what you asked us to do — steps taken at your request before any service agreement:
- price your material and send you back an estimate;
- contact you about your request;
- verify soil reports with your environmental consultant;
- coordinate trucking, disposal and billing;
- keep normal business records.
With your consent: processing the form itself (the checkbox you tick before submitting) and — separately — the waitlist updates you opt into. You can unsubscribe from updates anytime by writing to [email protected].
We don't sell your information, and nothing you submit is published publicly.
Legal basis
Your express consent (Arts. 26–27, Decree 144) and steps taken at your request prior to a contract (Art. 28). Where Canadian law applies, we rely on your consent under PIPEDA / BC PIPA.
Who helps us process it
We use a small set of service providers ("encargados" under El Salvador's Decree 144) under contract:
- Cloudflare — website hosting (Pages), private file storage (R2) and bot protection (Turnstile) (privacy policy).
- Google — form processing and intake records (Apps Script, Sheets, Drive), email delivery to our intake team (Gmail), and address autocomplete (Google Maps Places) (privacy policy).
Files you upload go to private storage (public access disabled). They can only be read through unguessable project links that we treat as internal to our intake team and ask recipients not to circulate.
International transfers
These providers run servers that may sit outside El Salvador and Canada (for example, in the United States). Transfers happen under contractual safeguards, with protection standards no lower than those of the applicable law (Art. 44, Decree 144).
Cookies & local storage
- This site sets no first-party cookies and uses no advertising pixels.
- bbx_theme (localStorage) — remembers your dark/light choice. Stays on your device.
- bbx_draft_v1 (sessionStorage) — a temporary draft of your form, saved only in your browser so a reload doesn't wipe your answers. It contains what you typed, expires after about 30 minutes, and dies when you close the tab. Nothing is sent to us until you press Submit.
- Third-party tools: Cloudflare Turnstile (the bot check) may set its own security cookies; Google Maps may set cookies under Google's privacy policy when the address search loads.
- Analytics: the site may use Cloudflare Web Analytics — a cookieless tool that doesn't build personal profiles.
Your rights
Under El Salvador's Decree 144 you can ask us for:
- Access — see what data we hold about you.
- Rectification — fix data that's wrong or incomplete.
- Cancellation — have data deleted.
- Objection — stop a use you don't agree with (e.g. marketing).
- Portability — get a copy in a usable format.
- Erasure ("right to be forgotten") — removal where the law provides for it.
- Restriction — limit processing while something is disputed.
To exercise any of them, email our Data Protection Officer at [email protected] (subject: "Privacy request") with your name, a copy of your ID, the data concerned and the right you're exercising. It's free, and we answer within 20 business days (extendable once by another 20 where justified). You can revoke your consent the same way, anytime.
Not satisfied with our answer? You can complain to the Agencia de Ciberseguridad del Estado (ACE), El Salvador's data protection authority. In Canada you can also contact the Office of the Privacy Commissioner of Canada or BC's Office of the Information and Privacy Commissioner.
Data Protection Officer
Data Protection Officer — BBX / dirtgone.net · [email protected] · 236.427.4748.
Security
The site runs over HTTPS/TLS, access to intake records is limited to our intake team, and uploaded-file links are unguessable and treated as internal. We only collect what we need. No internet transmission is 100% secure — we can't promise absolute security, but we work to protect what you send us.
If something goes wrong
If a security breach puts your data at risk, we commit to notifying the competent authorities (ACE and the Attorney General's Office in El Salvador) and affected users within 72 hours of becoming aware of it, plus any notice required by applicable Canadian law.
How long we keep it
As long as needed to handle your request and for business records and legal obligations (some accounting records must be kept 5–10 years). The draft in your browser expires on its own, as described above.
Minors
This site is for construction professionals and is not directed at anyone under 18. We don't knowingly collect minors' data; if you believe a minor has sent us data, write to the DPO and we'll delete it.
Changes to this policy
We'll post any update on this page with a new effective date.