Privacy Policy

1. Who we are

GetGravel.com is operated by R.F. Klein & Sons Ltd., a Prince George, British Columbia business. In this policy, “GetGravel,” “we,” “our,” and “us” mean R.F. Klein & Sons Ltd., operating as GetGravel.com.

Our Privacy Officer is responsible for privacy questions and requests. You’ll find their contact details in the last section, and you can reach out any time.

2. Information we collect

Contact and order details

• Your name
• Email address
• Phone number
• The delivery or pickup address for your order
• If you choose to bill a business, that business’s name and accounting email/phone

Quote and order information

• Products and quantities you select
• Estimates and quotes you generate or ask us to email you
• The service you choose (pickup, Get It Loaded, or Get It Delivered)
• Requested dates and delivery windows
• Payment status and payment-reference information
• Discounts, refunds, and any order adjustments
• Your order history with us

Delivery information

• Your delivery address
• The map pin or drop location you place for where the material should go
• Delivery and access instructions you provide
• Notes needed to complete the delivery
• Delivery status and timestamps
• Proof-of-delivery photographs taken by our driver
• Driver or customer-service notes related to fulfilling your order

Please keep delivery instructions to what we need to complete the job — there’s no need to include sensitive or unrelated personal details.

Communications and consent records

• Emails and text messages related to your quotes and orders
• Customer-service conversations
• Your communication preferences and any opt-out you’ve made
• A record of the consent that lets us email you a quote you’ve asked for

Technical and website information

When you use the site, some technical information is created automatically. Depending on how you use the site, this can include:

• IP address
• Browser and device type, and operating system
• Pages viewed and timestamps
• Session information
• Cookies and browser-storage information (see the cookies section below)
• Authentication events (for staff sign-ins)
• Error and diagnostic information
• Security and access logs

Some of this technical information can be considered personal information when it can be connected to an identifiable person.

Payment information

Card information is entered directly into secure fields provided by our payment processor, Stripe, and is sent to Stripe — it does not reach GetGravel’s own servers. We do not store your full payment-card number. If you ask us to keep a card on file, Stripe securely stores the card and we keep only a reference token plus the card brand, last four digits, and expiry so you can tell which card it is. We retain transaction identifiers, payment status, payment method, refund information, and similar payment-reference details required to manage your order.

3. How we collect information

We collect information:

• Directly from you
• Through the estimator, quote process, and checkout
• Through orders our staff create for you by phone or in person
• Through our in-yard point-of-sale and Get It Loaded transactions
• Through our delivery and driver workflows
• Automatically through the website and software
• From the payment, messaging, mapping, hosting, and monitoring providers involved in completing the service you requested

We don’t buy personal information, and we don’t receive unrelated third-party marketing lists.

4. How we use information

We use the information we collect to:

• Prepare quantities, estimates, and quotes
• Determine whether we can serve your delivery location
• Process orders and payments
• Schedule pickups and deliveries
• Provide map-based delivery placement
• Communicate order status and estimated arrival information
• Provide customer service
• Process changes, cancellations, and refunds
• Maintain order histories and business records
• Prevent fraud and protect accounts and payments
• Maintain audit records of sensitive actions
• Troubleshoot and improve the website and software
• Meet tax, accounting, legal, insurance, safety, and operational requirements
• Investigate security incidents, payment problems, or service disputes

We won’t use your personal information for a materially different purpose without appropriate notice or your consent, unless permitted or required by law.

5. Text, email & communication choices

Order-related communication

We may use email, text (SMS), or telephone to send you communications reasonably connected to your quotes and orders, such as:

• A quote you asked us to send
• Order confirmation and payment status
• Loading or delivery status and estimated arrival
• Schedule changes or delivery delays
• A problem completing your order
• Customer-service replies

Providing a mobile number so we can text you about an order is not a sign-up for marketing.

About our text messages

• Message frequency varies with your order activity.
• Message and data rates may apply.
• You can reply STOP to unsubscribe from texts.
• You can reply HELP, or contact us using the details below, for help.
• Agreeing to texts is not a condition of buying from us.
• Where practical, you can ask us to reach you by email or phone instead.
• Opting out of texts may limit our ability to send you live delivery updates by text.

Mobile numbers, SMS opt-in records, and messaging consent are not sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. We may provide this information to service providers solely to deliver communications on our behalf.

Marketing communication

We do not currently send promotional or marketing messages. If we introduce them in the future, they will be separate from order communications, will require appropriate consent, and will include a way to unsubscribe. Unsubscribing from marketing would not stop the essential emails and texts we send about your actual orders.

6. Service providers & sharing

To run our business we share limited information with trusted providers who help us operate. These include providers for:

• Payments — Stripe
• Text messages — Twilio
• Email — Resend
• Website hosting — Vercel
• Database, authentication, and file/photo storage — Supabase
• Maps, address lookups, and travel-time calculations — Google Maps Platform
• Error monitoring — Sentry

These providers are expected to use the information only to provide their services to GetGravel, subject to their own legal obligations.

We may also disclose information:

• With your consent
• To complete an order or service you requested
• To prevent fraud or protect the security of our systems and customers
• To investigate misuse
• To comply with a court order, legal process, or applicable law
• In connection with a legitimate business reorganization, sale, or transfer, with appropriate safeguards
• In an emergency where disclosure is permitted by law

We do not sell personal information. Some sharing is necessary to operate payments, communications, maps, hosting, and deliveries — but only with the providers and for the purposes described here.

7. Where information is processed

Some of our service providers may process or store personal information outside British Columbia or Canada, including in the United States. Information processed in another country may be subject to that country’s laws and may be accessible to courts, law-enforcement agencies, or government authorities in accordance with those laws.

GetGravel remains responsible for personal information under its control and uses contractual and other safeguards appropriate to the services involved.

8. Cookies & browser storage

We use cookies and similar browser storage to make the site work. We do not use advertising, remarketing, or behavioural-tracking pixels, and we don’t use third-party marketing cookies.

Essential cookies and storage

• A cookie that remembers your chosen store location so prices, availability, and delivery are calculated for the right yard.
• Browser storage that carries your estimate into checkout and remembers your progress through the order steps, so you don’t lose your place.
• Secure, sign-in cookies used by our staff tools (point-of-sale, yard, driver, dispatch, and admin). These are for staff, not customers.

Analytics

We keep a small amount of first-party analytics to understand which pages and tools are helpful. This uses an anonymous session identifier stored in your browser and is recorded only in our own systems — it isn’t shared with an outside analytics company.

Third-party features

When a page loads maps or address lookup (Google Maps) or the secure card-payment fields (Stripe), those providers may set their own cookies in your browser as part of delivering that feature. We don’t use them for advertising.

9. How we protect information

We use reasonable administrative, technical, and physical safeguards appropriate to the information we handle. These include:

• Role-based access, so staff only reach the information their role needs
• Store- and location-scoped access for staff
• Restricted, purpose-limited access for drivers
• Signed, time-limited sessions and hashed staff PINs for our yard and staff tools
• Database access controls (row-level security)
• Append-only audit logging of sensitive actions such as refunds and overrides
• Encryption in transit and at rest provided by our infrastructure and service providers
• Backups and security monitoring
• Keeping system secrets and keys on the server side, never exposed to the browser
• Testing and controlled releases of software changes

No internet-based service can be guaranteed completely secure. However, we take reasonable steps to protect personal information against unauthorized access, collection, use, disclosure, copying, modification, loss, and disposal.

10. Keeping, deleting & anonymizing information

We retain personal information only for as long as reasonably necessary to provide our services, maintain business and transaction records, resolve disputes, and meet legal, tax, accounting, insurance, security, and operational requirements.

Certain order, payment-reference, refund, delivery, proof-of-delivery, and audit records may be kept for an extended period as part of our business records.

When personal information is no longer reasonably required, we securely delete it or anonymize it so it can no longer be associated with an identifiable person.

A deletion request may not remove every record. Some information must be retained for accounting, taxes, payment disputes, refund history, legal claims, safety, fraud prevention, audit integrity, or other lawful business requirements. Where operational records must remain, we anonymize personally identifying details where reasonably possible.

11. Your access & choices

You may ask us to:

• Access the personal information we hold about you
• Correct information that’s inaccurate
• Update your contact details
• Change your communication preferences
• Withdraw optional consent
• Delete or anonymize information, where legally and operationally appropriate

To make a request, contact our Privacy Officer using the details below. Please note:

• We may need to verify your identity before acting on a request.
• Access may be limited where permitted or required by law.
• Withdrawing consent may affect services that depend on the information.
• Order and transaction history may be corrected by adding a note rather than rewriting historical records.
• We will respond within the period required by applicable law.

12. Questions & complaints

If you have a question or concern about how GetGravel handles personal information, please contact our Privacy Officer first. We’ll review your concern and respond as reasonably and promptly as we can.

If you’re still not satisfied, you may contact the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca. Contacting the OIPC doesn’t imply it endorses GetGravel.

13. Children’s information

Our ordering services are intended for people legally able to place an order, or for an authorized representative acting on someone’s behalf. We don’t knowingly seek to collect personal information directly from children for marketing purposes.

14. Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “last updated” date and version number at the top of this page and post the updated policy here. If a change materially affects your choices or how we handle your information, we may provide additional notice.

Last updated July 24, 2026 · Version 1.0

15. Contact our Privacy Officer

For any privacy question or request, or to reach the person responsible for privacy at GetGravel: