Privacy policy

Effective 29 October 2026.

1. Who we are

IronStuff is a trade name of TilyD Enterprises Ltd., a British Columbia company ("we", "us"). We market used industrial machinery on behalf of its owners and qualify buyers for it. This policy explains how we handle personal information under the Personal Information Protection Act (British Columbia) and, where it applies, the Personal Information Protection and Electronic Documents Act (Canada).

2. Privacy officer

Our privacy officer is Robert Murray. Write to [email protected] or by mail to IronStuff, #250 - 997 Seymour St., Vancouver, BC V6B 3M1, Canada.

3. Information we collect

  • Sellers and enquirers: name, company, role, business email, city and province, and the details and photos of the equipment you send us through the valuation or contact forms.
  • Sellers who list with us: the information in the listing agreement and equipment data sheet, including the owner's legal name and address, signatory details, any liens or security interests, and the results of personal property registry searches.
  • Buyers: buyer registration details (legal and trade name, business address, website, business number or tax registration, contact name and title, business email, equipment of interest, intended use, destination, proposed payment method, proof of funds or financing where provided) and signed agreements.
  • Electronic signatures: the typed name and title, the time the email address was verified, the time of signing, IP address, browser details and a fingerprint (SHA-256) of the signed text.
  • Correspondence: emails and written offers exchanged with us.
  • Website use: pages visited and form submissions, measured without cookies (see section 8). Our servers keep standard access logs (IP address, browser, pages requested) for security.

We do not ask for telephone numbers.

4. Why we use it

  • To prepare valuations and listings and to market equipment for its owners.
  • To reply to enquiries and send data sheets.
  • To qualify buyers and protect owners' confidential information.
  • To arrange inspections, relay offers and prepare purchase agreements and other sale documents.
  • To enforce confidentiality and non-circumvention agreements and our commission rights.
  • To send new-listing notices to buyers who ask for them (you can unsubscribe from any notice).
  • To keep business, tax and legal records, and to protect the site against spam and abuse.

5. Consent

We collect personal information with your consent, which you give when you send a form, register, or sign an agreement. We send new-listing notices only to buyers who tick the separate box asking for them. You may withdraw consent at any time by writing to us, subject to legal or contractual restrictions; withdrawing may mean we can no longer act for you or deal with you as a buyer.

6. When we disclose it

  • To owners: a registered buyer's identity and contact details are disclosed to the owner of equipment the buyer has asked to inspect or offered to buy.
  • To buyers: an owner's identity and the equipment location are disclosed only to buyers who have signed our confidentiality and non-circumvention agreement, and only for equipment they have asked about.
  • To the escrow service used for a transaction, and to the other party's riggers or carriers as needed for removal.
  • To our service providers, who process information for us under contract: Hetzner (website server), Cloudflare (website security and delivery), Postmark, operated by ActiveCampaign (sending email from the site) and our email provider. Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law.
  • Where required or permitted by law, or to establish, exercise or defend legal claims.

We do not sell personal information.

7. Uploaded files

Photos sent with the valuation form, proof of funds documents and signed agreements are stored in a private area of our server that is not reachable from the web. Listing photos that we publish have their location and camera data (EXIF and GPS) removed. Photos that could identify the owner, such as nameplates and signage, are shown only to buyers who have signed the confidentiality agreement.

8. Analytics and cookies

We measure visits with Matomo, run on our own server, set up so that it uses no cookies and does not share data with third parties. We do not use Google Analytics or advertising trackers. The site sets a session cookie needed for forms to work. Cloudflare may set a security cookie to protect the site from automated abuse, and our forms use Cloudflare Turnstile to tell people from bots. Videos on listing pages use the privacy-enhanced YouTube or Vimeo players.

9. How long we keep it

  • Signed agreements and transaction records: six years after the last transaction.
  • Registration records of buyers who never transacted: three years.
  • Valuation requests and their photos that do not lead to a listing: three years after submission, then deleted.
  • Enquiries and contact messages that lead to no further dealings: three years.
  • Unsubscribe requests are kept so that we do not email you again.

10. Security

We protect personal information with access controls, a password-protected administration area, encrypted connections (HTTPS), private storage for uploaded documents and daily backups kept for 30 days. Only Robert Murray has access to the administration area.

11. Your rights

You may ask to see the personal information we hold about you, ask us to correct it, or ask how it has been used and disclosed. Write to [email protected]. We reply within 30 days. If you are not satisfied with our answer you may contact the Office of the Information and Privacy Commissioner for British Columbia.

We may update this policy. The effective date above shows when it last changed.