PIPEDA Privacy Notice

This PIPEDA Privacy Notice provides detailed disclosure as required by the Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5) and is incorporated by reference into our Privacy Policy.

1. Purpose and Scope

This Notice applies to all personal information collected, used, or disclosed by [COMPANY_LEGAL_NAME] from individuals in Canada in the course of commercial activities, as defined by PIPEDA. It does not apply to employee information handled in an employment context.

2. What We Collect and Why

3. Consent

We rely on express consent (opt-in at account registration) for collection of account and payment information, and on implied consent for routine service communications. Marketing consent is express and separate. You may withdraw consent at any time by contacting [DPO_EMAIL], subject to legal and contractual limitations.

4. Third-Party Service Providers

We share personal information with service providers only to the extent necessary and under contractual protections requiring them to maintain confidentiality and use the information solely for our specified purposes. Current categories of providers include: payment processors, cloud hosting providers, and customer support tools.

5. Cross-Border Transfers

Some service providers are located outside Canada. Personal information transferred to foreign jurisdictions may be subject to the laws of that jurisdiction. We ensure contractual protections (such as standard contractual clauses or equivalent safeguards) are in place before transferring personal information internationally.

6. Accessing Your Information

You may request access to the personal information we hold about you by contacting [DPO_EMAIL]. We will respond within 30 days. We may charge a minimal fee for extensive access requests; we will advise you of the fee before proceeding.

7. Accuracy

We take reasonable steps to keep personal information accurate, complete, and current. You may request correction of inaccurate information at any time. We will correct or annotate the record and notify any third parties who received the inaccurate information where appropriate.

8. Security Safeguards

We protect personal information through physical, technological, and organisational safeguards including TLS encryption, restricted access controls, pseudonymisation, and regular security assessments commensurate with the sensitivity of the information.

9. Openness

Information about our privacy policies and practices is available on request and on our website. Our Privacy Officer can be reached at [DPO_EMAIL].

10. Challenging Our Practices

You may challenge our compliance with PIPEDA's principles by contacting our Privacy Officer at [DPO_EMAIL]. If you are not satisfied with our response, you may file a complaint with the OPC at priv.gc.ca/en/report-a-concern, 1-800-282-1376.