English

Privacy Policy

General Provisions

This Privacy Policy (hereinafter referred to as the “Policy”) governs the collection, processing, storage, disclosure, and protection of personal data by the Operator. It applies to all personal data collected through the website and related services. Processing is carried out in compliance with applicable Canadian privacy legislation, including relevant federal and provincial data protection requirements, as well as generally accepted international data protection standards.

Legal Basis for Data Processing

The Operator processes personal data on the basis of the following legal grounds:

Performance of contractual obligations between the Operator and the user;
Compliance with applicable legal and regulatory requirements;
User consent, where required and applicable;
Legitimate interests of the Operator, provided these do not override the rights and freedoms of the individual.

Types of Personal Data Collected

The Operator may collect and process the following categories of personal data:

Identity information (e.g., name, date of birth, identification numbers where applicable);
Contact information (e.g., address, phone number, email address);
Financial information (e.g., payment details, transaction records);
Technical and usage data (e.g., IP address, device information, activity logs);
Any other data necessary to comply with legal, regulatory, or contractual obligations.

Purposes of Data Processing

Personal data may be processed for the following purposes:

Verification of identity and eligibility where required;
Performance and management of contractual relationships;
Compliance with legal and regulatory obligations, including fraud prevention and user protection measures;
Communication with users regarding services and account-related matters;
Management of user accounts and support requests;
Security monitoring and prevention of fraudulent or unauthorized activity.

Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable laws. Once no longer needed, data is securely deleted or anonymized using appropriate technical measures, taking into account statutory retention requirements where applicable.

Disclosure and Transfer of Data

Personal data may be disclosed to the following categories of recipients, strictly where necessary and in accordance with applicable laws:

Regulatory and governmental authorities, where legally required;
Third-party service providers acting on behalf of the Operator;
Financial institutions and payment service providers;
Legal advisors, auditors, and compliance professionals.

Where data is transferred outside Canada, appropriate safeguards are implemented to ensure adequate protection of personal information in accordance with applicable privacy requirements.

Rights of Individuals

Depending on applicable Canadian privacy laws, individuals may have the following rights:

Right to access personal data held by the Operator;
Right to request correction of inaccurate or incomplete data;
Right to withdraw consent where processing is based on consent;
Right to request deletion or restriction of processing, subject to legal limitations;
Right to data portability where applicable;
Right to lodge a complaint with the relevant privacy authority.

Data Security Measures

The Operator applies technical and organizational security measures to protect personal data against unauthorized access, alteration, loss, destruction, or unlawful processing. These safeguards are regularly reviewed and updated to reflect current technological standards and risk levels.

Changes and Updates

This Policy may be updated from time to time to reflect legal, regulatory, or operational changes. Any modifications will be published on the website. Continued use of the website constitutes acceptance of the updated Policy.

Last updated: 2024-06-13