We are committed to upholding the highest standards of data protection, privacy, and security in compliance with applicable laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
All personal data is collected, processed, and stored securely using industry-standard encryption, access controls, and monitoring protocols. Data is only retained as long as necessary for the fulfillment of the purposes for which it was collected, unless otherwise required by law.
In alignment with data sovereignty principles, personal data governed under PIPEDA is stored and processed on servers located within Canada. When data must be processed outside of Canada, we ensure that it is protected by equivalent privacy safeguards and contractual assurances.
Access to personal information is strictly limited to authorized personnel who require it to perform their duties. Such access is role-based and regularly reviewed. Data may be accessed and reviewed only for the following purposes:
To fulfill the service for which the data was provided
To meet legal or regulatory obligations
To respond to lawful access requests (e.g., by law enforcement with appropriate authority)
To conduct audits, security checks, or internal investigations (subject to strict confidentiality obligations)
We are transparent about our data practices and offer individuals the right to access, correct, or withdraw consent for their personal information, consistent with PIPEDA.