Legal

Privacy Policy

Effective [Effective date] · Template prepared for review by a Canadian lawyer before launch. Not legal advice.

[Legal business name] (“we”, “us”), operating as Canada’s NCLEX Study Coach, is based in British Columbia, Canada. We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (BC PIPA), and the ten fair information principles they set out.

Accountability

Our Privacy Officer is [Privacy Officer name or title], reachable at [hello@your-domain.ca] or [Mailing address, City, BC Postal code].

What we collect and why

• Free kit and newsletter: first name and email address, to send the kit and, only if you tick the consent box, our emails.
• Orders: name, email, billing province (for sales-tax calculation) and order history, to deliver your downloads, give you access to your library and keep tax records.
• Payments: handled by our payment processor (e.g. Stripe). We never see or store your full card number.
• Contact messages: what you send us, to reply.
• Site analytics: aggregated, privacy-friendly usage data. We do not sell personal information or use it for third-party advertising.

Consent

We collect, use and disclose personal information only with your consent, express for marketing email (unticked box, double opt-in) and implied for fulfilling an order you place. You can withdraw consent at any time; this may limit what we can provide.

Limiting collection, use and retention

We collect only what we need. Order and tax records are kept for the period required by Canadian tax law (generally six years); mailing-list data is kept until you unsubscribe, then deleted or suppressed.

Service providers and storage outside Canada

We use service providers (hosting, payment, email delivery) that may store or process information outside Canada, including in the United States, where it may be accessible to courts and authorities there. We require them to protect it with safeguards comparable to ours.

Safeguards

Encrypted connections (HTTPS), access limited to people who need it, strong passwords and multi-factor authentication on administrative accounts.

Breaches

If a breach creates a real risk of significant harm, we will notify affected people and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and keep a record of all breaches.

Access and correction

You may ask to see, correct or delete the personal information we hold about you by writing to our Privacy Officer. We will respond within 30 days.

Complaints

Contact us first. You may also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).

Cookies

We use essential cookies for the cart and your account, and only privacy-friendly analytics. You can block cookies in your browser; checkout may not work without essential cookies.