Your privacy rights under Canadian law

If you are in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws give you specific rights over your personal information. This page describes those rights and how to exercise them. It complements our general Privacy Policy; in case of conflict, the rights described here apply for Canadian residents.

§ 01How we collect and use personal information

We collect personal information from you with your knowledge and consent, in the amount and for the purposes described in our Privacy Policy. We use this information only to provide the curation service, to communicate with you, and to meet legal obligations.

• Identifiers (name, email, phone if you provide it).
• Customer records (the contents of your intake form and your subscription history).
• Commercial information (purchase history for digital products and subscription).
• Internet activity (limited, aggregate site analytics via Fathom Analytics, which does not collect personal data).
• Sensitive personal information — only if you choose to share it — health-related information about your children and information that may reveal characteristics of a protected classification (such as disability status).

We collect this information from you directly (intake form, account creation, purchases, emails) and from our service providers in the ordinary course of operating the service. We do not buy information about you from data brokers.

§ 02Consent

By creating an account or submitting your intake form you consent to our collection and use of your personal information as described. For sensitive personal information — the optional learning support and medical considerations — we ask for and rely on your express consent, which you may withdraw at any time.

§ 03PIPEDA principles

We commit to handling your personal information consistent with PIPEDA’s ten fair information principles:

§ 04Your rights

Under PIPEDA you have the right to:

• Know what personal information we have collected about you and how it is used.
• Access that information and request corrections.
• Withdraw consent, subject to legal or contractual restrictions and reasonable notice.
• Challenge our compliance with PIPEDA and have a complaint investigated by our privacy contact.

§ 05How to exercise your rights

Email [email protected] with your request. We will respond within 30 days. If a request is complex we may extend by up to 30 more days and will tell you if we need to.

§ 06Cross-border data transfers

Ralspin is based in the United States, and several of our service providers are US-based. By providing your personal information to us, you understand it will be transferred to and processed in the United States and other countries where our service providers operate. Those countries may have different data protection laws than Canada. We use contractual safeguards with each service provider to maintain protection of your information.

§ 07Quebec residents

If you are in Quebec, Law 25 (the Act respecting the protection of personal information in the private sector) gives you additional rights, including the right to be informed about automated decision-making, the right to data portability, and the right to know which third parties receive your information. Email [email protected] with the subject line “Quebec Privacy Request” to exercise these rights. We will respond in French if you request, and we will respond within 30 days.

§ 08Complaints

If you believe we have mishandled your personal information, please tell us first — we want to fix it. You also have the right to complain to:

• The Office of the Privacy Commissioner of Canada at priv.gc.ca.
• Your provincial privacy commissioner (in Quebec, BC, Alberta, or other provinces with substantially similar legislation).

§ 09Contact