FileRight.ca Privacy Policy
Effective Date: September 02, 2026
Last Updated: September 02, 2026
This Privacy Policy explains how File Right Inc., its parents, subsidiaries, affiliates, successors, and assigns (“FileRight,” “Company,” “we,” “us,” or “our”) collects, uses, discloses, stores, protects, transfers, analyzes, and otherwise handles personal information in connection with www.fileright.ca and any related website, application, software, account, form-preparation workflow, artificial intelligence feature, automation, customer service function, document-preparation service, electronic delivery service, communication, or other service operated by FileRight (collectively, the “Services”).
This Privacy Policy is intended to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”), and, where applicable, substantially similar provincial privacy laws and Québec privacy laws.
This Privacy Policy should be read together with our Terms of Use.
By accessing or using the Services, creating an account, purchasing a Service, contacting us, submitting information, or otherwise interacting with FileRight, you acknowledge that we may handle your personal information as described in this Privacy Policy and as permitted by applicable law.
If you do not agree with this Privacy Policy, do not access or use the Services.
1. Important Notices
FileRight is a private company.
FileRight is not Immigration, Refugees and Citizenship Canada (“IRCC”), the Canada Border Services Agency (“CBSA”), the Immigration and Refugee Board of Canada (“IRB”), the Government of Canada, any provincial or territorial government, or any other government agency.
FileRight is not a law firm, lawyer, notary, paralegal, immigration consultant, citizenship consultant, migration agent, member of the College of Immigration and Citizenship Consultants (“CICC”), or authorized immigration representative.
FileRight does not provide legal advice, immigration advice, citizenship advice, legal opinions, case strategy, recommendations about how you should answer substantive immigration questions, advice regarding the legal consequences of any answer or fact, eligibility determinations, legal review or assessment of supporting documents, or representation before IRCC, CBSA, IRB, any Canadian court, tribunal, or government authority.
Because the Services help users prepare immigration, citizenship, sponsorship, travel, status, permit, or other government-related materials, the personal information we collect may include detailed, sensitive, immigration-related, identity-related, family-related, financial, employment, education, travel, health, criminal history, admissibility, or government-related information.
We use this information to provide, operate, support, improve, market, secure, analyze, and develop the Services, including through customer service, automation, analytics, artificial intelligence, fraud prevention, product development, and marketing activities, as described in this Privacy Policy.
2. What Personal Information Means
“Personal information” means information about an identifiable individual, or information that can reasonably identify an individual, as defined under applicable Canadian privacy laws.
Personal information may include information that is true or not, recorded or not, and may include information you provide directly, information generated through your use of the Services, information we receive from third parties where permitted by law, and information inferred or derived from other information.
Where technical, usage, device, cookie, analytics, advertising, or similar information identifies you or can reasonably be associated with you, we treat it as personal information in accordance with this Privacy Policy and applicable law.
3. Personal Information We Collect
The types of personal information we may collect include:
- Name;
- Email address;
- Phone number;
- Mailing address;
- Residential address;
- Billing address;
- Province, territory, postal code, and country;
- Date of birth;
- Gender or sex, where required for a form or provided by you;
- Country of birth;
- Nationality or citizenship information;
- Passport, visa, permit, travel document, identity document, or government document information;
- Immigration, citizenship, sponsorship, permit, visa, refugee, enforcement, removal, admissibility, or travel history;
- Employment, education, income, tax, and financial information;
- Family, household, marital, relationship, dependent, sponsorship, and support information;
- Health, medical, disability, biometric, criminal history, police certificate, admissibility, or background information where required for a form or Service;
- Government account, portal, case, receipt, reference, or application information you provide;
- Application answers, questionnaire responses, and form responses;
- Supporting document information;
- Documents, files, images, or records you upload, submit, or provide;
- Customer service communications, support requests, chat transcripts, emails, call recordings, notes, survey responses, complaints, and feedback;
- Account login, authentication, password reset, and security information;
- Transaction, billing, refund, credit, and payment-related information;
- Device, browser, IP address, cookie, pixel, analytics, advertising, and usage information;
- Approximate location derived from IP address or information you provide;
- Marketing preferences, consent records, unsubscribe records, and communication history;
- Information you provide in response to promotions, surveys, forms, advertisements, emails, SMS messages, calls, or customer service interactions;
- Inferences, segments, analytics, risk indicators, fraud indicators, and derived information generated from your use of the Services;
- Any other information you provide to us or that is generated through your use of the Services.
We may also create, collect, use, retain, analyze, disclose, and commercialize information that is de-identified, aggregated, statistical, inferred, or derived, where permitted by law.
Where information does not identify you and cannot reasonably be used to identify you, we may use and disclose it for lawful business purposes as described in this Privacy Policy.
4. Sensitive Personal Information
Some information you provide may be sensitive because of its nature, context, or the reasonable expectations of privacy associated with it.
Sensitive personal information may include information about health, disability, biometric information, criminal history, racial or ethnic origin, religious beliefs, political opinion, sexual orientation, financial information, immigration history, refugee history, admissibility, enforcement, removal, family status, or other intimate or highly personal matters.
Because immigration, citizenship, sponsorship, status, permit, and government forms may ask questions about health, disability, biometrics, criminal history, nationality, family relationships, financial support, political history, religion, refugee history, enforcement history, removal history, inadmissibility, travel history, or similar matters, the Services may involve collection of sensitive personal information where you choose to provide it or where it is necessary for the Service you request.
We collect, use, and disclose sensitive personal information only where permitted by law, including where:
- You consent;
- The information is reasonably necessary for one or more of our functions or activities;
- The information is necessary to provide the Services you request;
- The collection, use, or disclosure is required or permitted by law;
- Another exception applies under applicable law.
By providing sensitive personal information through the Services, you consent to our collection, use, disclosure, storage, transfer, analysis, and handling of that information as described in this Privacy Policy and as permitted by applicable law.
5. How We Collect Personal Information
We may collect personal information directly from you when you:
- Visit or use the Website;
- Create an account;
- Purchase a Service;
- Complete questionnaires, workflows, forms, or application-preparation steps;
- Upload, submit, or provide documents;
- Ask us to prepare, generate, print, download, deliver, file, upload, submit, or support application materials;
- Contact customer service or technical support;
- Use chat, chatbot, AI-assisted, automated, or self-service support features;
- Participate in surveys, promotions, feedback requests, testimonials, or reviews;
- Subscribe to, opt in to, or interact with marketing communications;
- Communicate with us by email, phone, SMS, chat, web form, mail, or other channels;
- Otherwise provide information to us.
We may also collect personal information automatically when you use the Services, including through cookies, pixels, web beacons, log files, analytics tools, advertising technologies, session recording technologies, device identifiers, and similar technologies.
We may collect personal information from third parties where permitted by law, including:
- Payment processors;
- Identity, fraud prevention, security, analytics, marketing, advertising, attribution, or technology providers;
- Customer service, CRM, email, SMS, chat, phone, and support platforms;
- Hosting, cloud, infrastructure, and data storage providers;
- Delivery, courier, print, mail, translation, or professional service providers;
- Affiliate, parent, subsidiary, or related companies;
- Government websites or portals, where you authorize or direct us to access or use information;
- Referral partners, advertising partners, and business partners;
- Publicly available sources;
- Authorized third-party professional providers, where you request or authorize such services;
- Other third parties where you have consented or where collection is permitted by law.
Where reasonable and practicable, we collect personal information directly from you.
6. Why We Collect, Use, and Disclose Personal Information
Subject to applicable law, we may collect, use, disclose, retain, transfer, analyze, combine, and otherwise handle personal information for purposes including:
- Providing, operating, maintaining, and securing the Services;
- Creating and administering your account;
- Verifying your identity, account, transaction, payment, or support request;
- Preparing, generating, storing, printing, downloading, delivering, filing, uploading, submitting, or supporting application materials;
- Providing administrative and technical support related to application materials;
- Providing customer service and technical support;
- Responding to your questions, requests, complaints, refund requests, and support needs;
- Processing payments, refunds, credits, chargebacks, disputes, and billing matters;
- Preventing payment fraud and account misuse;
- Delivering purchased products or Services;
- Sending account, transactional, operational, legal, security, product, support, and service-related communications;
- Sending marketing, promotional, educational, reminder, cross-sell, upsell, re-engagement, product-related, and commercial electronic messages where permitted by law;
- Personalizing or improving your experience;
- Measuring marketing performance, attribution, conversion, engagement, retention, and campaign effectiveness;
- Creating audiences, segments, models, analytics, and inferences where permitted by law;
- Improving existing Services and developing new products, services, features, workflows, automation, and content;
- Testing, training, supporting, and improving AI-assisted, automated, machine-learning, rules-based, chatbot, and analytics systems;
- Conducting research, reporting, forecasting, business intelligence, and internal analytics;
- Detecting, preventing, investigating, and responding to fraud, abuse, chargeback abuse, security risks, technical issues, unlawful activity, or violations of our Terms of Use;
- Complying with laws, regulations, court orders, subpoenas, government requests, legal processes, regulatory obligations, and recordkeeping requirements;
- Enforcing our Terms of Use and other policies;
- Protecting our rights, property, systems, users, employees, contractors, service providers, and business;
- Auditing, legal defence, insurance, recordkeeping, compliance, risk management, and corporate governance;
- Facilitating a merger, acquisition, financing, restructuring, sale of assets, corporate transaction, insolvency process, or business transfer;
- Any other purpose disclosed to you at the time of collection or permitted by law.
We will not collect, use, or disclose personal information for purposes that a reasonable person would consider inappropriate in the circumstances.
7. Consent
We collect, use, and disclose personal information with your consent, except where consent is not required or where collection, use, or disclosure without consent is permitted or required by law.
Consent may be express or implied, depending on the sensitivity of the information, your reasonable expectations, the nature of the Services, and applicable law.
We may rely on your consent when you:
- Create an account;
- Purchase or use a Service;
- Submit information through the Services;
- Upload documents;
- Request customer service or technical support;
- Request filing, upload, delivery, or submission support;
- Communicate with us;
- Opt in to marketing communications;
- Continue using the Services after being presented with this Privacy Policy or related notices.
We may collect, use, or disclose personal information without consent where permitted by law, including for fraud prevention, security, debt collection, legal claims, investigations, enforcement of agreements, compliance with legal obligations, or other purposes permitted by applicable privacy laws.
You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.
If you withdraw consent, we may be unable to provide or continue providing some or all of the Services. Withdrawal of consent does not affect the lawfulness of our handling of personal information before withdrawal.
8. Customer Service, Support Access, and Communications
If you contact customer service or technical support, we may collect, use, disclose, retain, and analyze information relating to that interaction, including:
- Your name, contact information, and account information;
- Support tickets;
- Emails, chats, chatbot interactions, SMS messages, call recordings, transcripts, notes, and related metadata;
- Screenshots, documents, forms, or application materials you provide;
- Device, browser, system, and troubleshooting information;
- Feedback, ratings, complaints, or survey responses.
If you ask us to help access, generate, troubleshoot, review formatting, print, download, deliver, file, upload, submit, or support your application materials, you authorize FileRight personnel, contractors, and service providers to access your account and view information reasonably necessary to provide the requested support.
If you request remote support, screen-sharing support, or similar technical assistance, we may be able to view your device, screen, browser, account, application data, or related information for the limited purpose of providing the support you request. You are responsible for closing unrelated documents, tabs, files, accounts, or windows before starting remote support.
We may use customer service communications, chat transcripts, call recordings, support tickets, feedback, and related interaction data for quality assurance, training, fraud prevention, security, analytics, service improvement, AI-assisted support improvement, and other lawful business purposes, subject to applicable law.
Customer service representatives do not provide legal advice, immigration advice, citizenship advice, legal opinions, case strategy, recommendations about how you should answer substantive immigration questions, eligibility determinations, document sufficiency review, or representation before any government authority.
9. AI, Automation, Analytics, and Automated Outputs
Subject to applicable law and this Privacy Policy, FileRight may use artificial intelligence, machine learning, automation, rules-based systems, algorithms, large language models, chatbots, automated workflows, analytics systems, and similar technologies to provide, support, secure, analyze, test, improve, and develop the Services.
These technologies may be used to:
- Guide users through form-preparation workflows;
- Identify potentially incomplete answers or missing information;
- Generate informational prompts, reminders, explanations, or support responses;
- Provide automated or AI-assisted customer service;
- Improve customer service and technical support;
- Support fraud prevention, risk management, quality control, security, analytics, testing, and product development;
- Improve automated tools, workflows, models, and user experience;
- Generate inferred, derived, aggregated, statistical, or de-identified data;
- Support marketing measurement, segmentation, attribution, personalization, and audience development, where permitted by law.
Outputs from AI, automation, software tools, or rules-based systems may be probabilistic, automated, incomplete, inaccurate, or generated without human review.
AI-generated, automated, or rules-based outputs do not constitute legal advice, immigration advice, citizenship advice, authorized representation, legal opinions, eligibility determinations, case strategy, document sufficiency review, or guarantees of any government outcome.
You are responsible for reviewing all outputs before relying on them, signing them, filing them, mailing them, uploading them, submitting them, or using them in any government process.
We do not represent that any AI, automation, or software output will be accurate, complete, current, suitable for your circumstances, or accepted by any government authority.
10. Automated Decision-Making, Profiling, and Personalization
We may use automated or semi-automated systems to assist with Service delivery, support, security, fraud prevention, product recommendations, workflow routing, application-preparation prompts, customer service prioritization, marketing segmentation, personalization, and account or product experience.
These systems may use personal information such as:
- Account information;
- Contact information;
- Form answers;
- Application workflow responses;
- Product selections;
- Purchase history;
- Support history;
- Device, browser, cookie, and usage data;
- Marketing interaction data;
- Risk, fraud, payment, or security signals;
- Inferred, derived, segment, or analytical information.
These systems may help us make or support decisions such as:
- Which workflow, product, prompt, message, reminder, explanation, or offer to show you;
- Whether information appears incomplete, inconsistent, or missing;
- Whether to route you to customer service, technical support, or another workflow;
- Whether to restrict, suspend, or review activity for fraud, security, compliance, payment, risk-management, or abuse concerns;
- Whether and how to personalize marketing, reminders, support, or service communications;
- How to improve, test, or optimize the Services.
Automated systems are not used to make government decisions. Government agencies make their own decisions independently. FileRight does not control, influence, or guarantee any government outcome.
Where required by applicable law, including Québec privacy law, we will provide notice if personal information is used to make a decision based exclusively on automated processing and will provide information required by law.
11. De-Identified, Aggregated, Inferred, and Derived Data
Subject to applicable law, FileRight may create, use, retain, analyze, disclose, and commercialize de-identified, aggregated, statistical, inferred, or derived data for lawful business purposes, including:
- Analytics;
- Reporting;
- Product development;
- Automation;
- Quality control;
- Fraud prevention;
- Security;
- Marketing measurement;
- Attribution;
- Audience development;
- Service optimization;
- Model, workflow, and system improvement;
- Business intelligence;
- Forecasting.
We may combine information collected through the Services with other online or offline information we lawfully collect or receive.
Where information has been de-identified and is no longer personal information under applicable law, we may use and disclose it for lawful business purposes without further notice to you.
We will take reasonable steps designed to avoid re-identifying de-identified information except where permitted by law, including for testing, security, validation, legal compliance, or to confirm that de-identification is effective.
12. Cookies, Pixels, Web Beacons, Analytics, and Tracking Technologies
We and our service providers may use cookies, pixels, web beacons, tags, log files, SDKs, session replay tools, analytics tools, advertising technologies, and similar technologies to collect information about your device, browser, usage, interactions, and preferences.
These technologies may be used to:
- Operate and secure the Website;
- Keep you logged in;
- Remember preferences;
- Diagnose technical problems;
- Understand how users use the Services;
- Measure performance and conversion;
- Support advertising, retargeting, attribution, audience development, and marketing analytics;
- Personalize content, prompts, offers, reminders, or user experience;
- Detect fraud, abuse, chargeback abuse, or security risks;
- Improve products, workflows, and Services.
Information collected may include:
- IP address;
- Device identifiers;
- Browser type;
- Operating system;
- Referring and exit pages;
- Pages viewed;
- Clicks, scrolls, keystrokes, and interactions;
- Date and time stamps;
- Session information;
- Approximate location derived from IP address;
- Advertising identifiers;
- Cookie identifiers;
- Other usage and analytics data.
You can control cookies through your browser settings. If you block or delete cookies, some parts of the Services may not function properly.
Where required by applicable law, we will obtain consent or provide additional notice for certain cookies, tracking technologies, profiling technologies, location technologies, or marketing technologies.
13. Direct Marketing, Email, SMS, Calls, and Advertising
Subject to applicable law, we may use and disclose personal information for direct marketing, promotional, educational, reminder, cross-sell, upsell, re-engagement, product-related, and commercial communications about FileRight services and related offerings.
We may contact you by:
- Email;
- SMS or text message;
- Phone;
- Direct mail;
- In-app or account messages;
- Push notifications, where applicable;
- Online advertising and retargeting;
- Other electronic or digital channels.
Where required, we will rely on your express consent, implied consent, request, inquiry, transaction, account activity, existing business relationship, existing non-business relationship, or another lawful basis.
Commercial electronic messages will include required sender identification and an unsubscribe mechanism where required by Canada’s Anti-Spam Legislation (“CASL”) and other applicable laws.
You may opt out of marketing communications by using the unsubscribe link or instructions in the message, replying “STOP” where applicable, changing your preferences where available, or contacting us.
We will process unsubscribe requests within the time required by applicable law.
Opting out of marketing communications will not stop non-marketing transactional, operational, legal, security, account, purchase, customer service, policy, or service-related communications.
We may use advertising partners and platforms to deliver, measure, personalize, or improve advertising. These partners may use cookies, pixels, device identifiers, hashed contact information, or similar technologies, subject to their own privacy practices and applicable law.
If we use or disclose sensitive personal information for direct marketing, we will do so only with express consent or where otherwise permitted by law.
14. When We Disclose Personal Information
Subject to applicable law, we may disclose personal information to:
- Our parents, subsidiaries, affiliates, and related companies;
- Employees, contractors, and personnel who need access to perform their duties;
- Customer service and technical support providers;
- Hosting, cloud, data storage, infrastructure, and security providers;
- Payment processors and billing providers;
- Fraud prevention, risk, identity, payment, and compliance providers;
- Analytics, advertising, marketing, attribution, retargeting, and audience development providers;
- Email, SMS, phone, chat, CRM, and communication providers;
- Print, mail, courier, delivery, translation, or document-preparation providers;
- AI, automation, machine-learning, chatbot, workflow, quality assurance, and product development providers;
- Professional advisers, including lawyers, auditors, accountants, insurers, and consultants;
- Government agencies, courts, tribunals, law enforcement, regulators, or other authorities where required or permitted by law;
- Third-party professional providers, including Canadian immigration lawyers, citizenship lawyers, authorized immigration consultants, or other authorized representatives, where you request or authorize such services;
- Business partners, referral partners, or service providers where you request a product or service or where disclosure is permitted by law;
- Buyers, investors, lenders, successors, or other parties in connection with a merger, acquisition, financing, restructuring, sale of assets, insolvency process, or business transfer;
- Other third parties where you consent or where disclosure is permitted by law.
We do not sell personal information in the ordinary sense of exchanging personal information for money. However, we may disclose personal information to service providers, advertising partners, analytics providers, affiliates, and business partners for the purposes described in this Privacy Policy, including marketing, attribution, audience development, analytics, advertising, service delivery, service improvement, and product development, where permitted by law.
If personal information becomes part of a government filing, portal submission, court filing, public record, or government process, that information may be handled by the applicable government authority or third party under its own laws, rules, policies, and privacy practices.
15. Third-Party Professional Providers and Canadian Immigration Services
The Services may include referrals, links, integrations, or access to third-party professional providers, including Canadian immigration lawyers, citizenship lawyers, licensed legal professionals, authorized immigration consultants, or other authorized representatives.
If you request, purchase, or authorize a third-party professional service:
- Your personal information may be disclosed to the applicable provider for the purpose of providing or evaluating the requested service;
- The provider may collect, use, disclose, and retain your personal information under its own professional, legal, ethical, regulatory, contractual, and privacy obligations;
- Separate terms, engagement agreements, consent forms, and privacy practices may apply;
- FileRight is not responsible for the provider’s independent legal advice, immigration advice, professional services, acts, omissions, decisions, security practices, privacy practices, or outcomes.
FileRight does not itself provide legal advice, immigration advice, citizenship advice, authorized representation, legal opinions, case strategy, eligibility determinations, document sufficiency review, or representation before IRCC, CBSA, IRB, any Canadian court, tribunal, or government authority.
16. Third-Party Services and Links
The Services may contain links to third-party websites, platforms, government websites, payment pages, social media features, advertising networks, or other services that we do not control.
This Privacy Policy does not apply to third-party websites, platforms, or services.
Your use of third-party services is governed by the applicable third party’s terms and privacy policy. We encourage you to review those policies before providing information to third parties.
17. Cross-Border Processing and Storage
FileRight may collect, process, store, access, transfer, and disclose personal information outside Canada and outside the province or territory in which you reside or provided the information.
Countries where personal information may be stored, processed, accessed, or disclosed include:
- United States;
- Canada;
- United Kingdom;
- European Economic Area;
- Isle of Man;
- India;
- Philippines;
- Australia;
- Other countries where FileRight, its affiliates, service providers, contractors, technology providers, or business partners operate.
Some foreign jurisdictions may not provide the same level of privacy protection as Canada or your province or territory of residence. Personal information processed or stored outside Canada may be accessible to foreign courts, law enforcement, regulators, national security authorities, or other government authorities in accordance with the laws of those jurisdictions.
Where required by applicable law, we will take reasonable contractual, technical, administrative, and organizational steps designed to protect personal information transferred to or processed by service providers outside Canada.
By using the Services or providing personal information, you acknowledge that your information may be transferred, stored, accessed, processed, or disclosed outside Canada as described in this Privacy Policy.
For Québec residents, we will handle disclosures or transfers outside Québec in accordance with applicable Québec privacy requirements.
18. Security
We use administrative, technical, physical, and organizational safeguards designed to protect personal information against loss, theft, misuse, unauthorized access, unauthorized disclosure, copying, use, modification, or disposal.
These safeguards may include:
- Access controls;
- Encryption in transit where appropriate;
- Secure account authentication;
- Monitoring and logging;
- Vendor security review;
- Personnel access restrictions;
- Data backup and recovery processes;
- Internal policies and training;
- Fraud, abuse, and security detection tools.
No method of transmission, storage, website operation, or electronic communication is completely secure. We cannot guarantee that information will never be accessed, used, disclosed, altered, lost, or destroyed without authorization.
You are responsible for keeping your login credentials confidential and for using secure devices, networks, and communication methods.
If we become aware of a privacy breach or confidentiality incident involving personal information, we will respond in accordance with applicable law, which may include recordkeeping, mitigation, investigation, and notification to affected individuals, privacy regulators, or other parties where required.
19. Data Retention and Disposal
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
- Provide and support the Services;
- Maintain your account;
- Prepare, store, and deliver application materials;
- Provide customer service and technical support;
- Comply with legal, tax, accounting, regulatory, and recordkeeping obligations;
- Resolve disputes;
- Enforce agreements;
- Prevent fraud, abuse, chargeback abuse, and security incidents;
- Defend legal claims;
- Support business operations, analytics, product improvement, and reporting.
We may retain completed and finalized forms, application materials, account records, transaction records, support records, consent records, and related materials for a period reasonably necessary for business, legal, compliance, fraud prevention, dispute resolution, tax, accounting, audit, recordkeeping, service, or operational purposes, unless a longer or shorter period is required by applicable law.
We may de-identify, aggregate, archive, delete, or securely destroy personal information when it is no longer reasonably needed, subject to applicable law and legitimate business needs.
20. Accuracy and Quality of Personal Information
We take reasonable steps to ensure that personal information we collect, use, and disclose is accurate, complete, and up to date, having regard to the purposes for which it is used or disclosed.
However, the Services rely heavily on information you provide. You are responsible for ensuring that the information you enter, upload, review, sign, file, mail, submit, or otherwise use is accurate, current, complete, and not misleading.
If you believe information we hold about you is inaccurate, incomplete, or out of date, please contact us or update your account information where available.
21. Accessing and Correcting Your Personal Information
You may request access to personal information we hold about you, subject to exceptions under applicable law.
You may also request that we correct personal information that is inaccurate, incomplete, or out of date.
You may be able to update certain account information directly through your account.
To request access or correction, please contact us using the contact information provided at the end of this Privacy Policy.
We may need to verify your identity before responding to your request. We will respond within the time required by applicable law or, where no specific time applies, within a reasonable period.
In some circumstances, we may refuse access or correction where permitted by law. If we refuse your request, we will provide reasons where required by law.
Where required by applicable Québec privacy law, you may also have rights relating to computerized personal information, including portability rights, subject to legal limits and implementation requirements.
22. Marketing Choices
You may opt out of marketing communications at any time by:
- Using the unsubscribe link or instructions in an email;
- Replying “STOP” to an SMS where applicable;
- Updating your preferences where available;
- Contacting us.
We will take reasonable steps to process opt-out requests as required by applicable law.
Even if you opt out of marketing communications, we may continue to send transactional, operational, legal, security, account, purchase, customer service, policy, or service-related communications.
If you have consented to receive marketing from a third party, or if your information has been disclosed to a third party in accordance with this Privacy Policy, you may need to contact that third party directly to manage your marketing preferences with them.
23. Children and Age of Majority
The Services are intended for users who have reached the age of majority in their province or territory of residence.
We do not knowingly collect personal information directly from individuals under the age of majority for the purpose of creating an account or purchasing Services.
If we become aware that we have collected personal information from a person under the age of majority without appropriate authorization, we will take reasonable steps to delete it, unless retention is required or permitted by law.
If you provide information about a child, dependent, family member, beneficiary, sponsor, household member, or other person as part of an application or Service, you represent that you have authority to provide that information and consent to its handling as described in this Privacy Policy.
24. Québec Residents
If you are a Québec resident, additional requirements may apply under Québec privacy law.
Where required by Québec law:
- We will make this Privacy Policy available in clear and simple language and in French;
- We will provide information about technologies that identify, locate, or profile you, and your options regarding those technologies;
- We will provide notice if personal information is used to make a decision based exclusively on automated processing;
- We will handle disclosures of personal information outside Québec in accordance with applicable Québec privacy requirements;
- We will respond to applicable access, correction, portability, and privacy requests in accordance with Québec law;
- We will maintain and respond to confidentiality incidents as required by Québec law.
For Québec residents, if you request to proceed in English where a French version is required, we may ask you to confirm that the French version was made available to you and that you expressly wish to proceed in English, as required by applicable law.
25. Privacy Complaints and Privacy Officer
We are accountable for personal information under our control.
We have designated a Privacy Officer or privacy contact responsible for helping oversee our privacy practices.
If you believe we have breached this Privacy Policy or applicable privacy law, or if you have questions about our handling of personal information, you may contact us using the contact information below.
Please include your name, contact details, and a description of your concern.
We will review your complaint and respond within a reasonable period or within the time required by applicable law.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or another applicable federal, provincial, or territorial privacy regulator.
26. Changes to This Privacy Policy
We may modify, alter, or update this Privacy Policy from time to time by posting an updated version on the Website.
The updated Privacy Policy will become effective on the date stated in the updated policy, unless otherwise required by applicable law.
Your continued use of the Services after the updated Privacy Policy becomes effective means that you acknowledge the updated policy.
If we make material changes to how we handle personal information, we will provide notice and obtain consent where required by applicable law.
27. Contact Us
If you have questions about this Privacy Policy, want to request access or correction, wish to make a complaint, or want to exercise a privacy choice, please contact us through the contact information provided on the Website.
Last Updated: September 02, 2026