Draft for review. This policy is a starting template for a Canadian consulting website. It is not legal advice. Have it reviewed by a qualified advisor, complete every item in [square brackets], and delete this notice before launch.
Last updated: [Date]
This policy explains how [Legal business name] (“QACanada”, “we”, “us”) collects, uses, discloses and protects personal information through the website qacanada.ca/ and in connection with enquiries about our consulting services. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation [confirm applicable provincial law, e.g. Alberta PIPA, BC PIPA or Quebec Law 25].
Information we collect
Information you give us. When you contact us by email or through the enquiry form, we collect the information you choose to provide, such as your name, email address, institution, role and the content of your message.
Information collected automatically. Like most websites, our web server records basic technical information, such as IP address, browser type and pages requested, in server logs used for security and troubleshooting. [Confirm log retention with your hosting provider].
Cookies. This website does not use advertising or analytics cookies. WordPress may set strictly necessary cookies for logged-in administrators. If we add analytics or other tools in the future, we will update this policy and, where required, ask for your consent.
Client engagement information. Course materials, assessment records or other information shared during a consulting engagement are governed by the confidentiality and data-handling terms agreed with the client institution, and not by this website policy alone.
How we use personal information
- To respond to your enquiry and discuss potential engagements.
- To deliver and administer services you or your institution have engaged us to provide.
- To maintain the security and proper operation of this website.
- To meet legal, accounting and regulatory obligations.
We do not sell personal information and do not use it for unrelated marketing without your consent. We do not use personal information submitted through this website to train artificial-intelligence models.
Consent
By contacting us, you consent to our use of the information you provide for the purpose of responding to you. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us using the details below.
Disclosure and service providers
We share personal information only as needed with service providers who support our operations, such as website hosting and email services, and only under obligations to protect it. [List principal service providers, e.g. hosting provider, email provider]. Some providers may store or process information outside your province or outside Canada [confirm locations, e.g. Canada / United States]; in that case it may be subject to the laws of those jurisdictions. We may also disclose information where required by law.
Retention
We keep enquiry correspondence for [retention period, e.g. 24 months] after our last contact unless a longer period is needed for an engagement or required by law. Engagement records are retained according to the terms agreed with the client institution.
Safeguards
We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information, including access controls, encrypted connections (HTTPS) and keeping software up to date. No method of transmission or storage is completely secure. Please do not send learner records or other sensitive personal information through the website enquiry form.
Your rights
You may request access to the personal information we hold about you, ask us to correct it, or withdraw consent. We will respond within the time required by law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.
Contact
Privacy enquiries: [Name or title of the person responsible for privacy]
Email: [privacy email address]
Mail: [Mailing address]
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.