Privacy Policy

1. Scope & Identity

This Privacy Policy explains how TrustArc Canada, operating in Canada (hereinafter "we," "our," or "us"), processes, structures, and protects personal data obtained via our digital platform. We act as the data controller regarding information processed through [email protected].

2. Legal Standards & Canadian Compliance

Our operations comply directly with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) overseen by the Office of the Privacy Commissioner of Canada (OPC). For international visitors, we optimize data rights under respective country privacy frameworks.

3. Categories of Data Collected

We process the following data points:

Direct Contact Data: Name, business or personal email, telephone numbers, and profile details supplied when submitting assessment forms.
Automated Analytics Data: IP addresses, geographic indicators, browser types, and platform interactions tracked via strictly compliant cookie preferences.
Analytical Choices: Saved Consent preferences via Google Consent Mode v2 integrations.

4. Purpose & Lawful Processing Basis

We organize our processing goals according to Canadian legal principles:

Processing Purpose	Data Scope Used	Legal Processing Basis
Customer Intake & Auditing	Name, Email, Telephone, Message	Explicit Customer Consent
Technical Optimizations	IP addresses, browser headers	Legitimate Corporate Interest
Compliance Validation	Record of consent settings	Statutory Obligation

5. Google Consent Mode v2 Implementation

We leverage advanced Google Consent Mode v2 configurations. By default, marketing and performance tags remain locked. They only initiate when visitors actively click "Accept All" or opt-in selectively. Profiles can alter permissions in real-time by clicking "Cookie Settings" in the site footer.

6. Data Retention Limits

Customer data is maintained only as long as necessary to complete profiles, provide visa recommendations, or fulfill our tax audit responsibilities. Typical profiles are erased after 24 months of total inactivity unless active contracts require otherwise.

7. Your Legal Access Rights

In accordance with PIPEDA regulations, you hold rights to: access stored files, require edits to historical entries, withdraw consensus options, and register official concerns. For formal reviews, write directly to [email protected]. Formal unresolved matters can be directed to the Office of the Privacy Commissioner of Canada (OPC).

8. Children's Privacy Shield

We do not collect personal data from individuals under 13. Potential minors seeking family visa entries must have parents act as primary profiles.