PIPEDA & Canadian privacy

The Personal Information Protection and Electronic Documents Act (PIPEDA) sets expectations for how organizations collect, use, and disclose personal information in the course of commercial activity across Canada, subject to provincial equivalents where they apply.

Accountability

We maintain internal practices for access control, vendor review, and incident response. Schools may request a short description of subprocessors and security measures relevant to procurement reviews.

Identifying purposes & consent

We collect personal information to operate accounts, deliver curriculum, bill subscribers, and secure our systems. Where consent is required, we rely on account creation, checkout, or institution agreements as appropriate.

Limiting collection, use, disclosure, and retention

We aim to collect only what we need for documented purposes, share with vendors only as required to deliver the Services, and retain data no longer than necessary unless law or a school agreement requires otherwise.

Accuracy & safeguards

Users may update certain profile fields directly; other corrections may require support. We use encryption in transit and logical separation between teacher and student capabilities.

Openness & individual access

This site’s Privacy Policy summarizes our practices. Users may contact us to access or challenge the accuracy of personal information we hold, subject to legal exceptions.

Challenging compliance

Raise concerns through Contact. You may also lodge a complaint with the Office of the Privacy Commissioner of Canada where permitted.

See also our Privacy Policy.