Privacy Policy
Personal Information Protection and Electronic Documents Act (PIPEDA) Compliance
Last Updated: January 1, 2025 | Effective Date: January 1, 2025
TraderAPP Canada is committed to protecting your privacy and personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and all applicable provincial privacy legislation.
Table of Contents
- Definitions
- Information We Collect
- Consent
- Use and Disclosure
- Retention and Storage
- Security Safeguards
- Access and Correction
- Third-Party Services
- Cookies and Tracking
- Children's Privacy
- Policy Changes
- Contact Information
1. Definitions
"Personal Information" means information about an identifiable individual, including but not limited to:
- Name, address, telephone number, email address
- Skills assessment results and learning preferences
- Session recordings and notes
- Payment and billing information
- Employment history and educational background
"We," "us," "our" refers to TraderAPP Canada and its affiliated companies.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email, phone number, postal address
- Profile Information: Skills, experience level, career goals, certifications
- Skills Assessment Data: Responses to diagnostic questions, skill levels, learning preferences
- Communication Data: Messages with advisors, session notes, feedback
- Payment Information: Billing address, payment method details (processed securely by third-party providers)
2.2 Information We Collect Automatically
- Usage Data: Pages visited, time spent, features used
- Device Information: IP address, browser type, operating system
- Session Data: Login times, session duration, platform interactions
- Location Data: General geographic location (city/province level)
3. Consent (PIPEDA Principle 3)
3.1 Express Consent
We obtain your express consent for:
- Creating and maintaining your account
- Processing skills assessments and generating recommendations
- Facilitating advisor-client matching and communications
- Recording training sessions (when applicable)
- Sending marketing communications
3.2 Implied Consent
We may rely on implied consent for:
- Platform functionality and user experience improvements
- Customer service and technical support
- Legal compliance and fraud prevention
3.3 Withdrawing Consent
You may withdraw your consent at any time by contacting our Privacy Officer. Please note that withdrawing consent may limit your ability to use certain platform features.
4. Use and Disclosure (PIPEDA Principles 4 & 5)
4.1 Primary Uses
- Providing skills development services and advisor matching
- Processing and analyzing skills assessments
- Facilitating communication between clients and advisors
- Tracking learning progress and certification achievements
- Processing payments and managing billing
4.2 Secondary Uses
- Platform improvement and feature development
- Aggregate analytics and reporting (anonymized)
- Customer service and technical support
- Marketing communications (with consent)
4.3 Disclosure to Third Parties
We may disclose personal information to:
- Advisors: Relevant client information for service delivery
- Service Providers: Payment processors, cloud hosting, analytics
- Legal Authorities: When required by law or court order
- Business Partners: Certification bodies and training organizations (with consent)
5. Retention and Storage (PIPEDA Principle 5)
5.1 Retention Periods
- Account Information: Retained while account is active plus 7 years
- Skills Assessment Data: Retained for 5 years for progress tracking
- Session Records: Retained for 3 years for quality assurance
- Payment Records: Retained for 7 years for tax and audit purposes
- Marketing Data: Retained until consent is withdrawn
5.2 Data Storage
Personal information is stored on secure servers located in Canada. When using third-party services, we ensure they provide adequate protection and comply with Canadian privacy laws.
6. Security Safeguards (PIPEDA Principle 7)
6.1 Technical Safeguards
- SSL/TLS encryption for data transmission
- AES-256 encryption for data at rest
- Multi-factor authentication for sensitive accounts
- Regular security audits and penetration testing
- Automated backup and disaster recovery systems
6.2 Administrative Safeguards
- Role-based access controls and principle of least privilege
- Regular employee privacy and security training
- Confidentiality agreements for all staff and contractors
- Incident response and breach notification procedures
6.3 Physical Safeguards
- Secure data centers with 24/7 monitoring
- Restricted access to server facilities
- Secure disposal of hardware containing personal information
7. Access and Correction (PIPEDA Principle 9)
7.1 Your Rights
You have the right to:
- Access your personal information in our possession
- Request correction of inaccurate or incomplete information
- Request deletion of personal information (subject to legal requirements)
- Receive a copy of your personal information in a portable format
- Lodge a complaint with the Privacy Commissioner of Canada
7.2 Access Requests
To request access to your personal information, contact our Privacy Officer. We will respond within 30 days and may charge a reasonable fee for extensive requests.
8. Third-Party Services
8.1 Service Providers
We work with trusted third-party providers for:
- Payment Processing: Stripe, PayPal (PCI DSS compliant)
- Cloud Hosting: Amazon Web Services Canada
- Analytics: Google Analytics (anonymized data)
- Communication: Twilio, SendGrid
- Video Conferencing: Zoom, Microsoft Teams
8.2 Data Processing Agreements
All third-party providers are bound by data processing agreements that ensure they:
- Process personal information only as instructed
- Implement appropriate security measures
- Comply with Canadian privacy laws
- Notify us of any security incidents
10. Children's Privacy
Our platform is designed for individuals 16 years of age and older. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.
For users aged 16-18, we may require parental consent for certain activities, particularly those involving career counseling or certification programs.
11. Policy Changes
We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by:
- Email notification to registered users
- Prominent notice on our website
- In-platform notifications
Continued use of our platform after changes take effect constitutes acceptance of the updated policy.
12. Contact Information
Privacy Officer
TraderAPP Canada Inc.
Privacy Officer
Email: privacy@traderapp.ca
Phone: 1-800-TRADER-1 (1-800-872-3371)
Mail: 123 Skills Development Way, Toronto, ON M5V 3A8
Privacy Commissioner of Canada
If you are not satisfied with our response to your privacy concern:
Website: www.priv.gc.ca
Phone: 1-800-282-1376
Email: info@priv.gc.ca
This Privacy Policy is effective as of January 1, 2025, and was last updated on January 1, 2025.