Privacy Policy
Last Updated: March 15, 2025
At canelmirakivia, we're pretty straightforward about how we handle your information. This policy explains what data we collect when you use our sales training resources, why we need it, and how we keep it secure. We've written this in plain language because nobody wants to decode legal jargon when they're trying to understand their rights.
Information We Collect
When you interact with our platform, we collect certain information to provide you with educational services and improve your experience. Here's what we gather and why it matters.
Personal Information You Provide
- Contact details like your name, email address, and phone number when you sign up for courses or newsletters
- Professional information including your current role, company name, and experience level to tailor content recommendations
- Payment information processed through secure third-party providers (we don't store complete credit card numbers)
- Course progress data, quiz responses, and assignment submissions to track your learning journey
- Communication preferences and feedback you share with us through surveys or support requests
Automatically Collected Data
Some information gets collected automatically when you use our platform. This helps us understand how people actually use the site (not just how we think they do).
- Device information including browser type, operating system, and screen resolution
- Usage patterns like which courses you view, how long you spend on different modules, and navigation paths
- IP addresses and general location data (city/province level, not your exact address)
- Cookies and similar tracking technologies to remember your preferences and login status
How We Use Your Information
We're not in the business of selling your data. Everything we collect serves a specific purpose related to delivering quality education and maintaining our platform.
Purpose | What This Means |
---|---|
Course Delivery | Providing access to educational content, tracking progress, issuing certificates |
Communication | Sending course updates, answering questions, sharing relevant educational resources |
Platform Improvement | Analyzing usage patterns to enhance content quality and user experience |
Security | Protecting against unauthorized access, fraud prevention, maintaining account safety |
Legal Compliance | Meeting Canadian privacy laws and regulatory requirements |
We'll never sell your personal information to third parties for marketing purposes. That's not what we do, and it never will be.
Your Rights Under Canadian Privacy Law
Canada's privacy legislation (PIPEDA and provincial laws like Alberta's PIPA) gives you specific rights regarding your personal data. And we actually respect them.
Access and Correction
You can request a copy of the personal information we hold about you. If something's incorrect or outdated, let us know and we'll fix it within 30 days. There's no charge for this unless your request is particularly complex or repetitive.
Withdrawal of Consent
You gave us permission to use your data when you signed up, but you can withdraw that consent anytime. Just understand that some services might not work properly if you restrict certain data uses. We'll explain the implications before you make that decision.
Data Portability
Want to take your course data elsewhere? We'll provide your information in a commonly used, machine-readable format. This includes your course history, certificates earned, and any content you created.
Account Deletion
You can request full account deletion through your profile settings or by contacting us directly. We'll remove your personal information within 90 days, though we might keep some anonymized data for analytics and some records for legal compliance.
Data Sharing and Third Parties
We work with a few carefully selected partners to deliver our services. Here's who gets access to what, and why.
Service Providers
- Payment processors handle transaction data securely (we use PCI-DSS compliant providers)
- Email service providers send course updates and newsletters (only contact info, never payment details)
- Cloud hosting services store course content and user data with encryption
- Analytics platforms help us understand site usage patterns (with anonymized data when possible)
What We Don't Share
Your course performance data, quiz scores, and learning progress stay private unless you explicitly choose to share them. We don't sell contact lists to marketers. We don't provide personal information to advertising networks. And we certainly don't hand over data to random companies who ask nicely.
If we're legally required to disclose information (court order, regulatory investigation), we'll notify you first unless prohibited by law. We'll also challenge overly broad requests when appropriate.
Data Security Measures
Security isn't just a checkbox for us. We've implemented multiple layers of protection because your trust matters more than convenience.
Technical Safeguards
- 256-bit SSL encryption for all data transmission between your device and our servers
- Encrypted database storage with regularly rotated access credentials
- Multi-factor authentication requirements for staff accessing sensitive systems
- Regular security audits and penetration testing by independent third parties
- Automated backup systems with encrypted off-site storage
Organizational Protections
Technology alone isn't enough. We limit data access to employees who genuinely need it for their roles. Staff receive annual privacy training. We maintain detailed access logs. And we have an incident response plan ready if something goes wrong.
Your Role in Security
Choose a strong password (no, "password123" doesn't count). Don't share your login credentials. Log out when using shared devices. Enable two-factor authentication if available. Report suspicious activity immediately. Basic stuff, but it makes a real difference.
Data Retention and Deletion
We don't keep your information forever just because we can. Here's our approach to data retention.
Active Account Data
While your account remains active, we retain your course data, progress records, and certificates indefinitely. You've earned those credentials and might need to reference them years later.
Inactive Accounts
If you haven't logged in for 36 months, we'll send reminders before archiving your account. Archived accounts have limited data retention focused on essential records like certificate verification.
Deleted Accounts
When you request deletion, most personal information gets removed within 30 days. Some data sticks around longer for legitimate reasons:
- Financial records (7 years for tax compliance)
- Certificate verification data (indefinitely, but anonymized)
- Anonymized analytics data (used for platform improvement)
- Legal dispute records (until resolved plus applicable limitation period)
Backup Data
Deleted information might persist in encrypted backups for up to 90 days before those backups cycle out. This is standard practice for disaster recovery purposes.
Cookies and Tracking Technologies
Yes, we use cookies. But we're selective about it and you have control over what gets set.
Essential Cookies
These keep the site working properly. They remember you're logged in, maintain your session security, and store essential preferences. You can't disable these without breaking basic functionality.
Functional Cookies
These enhance your experience by remembering choices like language preference, video player settings, and course filters. They're helpful but not strictly necessary.
Analytics Cookies
We use these to understand how people navigate the site and which content proves most valuable. The data gets anonymized before analysis. You can opt out through your browser settings or our cookie preference center.
Managing Cookie Preferences
Your browser settings let you block or delete cookies. Most browsers also support "Do Not Track" signals, which we honor. Just be aware that restricting cookies might limit certain features.
Children's Privacy
Our services target professional adults. We don't knowingly collect information from anyone under 16 years old. If you're a parent who discovers your child has created an account, contact us immediately and we'll delete it.
International Data Transfers
Our primary servers operate within Canada, but some service providers might process data in other jurisdictions (typically the United States). When this happens, we ensure appropriate safeguards exist through:
- Standard contractual clauses approved by privacy regulators
- Service providers certified under recognized privacy frameworks
- Additional technical protections like encryption and access controls
You can request details about specific data transfers by contacting our privacy team.
Changes to This Policy
Privacy laws evolve. Our services grow. Sometimes we need to update this policy. When we make significant changes, we'll notify you through email and a prominent site notice at least 30 days before the new policy takes effect.
Minor updates (like clarifying existing practices or fixing typos) happen without extensive notification, but we always update the "Last Updated" date at the top of this page.
Continuing to use our services after changes take effect means you accept the updated policy. If you disagree with significant changes, you can close your account before they become effective.
Filing Privacy Complaints
If you believe we've mishandled your personal information, start by contacting us directly. We'll investigate and respond within 45 days. If you're not satisfied with our response, you have the right to file a complaint with:
- The Office of the Privacy Commissioner of Canada
- Alberta's Office of the Information and Privacy Commissioner (for Alberta residents)
- Your provincial privacy commissioner if applicable
We won't retaliate against anyone who exercises their privacy rights or files a legitimate complaint.
Questions About Your Privacy?
If something in this policy isn't clear, or you want to exercise your rights, reach out to us:
Email: help@canelmirakivia.com
Phone: +1 709-635-4608
Mail: 4302 118 Ave NW, Edmonton, AB T5W 1A6, Canada
We respond to privacy inquiries within 5 business days, though complex requests might take longer to fully resolve.