Privacy Policy - Information Protection

We collect minimal personal information necessary to provide informational services about nationally-regulated prize draws. This includes contact details for service communications, browsing data for platform optimization, and account information for user authentication.

Specifically, we collect: email addresses for update notifications, names for account management, IP addresses for security purposes, and browsing behavior for service improvement. All data collection complies with Canadian privacy legislation and is limited to what is necessary for service provision.

Personal information is used exclusively for providing and improving our informational services. This includes sending schedule updates, processing account requests, enhancing user experience, and maintaining platform security.

We do not sell or rent personal information to third parties. Data may be shared with service providers under strict confidentiality agreements for essential functions like email delivery or security monitoring. All third-party processors are vetted for compliance with Canadian privacy standards.

User data is stored on secure servers located within Canada, protected by industry-standard encryption protocols, firewalls, and access controls. We implement regular security audits and updates to protect against unauthorized access, disclosure, or destruction of personal information.

Data retention follows a strict schedule: active account information is retained while accounts remain active, browsing data is anonymized after 12 months, communication records are kept for 24 months for service quality purposes, and legally required data is retained as mandated by Canadian regulations.

You have the right to access, correct, or delete your personal information. Requests can be submitted by email to [email protected]. We verify identity before processing requests and respond within 30 days as required by Canadian privacy law.

You may opt out of non-essential communications at any time through account settings or unsubscribe links. Platform functionality does not require accepting all data uses, though certain services may be limited if essential data processing is declined.

To request data deletion, contact [email protected] with your account details. We will verify your identity and process deletion requests within 30 days, providing confirmation upon completion.

Certain data may be retained for specific periods to comply with legal obligations (7 years for financial records), resolve disputes, enforce agreements, or maintain security logs. Archived data is encrypted and access-restricted until retention periods expire, after which it is permanently destroyed.

We implement comprehensive security measures including encryption, access controls, regular security assessments, and staff training. In the unlikely event of a data breach, we will notify affected users and regulatory authorities as required by Canadian law within 72 hours of discovery.

Our breach response protocol includes immediate containment, assessment of impact, notification procedures, and implementation of corrective measures. We maintain incident response plans and conduct regular drills to ensure preparedness for potential security incidents.