1. What this policy covers
This policy describes the personal information Northflow Gems collects on this website, what we do with it and how we keep it safe. We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply instead or as well, provincial private-sector privacy laws: Quebec’s Act respecting the protection of personal information in the private sector (as updated by Law 25) and the Personal Information Protection Acts of Alberta and British Columbia.
2. Information we collect
| Information | Collected when | Purpose |
|---|---|---|
| Email address | You sign up or sign in through the User Area | Sending your magic link, setting up your account and holding your Welcome Offer |
| Name, email and message | You send the contact form | Answering you |
| Your cookie choice | You use the cookie bar | Remembering that choice |
| Usage and device data | Only after you choose “Accept all” on the cookie bar | Measuring visits and advertising results (see the Cookie Policy) |
We never ask for payment details, phone numbers, home addresses or identity documents.
3. Consent and email
We rely on your consent. When you sign up, you agree to the account emails the service needs: magic links, and launch notices about your Welcome Offer. Analytics and advertising cookies stay switched off unless you pick “Accept all”. In line with Canada’s Anti-Spam Legislation (CASL), promotional email goes only to people who opt in to it separately, and each promotional message carries a working unsubscribe link. You may withdraw your consent whenever you like.
4. Use and disclosure
- Your information is used only for the purposes listed above, and we never sell it.
- Providers that host the site, deliver email or supply analytics handle information for us under contracts requiring a comparable level of protection.
- Some providers may keep information outside Canada, for instance in the United States. There it is subject to local law and may be disclosed to that country’s authorities.
5. How long we keep it
Account information is kept while your account is open and is deleted or anonymized within 90 days after it closes. Contact form messages are deleted after at most 24 months.
6. Security
Safeguards match the sensitivity of the information: encrypted connections, sign-in links that work only once and limited staff access. If a breach poses a real risk of significant harm, we’ll tell you and report it to the Office of the Privacy Commissioner of Canada, as the law requires.
7. Your rights
You may ask us to:
- show you the personal information we hold about you;
- fix anything that is wrong or incomplete;
- stop using it under your consent, or delete your account and its information;
- where Quebec law applies, provide your information in a structured, commonly used technological format.
Send requests through the contact form; we answer within 30 days. If our answer doesn’t satisfy you, you may file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, your provincial privacy commissioner.
8. Children
This site is not aimed at children under 13, and we don’t knowingly collect their personal information. If you are a parent or guardian and think your child has signed up, ask us and we’ll delete the account.
9. Updates to this policy
Changes are posted on this page with a new date. Account holders hear from us by email about material changes.
10. Privacy contact
Questions or requests about your information reach our privacy contact through the contact form.