Privacy Policy

Privacy Policy

Last updated: Welcome to Stackup.ca (“Stackup”, “we”, “us”, “our”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, create an account, contact us, or use our services (collectively, the “Services”). We follow applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and where applicable provincial private-sector laws and Québec’s Law 25.

1) Who we are & how to contact us

Operator: Stackup.ca Email: [email protected] Address: Attn: Legal, Stackup.ca, 2106 Royal Gala Circ. Mississauga On L4y0H2, Canada

2) Scope

This Policy applies to personal information we handle in Canada through our website and Services. It does not cover third-party websites or services we do not control. If you access third-party links from our site, their privacy policies govern.

3) The information we collect

a) Information you provide

  • Contact details (name, email, phone, address).
  • Account credentials and profile information.
  • Payment details (processed by our payment provider; we receive limited billing info and transaction IDs).
  • Support inquiries, survey responses, content you submit, and communication preferences.

b) Information collected automatically

  • Device and browser data (IP address, device identifiers, OS, browser type/version).
  • Usage data (pages viewed, links clicked, referring/exit pages, timestamps).
  • Approximate location based on IP.

c) Cookies & similar technologies

We use cookies, local storage, pixels, and tags to operate the site, remember preferences, analyze traffic, and measure campaign performance. You can manage cookies via your browser settings; disabling some cookies may affect site functionality. See “Cookies & Analytics” below for details.

d) Information from third parties

  • Analytics and advertising partners (aggregate usage and attribution data).
  • Payment processors (payment confirmation, fraud screenings).
  • Social/login providers (if you choose to sign in with them; we receive identifiers and basic profile info per your permissions).

4) How we use personal information

  • Provide, maintain, and improve the Services.
  • Create and manage accounts; authenticate users.
  • Process transactions and send purchase/billing notices.
  • Respond to inquiries and provide support.
  • Personalize content and remember preferences.
  • Monitor security, prevent fraud, and enforce terms.
  • Analyze usage to improve performance and features.
  • Send service communications; with consent, send marketing and promotions (you can opt out at any time).
  • Comply with legal obligations.

5) Legal bases (where required)

Where laws require a legal basis (e.g., EU/UK/Québec Law 25), we rely on: (i) consent; (ii) contractual necessity; (iii) legitimate interests (e.g., security, improvement, analytics); and (iv) legal obligations.

6) When we share information

We do not sell personal information. We may share with:
  • Service providers / processors (hosting, analytics, payments, email, customer support) bound by confidentiality and data-processing terms.
  • Business transfers (merger, acquisition, financing, or sale of assets—information may be transferred as part of the transaction).
  • Legal & safety (to comply with law, respond to lawful requests, protect rights, security, or prevent fraud/abuse).
  • With your direction/consent (e.g., integrations you enable).

7) International transfers

Our providers may process data in provinces and countries other than where you reside (e.g., the U.S.). We take reasonable contractual and technical measures to protect information consistent with Canadian law; however, it may be accessible to foreign authorities under local law.

8) Retention

We retain personal information only as long as necessary for the purposes described above, to comply with legal/financial obligations, resolve disputes, and enforce agreements. When no longer needed, we de-identify or securely delete it.

9) Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information (e.g., encryption in transit, access controls, logging). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10) Your privacy rights

Subject to exceptions under law, you may have the right to:
  • Access and obtain a copy of your personal information.
  • Request correction/updates.
  • Withdraw consent (for activities based on consent).
  • Request deletion, de-indexing, or anonymization where applicable.
  • Portability (where available by law).
  • Object to or restrict certain processing (e.g., targeted advertising, profiling, or automated decisions that produce legal/similar significant effects).
To exercise rights, contact [email protected]. We may verify your identity and respond within statutory timelines. If you are in Québec, you may also contact our Privacy Officer (see Section 1). You can complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

11) Cookies & analytics

We use first-party and third-party cookies for core functionality (strictly necessary), performance/analytics (e.g., page load, feature usage), and marketing/attribution. You can:
  • Use our cookie banner/settings (where available) to manage optional cookies.
  • Adjust browser settings to block/limit cookies.
  • Use industry opt-outs for interest-based ads (e.g., AdChoices / YourAdChoices).

12) Marketing communications (CASL)

We comply with Canada’s Anti-Spam Legislation (CASL). We send commercial electronic messages only with your consent or as otherwise permitted by law. You can unsubscribe at any time via the link in our emails or by contacting us at [email protected]. Service and transactional messages are not marketing and you may still receive them.

13) Children’s privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us to request deletion.

14) Third-party links & integrations

Our site may link to third-party websites or offer integrations. Their practices are governed by their own privacy policies; review those policies before providing personal information.

15) Automated decision-making

We do not use solely automated decisions that produce legal or similarly significant effects without appropriate human review. If that changes, we will disclose the logic involved and your associated rights where required by law.

16) Changes to this Policy

We may update this Policy periodically. We will post the revised version with an updated “Last updated” date, and when required, we will provide additional notice (e.g., banner or email). Continued use of the Services after changes means you accept the updated Policy.

17) How to contact us

Questions or requests about this Policy can be sent to [email protected] or by mail to: Attn: Privacy Officer, Stackup.ca, 60 Atlantic Ave. Suite 200, Toronto, ON M6K1X9.