Privacy notice | Tooranceat

Who this notice covers

This notice explains how Tooranceat handles personal information on tooranceat.digital. It applies to everyone who visits the site, downloads a resource, or writes to us. It does not cover other websites we link to, which have their own practices.

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada. Where you are located outside Canada, we apply the same standard rather than a lower one.

What we collect

Deliberately little. There are no accounts on this site, so there is nothing to sign up for and no profile to build.

Information handled by this site
Information	When it is collected	Why	Kept for
Name, email address, message content	Only when you use the contact form or email us	To answer you	12 months
Record identifier and topic you select	With a contact form submission	To route and answer the enquiry	12 months
Aggregate page counts	Automatically, in a form that is not linked to you	To see which resources are used and where pages fail	26 months, aggregated
Server logs (truncated IP, browser type, time)	Automatically	Security, fault diagnosis, abuse prevention	30 days
Theme and bookmark preferences	When you set them	To remember your choices	Stays in your browser; never sent to us

We do not collect date of birth, address, payment information or any special category of personal information, because nothing on this site requires it.

What we do not do

We do not sell, rent or trade personal information. There is no circumstance in which we would.
We do not run advertising, ad networks or behavioural profiling.
We do not use third-party analytics products that build cross-site profiles.
We do not require an email address in exchange for a download.
We do not send marketing email. There is no mailing list to be added to.

Why we are allowed to hold it

For correspondence, we rely on your consent: you chose to write to us, and the information is used to reply. You can withdraw that consent at any time by asking us to delete the exchange.

For server logs and aggregate measurement, we rely on our legitimate interest in keeping the site secure, working and useful. This measurement is designed so that it does not identify individuals, and it is never combined with correspondence to build a picture of a person.

Three categories of party, and no others:

Our hosting provider, which operates servers in Canada and processes data only on our instructions under a written agreement.
Our email provider, which carries correspondence to and from our inbox.
Google Maps, but only on the contact page, and only when the map is loaded. See the cookie notice for what that involves and how to avoid it.

We would disclose information if compelled by a Canadian court order or a lawful requirement, and we would tell you it had happened unless legally prevented from doing so.

Your rights

You may ask us to confirm what we hold about you, provide a copy of it, correct anything inaccurate, or delete it. Because we hold so little, these requests are usually resolved in a day or two. Write to info@tooranceat.digital.

We do not charge for these requests. If we cannot act on one — for example, if we hold nothing that matches, or retention is legally required — we will say so and explain why. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

How it is protected

The site is served over HTTPS. Correspondence is held in access-controlled mailboxes limited to the people who answer enquiries. Server logs are truncated at collection so that full IP addresses are not stored, and they are deleted after thirty days.

No system is perfect. If a breach affecting personal information occurred, we would notify affected people and the Office of the Privacy Commissioner as required, and publish a description of what happened on our updates page.

Children and young people

Our resources are used in schools and by students, and some pages are aimed at learners under eighteen. We do not knowingly collect personal information from children. Nothing on the site requires an account, and no resource requires a young person to identify themselves in order to use it. Where a teacher or parent writes to us on behalf of a student, we ask that they do not include the student's personal details.

Changes to this notice

Material changes are announced on the updates page and dated here before they take effect. We do not make changes quietly. The version and date of this notice appear at the top of the page.