Draft — not yet live. This policy is a working draft. The forms and newsletter it describes are not open yet.
Privacy policy
This site is a reference you can read without an account, without cookies and without trackers. Personal information is only collected when you choose to send it to us.
What we collect
- Brand listing and enquiry forms: your name, work email, company, brand, the retailer and country concerned, links to evidence, and your message.
- Correction requests: the page, what is wrong, a link to the evidence, and optionally your email so we can follow up.
- Newsletter: your email address and the date and method of your consent.
- Technical data: our hosting provider processes IP addresses and request logs to deliver the site and to block abuse. Forms use a bot-protection check. We do not use analytics cookies, advertising pixels or third-party trackers.
- Visit totals from our network provider: the site is delivered through Cloudflare, which already counts the traffic it serves. We read only Cloudflare's daily totals for this site — page views, an estimate of unique visitors, and requests by country. No script or cookie is added to this site for this, and we do not receive or store IP addresses.
How we use it
To verify and publish listing evidence, to answer enquiries, to process corrections, and, if you subscribe, to send the newsletter. We do not sell personal information.
Messages sent through our forms are first sorted by our operations process, which includes automated tools. When a message is identified as a privacy request or legal matter, a person handles it.
Sharing
We do not sell the personal information you submit, and we do not share it with distribution partners. Evidence you submit for a listing (for example a retailer link) may be published as the source of that listing; your personal details are not.
Service providers
A few service providers process personal information on our behalf, only to provide their service to us:
- Cloudflare hosts and delivers this site and our form service, and runs Turnstile, the bot-protection check on our forms.
- Resend will send the newsletter confirmation email and the weekly newsletter once the newsletter starts.
- Google (Gmail) hosts the email account we use for privacy requests and our replies.
These providers may process information outside Canada, for example in the United States.
Newsletter
The newsletter uses double opt-in: after you sign up, we send one confirmation email and add you only once you confirm. Every message includes a one-click unsubscribe link and identifies the sender, in line with Canada's Anti-Spam Legislation (CASL). Unsubscribe requests take effect immediately.
Retention
These periods are draft defaults and may change before this policy is final.
- Newsletter sign-ups that are never confirmed are deleted after 37 days.
- The record of your newsletter consent (when and how you agreed, confirmed or unsubscribed) is kept while you are subscribed and for 3 years after you unsubscribe, so that we can show we had your consent, as CASL requires. If you signed up but never confirmed after we sent you a confirmation email, the record of that request is kept for 3 years from the request.
- Enquiries and correction requests are deleted 12 months after we receive them. Published corrections stay on the site without your personal details.
Your rights
You can ask to see, correct or delete the personal information we hold about you, or withdraw consent at any time. For privacy requests, write to [email protected]. We answer privacy requests within 30 days, and may ask you to confirm your identity first.