Privacy Policy
We respect Canadian privacy standards, including principles aligned with PIPEDA. This policy explains what we collect, why, and how you can control it.
Scope and Applicability
This Privacy Policy applies to the websites and services offered by Carvalton Institute to individuals in Canada. Where provincial privacy laws (e.g., in Alberta, British Columbia, or Quebec) apply, we align our practices with those requirements in addition to PIPEDA.
Information We Collect
- Account details: name, email (provided on forms with action='send.php').
- Usage data: on-site interactions, favorites, and cart stored locally in your browser.
- Communications you send via the contact form.
- Technical data: browser type, approximate location (derived from IP at a regional level), and device settings for basic security and reliability.
How We Use Information
- Provide and improve course recommendations and navigation.
- Respond to inquiries and support requests.
- Measure page effectiveness (aggregate, anonymized).
- Maintain site security, prevent abuse, and troubleshoot issues.
Legal Basis and Consent
We collect, use, and disclose personal information with your consent or as otherwise permitted by law. By submitting forms, you consent to our handling of the information for the stated purposes. You may withdraw consent at any time, subject to legal or contractual restrictions.
Cookies and Local Storage
We use essential cookies for core functionality (e.g., session continuity) and may use optional cookies or localStorage for preferences and performance measurement. Favorites and cart are stored in your browser’s localStorage. You can control your preferences through the cookie banner or Cookie Settings, and through your browser settings.
Storage & Security
Favorites and cart are stored in your browser’s localStorage. We employ industry-standard security for our website. Do not submit sensitive personal information.
Retention
We retain personal information only as long as necessary for the purposes described or as required by law. Locally stored data (like favorites) remains in your browser until you clear it.
International Transfers
Personal information may be processed or stored outside your province or outside Canada by our service providers. We use contractual and technical safeguards to protect it, but when processed in another jurisdiction it may be subject to that jurisdiction’s laws.
Your Rights
- Access and correction: You may request access to and correction of your personal information we hold.
- Withdraw consent: You may withdraw consent to optional processing at any time.
- Deletion of communications: You may request deletion of communications by emailing [email protected].
- Cookie choices: Manage optional cookies via Cookie Settings below.
- Clear local data: Clear localStorage from your browser settings.
Children’s Privacy
Our services are intended for individuals aged 16 and over. If we become aware of personal information collected from a child under 16, we will delete it.
CASL (Commercial Electronic Messages)
We comply with Canada’s Anti-Spam Legislation (CASL). We send marketing messages only with your express consent or as otherwise permitted. You can unsubscribe at any time via message footer or by contacting us.
Accessibility
This policy is designed to be readable with assistive technologies and in high-contrast modes. To request an accessible format, contact us via email and we will provide a suitable alternative format.
Updates to this Policy
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be highlighted on this page. Effective date: 2025-12-02.
Contact
Questions? Email [email protected]. For privacy requests, include “Privacy Request (Canada)” in the subject line.