PRIVACY POLICY

Last updated: April 8, 2026

This Privacy Policy describes how Canadian Standard Typing Certificates™ ("Company," "we," "us," or "our") collects, uses, and discloses your personal information when you use our website and services (collectively, the "Service"). It also explains your privacy rights under Canadian law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25). By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Important: We do not use your personal information for commercial purposes. We do not sell, rent, or trade your personal information to any third party under any circumstances. Your information is collected and used solely to administer and verify your typing assessment and to maintain your account with us.

This Privacy Policy is available in English. If you require a copy in French, please contact us at the email address provided in Section 12.

1. Interpretation and Definitions

Interpretations:

Words with initial capital letters have the meanings defined below and apply whether terms appear in singular or plural form.

Definitions:

  • Account - a unique account created for you to access our Service.

  • Company - refers to Canadian Standard Typing Certificates™.

  • Cookies - small files placed on your device by a website, containing browsing history details.

  • Device - any device that can access the Service, such as a computer, mobile phone, or tablet.

  • Personal Information - information about an identifiable individual, as defined under PIPEDA and applicable provincial privacy legislation.

  • Privacy Officer - the individual designated by the Company as responsible for overseeing compliance with this Privacy Policy and applicable privacy legislation.

  • Service - the Website and any related services offered by the Company.

  • Service Provider - any person or entity that processes personal information on behalf of the Company.

  • Usage Data - data collected automatically, generated by the use of the Service or from Service infrastructure.

  • Website - the Canadian Standard Typing Certificates website, accessible at www.canadianstandardtypingcertificates.com.

  • You - the individual accessing or using the Service.

2. Privacy Officer

In accordance with PIPEDA and Quebec Law 25, we have designated a Privacy Officer responsible for overseeing our compliance with applicable Canadian privacy legislation and this Privacy Policy.

Our Privacy Officer is responsible for:

  • Receiving and responding to privacy-related requests and complaints.

  • Overseeing the implementation of this Privacy Policy and our internal data protection practices.

  • Conducting Privacy Impact Assessments for new technologies or data processing activities as required by law.

  • Managing the reporting of confidentiality incidents to regulators and affected individuals where required.

To contact our Privacy Officer: info@canadianstandardtypingcertificates.com

3. Personal Information We Collect

Personal Information

When you register for or use our Service, we may ask you to provide the following personally identifiable information:

  • Email address

  • First name and last name

Note regarding payment information: Payment transactions are processed directly by our third-party payment processors (Stripe and PayPal). These processors may collect additional information such as billing address and phone number as required for payment processing. We do not store payment card details, billing addresses, or phone numbers in our own systems. Please refer to the respective privacy policies of Stripe and PayPal for information on how they handle your payment data.

We do not collect sensitive personal information such as health information, government-issued identification numbers, or information relating to racial or ethnic origin.

Usage Data

Usage Data is collected automatically when you use the Service. It may include your device's IP address, browser type and version, pages visited, time and date of your visit, time spent on pages, and other diagnostic data.

Tracking Technologies and Cookies

We use cookies and similar tracking technologies to monitor activity on our Service. Types of cookies we use:

  • Necessary / Essential Cookies - essential to provide the core functionality of the Website.

  • Functionality Cookies - allow us to remember your preferences, such as login details or language settings.

You can instruct your browser to refuse all cookies or alert you when cookies are being set. Disabling cookies may affect the functionality of some parts of our Service.

4. How We Use Your Personal Information

Canadian Standard Typing Certificates uses your personal information solely for the following purposes:

  • To provide and maintain our Service, including monitoring for performance and security.

  • To manage your Account and provide access to registered user features.

  • To deliver the contracted service - processing your typing test, generating your certificate, and enabling certificate verification.

  • To contact you by email regarding service updates, security notices, or information directly related to your contracted services. We do not send commercial or marketing messages without your express consent as required under Canada's Anti-Spam Legislation (CASL).

  • To manage requests you submit to us, including support and data access requests.

We explicitly confirm that: your personal information is not used for commercial purposes, direct marketing, profiling, or any purpose other than administering and verifying your typing assessment and managing your account. We do not sell, rent, share, or disclose your personal information to any third party for commercial gain.

5. Third-Party Service Providers

We engage the following third-party service providers who may process personal information on our behalf in order to deliver our Service. Each operates under its own privacy policy:

Each of these providers is engaged only to the extent necessary to deliver our Service and is not authorised to use your personal information for their own commercial purposes.

6. Cross-Border Transfer of Personal Information

Some of our third-party service providers (including Stripe, PayPal, Google Analytics, and Squarespace) operate internationally and may process your personal information outside of Canada, including in the United States and other jurisdictions. Additionally, our business operations are conducted internationally.

Where personal information is transferred outside Canada, we take steps to ensure it receives a comparable level of protection to that provided under Canadian law, including through contractual arrangements with service providers. By using our Service, you acknowledge and consent to this cross-border transfer of your personal information.

Please note that personal information transferred outside Canada may be subject to access by law enforcement or other government authorities in the destination jurisdiction in accordance with local law. For information about how specific service providers handle cross-border data, please refer to their respective privacy policies.

7. Retention of Your Personal Information

We retain different categories of personal information for different periods based on the purpose for which they were collected:

  • Test results and performance data (WPM, accuracy, date, test metadata): retained for 5 years from the date of test completion.

  • Certificate verification records (comprising name, result, date, and certificate ID): retained for the duration of the platform's operation, as deletion would invalidate certificates already relied upon by third parties such as employers.

  • Account and registration data: retained for 5 years following the date of last account activity.

  • Usage Data: retained for 12 months.

Upon expiry of the applicable retention period, personal information is permanently deleted from our systems. Where you request deletion of your personal information, we will comply within 30 days except where we are required to retain a minimum record for legal compliance or to preserve the validity of an issued certificate as described above. We will inform you of any such exception at the time of your request.

8. Disclosure of Your Personal Information

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy. Any successor entity will be required to honour the terms of this Privacy Policy or obtain fresh consent from affected individuals.

Legal Requirements

The Company may disclose your personal information if required to do so by law or in response to valid requests by public authorities. We may also disclose personal information in good faith where necessary to:

  • Comply with a legal obligation under Canadian federal or provincial law.

  • Protect and defend the rights or property of the Company.

  • Prevent or investigate possible wrongdoing in connection with the Service.

  • Protect the personal safety of users of the Service or the public.

  • Protect against legal liability.

9. Security of Your Personal Information

The security of your personal information is important to us. We implement appropriate technical and organisational security measures to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include:

  • HTTPS/TLS encryption for all data in transit.

  • Encryption at rest for stored personal information and assessment records.

  • Role-based access controls limiting data access to authorised personnel only.

  • Secure, reputable cloud hosting infrastructure.

  • Regular monitoring and review of security practices.

No method of transmission over the internet or electronic storage is completely secure. While we implement commercially appropriate measures to protect your personal information, we cannot guarantee absolute security.

10. Age Restriction

Our Service is intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. By using our Service, you represent that you are at least 18 years of age.

If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete that information as promptly as possible.

11. Your Privacy Rights

Rights Under PIPEDA

Under PIPEDA, you have the following rights regarding your personal information:

  • Right to Access - you may request a copy of the personal information we hold about you, along with information about how it has been used and disclosed.

  • Right to Correction - you may request that inaccurate or incomplete personal information be corrected.

  • Right to Withdraw Consent - you may withdraw consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide the Service to you.

  • Right to Deletion - you may request deletion of your personal information, subject to the retention exceptions described in Section 7.

Additional Rights for Quebec Residents (Law 25)

If you are a resident of Quebec, you have the following additional rights under Quebec Law 25:

  • Right to Data Portability - you have the right to receive your personal information in a structured, commonly used, and technologically readable format, and to request that it be transferred to another organisation where technically feasible.

  • Right to De-indexation - where your personal information is disseminated online and poses a serious injury to your reputation or privacy, you have the right to request that access to it be restricted or that hyperlinks to that information be de-indexed.

  • Right to Confidentiality Incident Notification - where a confidentiality incident involving your personal information presents a risk of serious injury, you have the right to be informed of the incident.

How to Exercise Your Rights

To exercise any of the rights described above, please contact our Privacy Officer at info@canadianstandardtypingcertificates.com. We will acknowledge your request promptly and respond within 30 days. In some cases, we may require you to verify your identity before processing a request.

12. Do Not Track Signals

Our Service does not currently respond to Do Not Track (DNT) signals.

13. Links to Other Websites

Our Service may contain links to websites not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every website you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. For significant changes affecting your rights, we will endeavour to provide additional notice where practicable.

Your continued use of the Service following the posting of changes constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, wish to make a complaint about our data handling practices, or require this policy in French, please contact us: