🇨🇦 Canadian Privacy Law
Privacy Policy
How TINSE inc collects, uses, and protects your personal information — in compliance with PIPEDA and CASL, Canada's federal privacy and anti-spam laws.
This Privacy Policy applies to TINSE inc ("we", "us", "our"), a technology solutions company incorporated in Ontario, Canada. It governs personal information collected through our website tinse.ca and in the course of providing our services. By using our website or engaging our services, you consent to the practices described here.
01
Accountability PIPEDA Principle 1
TINSE inc is responsible for all personal information under its control. We have designated a Privacy Officer accountable for our compliance with PIPEDA and this policy.
- Privacy Officer: Chief Executive Officer, TINSE inc
- Email: contact@tinse.ca
- Phone: +1 (289) 499-8040
- Address: 7700 Hurontario Street NE, Suite 303a, Brampton, Ontario, L6Y 4M3, Canada
When personal information is transferred to third-party service providers, we use contractual or other means to ensure a comparable level of protection is maintained.
02
PIPEDA's 10 Fair Information Principles
Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) is built on ten principles. TINSE inc adheres to all ten:
Principle 1
Accountability
A designated Privacy Officer is responsible for our compliance.
Principle 2
Identifying Purposes
Purposes for collecting information are identified before or at the time of collection.
Principle 3
Consent
Meaningful consent is obtained for collection, use, and disclosure.
Principle 4
Limiting Collection
We collect only what is necessary for identified purposes.
Principle 5
Limiting Use & Disclosure
Information is used only for the purposes for which it was collected.
Principle 6
Accuracy
Personal information is kept accurate, complete, and up to date.
Principle 7
Safeguards
Information is protected by security safeguards appropriate to its sensitivity.
Principle 8
Openness
Our privacy policies and practices are readily available to the public.
Principle 9
Individual Access
Upon request, individuals can access their personal information we hold.
Principle 10
Challenging Compliance
Individuals can challenge our compliance with the Privacy Officer or the OPC.
04
Identifying Purposes PIPEDA Principle 2
We identify the purposes for collecting personal information at or before the time of collection. Your information is used for the following purposes:
- Service Delivery: To provide software development, mobile app, ERP, and web design services as engaged.
- Client Communication: To respond to enquiries, provide project updates, and deliver customer support.
- Proposals & Contracts: To prepare quotations, service agreements, and statements of work.
- Billing & Payments: To issue invoices, process payments, and maintain accounting records as required by law.
- Marketing Communications: To send newsletters or service updates — only with your express or implied consent under CASL.
- Website Analytics: To understand how visitors use our site and improve our content and user experience.
- Legal Compliance: To meet obligations under applicable Canadian federal and provincial law.
- Recruitment: To evaluate applications for employment at TINSE inc.
We will not use your personal information for any new purpose without first identifying that purpose and obtaining your consent where required.
05
Consent PIPEDA Principle 3
We obtain meaningful consent for the collection, use, and disclosure of your personal information:
- Express Consent: Required for sensitive information, secondary uses, or marketing emails. Given verbally, in writing, or electronically.
- Implied Consent: May apply for non-sensitive information in the context of an obvious business relationship — e.g., when you submit a contact form, you implicitly consent to us using your details to respond.
- Withdrawal of Consent: You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Contact our Privacy Officer at contact@tinse.ca.
You may opt out of marketing emails at any time by clicking "Unsubscribe" in any email or emailing contact@tinse.ca. All unsubscribe requests are processed within 10 business days as required by CASL.
06
Limiting Collection PIPEDA Principle 4
TINSE inc collects only the personal information that is necessary for identified purposes, by fair and lawful means. We do not collect information indiscriminately or beyond what is required to deliver our services.
Where possible, we offer the option to interact with us anonymously or using a pseudonym, unless identification is required by law or by the nature of the service requested.
07
Use, Disclosure & Retention PIPEDA Principle 5
We do not sell, rent, or trade personal information. We disclose it only as follows:
- Service Providers: Trusted vendors (cloud hosting, payment processors, analytics) who operate under contractual confidentiality obligations.
- Project Partners: Only information necessary to complete a client project, with appropriate safeguards in place.
- Legal Obligations: When required by Canadian law, a court order, or a government authority with lawful authority to compel disclosure.
- Business Transfers: In the event of a merger or acquisition, personal information may transfer as part of the transaction — with advance notice provided.
Retention periods:
- Client project records: minimum 7 years (Income Tax Act compliance).
- Marketing contact lists: until consent is withdrawn.
- Job applicant records: 1 year after the hiring decision, unless consent is given for longer retention.
- Website analytics: anonymised per our analytics provider's retention policy.
When information is no longer required, it is securely destroyed or permanently anonymised.
08
Accuracy PIPEDA Principle 6
We take reasonable steps to ensure that personal information we use is accurate, complete, and up to date — particularly when used to make decisions about you or shared with third parties.
If you become aware of inaccuracies in the personal information we hold, please contact our Privacy Officer and we will correct it promptly.
09
Safeguards PIPEDA Principle 7
We protect personal information with security safeguards appropriate to its sensitivity, including:
- Encryption: SSL/TLS encryption for all data in transit to and from our website and systems.
- Access Controls: Role-based access ensuring only authorised TINSE inc personnel can access personal information on a need-to-know basis.
- Data Storage: Personal information is stored on secure servers located in Canada where reasonably possible.
- Vendor Agreements: Third-party processors are bound by contractual data protection obligations.
- Security Reviews: We periodically review and update our security practices to address new risks.
- Staff Training: Employees who handle personal information are trained on privacy obligations and internal security policies.
No method of electronic transmission or storage is completely secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security.
10
Openness PIPEDA Principle 8
TINSE inc makes our privacy policies and practices readily available. This Privacy Policy is publicly accessible at tinse.ca/privacy-policy.html. Upon request, our Privacy Officer can provide information about the types of personal information we hold, the purposes for which it is used, and how to access your information or challenge our compliance.
11
Your Rights PIPEDA Principles 9 & 10
Under PIPEDA and applicable Canadian privacy law, you have the following rights:
📋
Right of Access
Request a copy of the personal information we hold about you, including how it has been used and disclosed.
✏️
Right to Correction
Request that we correct inaccurate or incomplete information and notify third parties where appropriate.
🚫
Withdrawal of Consent
Withdraw consent to our collection, use, or disclosure at any time, with reasonable notice.
🗑️
Right to Deletion
Request deletion of your personal information where we are no longer legally required to retain it.
📤
Right to Portability
Request your personal information in a structured, commonly used format where technically feasible.
⚖️
Right to Challenge
Challenge our compliance with this policy. Unresolved complaints may be referred to the OPC.
To exercise any of these rights, contact our Privacy Officer at contact@tinse.ca. We will acknowledge your request within 5 business days and respond fully within 30 calendar days as required by PIPEDA.
12
CASL — Email & Commercial Electronic Messages CASL
Canada's Anti-Spam Legislation (CASL) governs all commercial electronic messages (CEMs) we send. TINSE inc complies fully:
- Express Consent: We obtain express consent before sending marketing emails, newsletters, or promotional messages. Consent records are maintained.
- Implied Consent: We may contact existing clients within 2 years of a transaction or enquirers within 6 months of their request, under CASL's implied consent provisions.
- Identification: Every CEM clearly identifies TINSE inc as sender, with our mailing address and contact information.
- Unsubscribe Mechanism: Every marketing email includes a clearly visible unsubscribe link. All requests are honoured within 10 business days.
- No Purchased Lists: We do not purchase, rent, or use email lists obtained from third parties.
✅ Transactional emails (project updates, invoices, quotes you requested) are not subject to CASL's consent requirements and will continue regardless of your marketing preferences.
13
Cookies & Tracking Technologies
- Essential Cookies: Required for the website to function. Cannot be disabled without affecting site functionality.
- Analytics Cookies: Collect anonymised data about site usage (e.g., Google Analytics). No personally identifiable information is stored.
- Preference Cookies: Remember your settings to personalise your visit.
You may control cookies through your browser settings. Disabling non-essential cookies will not affect your ability to use our services.
We do not use cookies for cross-site advertising, behavioural profiling, or the sale of your data to advertisers.
Our website may contain links to third-party websites provided for convenience only. TINSE inc has no control over and is not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any third-party website before submitting personal information.
Our services are directed to businesses and individuals who are 18 years of age or older. We do not knowingly collect personal information from minors under 18. If you believe we have inadvertently collected information from a minor, please notify our Privacy Officer at contact@tinse.ca immediately and we will delete that information promptly.
16
Data Breach Notification Protocol
Under PIPEDA's mandatory breach reporting requirements, if TINSE inc experiences a breach of security safeguards involving personal information that poses a real risk of significant harm, we will:
- Notify the OPC: Report the breach to the Office of the Privacy Commissioner of Canada as soon as feasible.
- Notify Affected Individuals: Inform affected individuals directly and promptly so they can take protective steps.
- Notify Other Organisations: Where required, notify organisations that may be able to reduce the risk of harm to affected individuals.
- Maintain Breach Records: Keep a record of all breaches involving personal information, available to the OPC upon request.
Breach notifications will describe: what happened, the type of information involved, steps taken to reduce risk, and how affected individuals can contact us for more information.
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or applicable law. Material changes will be communicated by updating the "Last Updated" date, emailing active clients where changes are significant, and displaying a notice on our website. Your continued use of our website or services after a change constitutes acceptance of the revised policy.
If you believe TINSE inc has not complied with this policy or your rights under PIPEDA, please first contact our Privacy Officer. We will investigate and respond within 30 calendar days. If you are not satisfied with our response, you may file a complaint with:
- Office of the Privacy Commissioner of Canada (OPC): priv.gc.ca | Toll-free: 1-800-282-1376
Have a privacy question?
Our Privacy Officer is available to assist with any questions, access requests, or concerns about your personal information.
Contact Privacy Officer →