What Information We Collect

We're upfront about what we gather. When you interact with our platform, we collect different types of information depending on how you use our services.

Information You Provide Directly

This includes anything you actively give us:

• Name and contact details when you sign up for courses or newsletters
• Payment information when enrolling in premium learning programs
• Profile details like investment experience level and learning goals
• Communications you send us through contact forms or email
• Course progress data and quiz responses

Automatically Collected Data

Some information gets collected as you browse. Standard stuff for any modern website:

• Device information and browser type
• IP address and approximate location (city level)
• Pages visited and time spent on content
• Referral sources and navigation patterns
• Technical logs for troubleshooting and security

How We Use Your Information

Your data serves specific purposes. We don't collect information just to have it sitting around.

Educational Services

Most of your data helps us deliver and improve our courses. We track your progress through learning modules, remember where you left off, and suggest relevant content based on your interests. If you're working toward certification, we use your quiz results and course completion data to determine eligibility.

Communication

We'll send you important updates about courses you're enrolled in, changes to our services, and occasional educational content we think you'll find useful. You can opt out of promotional emails anytime, though we'll still need to send you essential service notifications.

Platform Improvement

Analytics help us understand what's working and what isn't. We look at how people navigate the site, which courses get completed versus abandoned, and where students get stuck. This informs our content strategy and helps us build better learning experiences.

Legal Compliance

Sometimes we're required to keep records for regulatory purposes or to respond to valid legal requests. We'll only share information with authorities when legally obligated.

Data Retention Periods

We don't keep your information forever. Different data types have different retention schedules based on their purpose and legal requirements.

When retention periods expire, we securely delete or anonymize your data. Anonymized data can't be traced back to you and may be kept indefinitely for research purposes.

Sharing and Third Parties

We're selective about who gets access to your information. Here's the complete picture of how your data might be shared.

Service Providers

We work with companies that help us run the platform. Our payment processor handles transactions, our email service sends course updates, and our hosting provider stores website data. These partners only get the information they need to do their job, and they're contractually bound to protect it.

Analytics Partners

We use analytics tools to understand site usage. These services receive anonymized or aggregated data that doesn't identify individual users. They help us see patterns like which courses are most popular or where students commonly exit the site.

Legal Requirements

We'll disclose information if required by Canadian law, court order, or government request. We'll notify you about such requests unless legally prohibited from doing so.

Your Rights Under Canadian Law

PIPEDA gives you specific rights regarding your personal information. We've built systems to make exercising these rights straightforward.

Access Your Information

You can request a copy of all personal data we hold about you. We'll provide this in a commonly used digital format within 30 days. There's no charge for your first request in a calendar year.

Correct Inaccuracies

Found something wrong in your profile? You can update most information directly through your account settings. For data you can't change yourself, contact us and we'll make corrections within 10 business days.

Request Deletion

You can ask us to delete your account and associated data. We'll comply within 30 days, except for information we're legally required to retain (like payment records for tax purposes). Once deleted, your course progress and certificates will no longer be accessible.

Withdraw Consent

You can withdraw consent for non-essential data processing anytime. This includes marketing communications and optional analytics. Note that withdrawing consent for essential processing may limit your ability to use certain platform features.

Data Portability

Request your data in a structured, machine-readable format. This lets you transfer your information to another service if you choose to leave Crrobtex.

Security Measures

We take data protection seriously. Our security approach combines technical safeguards with organizational policies.

Technical Protections

All data transmitted to and from our site is encrypted using TLS 1.3 protocol. Stored data is encrypted at rest using AES-256 encryption. Our servers are located in Canadian data centers that meet SOC 2 Type II standards. We conduct quarterly security audits and penetration testing to identify vulnerabilities.

Access Controls

Only authorized employees can access personal data, and only when necessary for their role. All access is logged and reviewed. We use multi-factor authentication for administrative accounts and enforce strong password requirements.

Breach Notification

If we experience a data breach affecting your information, we'll notify you within 72 hours of discovering the incident. The notification will explain what happened, what data was affected, and what steps we're taking to address the situation.

Cookies and Tracking

Like most websites, we use cookies and similar technologies. Here's what that means for you.

Essential Cookies

These are required for the site to function. They handle things like keeping you logged in and remembering your course progress. You can't opt out of essential cookies without losing core functionality.

Analytics Cookies

These help us understand how people use the site. They track page views, time on site, and navigation patterns. The data is anonymized and used to improve content and user experience. You can disable these through your browser settings or our cookie preference center.

Preference Cookies

These remember your choices like language preference or video playback settings. They make your experience more convenient but aren't strictly necessary.

You can manage cookie preferences through your browser settings or the cookie banner that appears when you first visit the site. Blocking certain cookies may affect site functionality.

Children's Privacy

Our services are designed for adults interested in investment education. We don't knowingly collect information from anyone under 18. If you're a parent and believe your child has provided us with personal information, contact us immediately and we'll delete it.

Some of our educational content may be appropriate for teens learning about personal finance, but they should use the platform under parental supervision and with a parent's account.

International Data Transfers

We primarily store data in Canada. However, some service providers may process data outside Canadian borders. When this happens, we ensure adequate protections are in place through contractual agreements and compliance with international data transfer frameworks.

If you're accessing our services from outside Canada, your information will be transferred to and processed in Canada where our servers are located. By using our services, you consent to this transfer.

Changes to This Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you via email and display a prominent notice on the site for 30 days.

The "Last Updated" date at the top shows when the current version took effect. We recommend reviewing this policy periodically to stay informed about how we protect your information.

Continued use of our services after policy changes indicates acceptance of the updated terms. If you disagree with changes, you can close your account before they take effect.

Questions and Complaints

If something in this policy isn't clear, or if you have concerns about how we handle your data, we want to hear from you. Most issues can be resolved through direct communication.

For privacy-related questions or to exercise your rights, email our privacy team at [email protected] with "Privacy Request" in the subject line. We respond to all inquiries within 5 business days.

If you're not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada. They provide independent oversight of privacy practices and can investigate complaints about potential violations of PIPEDA.