BizLiveGo Canada Privacy Notice

Federal & Provincial Frameworks

This Notice governs personal information collected, processed, and hosted across BizLiveGo regarding Canadian individuals under applicable Canadian commercial statutes:

• PIPEDA: The federal Personal Information Protection and Electronic Documents Act.
• Quebec Law 25: Act to modernize legislative provisions as regards the protection of personal information.
• Alberta & BC: Personal Information Protection Acts (PIPA).

Accountability & Governance

BizLiveGo is accountable for all personal information in its custody and under its control, including records transferred to third-party cloud infrastructure for processing:

• Our designated Privacy Officer oversees full operational compliance.
• Commercial practices adhere strictly to PIPEDA Schedule 1 principles.
• Personal information is never sold, traded, or rented to data brokers.

1. Accountability

Designated Privacy Officer manages compliance and monitors subprocessor contractual obligations.

2. Identifying Purposes

Purposes for collecting data are specified before or at the time of account creation and profile setup.

3. Consent

Knowledge and consent are obtained for data processing, except where inappropriate under statutory law.

4. Limiting Collection

Only data necessary for identified profile, catalog, and QR rendering purposes is collected from users.

5. Limiting Use & Retention

Data is used solely for specified purposes and retained only as long as necessary to provide active profiles.

6. Accuracy

Personal data is maintained accurate, complete, and up-to-date via self-service user dashboards.

7. Safeguards

Protected by security safeguards appropriate to data sensitivity: TLS 1.3 in transit, AES-256 at rest.

8. Openness

Policies and practices regarding management of personal data are readily available in clear, accessible text.

9. Individual Access

Upon request, individuals are informed of existence, use, and disclosure, and given access within 30 days.

10. Challenging Compliance

Individuals may challenge our adherence to these principles directly through our Privacy Officer or the OPC.

1. Default Inactivity of Tracking

In compliance with Law 25, technologies used to identify, locate, or profile individuals (such as analytics cookies and pixels) are deactivated by default until affirmative consent is given.

2. Cross-Border Assessment

Before communicating personal data outside Quebec, BizLiveGo conducts a privacy assessment ensuring that the data benefits from an adequate level of protection according to legal principles.

3. Automated Decisions

BizLiveGo does not employ exclusively automated decision-making processes producing legal effects without human involvement. All account approvals and verifications involve human review.

International Transfers Outside Canada

Personal data collected from Canadian residents is processed and stored on primary cloud servers located in India (Mumbai/Bengaluru) and distributed across Cloudflare's international edge CDN network.

• Transfers are governed by enforceable Data Processing Agreements (DPAs) with strict security terms.
• Data is protected by TLS 1.3 encryption in transit and AES-256 encryption at rest.
• Data in transit may be accessible to foreign courts and law enforcement pursuant to the laws of recipient jurisdictions.

Breaches of Security Safeguards

Under PIPEDA Section 10.1 and Quebec Law 25, BizLiveGo maintains a mandatory incident register and breach protocol:

• If an incident creates a Real Risk of Significant Harm (RROSH) to an individual, notification is dispatched to the OPC and impacted individuals without unreasonable delay.
• Notifications describe circumstances, data affected, steps taken to reduce harm, and contact details.
• All breach records are maintained in our internal compliance register for a minimum of 24 months.

1. Right of Access & Verification

Request access to the personal records BizLiveGo holds about you, our usage purposes, and third parties to whom data has been disclosed, provided in an intelligible format.

2. Right to Rectify & Withdraw

Correct inaccurate or obsolete profile information, or withdraw previously granted consent for public listing or marketing telemetry with immediate effect.

3. Operational SLA (7–15 Days)

While PIPEDA allows up to 30 calendar days for formal responses, BizLiveGo processes verified data deletion, correction, and portability requests within our operational 7 to 15 working days SLA.