Privacy Policy Overview
Introduction to privacy policy
Privacy protection is a core principle for all site users. This policy sets out what data is collected, how it is used, and what rights users have regarding their information.
Technical and personal data collection is kept to a minimum needed for site operations. Users are provided with control options and transparent explanations throughout.
Data collection methods
Personal data is collected during account registration, site interaction, form submissions, and use of technical features. This includes both user-supplied and automatically captured technical data.
Direct user-supplied information
- Name and contact details supplied on forms.
- Submitted questions, feedback, or messages.
- Any files or images uploaded via the site.
- Preferences selected in cookies or site settings.
- Responses to optional surveys or polls.
Automatic technical information
- Device type, operating system, and browser version details.
- Access times and site interaction history are collected.
- Cookies or similar tracking technologies may be used to support essential site functions.
- IP address and region-level geolocation data may be logged.
- Device identifiers may be used for diagnostics and troubleshooting.
How data is used
Collected data is used for site operations, troubleshooting, performance monitoring, communication with users, and compliance with legal obligations. Data use is limited to legitimate, stated purposes.
- Operating and maintaining site functions and features.
- Processing form submissions and user requests.
- Monitoring performance and troubleshooting errors.
- Supporting analytics and site improvements.
- Communicating with users as needed for site activity.
- Managing cookies and user preferences.
- Complying with legal and regulatory obligations.
Data privacy commitment: Protecting user data is prioritized. Only necessary information is collected and processed, with safeguards in place for storage and transmission. Compliance with Canadian law and relevant data protection standards is maintained at all times.
Data sharing
Personal data may be shared with trusted service providers for hosting, analytics, or essential site functionality. No data is sold or disclosed to unrelated third parties.
Third-party service providers
Trusted providers are engaged for site hosting, analytics, and essential services only. Each provider is contractually obligated to meet data protection standards.
Legal compliance
Legal requirements may dictate certain data retention or disclosure. Only information necessary to meet such obligations is processed or shared.
Anonymous statistics
Anonymous statistics measure site usage patterns, feature popularity, and error frequency to improve performance and usability.
User data rights
Users have rights to access, correct, delete, or restrict use of their data, as well as to object or request data portability, in line with Canadian privacy law.
- Users can request access to personal data held about them.
- Users may request correction of inaccurate personal data.
- Users may request deletion of personal data where no legal retention obligation exists.
- Users can request a copy of their data in a standard format.
- Users may object to processing of their personal data for specific purposes.
- Users can request restriction of processing for specific personal data.
To exercise any data rights or submit privacy questions, contact the site team by email or phone. Responses are issued within the timelines set by Canadian privacy regulations.
Data security measures
Technical and organizational measures protect data from loss, unauthorized access, alteration, or disclosure. Regular reviews and updates maintain the effectiveness of security protocols.
Technical data protection measures
- Data is encrypted in transit using secure protocols.
- Passwords and sensitive fields are stored using secure hashing.
- Access logs are maintained for security monitoring.
- Automated system checks for vulnerabilities and breaches are run regularly.
Organizational data protection measures
- Only authorized personnel can access personal data.
- Internal privacy policies and staff training are enforced.
- Data handling procedures are regularly reviewed and updated.
- Incident response plans are maintained for data breaches.
Data retention periods
Data is kept only as long as necessary for the stated purpose. Retention periods depend on legal, technical, and operational needs. After expiration, data is securely deleted or anonymized.
- Basic account data includes name, email, and login credentials.
- Learning data is not stored or analyzed by this site.
- Communications data covers submitted forms, direct inquiries, and support requests.
- Financial data is not collected or processed by this site.
- No marketing or advertising data is collected or used.
Retention periods may vary based on the nature of the data and applicable legal requirements.
International data transfers
Data is primarily stored in Canada. If cross-border transfer is needed, equivalent protections are applied, and users are informed as required by law.
- User data is primarily stored within Canada.
- Transfers outside Canada occur only with necessary protections.
- Equivalent privacy safeguards apply to all transfers.
- Users are notified of any material cross-border transfer changes.
Cookies and tracking
Cookies serve to support core site functions, analytics, and user preference storage. Each cookie is categorized by purpose and has a defined retention period. Users can review and manage cookie settings at any time.
Cookie types used
- Essential cookies enable basic site operations and security.
- Performance cookies support analytics and performance monitoring.
- Personalization cookies adapt content to user preferences.
- Functionality cookies remember user preferences and settings.
Cookie preferences can be updated or disabled through browser settings.
Policy updates and changes
Privacy policy may be updated to reflect changes in legal, technical, or operational requirements. Material changes are communicated directly to users where required.
- Significant changes to privacy practices or user rights.
- Changes to data processing purposes or third-party involvement.
- Modifications to data retention or security protocols.
- Any updates required by law or regulation.
Regularly check this policy for the latest version before using the site.
Contact for privacy inquiries
For privacy-related questions or requests, contact the site team by email or phone. Each inquiry receives a prompt, direct response with technical details as needed.
Xalivora
442 Saint-Gabriel Street, Suite 100, Montreal, QC H2Y 2Z9 Canada
Phone: +1 (%76) 985-0650
Email: content@xalivora.sbs
Last updated July 21, 2026.
Effective as of July 21, 2026.