Privacy Policy

We collect as little as we can get away with. This page says exactly what that is, who else touches it, and how to get it back or get it deleted.

Last updated: September 7, 2026

The short version

Browsing the site does not require an account and we do not set advertising cookies or sell anything about you to anyone. If you submit a product, we collect your email address and take a payment through Stripe. Our analytics are cookieless and aggregate. The product catalogue lives on Canadian servers.

Who is responsible for your information

fyiCanada.ca is operated by Southern East Inc., a federally incorporated Canadian company operating from Ontario. We are the organisation accountable for the personal information described here, under the Personal Information Protection and Electronic Documents Act and applicable provincial privacy law.

Our Privacy Officer is reachable at support@fyicanada.ca or through our contact form. Write “Privacy request” in the message and it gets routed correctly.

What we collect

Just browsing: nothing that identifies you. No account, no login, no advertising cookies, no tracking profile.

Analytics: we use Plausible Analytics to count page views and see which pages and outbound links get used. Plausible does not use cookies, does not store IP addresses, and does not follow you across other websites. What we see is aggregate traffic, not individual people. The script is served from our own domain, so a blocker that allows our site will not hide it from you.

Product submissions: your email address, the product details you type in, and any links or images you give us. We keep the email so we can tell you when your products are live and handle refunds.

Payments: handled entirely by Stripe. We never see or store your card number. Stripe returns us a session reference, a customer reference, and the billing email you used, which we store against your submission.

Contact and correction requests: our contact form is hosted by Tally. Whatever you type into it, including your email if you give one, goes to Tally and then to us.

Server logs: our hosting and content delivery providers keep short lived technical logs, including IP address and user agent, for security, abuse prevention and debugging. We do not use those logs to build a profile of you.

Why we collect it

  • To research and publish the product pages you asked us to publish.
  • To take payment, issue refunds and keep records for tax purposes.
  • To email you about your own submission, and to answer what you ask us.
  • To understand which pages are useful and fix the ones that are not.
  • To keep the site up and defend it against abuse.

That is the whole list. We do not use your information for advertising, we do not build profiles, and we do not run automated decision making about you.

Who else handles it

We do not sell, rent or trade personal information. We never have. We use a small number of service providers who process it on our behalf, under contract, only for the purposes above:

  • Supabase for our database, hosted in the Canada Central region.
  • Stripe for payment processing.
  • Tally for the contact form.
  • Plausible Analytics for cookieless traffic measurement.
  • Cloudflare for image storage and delivery.
  • Our web hosting and content delivery providers.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

Information stored outside Canada

Our product database sits in Canada. Some of our service providers, including Stripe, operate or store data outside Canada, mainly in the United States and the European Union. While information is in another country it is subject to that country’s laws, and can in principle be accessed by its courts, law enforcement and national security authorities. We use providers that commit to contractual and technical protections comparable to what Canadian law requires. If you want to know where a specific piece of your information is held, ask us.

How long we keep it

  • Submission and payment records: seven years, because Canadian tax rules require it.
  • Contact form messages: up to two years, so we can follow up on corrections.
  • Server logs: short lived, typically weeks rather than months, depending on the provider.
  • Analytics: aggregate only, with nothing that identifies an individual to retain.

Published product information is not personal information and stays up as part of the catalogue.

Your rights

You can ask us to:

  • Tell you what personal information we hold about you and how we use it.
  • Correct anything inaccurate or incomplete.
  • Delete it, where we are not required to keep it for tax or legal reasons.
  • Send you a copy in a structured, commonly used technology format, or transfer it to another organisation where that right applies to you.
  • Stop using it, by withdrawing consent.

Email support@fyicanada.ca and we will respond within 30 days. There is no charge. We may need to confirm your identity first, and we will only ask for what we need to do that.

If you are not happy with how we handled a privacy request, you can complain to the Office of the Privacy Commissioner of Canada. Residents of Quebec, British Columbia, Alberta and Ontario may also have recourse to their provincial regulator.

Quebec residents

Quebec’s Law 25 gives you additional rights, including the right to be informed when your information is used to make an automated decision, the right to data portability, and the right to ask that information be de-indexed or deleted in defined circumstances. We do not make automated decisions about individuals. Our Privacy Officer, named above, is the person accountable for Law 25 compliance. Address Law 25 requests the same way as any other privacy request.

Security

The site runs over HTTPS. Access to the database and to submission records is restricted to people who need it. Payment card data never reaches our servers. No system is perfectly secure, and we will not pretend otherwise. If a breach creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner as the law requires.

Children

The site is not directed at children and we do not knowingly collect personal information from anyone under 13. If you believe a child has sent us information, tell us and we will delete it.

Changes to this policy

If we start collecting something new, or add a service provider that changes the picture, we will update this page and change the date at the top. Material changes get a notice on the site rather than a quiet edit.

Contact

Privacy questions, access requests, deletion requests and complaints go to support@fyicanada.ca or through our contact form.