Privacy Notice
Draft for legal review: not yet in effect. Highlighted text marks details still to be completed.
This Privacy Notice explains how [legal company name] collects, uses and shares personal information when you use Biqbaq. We aim to handle it in line with Canadian privacy law.
1. Information we collect
Account: your name, email address and sign-in details, including basic profile details from Google if you sign in with Google.
Sellers and dealers: business details, contact information and, for verification, identity documents or supporting evidence.
Activity: listings, messages, reviews, favourites, blog posts, role applications and referrals. If you contact a seller without an account, we process your name, email address and message.
Orders: order details and payment references. Card details are handled by the payment provider. [Confirm once the provider is chosen.]
Technical: device and usage information such as IP address, pages viewed and listing view counts, and browser storage or cookies that remember choices like language and theme.
2. How we use it
We use personal information to run your account, show listings, connect buyers with sellers and dealers, review applications and verify sellers, send service messages, process payments, prevent fraud and abuse, keep records, improve the platform, and meet legal obligations.
We ask for your consent where the law requires it, including for promotional messages.
3. What others can see
Your public listings, seller name, city, verification status and reviews can be seen by anyone. Private seller email addresses are not shown on the site or in the public API, but if a seller replies to an enquiry by email, the person receiving it will see that address.
4. Who we share it with
We share information with the other party to a conversation or order, and with service providers who help run Biqbaq: hosting, database and sign-in (Supabase), images (Cloudinary), email (Resend), and payment, identity verification and SMS providers. [Confirm the final list, and whether personal information is ever sold; the intended answer is no.]
We may also share information to comply with the law or protect rights and safety. Some providers may store or process information outside Canada, where it can be subject to local laws. [Confirm locations.]
5. Verification documents
Identity documents and evidence are kept in restricted storage, are available only to authorised reviewers, and each access is logged.
6. How long we keep it
We keep personal information only as long as needed for the purposes above or as the law requires. [Retention periods to be added, including for verification documents and messages.]
7. Security
We use safeguards suited to the sensitivity of the information, including access controls. No system is completely secure, so please use a strong password and tell us about any suspected misuse.
8. Your choices and rights
You can ask to access or correct your personal information, withdraw consent subject to legal limits, and ask questions about how it is handled. You can also change notification preferences in your account once available.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.
9. Children
Biqbaq is not intended for anyone under [minimum age].
10. Changes
We may update this Notice, and will post the new version with its date.
11. Contact
Our privacy contact is [privacy officer name], at [privacy email], or [mailing address].