Does PIPEDA apply to my website?

If you are a private-sector organisation collecting personal information in the course of commercial activity in Canada, generally yes, unless a substantially similar provincial law applies instead. It can also apply to foreign organisations with a real and substantial connection to Canada.

Is it really free? Do I need an account?

Yes, and no. Every generator is free with no sign-up, watermark or paywall. Your answers stay in your browser; they are never sent to our server unless you use the optional AI clause writer or policy checker.

Is a generated policy legal advice?

No. PolicyForge produces a starting template from your answers. It cannot know every detail of your business or every law that applies to you. Read the whole document, replace every [bracketed] placeholder, make sure it describes what you actually do, and have a lawyer review it if you handle sensitive data, sell to children, or operate at scale.

PIPEDA Privacy Policy Generator for Canadian Businesses

[Bracketed] fields are placeholders · Template, not legal advice

Who we are

This Privacy Policy explains how [Business name] ("we", "us", "our") collects, uses and shares personal information when you use [Website or app name] (the "website"), available at [website URL].

If you have any questions about this policy or your information, contact us:

Email: [contact email]
Postal address: [Business address]

Information we collect

Depending on how you use the website, we collect the following categories of personal information:

Contact details: name, email address, phone number.
Usage data: pages or screens viewed, features used, clicks, referring page, time and date of visits.
Device & log data: IP address, browser type, operating system, device identifiers, crash logs.
Cookies & similar tech: cookies, local storage, pixels and SDK identifiers.

We collect this information directly from you (when you fill in a form, create an account, buy something or contact us), automatically from your device when you use the website, and from the service providers listed below.

How we use your information

To provide, operate and maintain the website.
To create and manage your account.
To answer your questions and provide customer support.
To understand how the website is used and improve it.
To keep the website secure and to comply with our legal obligations.

How we share information

We do not share your personal information except as described here. We share it with service providers who process it on our behalf and only as needed to provide their services:

Google Analytics, for website and app analytics (privacy policy: https://policies.google.com/privacy).

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy.

Cookies and tracking technologies

We and our partners use cookies and similar technologies on the website. Some third parties, such as analytics and advertising providers, may collect information about your online activities over time and across different websites when you use the website. See our Cookie Policy for details and for how to change your choices.

Canadian privacy rights (PIPEDA)

We collect, use and disclose personal information only for the purposes described in this policy, with your consent or as permitted by law. The person accountable for our compliance with Canadian privacy law is [name or title of privacy officer], reachable at [contact email].

You may ask for access to the personal information we hold about you, ask how it has been used and to whom it has been disclosed, and ask us to correct it. You can withdraw consent at any time, subject to legal or contractual restrictions. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

Your choices

You can ask us to access, update or delete the personal information we hold about you by contacting [contact email]. You can also review and change your account information at any time in your account settings.

How long we keep information

We keep personal information as long as your account is active, and afterwards only as long as we need it for the purposes above or to meet legal, tax or accounting obligations.

How we protect information

We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit (HTTPS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The website is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Effective date" below, and if the changes are significant we will notify you by email or by a notice on the website before they take effect.

Effective date

This Privacy Policy is effective as of [Effective date].

PIPEDA's ten principles in a policy

PIPEDA is built on ten fair information principles in Schedule 1: accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance. Principle 8 (openness) requires organisations to make detailed information about their personal information policies and practices publicly and readily available, in a form that is generally understandable.

The Office of the Privacy Commissioner of Canada says a policy should let people know who is accountable and how to contact them, how to access their information, what information is held and how it is used, what is disclosed to related organisations, and how to complain. It also warns that people shouldn't have to decipher complex legal language to give informed consent.

Provincial laws

Alberta, British Columbia and Québec have private-sector privacy laws that the federal government recognises as substantially similar, and they apply instead of PIPEDA to activity within those provinces. Québec's Law 25 has additional requirements, including publishing the privacy officer's title and contact details and a policy written in clear, simple terms.

PIPEDA Privacy Policy Generator