Privacy Policy

Effective Date: May 20, 2025
Last Reviewed: July 10, 2025

1. Introduction

ReHousing (Canada) (“ReHousing”, “we”, “us”, or “our”) operates an educational website built on WordPress and Sensei LMS that provides courses and digital tools to help property owners and practitioners understand gentle density housing projects.

Protecting your privacy is fundamental to our mission. This Privacy Policy explains what personal information we collect, how and why we use it, where and for how long we store it, with whom we share it, and the choices and rights available to you.

This Policy is intended to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Where local law requires stricter protections, we comply with that law.

2. Scope

This Policy applies to all ReHousing websites and online services that link to or reference it (collectively, the “Services”), including our WordPress site and Sensei LMS courses. It does not apply to third‑party websites or services that we link to or that are integrated into our Services but operate independently.

3. Definitions

Term	Meaning
Personal Information (PI)	Any information about an identifiable individual.
Processing	Any operation performed on PI (collection, use, storage, disclosure, deletion, etc.).
Essential Cookie	A first party cookie required for basic functionality, security, or network management.
Authorized Personnel	Employees, contractors, or service providers who need access to PI to perform duties and who are bound by confidentiality obligations.

4. Information We Collect

Information You Provide Directly
- Account information: name, email address, username, and password (stored in hashed form).
- Course‑related information: enrolment status, course progress, quiz responses and results, completion dates, and certificates generated through Sensei LMS.
- Information submitted through webforms, including inquiries, project goals, or feedback.
- Communications with us, such as support requests or survey responses.
Information Collected Automatically
- Essential cookies and server logs that may collect IP address, browser type, operating system, referring URL, pages visited, and timestamps.
- Authentication and session data required to keep you logged in and to secure your account.
- We do not knowingly use advertising cookies or trackers. Limited technical or security logging may occur as part of standard WordPress hosting and security practices.
Information from Third Parties
- Payment processors (for paid courses, if applicable) may provide limited transaction metadata such as transaction ID, payment status, and the last four digits of a card number. We do not receive or store full credit‑card details.

Revoking Access:
If you revoke access, you may request deletion of your account data by contacting us at:
privacy@rehousing.ca

5. Purposes & Legal Bases for Processing

Purpose	Consent Type / Statutory Exception (PIPEDA)
Provide, operate, and secure the Services	Implied consent – purpose is obvious and a reasonable person would expect it (PIPEDA Principle 3, s. 4.3.6)
Create and manage user accounts and course access	Implied consent
Deliver educational content, track course progress, and issue certificates	Implied consent
Respond to inquiries and provide support	Implied consent
Send administrative, transactional, or legal notices	Statutory exception
Process payments	Express consent and statutory record‑keeping obligations
Comply with legal or regulatory requirements	Statutory exception

We do not sell personal information or use it for interest‑based advertising.

6. How We Share Information

We share PI only in the following circumstances:

Service Providers: Hosting providers, email services, learning‑management plugins, and payment processors that process PI on our behalf under contractual confidentiality and security obligations.
Legal and compliance: Where required by law, court order, or to protect the rights, property, or safety of ReHousing, our users, or the public.
Business transfers: In connection with a merger, acquisition, or asset sale, provided the successor continues to protect PI in a manner consistent with this Policy.

We do not share PI with advertisers, data brokers, or social‑media platforms.

7. Storage & Security

PI is encrypted in transit using industry‑standard TLS and stored on secure servers used for WordPress hosting.
Access is restricted to Authorized Personnel using role‑based permissions and least‑privilege principles.
We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information.
We maintain incident‑response and breach‑notification procedures consistent with PIPEDA requirements.

8. Data Retention

Data Category	Typical Retention Period
User accounts and course records	Until account deletion, plus up to 12 months for administrative or reactivation purposes
Course progress, quiz results, certificates	Retained while the account is active
Support communications	Up to 24 months
Payment transaction metadata	Up to 7 years (tax and audit obligations)
Server and security logs	Up to 12 months

We delete or anonymize PI when it is no longer required, unless a longer retention period is required by law.

9. Cookies

We use only first‑party essential cookies to:

maintain login sessions and authenticate users;
enable core WordPress and Sensei LMS functionality;
protect against security threats such as cross‑site request forgery.

You can disable cookies in your browser settings, but some features of the Services may not function properly.

10. Your Rights

Under PIPEDA, you have the right to:

request access to the PI we hold about you;
request correction of inaccurate or incomplete PI;
withdraw consent to further use or disclosure of PI, subject to legal or contractual restrictions;
raise concerns about our compliance with PIPEDA.

Requests may be sent to privacy@rehousing.ca. We aim to respond within 30 days, subject to lawful extensions.

11. Children’s Privacy

The Services are intended for individuals aged 18 and over. We do not knowingly collect PI from children. If you believe a child has provided PI, please contact us so we can delete the information.

12. International Transfers

PI is primarily stored in Canada. Some service providers (such as email or payment processors) may process PI outside Canada. In such cases, we use contractual and technical safeguards to provide a level of protection comparable to Canadian standards.

13. Third-Party Links

Our Services may link to external resources such as municipal bylaws or educational materials. We are not responsible for the privacy practices of those third‑party sites.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the website or by email at least 30 days before they take effect. The effective date will be updated accordingly.

15. Contact Us

Privacy Officer — ReHousing (Canada)
Email: privacy@rehousing.ca

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1‑800‑282‑1376.