Personal data protection

DRAFT FOR MANUAL LEGAL REVIEW — NOT LEGAL ADVICE. Last drafted October 2026.

Use the minimum personal information needed for an account, listing, moderation decision or support request. Public fields are chosen by providers; credentials, moderation evidence and private enquiries must remain private. Access follows role and need-to-know controls.

Access, correction or deletion requests require identity verification and may be limited by retention, fraud-prevention, legal or safety obligations. The final program must document retention, incidents, processors and applicable PIPEDA or provincial complaint channels.