Canadian Privacy Rights

This page supplements our Privacy Policy for individuals in Canada. When a graduation company, studio, school, or employer uses Partiu to manage your information, that organization is responsible for it and we process it on its behalf, under a contract that requires the same protection described here. We will help that organization answer any request you make.

The ten fair information principles

PIPEDA is built on ten principles (Schedule 1). Here is what each one means at Partiu:

Consent

We rely on your consent, and we tell you clearly what we collect, why, and who receives it, in terms you can reasonably understand. The form of consent depends on how sensitive the information is:

• Express consent for sensitive information: biometric data for facial recognition, precise location in workforce apps, and marketing messages.
• Implied consent for information that is clearly needed to give you the service you asked for, such as your email to send a receipt.
• You can withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. We will tell you what withdrawing means for the service.
• We never make consent to collect more than what is necessary a condition of providing the service.

Quebec: Law 25

If you live in Quebec, the Act respecting the protection of personal information in the private sector, as amended by Law 25, gives you additional protections, and we apply them:

• Person in charge of the protection of personal information: our Privacy Officer (Data Protection Officer), reachable at privacidade@partiuformatura.app. Their title and contact details are published on this site.
• Confidentiality by default: the settings of our products give the highest level of confidentiality by default, without any action on your part.
• Identification, location, and profiling technologies are off by default. Facial recognition and precise location are activated only if you choose to turn them on, after we tell you how they work.
• Automated decisions: we do not make decisions about you based exclusively on automated processing. If that changes, we will tell you, explain the reasons and main factors, and let you ask a person to review it.
• Access and rectification, and portability of computerized personal information you provided, in a structured, commonly used technological format.
• De-indexation: you can ask us to stop disseminating your personal information or to de-index a hyperlink attached to your name, where the law allows.
• Minors under 14: we collect their personal information only with the consent of a parent or tutor, unless collecting it is clearly for the minor's benefit.
• Communication outside Quebec: before personal information leaves Quebec, we carry out a privacy impact assessment and use a written agreement that ensures adequate protection.
• Biometric databases: any database of biometric characteristics used for identity verification is disclosed to the Commission d'accès à l'information before it goes into service, as the Act to establish a legal framework for information technology requires.

Where your information is stored

Partiu is based in Brazil. Your personal information may be stored and processed in Brazil, the United States, and other countries where we or our service providers operate. We protect it with contracts that require a comparable level of protection, and with encryption and access controls. While it is outside Canada, it is subject to the laws of those countries and may be accessible to their courts, law enforcement, and national security authorities. For details, see Security, Retention, and Breaches.

Accessing and correcting your information

• Send a request through the request form or to privacidade@partiuformatura.app.
• We respond within 30 days. We may extend that by up to 30 more days, or longer if we need to convert the information into an alternative format, and we will tell you in writing.
• Access is free or at minimal cost. We will tell you about any cost in advance and you can withdraw the request.
• If we refuse all or part of a request, we will explain why in writing and tell you how to complain.
• If you show that information is inaccurate or incomplete, we will correct it and, where appropriate, let third parties that received it know.

Commercial electronic messages (CASL)

We send promotional email, SMS, or messaging-app messages only with your consent, as Canada's Anti-Spam Legislation requires. Every message identifies us and includes a working unsubscribe option, and we process unsubscribe requests within 10 business days. Transactional messages about your account, payments, and events are not marketing and continue while you use the service.

Breaches of security safeguards

If a breach creates a real risk of significant harm to you, we report it to the Office of the Privacy Commissioner of Canada and notify you as soon as feasible, with what happened, what information was involved, what we are doing, and what you can do. In Quebec, confidentiality incidents that present a risk of serious injury are reported to the Commission d'accès à l'information. We keep a record of every breach for at least 24 months.

How to challenge our compliance

Start by writing to our Privacy Officer (Data Protection Officer) at privacidade@partiuformatura.app. We will investigate every complaint and, if it is justified, take the measures needed to fix it. You can also complain to a regulator at any time: