Backcountry Wildlife Monitoring Ltd. (“BCWM,” “we,” “us”) operates the Bear Spray Trainingtraining platform. This Privacy Policy explains what personal information we collect, why we collect it, and your rights regarding it. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
1. Information we collect
To register you, deliver training, and issue certificates, we collect:
- Identity & contact: your name, email address, mailing address, city, province, postal code, and phone number.
- Employment context: your job position and the company or organization you are associated with (for corporate-billed enrollments).
- Training records: course enrollments, progress, examination attempts and scores, and certificates issued.
- Payment information: processed by our payment processor; we receive confirmation and limited transaction details but not your full card number.
- Technical data: basic log, device, and error-diagnostic data generated when you use the Platform.
2. Why we collect it
- To create and administer your account and authenticate your sign-in.
- To deliver courses, score assessments, and issue and verify certificates (your name and the course appear on the certificate, and a certificate can be confirmed via its public verification link).
- To process payments and, for corporate accounts, to bill the associated company.
- To send service communications (sign-in links, purchase confirmations, certificate and invoice notices).
- To maintain security, prevent abuse, and meet legal and record-keeping obligations.
3. Service providers
We share personal information with trusted service providers only as needed to run the Platform. These currently include:
- Stripe — payment processing and corporate invoicing.
- Resend — transactional email delivery.
- Supabase — authentication and database hosting.
- Vercel — application hosting.
- Sentry — error monitoring and diagnostics.
- Cloudflare — bot protection on sign-in (we use Cloudflare Turnstile to distinguish humans from automated abuse).
These providers process data on our behalf and may store it outside your province or outside Canada; where that occurs, the information may be subject to the laws of the jurisdiction in which it is held, including lawful-access requests by authorities there.
4. Disclosure to your employer
If your training is purchased or sponsored by a company (a corporate account), we may share your enrollment status, completion, and certificate details with that company’s administrators for the purpose of verifying training compliance.
5. Cookies and similar technologies
We use a small number of strictly necessary cookies and similar browser storage to keep you signed in, secure your session, and operate the bot-protection check at sign-in. These are required for the Platform to function; we do not use advertising or third-party tracking cookies.
6. Retention
We retain training and certification records for as long as needed to provide certificate verification and to meet legal and safety record-keeping requirements. You may request deletion of your personal information, subject to records we are required to retain.
7. Your rights
- You may access, correct, or request deletion of your personal information.
- You may withdraw consent to non-essential communications at any time.
- You may ask how your information is handled and lodge a complaint with the Office of the Privacy Commissioner of Canada.
8. Security
We use reasonable administrative, technical, and physical safeguards to protect personal information. No system is perfectly secure; we cannot guarantee absolute security but work to protect your information appropriately.
9. If there is a privacy breach
If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and report to the Office of the Privacy Commissioner of Canada as required by PIPEDA, and keep records of breaches as the law requires.
10. Children’s privacy
The Platform is intended for adult workers and training participants. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. The current version and its “Last updated” date are always posted on this page; material changes will be reflected by an updated date.
12. Contact
To exercise your rights, reach our privacy contact, or ask about this Policy, contact Backcountry Wildlife Monitoring Ltd. by email at [BCWM privacy contact email — to be set] or by mail at PO Box 3159, Kamloops, BC V2C 6B8. See our Terms & Conditions for the terms governing use of the Platform.