Privacy Policy
This Privacy Policy has been prepared in accordance with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and describes how canadianfollowers.ca collects, uses and protects personal data.
1. Data Controller
Legal Name: HeyTech Digital B.V.
Business Name: canadianfollowers.ca
Registered Address: Weverstede 655, 3431JX Nieuwegein, Netherlands
Chamber of Commerce Number: 98246437
Email: [email protected]
HeyTech Digital B.V., operating as canadianfollowers.ca, is the controller under Canadian privacy laws, including PIPEDA, for the processing of your personal data as described in this Privacy Policy.
2. What Data We Collect
We collect the following categories of personal data:
2.1 Data You Provide Directly
- Account Data: Your social media username (no passwords)
- Payment Data: Transaction information via our payment provider (we do not store full credit card details)
- Communications Data: Messages you send via our Live Chat or by email
2.2 Automatically Collected Data
- Technical Data: IP address, browser type, device information
- Usage Data: Pages visited, time spent on the website
- Cookies: See our Cookie Policy for further information
🔒 What We Do NOT Collect
- Social media account passwords
- Full credit card data (this is processed by our payment provider)
- Special categories of personal data (e.g. health data, religious beliefs)
3. Purposes of Processing
We process your personal data for the following purposes:
| Purpose | Data | Legal Basis |
| Contract Performance | Username, payment data | Performance of a contract (PIPEDA) |
| Payment Processing | Transaction data | Performance of a contract (PIPEDA) |
| Customer Service | Communications data, account data | Performance of a contract / legitimate business purposes (PIPEDA) |
| Legal Obligations | Transaction data, invoice data | Compliance with legal obligations (PIPEDA) |
| Website Analytics (with Consent) | Usage data | Consent (PIPEDA) |
| Fraud Prevention | IP address, transaction data | Legitimate business purposes (PIPEDA) |
4. Legal Basis for Processing
We process your personal data on the basis of the following legal grounds under Canadian privacy law (PIPEDA):
- Consent: For analytical cookies and marketing purposes. You can withdraw your consent at any time.
- Contract Performance: To enable us to provide the services you have ordered.
- Legal Obligation: For tax and accounting purposes (legal retention requirement of 7 years under Dutch tax law).
- Legitimate Interests: For fraud prevention, security and improvement of our services.
5. Retention Periods
We do not store your personal data for longer than necessary:
| Data Category | Retention Period |
| Transaction and Invoice Data | 7 Years (Dutch tax law – legal retention requirement) |
| Customer Service Communications | 2 years after last contact |
| Account Data (Username) | 1 year after last transaction |
| Analytics Data | 26 months |
| Log Files | 90 days |
6. Data Sharing
We only share your personal data with third parties when necessary:
- Payment Service Providers: To process payments (credit card, PayPal, Klarna, SEPA etc.)
- Hosting Providers: To operate our website and services
- Customer Service Software: Crisp for live chat support
- Analytics Services: Google Analytics (only with your consent)
- Authorities: When legally required to do so
We never sell your personal data to third parties.
7. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards have been implemented:
- Adequacy decision by the European Commission
- Standard contractual clauses (SCC) approved by the European Commission
- Binding Corporate Rules (BCR)
You can request a copy of the safeguards we have put in place by contacting us at the details below.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against:
- Unauthorised access
- Loss or destruction
- Unauthorised alteration
- Unauthorised disclosure
Our security measures include:
- SSL/TLS encryption for all data transfers
- Access control and authentication
- Regular security audits
- Encryption of sensitive data
9. Your Rights
Under Canadian privacy law (PIPEDA), you have the following rights:
📋 Right of Access
You have the right to know what personal data we process about you.
✏️ Right to Rectification
You have the right to have inaccurate data corrected.
🗑️ Right to Erasure
You have the right to have your data deleted (the "right to be forgotten").
⏸️ Right to Restrict Processing
You have the right to restrict the processing of your data.
📦 Right to Data Portability
You have the right to receive your data in a structured format.
🚫 Right to Object
You have the right to object to the processing of your data.
To exercise your rights, you can contact us using the contact details below. We will respond to your request within 30 days.
Complaint to the Supervisory Authority: You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca. As HeyTech Digital B.V. is established in the Netherlands, you may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl
10. Contact
If you have any questions about this Privacy Policy or wish to exercise your rights, you can contact us:
canadianfollowers.ca
Legal Name: HeyTech Digital B.V.
Registered Address: Weverstede 655, 3431JX Nieuwegein, Netherlands
Email: [email protected]
Live Chat: Via the Crisp widget on our website (24/7)