Privacy

Who we are and what this notice covers

Examstead is a brand of Investatech Inc. This notice explains how we handle information when you visit examstead.ca or contact us about Examstead.

This website introduces our exam-preparation service, which is in development. It does not offer learner accounts, practice sessions, purchases or saved learning histories. We will update this notice before introducing those services or new uses of personal information.

Website visits and cookies

Our hosting provider, Vercel, receives technical information when your browser requests a page or file. Operational and security records can include your IP address, an approximate location derived from it, the date and time, the requested address, response information and browser or device information. These records support website delivery, security and troubleshooting.

We have not added advertising trackers, audience analytics or embedded social-media tools. The contact form uses Google reCAPTCHA v3 for abuse prevention. Its script loads when you submit the form, after you agree to the contact notice. Google receives technical and interaction information, including network, browser and device information, and may use cookies such as _GRECAPTCHA to assess whether a request is legitimate. See Google’s Privacy Policy and Terms of Service. You can browse the other pages without loading this contact-form security check.

Information you send us

The contact form collects your name, email address, selected enquiry topic, message and agreement to using these details to respond. Our server also receives a security-check token and uses temporary technical identifiers to limit abuse and duplicate submissions. We use your enquiry to respond, investigate a reported issue and keep relevant correspondence. The form does not accept file attachments. Please send only what is needed, and do not include passwords, payment-card details or confidential client or project records.

Submitting the contact form does not subscribe you to marketing. We do not sell personal information received through this website or its contact mailbox.

Service providers and location

Vercel hosts and delivers this website through its global network; the contact function is configured for Montreal. AWS Simple Email Service in Canada Central sends your enquiry to our Examstead mailbox, which is provided by SiteGround. Temporary spam and duplicate-submission records are stored in AWS DynamoDB in Canada Central. Google provides reCAPTCHA. SiteGround also provides domain-name services. Website delivery, email handling, provider support and security operations may involve processing in Canada, the United States and other countries. Information processed in another country can be subject to that country’s laws.

We use service providers to operate the website and handle correspondence. We may also disclose information where required by law. If you follow an external link, the destination website receives your request and its own privacy policy applies.

The planned learning platform will use Canadian AWS and Supabase resources. That platform is not available through this coming-soon website. We will explain its actual data flows before opening learner accounts. We do not promise that every service or processing step will take place in Canada.

How long we keep information

We keep enquiry correspondence for as long as reasonably needed to address the enquiry, maintain relevant business records and meet applicable legal obligations. When information is no longer needed, we delete it or remove identifying details, subject to provider backup and recovery processes.

The contact form’s spam records contain keyed hashes derived from the network address, submission fingerprints, counters, delivery status and provider message identifiers, rather than a copy of the enquiry text. These records expire from active use within approximately two days; AWS’s automatic physical deletion can take several additional days. Website and provider operational records are retained according to their service settings and operational, security and legal requirements. Different records and backups may have different retention periods. Contact us if you need information about a particular record. We use technical records for operation, security and troubleshooting, not to create learner profiles.

Protecting information

We limit access to information to those who need it for the purposes described here and use account access controls and provider security features. No method of storage or transmission offers absolute security. Ordinary email is not a suitable way to send sensitive documents; contact us first if your enquiry requires a more appropriate channel.

Your choices and privacy enquiries

You can read this website without giving us your name or email address. You may ask what personal information we hold about you, request access or correction, or ask us to delete information we no longer need to keep. Requests are subject to applicable legal requirements. We may need to verify your identity, and we will explain any request we cannot fulfil.

For privacy questions, requests or complaints, use our contact form and select “Privacy request” to reach the person responsible for Examstead privacy. If your concern remains unresolved, the Office of the Privacy Commissioner of Canada provides information about available complaint options.

Updates to this notice

We will revise this notice as the service develops and show the date of the latest update. Where a new use requires consent or a separate notice, we will address that before beginning the new use.