Data Protection — GDPR & PIPEDA

Effective 21 February 2026 · Ozonagram Ltd

Our position: Ozonagram Ltd is a Canadian company. Canada is recognised by the European Union as providing an adequate level of data protection under PIPEDA. We also voluntarily align with GDPR principles, as our users and writers span both regions.

Canadian framework — PIPEDA

The Personal Information Protection and Electronic Documents Act (PIPEDA) is Canada's federal private-sector privacy law. Ozonagram Ltd complies fully. The key principles we uphold:

Accountability — we are responsible for personal information in our custody
Identifying purposes — we specify why we collect your data
Consent — we obtain your agreement before processing your data
Limiting collection — we collect only what is necessary
Limiting use, disclosure, and retention — your data is not used for other purposes
Accuracy — we keep your information accurate
Safeguards — we protect your data
Openness — our practices are documented and accessible
Individual access — you can access and correct your data
Challenging compliance — you can contest our practices

Voluntary GDPR alignment

Although the EU's General Data Protection Regulation does not directly apply to us (we are not established in the EU and do not deliberately target EU residents), we voluntarily align with its principles because:

Some of our writers and readers are based in the EU
We share the same privacy values
GDPR compliance is fully compatible with PIPEDA

What we do to align with GDPR principles

Double opt-in for all newsletter subscriptions
Right to erasure (account deletion on request)
Right of access (data export on request)
Data portability (CSV export for writers)
Data minimisation (we collect only what we need)
No tracking cookies — SimpleAnalytics is cookieless
Writers are independent data controllers for their subscribers
Data Processing Agreement available on request for writers

International data transfers

Your data is hosted on OVH servers in Canada. Our email delivery provider, Elastic Email, hosts data in the EU. Canada holds an adequacy decision from the European Commission under PIPEDA, meaning EU–Canada transfers are lawful without additional safeguards.

Data Processing Agreement (DPA)

Writers with subscribers in the EU may require a Data Processing Agreement between themselves (as data controller) and Ozonagram Ltd (as data processor). Contact us at [email protected] to obtain a DPA.

Exercising your rights

For any request relating to your personal data — access, correction, deletion, portability, or objection — write to [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Contact

Ozonagram Ltd
Suite M162, 110 Didsbury Avenue
Ottawa, Ontario K2T 0N6, Canada
[email protected]

Version française Privacy Policy Terms of Service