Privacy policy

SetupCanada is a service of eSpeedz (“we”, “us”), at 105, 11500 29 Street SE, Calgary, AB T2Z 3W9. This policy applies to people who visit setupcanada.ca, contact us, or are connected to one of our customers, such as the person who signs up and the people we set up accounts for.

We’re based in Alberta and serve businesses across Canada, except Quebec for now. We follow Alberta’s Personal Information Protection Act (PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

Our privacy officer is responsible for this policy and answers questions about how we handle personal information, including our use of service providers outside Canada.

• Ashu Sethi, Privacy Officer
• Email: privacy@setupcanada.ca
• Phone: 825 438 6907
• Mail: Privacy Officer, SetupCanada, 105, 11500 29 Street SE, Calgary, AB T2Z 3W9

When you visit our website or contact us. What you type into our form: your name, email, the plan you’re interested in and how many people need email, plus the page you sent it from. If you call, text, message or book a call with us, we keep what you tell us. Our hosting provider records basic technical information, like IP address, browser type and the pages requested, to keep the site secure and running.

When your business becomes a customer. Contact details for the person who signs up and the contacts your business nominates; business details such as your legal name, domain name and business address; billing details and payment history; the names, job titles and email addresses of the people we set up accounts for; and records of what we’ve delivered and our conversations with you.

Inside your business systems. When we manage your email, files or website, we can technically access what’s in them. That information belongs to your business. We access it only to deliver the service, give support, keep things secure, or when the law requires it.

Security checks. For your security report and protection, we collect technical information about your domain, email and accounts, such as configuration settings, sign-in and security alerts, and the names and email addresses of your users.

We never ask for your Social Insurance Number.

• To answer your questions and send you information you asked for.
• To set up and deliver the services you buy, including support.
• To bill you and keep financial records.
• To keep our systems and yours secure, and to detect fraud or misuse.
• To give you member perks you ask for.
• To send you marketing emails, only if you’ve agreed (section 10).
• To meet legal requirements and protect our legal rights.

We only collect what we reasonably need for these purposes. We don’t sell personal information, and we don’t use automated systems to make decisions about you.

We ask for your consent when we collect personal information, unless the law lets us proceed without it. Sometimes consent is implied, for example when you give us your email so we can reply to you. You can withdraw consent at any time by contacting our privacy officer, subject to legal and contract limits. If that means we can’t keep providing a service, we’ll explain before you decide.

When a customer gives us information about other people, like their users or contacts, the customer confirms they’ve told those people and have the authority to share it.

Service providers. Other companies help us run our business and deliver our services. They act on our instructions and are bound to protect the information and use it only for the work we give them. The types we use are: website hosting, our website enquiry form, appointment booking, chat messaging, the business productivity suite we set up for you (email, calendar, meetings, chat, files and office apps), domain registration and protection, hosting for your website, security assessment tools, payment processing, and professional advisers such as lawyers, accountants and insurers.

You can ask our privacy officer for a list of the specific providers we use, what they do, and where they store information.

Related companies. Some providers are related to our founder. HuCortex Inc. provides one of the security assessment tools we use, so it receives your domain name and the technical results for it. If you ask for the AlphaIPro perk, we confirm to AlphaIPro that you’re a current customer, and nothing more. The eSpeedz eSIM store is run by the same company as us.

Legal reasons. We may disclose personal information when the law requires or permits it, for example to respond to a court order, a warrant or a lawful request from a government body, to prevent fraud, or to protect someone’s safety.

Business transfers. If our business is sold or merged, personal information may go to the buyer, who must use it only for the purposes in this policy. We don’t share personal information with anyone else without your consent.

We store and process personal information in Canada and outside Canada, mainly in the United States. Some of our providers run global networks, so information can pass through or be accessed from other countries where they operate.

Information outside Canada is subject to the laws of that country, and courts, law enforcement and national security authorities there may be able to access it. We use contracts and security measures to protect it, but we can’t override foreign law. Our privacy officer (section 2) can tell you about our policies for service providers outside Canada and answer questions about how they handle your information.

• Website enquiries from people who don’t become customers: 2 years after our last contact.
• Customer account and contract records: while you’re a customer, then 7 years.
• Billing and tax records: 6 years from the end of the tax year they relate to, as Canadian tax law requires.
• Data in your business systems: until 30 days after your service ends, then the provider deletes it on its own schedule.
• Security assessment data: while you’re a customer, then 1 year.
• Support conversations, calls, texts and chat: while you’re a customer, then 2 years.
• Marketing consent records: while we send you marketing, then 3 years.

After that, we securely delete it or make it anonymous. If we’re involved in a legal claim or investigation, we may keep relevant information until it’s resolved.

We use safeguards that match how sensitive the information is: access only for people who need it, multi-factor sign-in on our own accounts, and encryption in transit and, where our providers support it, at rest. No system is completely secure. If a breach creates a real risk of significant harm to you, we’ll notify you and the relevant privacy regulator as the law requires.

You can ask us whether we hold personal information about you and for a copy, how we’ve used it and who we’ve shared it with, and to correct it. Send your request to our privacy officer. We may need to confirm your identity first. We’ll respond within the time the law requires, generally 30 days under PIPEDA and 45 days under Alberta PIPA.

If you’re not happy with our answer, tell us so we can try to fix it. You can also complain to the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Service messages about your account, like onboarding steps, invoices and security alerts, aren’t marketing. While you’re a customer we need to send them to deliver the service.

Marketing messages, like news, tips or offers, we only send if you’ve agreed, or where Canada’s anti-spam law lets us rely on implied consent, such as for 2 years after you buy from us or 6 months after you ask us a question. Every one identifies us, includes our contact details and lets you unsubscribe. We process unsubscribe requests within 10 business days, usually much sooner.

Our website doesn’t use analytics or advertising cookies. If you use our booking page or chat, those services set their own cookies under their own policies. If we add analytics later, we’ll update this policy first and ask for your consent where the law requires it.

Our services are for businesses. We don’t knowingly collect personal information from anyone under 18.

We’ll update this policy when our practices change. If a change is significant, we’ll email customers before it takes effect. The date at the top shows the latest version. Questions about anything else: reachus@setupcanada.ca.