Privacy Policy

2.1 Information You Provide

• Account registration data (email, name, password)
• Profile information (learning level, goals, exam preferences)
• Payment information (processed securely through PayPal)
• Community posts, essays, and written submissions
• Communication with support (emails, support tickets)

2.2 Information Collected Automatically

• Usage analytics (pages visited, features used, time spent)
• Device information (IP address, browser type, device type)
• Cookies and tracking technologies
• Learning progress and performance data

10.1 PIPEDA (Federal)

WayToFrench complies with the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect personal information only for identified purposes, obtain consent before collection, and limit use to stated purposes. Your personal information is protected by reasonable security measures.

10.2 Provincial Privacy Laws

For users in Quebec, we comply with the Personal Information Protection Law (Bill 64 - PECA). For British Columbia, Alberta, and other provinces, we comply with applicable provincial privacy legislation. Each province may have specific privacy rights that WayToFrench respects.

10.3 CASL (Canada's Anti-Spam Legislation)

All commercial electronic messages from WayToFrench comply with CASL. We obtain express or implied consent before sending promotional emails. Every message includes clear identification, accurate contact information, and an easy unsubscribe mechanism.

10.4 AODA Compliance

We strive to comply with the Accessibility for Ontarians with Disabilities Act (AODA). If you experience accessibility issues, please contact us and we will work to resolve them promptly.

10.5 Canadian User Rights

You have the right to:

• Know what personal information we hold about you
• Request access to your personal information
• Correct inaccurate or incomplete information
• Request deletion of your information (subject to legal obligations)
• Withdraw consent for data collection and processing
• File a complaint with the Office of the Privacy Commissioner of Canada

11.1 DPDP Act (Digital Personal Data Protection Act, 2023)

WayToFrench complies with India's Digital Personal Data Protection Act. We process personal data only when you have explicitly provided consent. You can withdraw consent at any time. We maintain records of your consent and data processing activities.

11.2 IT Act 2000

We comply with India's Information Technology Act, 2000. We implement reasonable security practices to protect your data from unauthorized access, use, disclosure, modification, or destruction. We comply with Section 43A for data breach notification.

11.3 Data Localization

Personal data of Indian users may be processed and stored on servers located outside India. We ensure compliance with DPDP Act requirements for cross-border data transfers and maintain equivalent security standards for international transfers.

11.4 RBI Payment Guidelines

All payment information from Indian users is processed through PCI-DSS compliant payment gateways in accordance with RBI guidelines. We do not store complete credit card information. Payment data is encrypted during transmission.

11.5 Indian User Rights

Under DPDP Act and other Indian laws, you have the right to:

• Provide, modify, or withdraw consent for data processing
• Request access to personal data we hold
• Correct, complete, or update your personal data
• Request erasure of personal data (where permitted)
• Obtain your data in a portable, machine-readable format
• Know which third parties your data is shared with
• File complaints with the Data Protection Board of India
• Lodge complaints with consumer protection authorities
• Request information about our data processing practices

12.1 Canadian Notification

In case of a data breach affecting personal information, WayToFrench will notify affected Canadian users without unreasonable delay. Notifications will include information about the breach, data affected, and steps we are taking to address it.

12.2 Indian Notification

In compliance with IT Act 2000 Section 43A, we will notify affected Indian users of any data breach "without unreasonable delay" but not later than 72 hours of discovery. Notifications will describe the nature of the breach, personal data affected, and remedial steps taken.

13.1 Grievance Officer

WayToFrench has appointed a Data Protection Officer and Grievance Redressal Officer. All privacy complaints and data-related concerns should be directed to: [email protected]

13.2 Resolution Timeline

We commit to acknowledging all privacy complaints within 48 hours. For Canadian complaints, we follow PIPEDA timeframes (30 days). For Indian complaints, we comply with DPDP Act and IT Act requirements (typically 30-45 days).

13.3 Escalation

If you are unsatisfied with our response, you may escalate your complaint to:

• Canada: Office of the Privacy Commissioner of Canada (www.priv.gc.ca)
• India: Data Protection Board of India (www.dpdboard.gov.in)

14.1 Data Collection Transparency

In the spirit of transparency and consumer empowerment, WayToFrench provides clear information about our data practices through a "Data Nutrition Label" approach. This section provides a concise, standardized view of how we collect, use, and manage your data.

14.2 Data Nutrition Label

14.3 Data Processing Standards

We collect only data necessary for service delivery. All data processing is conducted with your informed consent. You can withdraw consent or request data deletion at any time by contacting [email protected]. We do not sell or rent your personal data to third parties.

14.4 AI Processing of Your Data

Your data may be processed by AI systems to provide personalized learning recommendations, automated feedback, and service improvements. You have the right to request that your data not be used for AI training or processing purposes beyond delivering the Service you have subscribed to. Contact us to exercise this right.

14.5 Data Requests & Transparency Reports

WayToFrench responds to legally valid government requests for user data in accordance with applicable laws. We will notify users of such requests unless legally prohibited. We are committed to transparency in our data practices and may publish transparency reports regarding government data requests.