Privacy Policy

Information We Collect

Running an investment education platform means we need certain details from you. But we're not in the business of hoarding data for the sake of it.

Personal Information You Provide

When you sign up or use our services, you might share:

• Name and contact details (email, phone number, mailing address)
• Age range and investment experience level
• Financial goals and risk tolerance (to tailor educational content)
• Payment information for course enrollment
• Communication preferences

Information We Collect Automatically

Like most websites, we gather technical data when you visit:

• IP address and browser type
• Pages you visit and how long you stay
• Device information and operating system
• Referring websites and search terms
• Course progress and learning patterns

How We Use Your Information

Everything we collect serves a specific purpose. Here's what we do with it:

We analyze learning patterns to figure out which teaching methods work best. If everyone's struggling with a particular module, that tells us something needs adjusting. But this analysis happens at an aggregate level—we're looking at trends, not scrutinizing individual behavior.

Data Sharing and Third Parties

We're selective about who gets access to your information. We don't sell your data to marketers or random third parties. Period.

When We Share Information

• Service Providers: Payment processors, email platforms, and hosting services that help us run the business. These companies can only use your data for the specific services they provide to us.
• Legal Requirements: If Canadian law enforcement or regulators issue a valid request, we'll comply. We'll notify you when possible unless prohibited by law.
• Business Transfers: If Xrampek merges with another company or gets acquired, your information would transfer as part of that transaction. You'd be notified beforehand.
• With Your Consent: Any other sharing happens only if you've explicitly agreed to it.

Third-Party Services We Use

Our platform relies on several external services:

• Payment processing through PCI-compliant Canadian processors
• Email communications via secure mailing services
• Analytics tools to understand site usage
• Cloud hosting within Canadian data centers

Each of these providers has their own privacy policies. We vet them carefully, but you should review their terms if you're curious about their specific practices.

Your Rights Under Canadian Law

PIPEDA gives you several rights regarding your personal information. And we're not just paying lip service—these rights actually mean something here.

Access and Correction

You can request a copy of what personal information we hold about you. Takes us about 30 days to compile everything and send it over. If something's wrong or outdated, let us know and we'll fix it.

Withdrawal of Consent

Changed your mind about how we use your data? You can withdraw consent at any time. Keep in mind this might affect our ability to provide certain services—for example, we can't send you course updates if you've opted out of all communication.

Data Portability

Want to take your information elsewhere? We'll provide your data in a commonly used format. Usually a CSV or PDF, depending on what makes sense for the type of information.

Deletion Requests

You can ask us to delete your account and associated data. We'll honor this within 60 days, though we might need to keep some records for legal or accounting purposes. For instance, Canadian tax law requires us to retain certain transaction records for seven years.

Data Security Measures

Security isn't something we bolt on as an afterthought. Here's what we do to protect your information:

• Encryption: All data transmission happens over HTTPS. Sensitive information stored on our servers gets encrypted at rest using AES-256 standards.
• Access Controls: Only employees who need access to your information for their job can see it. We use role-based permissions and regular access reviews.
• Regular Audits: Our systems undergo security assessments every quarter. When vulnerabilities surface, they get patched immediately.
• Staff Training: Everyone on our team goes through privacy and security training. We refresh this annually and whenever regulations change.
• Incident Response: We have a documented plan for handling potential breaches. If something happens that affects your data, you'll hear from us within 72 hours.

No system is 100% breach-proof, though. We do our absolute best, but if you're concerned about sharing certain information online, reach out and we'll discuss alternatives.

Data Retention

We don't keep your information indefinitely. Different types of data have different retention schedules:

After these periods, we either delete the information or anonymize it so thoroughly that it can't be traced back to you. Anonymized data might stick around longer for research purposes—helping us understand long-term learning trends and such.

Cookies and Tracking Technologies

Like most sites, we use cookies. But let's be clear about what that means in practice.

Essential Cookies

These keep the site functional. They remember your login session, maintain your course progress, and ensure forms work properly. You can't opt out of these without breaking the site.

Analytics Cookies

These help us understand how people use the platform. Which pages get ignored? Where do people get stuck? This data shapes our improvements. You can disable these through your browser settings or our cookie preference tool.

Preference Cookies

These remember your choices—like whether you prefer video or text-based learning materials. Entirely optional, but they make your experience smoother.

We don't use advertising cookies. We're not tracking you across the internet or building behavioral profiles for ad targeting. That's not our business model.

International Data Transfers

Your information primarily stays in Canada. Our servers are located in Canadian data centers, and we work with Canadian service providers whenever possible.

Occasionally, data might touch servers outside Canada—for instance, if you access our site while traveling, or if a critical service provider has international infrastructure. When this happens, we ensure adequate protections are in place through contractual safeguards that meet PIPEDA standards.

If you're accessing our services from outside Canada, your information will be transferred to and processed in Canada under Canadian privacy laws.

Children's Privacy

Our services target adults interested in investment education. We don't knowingly collect information from anyone under 16. If you're a parent and believe your child has provided us with personal information, contact us immediately and we'll delete it.

Some of our educational content might be appropriate for younger people learning about finances, but we require parental consent for users under 18. Parents maintain control over the account and can request data deletion at any time.

Changes to This Policy

Privacy regulations change. Our business evolves. So this policy will get updated periodically.

When we make significant changes—like adding new data collection practices or changing how we share information—we'll notify you directly via email at least 30 days before the changes take effect. Minor updates (fixing typos, clarifying language) might not warrant individual notification, but we'll always update the "Last Updated" date at the top of this page.

You can always access the current version at xrampek.info/privacy-and-security.html. If you disagree with updated terms, you have the right to close your account before they take effect.

Filing Complaints

Got a privacy concern? We want to hear about it first so we can make things right. But you're not limited to dealing with us.

Under PIPEDA, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe we've mishandled your information. You can reach them at:

• Phone: 1-800-282-1376
• Website: priv.gc.ca
• Mail: 30 Victoria Street, Gatineau, Quebec K1A 1H3

We'd prefer to resolve issues directly, but that's your right and we respect it.