Privacy & Data Protection Policy
Last updated: August 2026 | Canadian & International Compliance Standards
RIGHT TO PRACTICE™ (RTP) ("we", "our", or "the Platform") is committed to maintaining strict data privacy, confidentiality, and security standards. This Policy outlines how we collect, store, process, and protect your information in accordance with Canadian privacy laws (including the Personal Information Protection and Electronic Documents Act - PIPEDA, and applicable provincial standards) as well as global regulatory requirements.
1. Compliance Framework & Canadian Privacy Standards
RTP™ operates in accordance with Canadian federal and provincial privacy legislation (PIPEDA). We ensure all professional verification data, contact details, and organization survey inputs are collected with consent, processed transparently, and protected against unauthorized access.
2. Information We Collect
We collect professional and organizational data provided during survey submissions and platform interactions, including name, organization, job title, industry, country, email address, regulated profession details, and operational requirements. We also collect anonymized usage analytics to evaluate website performance.
3. Data Usage & Purpose Limitation
Information collected is used strictly for operational verification modeling, managing pilot program participation, refining compliance workflows, and communicating platform updates. We never sell, lease, or monetize personal or organizational data to third parties.
4. Cloud Architecture & Enterprise Security
RTP™ is developed on enterprise-grade cloud architecture leveraging Microsoft cloud infrastructure (Microsoft for Startups Founders Hub). Data in transit is encrypted using TLS 1.3/HTTPS, and data at rest is secured using AES-256 encryption within Canadian and compliant international data centres.
5. Analytics, Cookies & Tracking Control
We utilize essential operating cookies and privacy-respecting analytics tools to evaluate platform performance. Visitors retain full control to adjust cookie settings or opt-out via browser preferences.
6. Data Retention & Access Rights
Under PIPEDA and applicable privacy standards, users retain the right to request access to their stored personal data, request corrections, or request complete deletion from our systems. Data retention periods are strictly aligned with pilot evaluation requirements.
7. Regulatory Disclaimers & Governance
RTP™ assists organizations in evaluating regulatory readiness and operational compliance. Participation in RTP™ pilot programs does not replace official licensing bodies or regulatory authorities responsible for granting professional authorization.
8. Contact Privacy Office
For questions regarding our Privacy & Data Protection Policy or to submit a formal PIPEDA data inquiry, please contact our privacy compliance team via our website.