Privacy Policy

1. Introduction

EnergyDirectory.ca (“EnergyDirectory”, “we”, “us”, or “our”) is committed to protecting personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Alberta privacy legislation.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you access or use our platform (the “Platform”).

By using the Platform, you consent to the collection, use, and disclosure of your information as described in this Policy.

2. Scope and Nature of Information

EnergyDirectory.ca is a business-to-business (B2B) directory platform. Much of the information we collect relates to individuals acting in a business or professional capacity (e.g., company representatives, vendor contacts).

Information submitted for listings may become publicly available (see Section 6).

3. Information We Collect

A. Information You Provide

We may collect information you voluntarily provide, including:

• Business name, contact name, address, phone number, and email
• Listing content (descriptions, service categories, logos, images)
• Billing and account information (processed securely via Stripe — we do not store full payment card details)
• Communications submitted through the Platform (including inquiries and support requests)

B. Information Collected Automatically

We may collect certain technical and usage information, including:

• IP address, browser type, and device information
• Pages visited, time spent, and referring URLs
• Interaction data through analytics tools
• Cookies and similar tracking technologies (see Section 9)

4. How We Use Your Information

We use personal information for the following purposes:

• To create, manage, and display vendor listings
• To process payments, subscriptions, and billing
• To deliver inquiries and lead communications to vendors
• To operate, maintain, and improve the Platform
• To respond to inquiries, support requests, and communications
• To comply with legal, regulatory, and tax obligations
• To protect the security and integrity of the Platform

We will not use your information for purposes other than those described above without your consent, unless required or permitted by law.

5. Consent

By using the Platform and submitting information, you consent to the collection, use, and disclosure of your information as outlined in this Policy.

Consent may be express or implied, depending on the nature of the information and the context in which it is provided.

You may withdraw your consent at any time (subject to legal or contractual restrictions), as described in Section 10.

6. Public Listing Information

Information submitted for directory listings—including company name, description, website, phone number, email, location, and service categories—may be publicly displayed on the Platform.

You should not include personal information in listing content that you do not wish to make publicly available.

7. Contact and Inquiry Data (Lead Sharing)

The Platform may allow users to submit inquiries or contact vendors.

By using these features, you acknowledge and agree that:

• Inquiry information (including your contact details and message content) will be shared directly with the selected vendor(s);
• EnergyDirectory.ca acts solely as a conduit for transmitting communications;
• Vendors are independent parties and are solely responsible for how they collect, use, store, and respond to your information;
• We do not control or assume responsibility for vendor data practices, communications, or actions following transmission.

8. Disclosure of Information

We do not sell or rent personal information.

We may disclose information to:

• Stripe — for payment processing
• Supabase — for secure database infrastructure
• Vercel — for hosting and content delivery
• Service providers who support our operations (subject to confidentiality obligations)
• Law enforcement, regulators, or authorities where required or permitted by law

All service providers are required to use personal information only for the purposes for which it is disclosed and to protect it appropriately.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Platform.

Types of Cookies We Use

• Essential Cookies — required for core functionality (e.g., login sessions)
• Analytics Cookies — used to understand usage patterns and improve performance

You can manage or disable cookies through your browser settings. Disabling cookies may affect certain features of the Platform.

10. Communications and CASL Compliance

By using the Platform, you consent to receive transactional communications, including:

• Account notifications
• Billing and subscription updates
• Inquiry and lead notifications
• Service-related announcements

Where applicable, we may send marketing communications, which you can opt out of at any time using the unsubscribe mechanism provided.

11. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, including:

• As long as your account is active
• As required for legal, tax, or regulatory purposes (e.g., billing records retained for up to 7 years per CRA requirements)

If you request deletion of your account, we will remove personal information within a reasonable timeframe (generally within 30 days), subject to:

• Legal retention requirements
• Residual copies in secure backups, which are retained for a limited period and then securely deleted

12. Cross-Border Data Transfers

Your information may be stored or processed outside of Canada, including in the United States or other jurisdictions where our service providers operate.

In such cases, your information may be subject to the laws of those jurisdictions and accessible to government authorities in accordance with applicable laws.

13. Security

We implement reasonable technical and organizational safeguards appropriate to the sensitivity of the information, including:

• Encrypted data transmission (HTTPS)
• Role-based access controls
• Secure cloud infrastructure

While we take reasonable steps to protect information, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

14. Breach Notification

In the event of a security breach involving personal information that poses a real risk of significant harm, we will:

• Take steps to contain and investigate the breach;
• Notify affected individuals and applicable regulators as required by law.

15. Your Rights (PIPEDA)

Under PIPEDA, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Withdrawal of Consent — withdraw consent to the use of your information (subject to legal or contractual obligations)
• Complaint — file a complaint with the Office of the Privacy Commissioner of Canada

To exercise your rights, please contact us using the details below.

16. Children's Privacy

The Platform is intended for business use and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.

17. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date. Continued use of the Platform constitutes acceptance of the updated Policy.

18. Contact Our Privacy Officer

For privacy-related questions, requests, or complaints, please contact:
Privacy Officer — EnergyDirectory.ca
Calgary, Alberta, Canada
Email: [email protected]

You may also contact the Office of the Privacy Commissioner of Canada: www.priv.gc.ca