Important: Before publishing this Policy, confirm that Tap4Feedback has been properly registered as a business name of GLOBAL HEALTHCARE LEARNING SOLUTIONS INC. Ontario generally requires a corporation publicly carrying on business under another name to register that name. (Government of Ontario)
2. Scope
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you:
visit our website;
place an online or in-person order;
purchase or inquire about a Tap4Feedback product;
submit information required to program or configure a product;
contact customer support;
subscribe to marketing communications;
interact with our advertising or website technologies where enabled; or
otherwise deal with Tap4Feedback.
PIPEDA applies to private-sector organizations that collect, use or disclose personal information in commercial activities. (Office of the Privacy Commissioner)
3. Information We May Collect
A. Contact and business information
We may collect:your name;
business or organization name;
email address;
telephone number;
billing address;
shipping address; and
other contact information you provide.
B. Order information
We may collect: products purchased; quantities;
order value; applicable currency; discounts; taxes;
shipping or delivery method; payment status; order history;
fulfilment information; and tracking information.
C. Product-programming information
To prepare a Tap4Feedback product for your business, we may collect:
your business name;
Google Business Profile information; Google review-page URL;
business website; QR/NFC destination information;
product-configuration instructions; notes you provide; and
logos or other files if custom-branding services are introduced.
D. Payment information
Online card payments are expected to be processed by Stripe Payments Canada, Ltd. and associated Stripe entities.
In-person payments may be processed through Square.
Tap4Feedback does not intend to store complete payment-card numbers itself when those card details are collected directly through the payment processor's secure payment interface.
Stripe's Canadian terms identify Stripe Payments Canada, Ltd. as the Canadian contracting entity and state that personal information may be processed outside Canada. (Stripe)
E. Communications
We may retain: contact-form submissions;
emails; customer-service correspondence;
support requests; complaints;
returns/refund communications; and
other communications necessary to manage our relationship with you.
F. Technical and website information
Depending on the website technologies actually enabled, we may collect information such as:
IP address; browser type; device type; operating system; referral source;
pages viewed; approximate location derived from IP; cookies and similar identifiers; and
website interaction data.
We will not represent that particular analytics or advertising technologies are used unless they are actually installed.
4. Why We Use Information
We may use personal information reasonably necessary to:
process orders; confirm payments; program NFC products; generate and configure QR destinations; verify the information provided for customization; fulfil and ship orders; provide local delivery; communicate about orders; provide customer service; prevent fraud and payment abuse; maintain accounting and business records; handle returns, replacements and disputes; comply with legal obligations; protect our business, customers and systems; improve our products and website; and send promotional communications where permitted by law.
We seek to collect only information reasonably appropriate for the purposes for which it is collected, consistent with PIPEDA's accountability and fair-information principles. (Office of the Privacy Commissioner)
5. NFC and Google Review Information
When you give us a Google Business Profile or review URL, we use that information to configure the applicable Tap4Feedback product.
Programming a product to open a Google destination does not by itself mean that Tap4Feedback controls Google's services.
When a person taps or scans a Tap4Feedback product and is directed to a Google service, their subsequent interaction with Google is governed by Google's own terms and privacy practices.
6. Service Providers and Disclosures
We may disclose or transfer information to service providers where reasonably necessary to operate our business.
These may include:
HighLevel / LeadConnector
HighLevel LLC, LeadConnector LLC and their subprocessors may provide website hosting, CRM, forms, customer/order records, workflow automation, communications and related infrastructure. HighLevel identifies itself as a U.S.-based platform provider and maintains a list of subprocessors. (GoHighLevel)
Stripe
Stripe Payments Canada, Ltd., Stripe, LLC and applicable financial partners may process online payments, authentication, fraud prevention, refunds and disputes. (Stripe)
Square
If used for in-person payments, Square Canada, Inc., Square Technologies, Inc. and/or applicable affiliates may process transaction and payment information. (Square)
Canada Post
Canada Post Corporation may receive the recipient and shipment information necessary to deliver and track an order.
Card and financial networks
Where applicable, payment information may also be processed by:
Visa;
Mastercard;
American Express;
Interac;
issuing/acquiring banks; and
fraud-prevention or payment-authentication providers.
Google
We use Google Analytics and Google Ads to understand website traffic, measure conversions, evaluate advertising performance and improve our website and marketing campaigns.
These services may use cookies and similar technologies to collect information such as IP address, approximate location, browser and device information, pages viewed, website interactions, advertising identifiers and actions taken after viewing or clicking an advertisement. Google may process this information outside Canada in accordance with its own privacy policies.
Meta
We use Meta Pixel and Meta advertising services to measure website activity, evaluate advertising performance, create advertising audiences and improve our Meta advertising campaigns.
Meta Pixel may collect information such as IP address, browser and device information, page visits, product views, shopping-cart activity, purchases and advertising interactions. This information may be transmitted to Meta Platforms, Inc. and its affiliates and processed in accordance with Meta’s privacy policies.
Professional and legal disclosures
Information may also be disclosed when reasonably necessary to:
accountants;lawyers;insurers;fraud/security providers;regulators;courts;law-enforcement authorities; or
other parties where required or permitted by law.
We do not intend to sell personal information for monetary consideration.
7. Processing Outside Canada
Some service providers may process or store information outside Canada, including in the United States.
Where personal information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement or governmental authorities in accordance with applicable law.
Under PIPEDA, transferring information to a foreign processor does not remove the Canadian organization's accountability for appropriate protection of that information. Organizations should use contractual or other measures designed to provide comparable protection. (Office of the Privacy Commissioner)
Stripe's Canadian terms expressly require Canadian users to disclose that personal information may be transferred, processed or stored outside Canada. (Stripe)
8. Cookies and Similar Technologies
Our website uses strictly necessary cookies required for website security, shopping-cart, checkout and other essential functions.
With your consent, we also use analytics and advertising cookies associated with Google Analytics, Google Ads and Meta Pixel. These technologies help us understand website usage, measure conversions and evaluate advertising campaigns.
Visitors can accept, reject or manage non-essential cookies through our cookie-consent controls. Withdrawing consent does not affect cookies that are strictly necessary for the website to function.
9. Marketing Email and SMS
Order confirmations, shipping notices, product-setup requests and customer-support communications may be sent as necessary to administer an order.
Marketing communications are treated separately.
Where CASL applies, commercial electronic messages must have an appropriate consent basis and include prescribed identification/contact information and a working unsubscribe mechanism. (ISED Canada)
You may withdraw consent to promotional communications using the unsubscribe mechanism provided or by contacting us.
Withdrawing marketing consent does not prevent us from sending communications reasonably necessary to complete or administer an existing transaction.
10. Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, tax, accounting, fraud-prevention, warranty, dispute and operational requirements.
Different categories may be retained for different periods.
We will periodically review whether information remains necessary and will securely delete, anonymize or otherwise dispose of information when appropriate and legally permitted.
11. Security
We use administrative, technical and organizational safeguards appropriate to the nature and sensitivity of the information under our control.
However, no internet transmission, cloud platform or electronic storage system can be guaranteed to be completely secure.
12. Privacy Breaches
Tap4Feedback will maintain procedures to respond to security incidents involving personal information.
Under PIPEDA, organizations must keep records of breaches of security safeguards. Where a breach creates a real risk of significant harm, the organization must report it to the Office of the Privacy Commissioner of Canada and notify affected individuals as required by law. (Office of the Privacy Commissioner)
13. Access and Correction
Subject to applicable law and limited exceptions, individuals may request access to personal information we hold about them and request correction of inaccurate information.
