Legal
Privacy Policy
Last updated: May 5, 2026
1. Who We Are
Food Safety Academy ("we", "us", or "our") operates the website foodsafetyacademy.ca and the online learning platform at app.foodsafetyacademy.ca. We are located at 115 Mallard Way, Whitehorse, Yukon, Canada.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
2. Information We Collect
We collect personal information only for the purposes of providing our certification services. This includes:
- Identity information: full name, phone number
- Contact information: email address
- Account credentials: encrypted password (we never store passwords in plain text)
- Payment information: billing details processed by Stripe — we do not store card numbers on our servers
- Course progress: lessons completed, quiz scores, exam results, time spent
- Company information: company name, employee count (for group enrollments)
- Waitlist information: name, email, phone, inquiry type (for pre-registration)
- Technical data: IP address, browser type, device information collected automatically via server logs
3. How We Use Your Information
We use your personal information to:
- Create and manage your account on the learning platform
- Process enrollment payments and issue receipts
- Deliver course content and track your progress
- Issue your Food Handler Certificate upon successful completion
- Send enrollment confirmations, access instructions, and certificate notifications
- Respond to your inquiries and provide customer support
- Send pre-registration updates and your discount code if you joined the waitlist (with your consent)
- Comply with legal obligations and resolve disputes
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Cookies and Local Storage
Our website and platform use the following technologies:
- Session cookies: set by our authentication provider (Supabase) to keep you logged in on the platform. These are essential for the service to function.
- Browser localStorage: used on the landing page to remember whether you dismissed the announcement banner and to avoid sending duplicate waitlist submissions.
- Third-party cookies: Stripe may set cookies during the payment process for fraud prevention and security purposes.
We do not use advertising cookies or cross-site tracking cookies. You can clear cookies and localStorage at any time through your browser settings; however, this will log you out of the platform.
5. Third-Party Service Providers
We share personal information with the following trusted service providers who process data on our behalf:
- Supabase — database and authentication services (data hosted in AWS data centres)
- Stripe — payment processing (PCI-DSS compliant)
- Cloudflare Stream — secure video delivery for course content
- Vercel — hosting and content delivery for the platform
Each provider is contractually required to protect your information and use it only to provide their services to us.
6. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations:
- Account data: kept for the duration of your active account plus 2 years after closure
- Student and exam records: retained for the 5-year certificate validity period plus 3 years, to support verification and regulatory requirements in BC and Canada
- Identity verification images: retained for the same period as exam records
- Payment records: retained for 7 years as required by Canadian tax law
- Waitlist data: deleted within 12 months of the waitlist closing or upon your request
7. Your Rights Under PIPEDA
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Withdraw consent for non-essential uses (note: withdrawal may affect your ability to use the service)
- Request deletion of your account and personal data, subject to our legal retention obligations
- File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca
To exercise any of these rights, contact us at admin@foodsafetyacademy.ca. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including encrypted data transmission (HTTPS/TLS), hashed passwords, and access controls. While we take reasonable precautions, no method of transmission over the internet is 100% secure.
9. Children's Privacy
Our Food Handler certification course is intended for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18 for this program. If you believe we have collected information from a minor in error, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email and post the updated policy on this page with a revised "last updated" date. Continued use of our services after the effective date constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related questions or requests, please contact our Privacy Officer: