Privacy Policy

We respect your privacy and the privacy of the students we work with. This policy explains, in plain language, what we collect, why, and the choices you have.

Draft for review. This page is a plain-language starting draft and is not legal advice. It must be reviewed by a qualified Canadian lawyer before launch. (To hide this notice, set legalPagesAreDrafts to false in src/content/site.ts.)

Last updated: October 13, 2026

1. Who we are

Learnish Academy (“we”, “us”) provides tutoring, educational consulting and career consulting to students and families in Canada. We are based in Brampton, Ontario. This policy applies to personal information we collect through our website, by email and phone, and while providing our services.

We follow Canada’s federal private-sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), and any provincial privacy laws that apply to us. [VERIFY with your lawyer which provincial laws apply — for example Quebec, Alberta or British Columbia — based on where your clients live.]

Privacy Officer: [ADD NAME], who is responsible for our compliance with this policy. You can reach them at info@learnish.ca.

2. What information we collect

We only collect what we need. Depending on how you interact with us, this may include:

Consultation requests: student’s first name, parent or guardian name, email, phone number (optional), grade, province or territory, services of interest, a short description of what you would like help with, preferred contact method and preferred language.
General messages: your name, email and message.
Newsletter sign-ups: your email, first name (optional) and a record of your consent.
While providing services: information needed to support the student, such as school, courses, grades, report cards or schoolwork you choose to share, learning goals, session notes, progress updates, and — for admissions and career services — programs of interest and application materials.
Billing: the name and contact details of the person paying, invoices and payment records. Card payments are processed by our payment provider [ADD PROVIDER]; we do not store full card numbers.
Website technical information: like most websites, our hosting provider automatically processes basic technical data (such as IP address, browser type and pages requested) to deliver the site and keep it secure.

Please do not send us sensitive information we haven’t asked for, such as health information or government ID numbers. If information about a student’s learning needs would help us support them, we will discuss with you what is appropriate to share.

3. Why we use it

To respond to enquiries and arrange consultations.
To plan, deliver and improve our tutoring and consulting services.
To share progress updates with parents and guardians.
To schedule sessions, send reminders, invoice and collect payment.
To send our newsletter, only if you have asked to receive it.
To keep our website and systems secure, and to meet legal and accounting obligations.

We do not sell, rent or trade personal information. We do not use it for advertising profiles.

4. Consent

We ask for your consent when we collect personal information — for example, through the consent checkbox on our forms. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us. If you withdraw consent, we may not be able to continue providing some services, and we will explain what that means.

Our newsletter is only sent to people who have given express consent. Every email includes our contact information and an easy way to unsubscribe, in line with Canada’s Anti-Spam Legislation (CASL). We process unsubscribe requests promptly and within the time required by law.

5. Information about students and minors

If a student is under 18, we ask that a parent or guardian make the booking and provide consent on the student’s behalf. Students 18 and older may book for themselves.
We do not knowingly collect personal information directly from children without a parent’s or guardian’s involvement.
For students under 18, we share progress information with the parent or guardian who arranged our services. We encourage open communication between students, families and tutors. [CONFIRM your approach for older teens (e.g. 16–17) who ask that some information be kept private.]
We never record sessions without written permission from a parent or guardian.

6. Who we share information with

We share personal information only when needed, and only with:

Our tutors and consultants who work with the student, under confidentiality obligations.
Service providers who help us run our business, such as website hosting ([CONFIRM e.g. Vercel or Netlify]), email delivery ([CONFIRM e.g. Resend]), newsletter delivery ([CONFIRM e.g. MailerLite]), video sessions ([CONFIRM e.g. Zoom or Google Meet]), scheduling ([CONFIRM e.g. Calendly or Cal.com]), email and document storage ([CONFIRM e.g. Google Workspace or Microsoft 365]) and payments ([ADD PROVIDER]). These providers may only use the information to provide services to us.
Others, if required or permitted by law — for example, to comply with a court order, or to protect someone’s safety.

Storage outside Canada: some of our service providers may store or process information outside Canada, including in the United States. When this happens, the information is subject to the laws of that country and may be accessible to its authorities. We choose providers that use appropriate safeguards.

7. How long we keep information

Enquiries that do not lead to services: deleted within [CONFIRM 12 months].
Student and client records: kept for [CONFIRM e.g. 2 years] after our last session, then securely deleted, unless you ask us to delete them sooner and we are not required to keep them.
Financial records: kept as long as required by tax law (generally six years in Canada). [VERIFY]
Newsletter: kept until you unsubscribe; we keep a record of your consent and unsubscribe as required by law.

8. How we protect information

We use reasonable safeguards, including encrypted (HTTPS) connections on our website, password-protected accounts with two-factor authentication, access limited to people who need it, and secure, private links for online sessions. No system is perfectly secure; if a privacy breach creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner of Canada as required by law.

9. Your rights

You can ask us to:

Tell you what personal information we hold about you or your child, and give you access to it.
Correct information that is inaccurate or incomplete.
Delete information we no longer need, or withdraw your consent.

Email info@learnish.ca. We will respond within 30 days and may need to confirm your identity first.

10. Cookies and analytics

Our website does not use advertising or tracking cookies. [CONFIRM] If we use website analytics, we use a privacy-friendly service that does not use cookies or collect personal information, to understand which pages are helpful. If this ever changes, we will update this policy and ask for your consent where required.

Our website links to other sites (for example, social media or university websites). We are not responsible for their privacy practices.

11. Residents of Quebec

[VERIFY with your lawyer] If you serve Quebec residents, Quebec’s private-sector privacy law (as updated by Law 25) has additional requirements, such as appointing a person in charge of personal information and publishing specific information. See docs/05-legal-and-compliance-notes.md.

12. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it was last changed. If we make significant changes, we will let current clients know.

13. Questions or concerns

Please contact our Privacy Officer first at info@learnish.ca — we would like the chance to fix any problem. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada.