Privacy notice
How information is handled across the trial, account, course, billing and support experience.
Policy version 2026.07.12. The production data map, provider list and retention periods remain launch gates.
1. Scope and privacy contact
This notice explains how Aspire intends to handle personal information for the Canadian Border Study Tool. A dedicated product-domain privacy email and final service-provider list must be confirmed before launch. Until then, use the Contact and support form and choose Privacy request.
2. Information collected
- Account information such as name, email address, language preference and password credentials handled by the authentication provider.
- Trial and entitlement information, including eligibility, start and expiry time, plan and access status.
- Study progress, completed lessons, quiz results, bookmarks and saved settings.
- Billing identifiers, plan, invoice, subscription, payment status and limited payment-method details returned by Stripe. Raw card or bank credentials are not stored by this website.
- Support, feedback, source-correction and accessibility messages that you choose to send.
- Security and service logs such as IP address, browser, device, timestamps, errors, rate limits and suspected abuse signals.
3. Purposes
- Create and secure accounts, control trials and provide purchased access.
- Save progress and operate course, account, billing and support features.
- Process payments, issue receipts, manage cancellations, respond to disputes and prevent fraud.
- Maintain, diagnose, secure and improve the service.
- Send essential service messages. Marketing messages require a separate choice and include an unsubscribe route.
4. Service providers and disclosures
The production service is expected to use providers for hosting, authentication, data storage, email delivery, monitoring and payments. Stripe processes payment information under its own privacy terms. The final named-provider list, processing locations and contractual safeguards must be recorded before launch. Information may also be disclosed when required by law, to protect security or rights, or as part of a legitimate business transfer with appropriate safeguards.
5. Retention
| Record category | Intended rule |
|---|---|
| Account and progress | While the account is active, then deleted or anonymized under the final retention schedule. |
| Orders, invoices and tax records | Retained for legal, accounting, fraud and dispute obligations. |
| Support and correction records | Retained until the matter and reasonable follow-up period are complete. |
| Security logs | Kept for a limited period based on security need and risk. |
Specific production periods are tracked in the data-retention register and must be finalized before launch.
6. Your choices and rights
- Review or update account details through My Account when available.
- Request access to or correction of personal information, subject to lawful exceptions.
- Request account deletion and ask what information must be retained for legal purposes.
- Withdraw optional marketing consent at any time without affecting essential service messages.
- Raise a privacy concern through Contact and support.
7. Cookies and browser storage
Essential storage may be used for language, sign-in, security, trial and session operation. Optional analytics or advertising technologies should not be enabled without a clear notice and appropriate choice. This static preview uses browser session storage for interface language and demonstration state only.
8. Security and incidents
The production system should use access controls, encryption in transit, least-privilege administration, protected secrets, monitoring, backups, dependency updates and an incident-response process. No system is risk free. A material privacy or security incident will be handled and communicated as required by applicable law.
9. Changes to this notice
The effective version and date are shown in the Legal centre. Material changes should be communicated before they take effect when reasonably possible.