Effective date: June 17, 2026
Welcome to indocert.ca. We are committed to protecting your privacy and complying with applicable Canadian privacy laws, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit our website or use our online food safety and handler training services. By using our site, you agree to the practices described in this Privacy Policy.
If you are a resident of Quebec, please refer to our French-language privacy policy, which reflects the requirements of Quebec’s Law 25.
1. Information We Collect
1.1 Personal Information
We may collect personal information when you register or make a purchase, such as:
- Name
- Email address
- Mailing address
- Phone number
- Payment details
- Other details you provide through forms or communications
1.2 Course Activity
We collect information related to your training activity, including:
- Course registration and access
- Training progress
- Quiz scores
- Certification status
- Feedback you provide
1.3 Technical and Non-Personal Information
We may also collect non-personal and technical data, including:
- IP address
- Browser type
- Operating system
- Referring website
- Device information
- Pages visited and duration of visit
- Access times
2. How We Use Your Information
We use your information to:
- Register you for courses and deliver certifications
- Process transactions and provide receipts
- Respond to inquiries and provide customer support
- Communicate important updates or service information
- Improve site performance, functionality, and training content
- Analyze usage patterns and trends
- Personalize your experience
- Ensure compliance with applicable food safety training regulations
- Address technical and security issues
3. Consent
We collect, use, and disclose your personal information with your knowledge and consent. We obtain consent separately for each purpose for which your information is intended, and the form of consent we seek reflects the sensitivity of the information.
For example, registering for a course does not automatically subscribe you to our newsletter: you will only receive the newsletter if you voluntarily provide your email address in the dedicated newsletter field, and we then retain your address only for the purpose of sending the newsletter.
Where we collect sensitive personal information (for example, photo identification for identity verification), we obtain your express consent. You may withdraw your consent at any time, subject to applicable legal or contractual obligations, by contacting us using the details below.
4. Sharing of Information
We do not sell, rent, or trade your personal information. We may share your information with:
- Service Providers: Such as payment processors and learning management system (LMS) providers who are contractually obligated to protect your data and to use it only for the purposes for which it is entrusted to them.
- Regulatory Bodies: Only when legally required or with your consent.
- Legal Authorities: When required to comply with legal obligations, court orders, or legal processes.
- Business Transfers: In connection with mergers, acquisitions, or the sale of assets, your data may be transferred as part of the transaction.
5. Transfers and Processing Outside Canada
Some of our service providers may store or process your personal information outside your province or outside Canada. When we transfer personal information to a service provider for processing, we remain accountable for its protection and use contractual and other reasonable measures to ensure it receives a comparable level of protection. While it is in another jurisdiction, your information may be subject to the laws of that jurisdiction. You may contact us for more information about our practices regarding service providers located outside Canada.
6. Data Security
We implement a range of industry-standard technical and organizational security measures to protect your personal information from unauthorized access, alteration, or destruction. However, no method of online transmission or storage is completely secure, and you use our site at your own risk.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyze usage, and improve site functionality.
We obtain your prior consent before placing non-essential cookies (for example, for analytics, tracking, or profiling). Cookies strictly necessary for the operation of the site may be placed without consent. You can change or withdraw your consent at any time, as easily as you gave it, by reopening the “Cookie Preferences” panel available on our site, or through your browser settings. Disabling cookies may affect certain features of the site.
8. Automated Processing
The verification of your identity and the monitoring of examinations are reviewed by a person; they are not based solely on automated processing of your personal information. If we were to introduce any decision based solely on automated processing, we would inform you accordingly.
9. Third-Party Links and Services
Our website may include links to third-party websites or services. We are not responsible for the content or privacy practices of those third parties. You are encouraged to review their privacy policies before engaging with them.
10. Data Retention
We retain your data as long as necessary to fulfill training, legal, and contractual obligations. Once the purposes for which the information was collected have been achieved, we destroy or anonymize your personal information in accordance with applicable law. You may request deletion of your personal data or account by contacting us using the information below.
11. Your Rights and Choices
Subject to applicable law, you may have the right to:
- Access and review your personal data
- Request correction of inaccurate or incomplete information
- Withdraw consent where applicable
- Request deletion of your data, where applicable
- Opt out of marketing communications
To exercise these rights, please contact our Privacy Officer using the details provided below. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC).
12. Breach Notification
In the event of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and the affected individuals as required by law. We maintain records of breaches of security safeguards.
13. Children’s Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect or solicit personal information from children, and where consent is required from a minor, we require the consent of a parent or guardian. If we become aware that such information has been collected without the required consent, we will promptly delete it.
14. Proctoring and Identity Verification Data
When you participate in an online examination using our proctoring service, we collect and process the following information, with your express consent:
- Candidate Photo and Photo ID: Captured at the beginning of the exam for identity verification. Verification is performed manually by a person; we do not use any facial recognition technology. Once the administrator has confirmed your identity and your certificate has been issued, both the candidate photo and photo ID are deleted immediately.
- Intermittent Candidate Images: Images of the candidate may be captured at intervals during the exam to support fairness and integrity. These are used only for verification and are deleted immediately after the exam result is verified and a certificate is issued.
- Suspicious Activity Monitoring: The system may flag suspicious activity during the exam. This information is reviewed by the administrator or a human proctor, and then deleted immediately once the exam is confirmed.
- Human Proctoring: At any point during the exam, a human proctor may monitor the exam in real time.
We do not record or store any video of the exam.
The only information stored for the validity period of the certificate (5 years) is:
- Course name
- Participant’s name
- Date of course
- Examination result
- Certificate expiry date
This information is stored securely in our database. We do not share it with third parties, except if a government authority legally requires it for regulatory or audit purposes.
15. Privacy Officer
We have designated a Privacy Officer who is accountable for our compliance with applicable privacy laws and responsible for handling access and correction requests and privacy-related complaints.
You can reach our Privacy Officer at:
Chris Mathew — Privacy Officer Email: info@indocert.ca
16. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with a revised effective date. Please review it regularly to stay informed about how we protect your information.
17. Contact Us
If you have any questions or concerns about this Privacy Policy or to exercise your data rights, please contact us at:
info@indocert.ca
London (Ontario), Canada.