Privacy Policy

Profit AI Engine Inc. ("we," "us," "our") respects your privacy and is committed to protecting personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Alberta privacy legislation including the Personal Information Protection Act (PIPA) where it applies to our operations. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have.

1. Accountability

We are responsible for personal information under our control. Our privacy officer can be reached at [email protected] or by mail at 10221 109 Street NW, Suite 1400, Edmonton, AB T5J 3N2, Canada. We maintain internal policies and training so staff who handle personal information understand their obligations.

2. Identifying purposes

We collect personal information for identified purposes and do not use it for unrelated purposes without consent, except as permitted by law. Primary purposes include: responding to enquiries submitted through our contact form; processing programme enrolment and payment; delivering training services and issuing certificates; communicating cohort schedules and materials; improving our website and services; complying with legal and regulatory obligations; and protecting our legitimate business interests such as fraud prevention.

3. Consent

We obtain meaningful consent before or when collecting personal information. For contact form submissions, consent is obtained through an explicit PIPEDA checkbox. For enrolment, consent is obtained through our enrolment agreement. You may withdraw consent for non-essential uses by contacting our privacy officer, subject to legal or contractual restrictions. Withdrawal may limit our ability to provide services.

4. Limiting collection

We collect only information reasonably necessary for identified purposes. Contact enquiries typically require name, email and message content; phone is optional. Enrolment requires additional details such as billing information and emergency contact where relevant. We do not collect government identity documents unless required for a specific verified purpose.

5. Limiting use, disclosure and retention

We use personal information only for the purposes for which it was collected, unless you consent to additional uses or law requires otherwise. We do not sell personal information. We may share information with: payment processors for transaction completion; email service providers for transactional communications; cloud hosting providers storing data in Canada where practicable; professional advisers bound by confidentiality; and authorities when required by law.

We retain enquiry records for up to twenty-four months unless a longer period is needed for dispute resolution. Enrolment and training records are retained for seven years for business and tax purposes unless a shorter period is agreed. Cookie consent preferences are stored for six months in your browser per our cookie policy.

6. Accuracy

We take reasonable steps to ensure personal information is accurate and complete for its intended use. You may request correction of inaccurate information by contacting [email protected]. We will respond within thirty days where feasible.

7. Safeguards

We protect personal information through administrative, technical and physical safeguards appropriate to sensitivity. Measures include access controls limited to authorised staff, encrypted transmission where supported, secure hosting environments and staff confidentiality obligations. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

8. Openness

We make this Privacy Policy readily available on our website. Upon request, we will explain our policies and practices in understandable terms. Questions may be directed to our privacy officer at any time.

9. Individual access

You may request access to personal information we hold about you, subject to limited exceptions under law such as information protected by solicitor-client privilege or affecting another individual's privacy. Access requests should be sent to [email protected] with sufficient detail to locate your records. We will respond within thirty days or notify you if an extension is required. If you believe information is inaccurate, you may request amendment.

10. Challenging compliance

If you believe we have not handled your personal information appropriately, contact our privacy officer first. We will investigate and respond. You may also file a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta if applicable.

11. Website and analytics

Our website may use essential cookies for functionality and optional analytics cookies with your consent. See our Cookie Policy for details. Server logs may record IP address, browser type, pages visited and timestamps for security and performance analysis. Logs are retained for limited periods.

12. Third-party links

Our website may link to external sites such as tool providers or mapping services. We are not responsible for their privacy practices. Review their policies before providing personal information.

13. Children

Our services are directed at adults and working professionals. We do not knowingly collect personal information from individuals under eighteen without parental consent. Contact us if you believe we have inadvertently collected such information.

14. International learners

While our training focuses on Canadian professionals, remote learners outside Canada may enrol. Personal information may be processed in Canada. By submitting information from abroad, you consent to transfer and processing in Canada subject to this policy.

15. Changes to this policy

We may update this Privacy Policy to reflect operational or legal changes. The "Last updated" date at the top indicates the current version. Material changes will be posted on this page. Continued use after changes constitutes acceptance of the updated policy for non-material revisions; material changes affecting prior consent may require renewed consent where legally necessary.

16. Breach notification

In the event of a security breach involving personal information that creates a real risk of significant harm, we will notify affected individuals and report to the Office of the Privacy Commissioner of Canada as required under PIPEDA breach notification provisions. Notifications will describe the nature of the breach, information involved, steps we are taking and recommended actions you may take to protect yourself.

17. De-identified and aggregated data

We may create de-identified or aggregated statistics from enrolment and website usage data for internal reporting and service improvement. De-identified information cannot reasonably identify an individual and is not subject to this policy in the same manner as personal information, though we maintain ethical standards in its use.

18. Enrolment payment data

Payment card details are processed by our payment service provider and are not stored on our servers. We retain transaction records including amount, date and payer name for accounting and tax compliance. Chargeback disputes may require us to share enrolment records with payment processors and financial institutions as necessary to resolve the matter.

19. Marketing communications

We do not sell contact lists. With your consent, we may send programme announcements and alumni updates by email. You may unsubscribe at any time using the link in marketing emails or by contacting [email protected]. Transactional emails related to active enrolments are not marketing and may be sent without separate marketing consent.

20. Contact

Privacy Officer, Profit AI Engine Inc., 10221 109 Street NW, Suite 1400, Edmonton, AB T5J 3N2, Canada. Email: [email protected]. Phone: +1 (780) 555-3492.

21. Definitions

For clarity: "personal information" means information about an identifiable individual as defined under PIPEDA. "Learner records" include enrolment forms, attendance logs, assessment notes and certificate issuance data. "Enquiry records" include contact form submissions and email correspondence initiated by you. "Processing" includes collection, use, storage, disclosure and deletion of personal information in the course of our operations.

22. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Facilitator assessments of participation are made by humans. Website analytics, if enabled, are reviewed in aggregate and do not automatically affect your access to services.

23. Cross-border service providers

Some technology vendors we use may process limited personal information on servers located outside Canada, including the United States. Where this occurs, we assess safeguards such as contractual data protection terms and limit the information shared to what is necessary. By using our services you acknowledge that cross-border processing may occur subject to the laws of the jurisdiction where the processor operates.

24. Contact for access requests

To submit a formal access or correction request, email [email protected] with "PIPEDA Request" in the subject line. Include your full name, email used for enrolment or enquiry, and a description of the information you seek. We may request additional verification before releasing records to protect against unauthorised disclosure.

25. Complaint process timeline

We aim to acknowledge privacy complaints within five business days and provide a substantive response within thirty days. Complex investigations may require extension; we will notify you if additional time is needed. If you remain unsatisfied after our response, you may escalate to the Office of the Privacy Commissioner of Canada without prejudice to other remedies available under law.

26. Data minimisation in virtual sessions

Virtual turbine bay sessions use video conferencing platforms selected for reasonable security features. We instruct facilitators to avoid recording unless announced, and to limit display of personal contact details in shared screens. Learners should participate from environments where they are comfortable sharing professional context visible on camera.