PIPEDA Notice for Canadian Residents

Overview

This Notice describes Upmos’s practices for collecting, using, and disclosing personal information from Canadian residents, in compliance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.

Your Rights Under PIPEDA

• Right of access — request a copy of the personal information we hold about you.
• Right of correction — request correction of inaccurate information.
• Right to withdraw consent — withdraw consent to processing at any time (subject to legal or contractual restrictions).
• Right to challenge compliance — file a complaint with our Privacy Officer and, if unresolved, escalate to the Office of the Privacy Commissioner of Canada.

Accountability & Privacy Officer

Upmos has designated a Privacy Officer responsible for compliance with PIPEDA principles. You may contact our Privacy Officer at privacy@upmos.com or by writing to the mailing address at the bottom of this Notice.

Consent

Upmos collects, uses, and discloses personal information only with your knowledge and consent (express where reasonable, implied where the use is obvious from context). You may withdraw consent at any time by adjusting your privacy preferences or contacting our Privacy Officer; withdrawal may limit our ability to provide certain Services.

Limiting Collection

We collect only information that is necessary for the purposes identified at collection time:

• Account information (name, email, password) for authentication.
• Shipping address & phone for order fulfillment.
• Payment information (processed by PCI-compliant processors; we do not store full PANs).
• Browsing and purchase history for personalization (opt-out available).
• Communication content when you contact support.

Use, Disclosure, Retention

Personal information is used only for the purposes for which it was collected, plus other compatible purposes you would reasonably expect. Disclosures to third parties (carriers, payment processors, tax authorities) are limited to what is necessary. Retention periods follow our global retention schedule, with Canadian-resident data subject to a maximum 7-year retention for financial and audit purposes.

Accuracy

We take reasonable steps to keep your information accurate, complete, and up to date. You can review and update most details directly from Account > Profile.

Safeguards

Information is protected by safeguards appropriate to sensitivity:

• Physical — secured facilities, access logging.
• Organizational — role-based access, least privilege, mandatory training.
• Technical — encryption in transit (TLS 1.2+) and at rest (AES-256), MFA on admin access, continuous monitoring.

Openness

This Notice, the global Privacy Policy, the Cookie Policy, and our Sub-Processors list together describe our practices openly. Material changes are announced via email to registered users at least 30 days in advance where the change reduces existing privacy protections.

Individual Access

To request access to your personal information, submit a request via Account > Privacy > Data Request or email privacy@upmos.com. We respond within 30 days, with a one-time 30-day extension permitted under PIPEDA for complex requests.

Challenging Compliance

If you believe Upmos has not complied with PIPEDA or this Notice, contact our Privacy Officer first. If unresolved, you may complain directly to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or to the commissioner in your province.

Breach Notification

Where a breach of security safeguards creates a real risk of significant harm to an individual, we notify the affected individuals and the Privacy Commissioner of Canada without unreasonable delay, as required by PIPEDA’s Breach of Security Safeguards Regulations.

Provincial Privacy Laws

Residents of Quebec, British Columbia, and Alberta benefit from additional rights under provincial laws:

• Quebec Law 25 — data-portability, automated-decision transparency, enhanced breach reporting.
• BC PIPA — substantially similar to PIPEDA with privacy-officer designation requirements.
• Alberta PIPA — substantially similar to PIPEDA with breach-notification thresholds tied to “real risk of significant harm”.

Contact

Email: ca-privacy@upmos.com

How Can You Contact Us About This Policy?

If you have any further questions or comments or wish to report any problematic Content or Contribution, you may contact us by:

General Contact

• Phone: 1(855)637-2433 (Mon–Fri, 9 AM–5 PM CST)
• General Support: support@upmos.com
• Report Issue: upmos.com/report
• Send Feedback: upmos.com/feedback

Department Directory

Mailing Address

Upmos Inc.
9896 Bissonnet St
Houston, TX 77036
United States