Privacy Policy – Your Data Security

1. Introduction

Welcome to Sugar Baby Website. We are committed to protecting the privacy and security of our members in Canada. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services. By accessing or using our platform, you agree to the terms of this Privacy Policy.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other relevant Canadian privacy laws to ensure your data is handled with the highest level of care and transparency.

2. Legal Basis for Processing

Under Canadian privacy laws, we must have a legal basis for collecting and processing your personal information. These bases include:

Consent: You have given us clear consent to process your personal data for a specific purpose (e.g., creating a profile).
Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
Legal Obligation: The processing is necessary for us to comply with the law.
Legitimate Interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests.

3. Information We Collect

A. Information You Provide Directly

When you register for an account, we may collect the following information:

Registration Data: Email address, age, gender, and location.
Profile Information: Photos, lifestyle preferences, physical attributes, interests, and relationship goals.
Verification Data: Documents or photos provided for our verification process to confirm your identity and authenticity.
Communications: Messages sent through our internal platform and any correspondence with our support team.

B. Information Collected Automatically

When you visit our site, we automatically collect certain technical data, including:

Device Information: IP address, browser type, operating system, and device identifiers.
Usage Data: Pages viewed, time spent on the site, links clicked, and login frequency.
Cookies: Small data files stored on your device to enhance your user experience and remember your preferences.

4. Cookie Policy

We use cookies and similar tracking technologies to track the activity on our service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Types of cookies we use:

Session Cookies: We use Session Cookies to operate our service.
Preference Cookies: We use Preference Cookies to remember your preferences and various settings.
Security Cookies: We use Security Cookies for security purposes.

5. How We Use Your Information

We use the information we collect for several purposes, including:

Service Provision: To create and manage your account, facilitate matches, and provide our core dating services.
Personalization: To tailor your experience and show you profiles that align with your preferences.
Safety and Security: To verify accounts, monitor for fraudulent activity, and enforce our terms of service.
Communication: To send you service-related notifications, updates, and marketing materials (which you can opt out of at any time).
Platform Improvement: To analyze usage patterns and improve our website's functionality and user interface.

6. Sharing of Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:

Service Providers: We may share data with trusted third-party vendors who assist us with website hosting, data analysis, payment processing, and security monitoring. These providers are contractually obligated to protect your data.
Legal Requirements: We may disclose information if required by law, such as in response to a subpoena, court order, or other legal process.
Protection of Rights: We may disclose information to protect the safety, rights, or property of our company, our members, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that business transaction.

7. Data Security

We implement robust technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. Our security protocols include:

Encryption: Sensitive data, including messages and verification documents, are encrypted during transmission and at rest.
Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their duties.
Regular Audits: We conduct periodic security assessments to identify and address potential vulnerabilities in our systems.

While we strive to use commercially acceptable means to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Data Minimization & Privacy by Design

We believe in the principle of data minimization. This means we only collect the information that is strictly necessary to provide our services and ensure the safety of our members. Our platform is built with "Privacy by Design," meaning that privacy considerations are integrated into our technological development and business practices from the very beginning.

We encourage our members to practice discretion. You have control over the information you choose to share on your public profile, and we provide tools to manage who can see your photos and contact details. We do not store sensitive information like precise geolocation unless you explicitly provide it for matching purposes.

9. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located in Canada and choose to provide information to us, please note that we transfer the data to our servers and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

10. Your Privacy Rights & Access

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy regulations, you have specific rights regarding your personal information. These include:

Right to Access: You have the right to request access to the personal information we hold about you and receive a copy of that information in a structured, commonly used format.
Right to Rectification: You can request that we correct any inaccurate or incomplete personal information. We encourage you to keep your profile updated.
Right to Erasure (Right to be Forgotten): In certain circumstances, you may request the deletion of your personal data, such as when it is no longer necessary for the purposes for which it was collected.
Right to Withdraw Consent: You may withdraw your consent for us to collect, use, or disclose your personal information at any time, subject to legal or contractual restrictions and reasonable notice.
Right to Data Portability: You have the right to request that we transfer your data to another organization or directly to you, under certain conditions.
Right to Object: You have the right to object to our processing of your personal data for direct marketing purposes or when we are relying on legitimate interests.
Challenging Compliance: You have the right to address a challenge concerning compliance with PIPEDA principles to our Privacy Officer.

To exercise any of these rights, please contact our Privacy Officer at privacy@sugarbabywebsite.ca. We will respond to your request within 30 days, as required by law. Please note that we may require you to verify your identity before processing such requests.

11. Data Breach Notification & Response

In accordance with the Digital Privacy Act amendments to PIPEDA, we maintain a comprehensive record of all security safeguards breaches. In the event of a breach of security safeguards involving personal information under our control that poses a "real risk of significant harm" to you, we will:

Notify you individually as soon as feasible, providing details of the breach and steps you can take to protect yourself.
Notify the Office of the Privacy Commissioner of Canada (OPC) as required by law.
Notify any other organization or government institution that may be able to reduce the risk of harm or mitigate it.
Launch an immediate investigation to contain the breach and prevent future occurrences.

12. Mandatory Disclosure & Legal Compliance

While we prioritize your privacy, there are circumstances where we may be legally required or permitted to disclose your information without your consent under PIPEDA, including:

To comply with a subpoena, warrant, or court order issued by a court, person, or body with jurisdiction to compel the production of information.
To a government institution that has requested the information, identified its lawful authority to obtain it, and indicated that the disclosure is for the purpose of enforcing a law, carrying out an investigation, or gathering intelligence.
In emergency situations where the life, health, or security of an individual is threatened.
For the purpose of collecting a debt owed by the individual to the organization.
To an investigative body or government institution if we have reasonable grounds to believe that the information relates to a breach of an agreement or a contravention of the laws of Canada or a province.

13. Children's Privacy

Our service is only intended for individuals who are at least 18 years of age (or the age of majority in their jurisdiction). We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from a child without parental consent, we take steps to remove that information from our servers.

14. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. We may also retain certain information to comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, it is securely deleted or anonymized.

15. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party site you visit.

16. Marketing Communications

We may use your Personal Data to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on this page and updating the "Effective Date." Your continued use of the platform after such changes constitutes your acceptance of the updated policy.

18. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us at:

Sugar Baby Website Privacy Team
Email: privacy@sugarbabywebsite.ca
Address: Toronto, Ontario, Canada

You also have the right to contact the Office of the Privacy Commissioner of Canada (OPC) if you have concerns about our handling of your personal information.