Privacy Policy

Last updated: September 24, 2026.

Who We Are and Our Role

spotfluxpo.net operates this non-commercial informational website focused on discovering personal stories, places and everyday moments through photography across Canada. We act as the data controller under the Personal Information Protection and Electronic Documents Act (PIPEDA) for any personal information collected through the site. Our role involves determining the purposes and means of processing visitor data to maintain and improve the website experience.

Scope of This Privacy Policy

This notice applies to all visitors to the website regardless of location, with particular attention to individuals in Canada. It covers data collected via the contact form, any interactions with site features, and automated collection through cookies or similar technologies. It does not apply to third-party websites linked from external sources or to offline activities outside the site.

Personal Information We Collect

We obtain personal information directly from visitors when they submit the contact form, which may include name, message content, and any other details voluntarily provided. Indirectly, we collect technical data such as IP address, browser type, device information, and usage patterns through server logs and analytics tools. Sources are limited to the visitor themselves and standard web server records; we do not purchase or obtain data from external commercial lists.

How We Use Your Information and Legal Bases

Information is processed for the following purposes with corresponding legal bases under PIPEDA: responding to contact form inquiries to provide requested information (consent or legitimate interest); maintaining website functionality and security through log analysis (legitimate interest); improving content relevance based on aggregated usage statistics (legitimate interest); and complying with legal obligations such as record-keeping requirements (legal obligation). Each purpose is evaluated to ensure processing remains proportionate and necessary.

Providing Your Information

Submitting information through the contact form is entirely voluntary. Failure to provide details will simply prevent us from responding to specific inquiries, but will not affect access to the rest of the informational content on the site. No mandatory fields require personal data for basic browsing.

Cookies and Similar Technologies

The site uses cookies and similar tracking technologies for essential functions such as session management and basic analytics. Visitors can manage preferences through their browser settings. A separate Cookie Policy provides further details on the types of cookies employed and how to control them; please refer to that document for complete information.

Sharing Your Information

We may share personal information with trusted service providers acting as processors, such as web hosting companies and analytics platforms, solely to the extent necessary for the purposes outlined. Categories of recipients also include law enforcement or regulatory authorities when disclosure is required by Canadian law. We do not sell personal information or share it for third-party marketing purposes.

International Data Transfers

Some processors may be located outside Canada, resulting in limited transfers of technical data. When such transfers occur, we rely on contractual safeguards and ensure that recipients provide a comparable level of protection consistent with PIPEDA requirements.

How Long We Keep Your Information

Contact form submissions are retained for up to two years to allow follow-up and record-keeping, after which they are securely deleted. Server logs containing technical data are kept for twelve months for security and operational analysis before automatic purging. Retention periods may be extended only when required to meet legal obligations or resolve disputes.

Security of Your Information

We implement reasonable administrative, technical, and physical safeguards, including encrypted connections and access controls, to protect personal information against loss, misuse, or unauthorized access. While no system can guarantee absolute security, we regularly review and update these measures to address evolving risks and maintain data minimisation principles.

Your Rights Under Canadian Privacy Law

Under PIPEDA, individuals have the right to access their personal information held by us, request corrections, withdraw consent where applicable, and object to certain processing activities. These rights support transparency and control over how data is handled.

Exercising Your Rights

To exercise any of these rights, visitors may submit a request using the contact form available on the Contacts page, call , or write to . We will respond within a reasonable timeframe, typically thirty days, and may request additional verification to protect privacy.

Complaints to the Privacy Commissioner

If you are not satisfied with our response to a privacy request, you may file a complaint with the Office of the Privacy Commissioner of Canada, the competent supervisory authority responsible for overseeing compliance with PIPEDA.

Children and Minors

The website is intended for a general audience and does not knowingly collect personal information from individuals under the age of thirteen. If we become aware that such data has been collected inadvertently, it will be deleted promptly.

Automated Decision-Making

The site does not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any analytics used are limited to aggregate, non-identifiable statistics for internal improvement purposes.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in practices or legal requirements. The effective date of the current version appears at the top of the page. Continued use of the site after updates constitutes acceptance of the revised terms.