Privacy Policy

1. Introduction

2. Information We Collect

3. How We Use Information

We use the information we collect for the following purposes:

• Operating, maintaining, and improving the Site and directory
• Responding to inquiries and communications
• Reviewing and managing app submissions
• Understanding which tools and pages are most useful to visitors
• Sending newsletters or updates (only if you have opted in)
• Detecting and preventing fraud or abuse
• Complying with legal obligations

We do not sell your personal information to third parties.

4. Legal Basis for Processing

Where applicable (including under PIPEDA and GDPR), we process your personal information on the following bases:

• Consent: When you provide information through forms or subscribe to communications, or when you consent to non-essential cookies
• Legitimate interest: To operate and improve the Site, analyze usage patterns, and maintain security
• Legal obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell or rent your personal information. We may share information in the following limited circumstances:

• Service providers: With trusted third-party services that help us operate the Site (see Section 6 below), under appropriate contractual protections
• Legal requirements: When required by law, regulation, legal process, or governmental request
• Protection of rights: When necessary to protect the rights, safety, or property of Heyday Focus, our users, or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your information would remain subject to this policy

6. Third-Party Services and Data Storage

We use third-party services to help operate the Site. These may include:

• Supabase: Database and backend services
• Google Analytics: Website analytics (with IP anonymization enabled where applicable)
• Email service providers: For responding to inquiries and sending newsletters
• Website hosting providers: For serving and maintaining the Site

Each of these providers has their own privacy policies governing how they handle data. We select providers that maintain reasonable security standards and, where applicable, have appropriate data processing agreements in place.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Contact form submissions: Retained for as long as needed to respond to and resolve your inquiry, then deleted or anonymized
• Newsletter subscriptions: Retained until you unsubscribe
• Analytics data: Retained in accordance with the policies of our analytics provider (typically 14 to 26 months for Google Analytics)
• App submissions: Retained for as long as the listing remains in the directory, plus a reasonable period afterward

8. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information, subject to legal obligations
• Withdrawal of consent: Withdraw consent for processing where consent was the legal basis
• Opt-out of communications: Unsubscribe from marketing emails at any time using the link in any email
• Data portability: Request your data in a structured, commonly used format (where applicable under GDPR)

To exercise any of these rights, contact us at hello@heydayfocus.com. We will respond within the timeframe required by applicable law (generally 30 days under PIPEDA, 30 days under GDPR).

9. Canadian Privacy Law (PIPEDA)

As a site operated from Ontario, Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Under PIPEDA, you have the right to:

• Know what personal information we hold about you
• Challenge the accuracy and completeness of your information
• Have your information amended where appropriate

For PIPEDA-related inquiries or complaints, you may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

10. International Users

The Site is operated from Canada. If you access the Site from outside Canada, be aware that your information may be transferred to, stored, and processed in Canada.

Canada has been recognized by the European Commission as providing an adequate level of data protection. By using the Site, you consent to the transfer of your information to Canada.

11. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal. There is currently no uniform standard for how websites should respond to DNT signals. We do not currently respond to DNT signals, but we will update this policy if a standard is adopted.

12. Third-Party Links

The directory contains links to third-party apps, websites, and services. We are not responsible for the privacy practices, content, or data collection of these external sites. We encourage you to review the privacy policies of any third-party service before providing personal information.

13. Children's Privacy

The Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information through the Site, please contact us at hello@heydayfocus.com and we will take steps to delete that information promptly.

14. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect the personal information we collect. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a data breach that is likely to result in a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA's breach notification provisions.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of the Site after changes are posted constitutes your acceptance of the revised policy.

16. Contact

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact: