Privacy Policy

Last updated: July 9, 2026

This Privacy Policy describes how ChainFlow Payments (ChainFlow Payments Limited) collects, uses, and protects your personal information when you visit our website and use our services. We are committed to protecting your privacy and handling your data responsibly and transparently.

Who We Are

We are a blockchain-enabled payment automation platform serving Edmonton's technology sector and beyond. We provide smart contract solutions for vendor payment disbursement and automated transaction processing. As the data controller, we are responsible for ensuring that your personal information is processed lawfully and securely in accordance with applicable privacy regulations.

Information We Collect

We collect various types of information to provide and improve our services:

• Contact information you provide when registering or submitting inquiries, including name, email address, phone number, and company details
• Usage data about how you interact with our website, including pages visited, time spent, and navigation patterns
• Technical information such as IP address, browser type, operating system, and device information
• Cookies and similar tracking technologies to enhance your browsing experience
• Information from forms you complete, including service requests and feedback submissions

Legal Basis for Processing

We process your personal information on the following legal bases: your explicit consent when you provide information through our forms or subscribe to our services; our legitimate business interests in operating our website and improving our offerings; compliance with legal obligations under applicable laws; and performance of contracts or agreements you have with us. We always ensure that processing is fair, transparent, and necessary for the stated purpose.

How We Use Your Information

We use your personal information for the following purposes: responding to your inquiries and providing customer support; delivering and improving our services and website functionality; analyzing usage patterns to enhance user experience; sending transactional communications related to your account or services; complying with legal and regulatory obligations; and preventing fraud or unauthorized access. We do not sell your information to third parties and only share data with trusted service providers who assist in our operations under strict confidentiality agreements.

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Contact form inquiries and customer service records are retained for up to 24 months after your last interaction with us
• Analytics and website usage data is retained for up to 14 months
• Server logs and technical data are retained for up to 12 months
• Account information is retained for the duration of your account and for up to 12 months after account closure for legal compliance
• Cookie data expires based on the cookie type, ranging from session duration to 12 months

After the retention period expires, we securely delete or anonymize your information. You may request deletion of your personal information at any time subject to legal obligations.

Your Privacy Rights

You have the following rights regarding your personal information:

• The right to access your personal data and receive a copy of the information we hold about you
• The right to correct inaccurate or incomplete information
• The right to delete your personal information under certain circumstances
• The right to restrict or object to our processing of your data
• The right to data portability, to receive your information in a structured format and transfer it to another service provider
• The right to withdraw consent at any time without affecting the lawfulness of previous processing

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days of receipt.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze website performance. Cookies are small text files stored on your device that help us understand how you use our site. We use both essential cookies necessary for basic functionality and optional cookies for analytics and personalization. You can control cookie preferences through your browser settings, though disabling certain cookies may affect website functionality. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include encryption of sensitive data in transit and at rest, secure server infrastructure, regular security assessments, restricted access controls, and employee training on data protection. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security. We encourage you to use strong passwords and practice safe browsing habits.

Third-Party Services

Our website may integrate with third-party services and platforms. We carefully select service providers who agree to process your information only as instructed and maintain appropriate security standards. These providers may include web hosting services, analytics platforms, and payment processors. We do not control how third parties use your data once transferred, and we recommend reviewing their privacy policies. We are not responsible for third-party privacy practices.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will promptly delete such information and terminate the child's account if applicable. Parents or guardians who believe their child has provided information to us should contact us immediately.

International Data Transfers

If your information is transferred outside Canada, we ensure appropriate safeguards are in place to protect your privacy. Any transfers comply with applicable data protection laws and are based on lawful mechanisms such as standard contractual clauses or adequacy determinations. By using our services, you consent to the transfer of your information to countries that may have different privacy standards than your country of residence.

Supervisory Authority

You have the right to lodge a complaint with the data protection authority responsible for your jurisdiction. In Canada, you may contact the Office of the Privacy Commissioner of Canada. If you are located in a province with its own privacy authority, you may also contact your provincial regulator. Filing a complaint does not prevent you from seeking other legal remedies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page. Your continued use of our services following any modifications constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.