Privacy Policy

Last updated: September 2025

1. Introduction

Smart Digests (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website smartdigests.com. This policy is designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including Ontario’s Personal Health Information Protection Act (where applicable).

By using our website, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following categories of personal information when you voluntarily provide it:

Contact information: Name, email address, and any other information you provide when subscribing to our newsletter, submitting a story pitch, or contacting us through our Contact page.
Account information: If we introduce user accounts in the future, we will collect username, password, and profile information.
Communications: Records of correspondence when you contact us, including email exchanges and form submissions.

2.2 Automatically Collected Information

When you access our website, we automatically collect certain information through cookies and similar technologies:

Usage data: Pages visited, time spent on pages, referral sources, browser type, operating system, and device information.
IP address and geolocation: Your IP address and approximate geographic location derived from it.
Cookie data: Information stored by cookies on your device. See our Cookie Policy for details.

3. How We Use Your Information

We use collected information for the following purposes:

To operate and maintain our website
To send newsletters and other communications you have subscribed to (with opt-out available at any time)
To respond to your inquiries, story pitches, and feedback
To analyse website usage and improve our content and user experience
To detect, prevent, and address technical issues, fraud, or security breaches
To comply with legal obligations

4. Legal Basis for Processing

Under PIPEDA, we rely on the following grounds for processing personal information:

Consent: We process personal information with your knowledge and consent, except where otherwise permitted or required by law. Consent may be express (e.g., subscribing to a newsletter) or implied (e.g., browsing our website with cookies enabled).
Legitimate interests: We may process information for legitimate business interests, such as website analytics, provided these interests do not override your privacy rights.
Legal obligation: We may process information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

Service providers: We may share information with trusted third-party service providers who assist us in operating our website, conducting analytics, or delivering newsletters — subject to confidentiality agreements.
Legal requirements: We may disclose information if required to do so by law, court order, or governmental authority.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any change in ownership or control of your personal information.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. When information is no longer needed, we securely destroy or anonymise it.

7. Your Rights Under PIPEDA

Under Canadian privacy law, you have the right to:

Access: Request access to the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete personal information.
Withdraw consent: Withdraw your consent to our processing of your personal information, subject to legal or contractual restrictions.
Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have violated your privacy rights.

To exercise any of these rights, contact us at [email protected]. We will respond to requests within 30 days as required by PIPEDA.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure server infrastructure, access controls, and regular security assessments.

9. International Data Transfers

Your information may be transferred to and processed on servers located outside of Canada, including in the United States. We ensure that any such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

10. Children’s Privacy

Our website is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this page with a revised “Last updated” date. We encourage you to review this policy periodically.