Privacy Policy

Privacy Policy

Effective Date: June 1, 2026
Last Updated: June 1, 2026

Town's Post ("we", "us", "our") is committed to protecting the privacy of our users in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), S.C. 2000, c. 5, and applicable Ontario privacy law. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

By using our website at townspost.ca and any related services (collectively, the "Service"), you consent to the practices described in this Policy.

1. Who We Are

Town's Post is an online local classifieds marketplace operating in Ontario, Canada. For privacy inquiries, contact our Privacy Officer at: info@townspost.ca

2. Information We Collect

a) Information you provide directly:

• Account registration: name, email address, password (stored encrypted)
• Profile information: display name, profile photo, city, phone number (optional)
• Listing content: titles, descriptions, photos, price, location
• Messages sent through our in-app messaging system
• Payment information: processed securely through Stripe (we do not store card numbers)
• Communications with our support team

b) Information collected automatically:

• IP address, browser type, operating system, device type
• Pages visited, listings viewed, search queries
• Referring website and navigation patterns
• Cookies and similar tracking technologies (see Section 8)
• Approximate geographic location (city-level, from IP)

3. How We Use Your Information

We use your personal information only for the purposes for which it was collected, specifically:

• Creating and managing your account
• Publishing your listings and making them searchable
• Facilitating messaging between buyers and sellers
• Processing payments for premium features through Stripe
• Sending transactional emails (account confirmations, listing activity, messages)
• Sending marketing emails (only with your explicit consent, per CASL)
• Detecting, preventing, and responding to fraud, abuse, and safety threats
• Complying with legal obligations under Canadian law
• Improving our services through anonymized analytics

4. Legal Basis for Processing

Under PIPEDA, we rely on the following grounds:

• Consent - for account creation, marketing communications, and optional features
• Contractual necessity - to provide the service you have signed up for
• Legitimate interests - for fraud prevention, platform security, and service improvement
• Legal obligation - to comply with applicable Canadian and Ontario law

5. Sharing of Personal Information

We do not sell, rent, or trade your personal information. We may share limited information with:

• Stripe Inc. - for payment processing (governed by Stripe's Privacy Policy)
• Hosting and infrastructure providers - operating under confidentiality obligations
• Law enforcement or regulatory bodies - when required by Canadian law, court order, or to protect safety
• Other users - only the information you choose to make public (listing content, display name)

6. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations. Specifically:

• Account data: retained while your account is active, deleted within 90 days of account deletion request
• Listings: deleted or anonymized 12 months after expiry
• Messages: retained for 24 months, then permanently deleted
• Payment records: retained for 7 years as required by Canadian tax law
• Server logs: retained for 90 days for security purposes

7. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• Encrypted storage of passwords (bcrypt hashing)
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data

No system is 100% secure. If we become aware of a breach affecting your personal information, we will notify you and the Office of the Privacy Commissioner of Canada as required under PIPEDA's breach reporting rules.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies - required for login sessions and security
• Functional cookies - remembering your city preference and settings
• Analytics cookies - understanding how users navigate our platform (anonymized)

You may disable non-essential cookies through our cookie consent banner or your browser settings. Disabling essential cookies may prevent you from logging in.

9. Email Communications (CASL Compliance)

In compliance with Canada's Anti-Spam Legislation (CASL, S.C. 2010, c. 23), we will only send you commercial electronic messages (promotional emails) with your explicit consent. Every marketing email includes an unsubscribe link. Transactional emails (account notices, password resets, listing activity) are sent without requiring consent as they relate directly to your use of our service.

10. Your Rights Under PIPEDA

You have the right to:

• Access - request a copy of the personal information we hold about you
• Correction - request correction of inaccurate information
• Withdrawal of consent - withdraw consent at any time (subject to legal/contractual limitations)
• Deletion - request deletion of your account and personal data
• Complaint - file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca

To exercise these rights, contact our Privacy Officer at info@townspost.ca. We will respond within 30 days.

11. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.

12. Cross-Border Data Transfers

Your information is stored and processed in Canada. In limited cases, service providers may process data outside Canada (including the United States). We ensure such providers maintain privacy standards equivalent to PIPEDA through contractual protections.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or prominent notice on our website at least 30 days before taking effect. Your continued use of the Service after changes constitutes acceptance of the updated Policy.

14. Contact Our Privacy Officer

For any privacy questions, requests, or complaints:
Email: info@townspost.ca
Address: Town's Post, Ontario, Canada