Privacy Policy

Effective Date: Thu 29 Jan, 2026

1. Who We Are and Our Privacy Officer

Eprotech Pty Ltd ("we," "us," "our," or "the Company") operates www.drivingtestcanada.ca. We are committed to protecting your privacy in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including the Québec private-sector privacy law and its modernized requirements, Alberta's Personal Information Protection Act (PIPA), and British Columbia's Personal Information Protection Act (PIPA), where applicable.

Privacy Officer:

[email protected]

We will respond to privacy inquiries and requests within 30 days or as required by law.

2. What Personal Information We Collect

We collect personal information in the following categories:

2.1 Account Information

Email address (required for registration)

First and last name (optional)

Username (created by you)

Password (stored securely as a one-way hash, never in plaintext)

Account creation and update dates

2.2 Usage and Device Information

IP address

Device type and operating system

Browser type and version

Pages visited and time spent on each page

Referring URL (how you arrived at our Website)

General geographic location (province/territory level, derived from IP)

Unique identifiers such as cookies and similar tracking technologies

2.3 Learning and Progress Data

Practice test scores and results

Number of attempts per test or question

Time spent on each practice test

Questions answered and your answers

Study progress and performance history

2.4 Communication Data

Messages you send through our support contact form

Email correspondence with our support team

Survey responses and feedback (if you choose to participate)

2.5 Payment Information (if applicable)

Transaction ID and date

Subscription plan purchased

Last four digits of the payment card used

Billing address (if provided)

Invoice records

Important: We do not collect or store full credit card numbers, expiration dates, or CVV codes. Payment processing is handled entirely by our payment processor (Stripe & Paypal).

2.6 Information from Cookies and Similar Technologies

Session identifiers

Preferences and settings

Advertising identifiers

Analytics data (via Google Analytics)

Ad serving data (via Google DoubleClick/DART)

3. Why We Collect This Information and How We Use It

We collect and use your personal information for the following purposes:

We do not use your learning data (test scores, study progress) for purposes other than improving your experience and our service, unless we have your consent.

4. Consent and Your Choices

4.1 Marketing Communications

We only send marketing emails, newsletters, or promotional messages if you have explicitly opted in or consented. You may unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email.
• Updating your communication preferences in your account settings.
• Emailing [email protected] with your request.

Transactional emails (password resets, billing confirmations, service notices) will continue even if you unsubscribe from marketing.

4.2 Cookies and Tracking

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling cookies may affect Website functionality. For more information on managing cookies, visit allaboutcookies.org or your browser's help section.

4.3 Ad Personalization

To opt out of personalized advertising by Google, visit the Google Ad Settings page or use the Network Advertising Initiative (NAI) opt-out tool. Note that opting out does not prevent ads; you will still see ads, but they may be less relevant to your interests.

4.4 Withdrawal of Consent

You may withdraw your consent to collect, use, or disclose your personal information at any time by contacting our Privacy Officer. However, we may continue to use your information where required by law or where we have another legal basis.

5. Cookies, Tracking, and Advertising

5.1 What Are Cookies?

Cookies are small text files stored on your device that help websites remember your preferences and track your activity.

5.2 Types of Cookies We Use

5.3 Advertising Partners and DART Cookies

Eprotech Pty Ltd uses Google DoubleClick for Publishers (DFP) and DART (Dynamic Advertising Reporting and Tracking) cookies to deliver and measure advertising. These cookies:

• Allow Google to show targeted ads based on your browsing history across websites.
• Help us understand which ads are effective.
• May be used by ad partners to serve ads on other websites.

You can opt out of DART cookies and personalized advertising by visiting Google's ad preferences and the NAI website.

5.4 Third-Party Advertising Networks

We may work with ad partners such as Google Ads, which may collect information for ad targeting. These partners have their own privacy policies, which we do not control.

6. How We Share Your Information

We share personal information only when necessary and only with the categories of recipients listed below:

6.1 Service Providers

We may share information with vendors who help us operate the Website, including:

• Hosting and CDN providers: to store and deliver Website content
• Email service providers: to send transactional and marketing emails (if consented)
• Analytics providers: Google Analytics and similar tools
• Customer support platforms: to manage support tickets
• Payment processors: Stripe & Paypal (if applicable)

All service providers are contractually required to protect your information and use it only for services we request.

6.2 Ad Networks and Marketing Partners

We share limited information (such as cookies, device identifiers, and aggregated usage data) with advertising networks to serve targeted ads. These partners may combine this data with information from other sources.

6.3 Legal Compliance and Safety

We may disclose information if required by law, court order, or government request, or to protect the rights, privacy, or safety of Eprotech Pty Ltd, users, or the public.

6.4 Business Transfers

If Eprotech Pty Ltd is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction. We will provide notice if your rights change materially.

6.5 No Sale of Personal Information

We do not sell personal information to third parties for money or other valuable consideration, except as described in this policy (e.g., sharing with ad networks as part of normal business operations).

7. Cross-Border Data Transfers

7.1 Where We Store Information

Your information may be processed and stored on servers located in Canada, the United States, or other countries where we or our service providers operate. The US does not have privacy laws equivalent to PIPEDA. By using the Website, you consent to the transfer of your information to countries outside Canada, including the US.

7.2 Safeguards for Cross-Border Transfers

We implement reasonable safeguards for cross-border transfers, including:

• Standard contractual clauses with service providers.
• Encryption of data in transit.
• Limitations on use to purposes consistent with this policy.

7.3 Accountability

Eprotech Pty Ltd remains accountable for personal information transferred to third parties and is responsible for their handling.

8. How Long We Keep Your Information

We retain personal information only as long as necessary to fulfill the purposes for which it was collected or as required by law:

Upon account deletion, we delete personal information within 30 days, except where we are required by law to retain it. Backups may contain deleted data but are overwritten periodically.

9. Security Safeguards

9.1 Administrative Safeguards

Restricted access to personal information (employees and contractors only, on a need-to-know basis).

Confidentiality agreements with all staff.

Regular privacy training.

9.2 Technical Safeguards

Encryption of data in transit (HTTPS/TLS).

Hashed password storage (never plaintext).

Firewalls and intrusion detection systems.

Regular security assessments and penetration testing.

Database encryption at rest (where applicable).

9.3 Physical Safeguards

Secure data centers with access controls.

Video surveillance and alarm systems (where applicable).

9.4 Limitations

No security measure is 100% secure. We implement industry-standard safeguards and monitor for vulnerabilities, but cannot guarantee absolute security.

10. Children and Minors

10.1 Age Restriction

We do not knowingly collect personal information from children under 13 years old. If we become aware that a child under 13 has provided information, we will delete such information promptly.

10.2 Minors Aged 13–17

Learners aged 13–17 may use the Website with parental or guardian consent (as noted in our Terms & Conditions). We encourage parents to review this policy and supervise their children's account use.

10.3 Parental Removal

Parents or guardians may request removal of their child's information by contacting [email protected].

11. Breach Notification and Incident Response

11.1 Assessment and Notification

If Eprotech Pty Ltd becomes aware of a breach of security that compromises your personal information, we will:

• Assess the incident and determine the risk to individuals.
• Notify affected individuals and relevant regulators (OPC, provincial authorities) without unreasonable delay, as required by PIPEDA and provincial laws.
• Provide clear information about the breach, steps you can take to protect yourself, and how to contact us.

11.2 Your Rights in Case of Breach

You have the right to request information about the breach and the steps we are taking to address it.

12. Your Privacy Rights

12.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide this information in a clear, understandable format within 30 days or as required by law.

12.2 Right to Correction and Amendment

You may request correction of inaccurate or incomplete information. We will update your information promptly.

12.3 Right to Deletion

You may request deletion of your personal information, subject to legal and contractual obligations. We will delete your information within 30 days unless we are required to retain it.

12.4 Right to Withdraw Consent

You may withdraw consent for collection, use, or disclosure at any time. This does not affect the lawfulness of uses prior to withdrawal.

12.5 Right to Portability

Upon request, we will provide your personal information in a portable format (e.g., CSV export) where technically feasible.

12.6 How to Exercise Your Rights

To exercise any of these rights, contact:

[email protected]

Include "Privacy Request" in the subject line. We may ask you to verify your identity before processing your request.

13. Do Not Track (DNT) Signals

Some browsers and devices include a "Do Not Track" (DNT) feature. The Website does not currently respond to DNT signals, as there is no industry standard. However, you can manage tracking through browser settings and ad preference tools.

14. Privacy Complaints and Dispute Resolution

14.1 Internal Complaint Process

If you believe your privacy rights have been violated, please contact our Privacy Officer:

[email protected]

We will acknowledge your complaint within 5 business days and investigate. We will provide a response within 30 days or longer if needed.

14.2 Escalation to Regulators

If you are not satisfied with our response, you may file a complaint with:

Office of the Privacy Commissioner of Canada (OPC)
30 Victoria Street
Gatineau, QC K1A 1H3
Canada
Phone: 1-800-282-1376
Website: www.priv.gc.ca

Provincial Privacy Commissioners (where applicable):

Québec: Commission d'accès à l'information du Québec (CAIQ)

Alberta: Office of the Information and Privacy Commissioner (OIPC)

British Columbia: Office of the Information and Privacy Commissioner for British Columbia (OIPC BC)

You may contact the appropriate authority for your province or territory.

15. Policy Changes and Updates

15.1 Changes to This Policy

Eprotech Pty Ltd may update this Privacy Policy to reflect changes in our practices, technology, law, or other factors. The "Effective Date" at the top of this policy indicates the last update.

15.2 Notification of Material Changes

If we make material changes that reduce your privacy rights, we will notify you via email or prominent notice on the Website at least 30 days before the change takes effect. Your continued use of the Website after notification constitutes acceptance of the updated policy.

15.3 Access to Previous Versions

We maintain a change log of significant updates. You may request a copy of a previous version by contacting [email protected].

16. Contact Information

Privacy Officer:

[email protected]

General Inquiries:

[email protected]