NorthStar Digital Skills Ltd. (“NorthStar Digital Skills Ltd.”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information we collect, use, disclose, and retain in the course of operating our computer-skills business in Canada. This Privacy Policy explains how we handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
1. Introduction and company information
This Privacy Policy applies to personal information collected by NorthStar Digital Skills Ltd. in connection with our website, online learning services, course registration, communications, customer support, marketing activities, and any other interaction with us.
Business name: NorthStar Digital Skills Ltd.
Address: Suite 410, 3501 14 St SW, Calgary, AB T2T 3W1, Canada
Email: [email protected]
Phone: +1 (403) 784-9261
For the purposes of this Privacy Policy, “personal information” means information about an identifiable individual, as defined by applicable Canadian privacy laws. Depending on the context, this may include information you provide directly to us and information collected automatically when you interact with our services.
2. Data collection and processing
We collect personal information in several ways, including directly from you, automatically through our website and digital systems, and from third parties where permitted by law. The categories of information we may collect include:
- Identification and contact information: name, email address, phone number, mailing address, and business contact details.
- Account and registration information: login credentials, account preferences, course enrolment details, progress, certifications, and attendance records.
- Payment and transaction information: billing details, payment confirmation, and transaction history. We generally do not store full payment card information when payments are processed by third-party payment providers.
- Communications: messages sent to us, support requests, feedback, survey responses, and correspondence.
- Technical and usage information: IP address, browser type, device identifiers, operating system, pages viewed, time and date of visits, referral data, and interaction with our website or online learning tools.
- Learning and performance information: course participation, assessment results, assignments, and completion status.
- Marketing and preference information: communication preferences, newsletter subscriptions, and consent choices.
We process personal information only for purposes that are reasonable in the circumstances and limited to what is necessary for those purposes.
3. Purpose of data processing
We may use personal information for the following purposes:
- to provide and administer our computer-skills training services;
- to register users for courses, manage accounts, and deliver educational content;
- to process payments, issue receipts, and manage billing;
- to communicate with you about your account, our services, updates, and support requests;
- to evaluate progress, issue certificates, and maintain training records;
- to personalize user experience and improve our website, services, and educational offerings;
- to send marketing communications where permitted by law and subject to your preferences or consent;
- to detect, prevent, and investigate fraud, unauthorized access, misuse, or security incidents;
- to comply with legal, regulatory, tax, accounting, and reporting obligations;
- to enforce our terms and protect our rights, property, and safety, and those of our users or others.
4. Legal basis for processing
Canadian privacy law does not always rely on the same legal-basis framework used in other jurisdictions. However, we process personal information on the following grounds, as applicable:
- Consent: where you have provided consent, express or implied, including for certain marketing communications and optional data collection.
- Contractual necessity: where processing is necessary to provide the services you request or to fulfill our agreements with you.
- Legal obligation: where processing is required to comply with applicable laws or lawful requests.
- Legitimate and reasonable purposes: where processing is necessary for purposes that a reasonable person would consider appropriate in the circumstances, including service delivery, security, and business operations, subject to applicable legal requirements.
Where consent is required under law, we will seek it in a meaningful way and you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.
5. Data sharing and third parties
We do not sell personal information. We may disclose personal information to third parties only where necessary and permitted by law, including:
- Service providers: hosting providers, learning management platform providers, email delivery services, analytics providers, customer support tools, payment processors, and IT/security service providers.
- Professional advisors: lawyers, accountants, auditors, insurers, and other advisors who require access in connection with their services.
- Government and regulatory authorities: where required by law, court order, subpoena, or lawful request, or where disclosure is otherwise authorized.
- Business transactions: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality protections.
- Other disclosures: where you direct us to disclose information or where disclosure is necessary to protect our rights, users, or the public.
We require third parties that process personal information on our behalf to implement appropriate safeguards and use the information only for the purposes for which it was disclosed.
6. Data transfer to third countries
Your personal information may be stored or processed outside your province, territory, or country, including in the United States or other jurisdictions where our service providers operate. As a result, your information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities in accordance with local laws.
We take reasonable steps to ensure that such transfers are protected by appropriate contractual, organizational, and technical safeguards consistent with Canadian privacy requirements. By using our services or providing personal information to us, you acknowledge that cross-border processing may occur as described in this Policy.
7. Storage duration
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to meet legal, accounting, tax, or reporting requirements, to resolve disputes, and to enforce our agreements.
Retention periods vary depending on the type of information and purpose of processing. For example:
- account and course records may be retained for the duration of the relationship and for a reasonable period thereafter;
- transaction and tax records may be retained for the period required by applicable law;
- support communications may be retained for troubleshooting, audit, and service quality purposes;
- marketing contact data is retained until you opt out, withdraw consent, or we determine it is no longer needed.
When personal information is no longer required, we will securely delete, anonymize, or destroy it in accordance with our retention practices and legal obligations.
8. User rights
Subject to applicable law, you may have the following rights with respect to your personal information:
- Access: the right to request access to the personal information we hold about you and to receive information about how it has been used and disclosed.
- Rectification: the right to request correction of inaccurate, incomplete, or outdated personal information.
- Erasure: the right to request deletion of personal information in certain circumstances, subject to legal retention requirements.
- Restriction: the right to request that we restrict certain processing in appropriate circumstances.
- Data portability: where applicable, the right to receive a copy of certain personal information in a structured and commonly used format, or to have it transferred to another organization where technically feasible and legally required.
- Objection: the right to object to certain uses of your personal information, including direct marketing where applicable.
To exercise your rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable Canadian privacy law.
9. Withdrawal of consent
Where we rely on your consent to collect, use, or disclose personal information, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice.
Please note that withdrawing consent may affect our ability to provide certain services, such as course registration, account access, or marketing communications. We will explain the implications of withdrawal where relevant.
To withdraw consent, contact us at [email protected] or by phone at +1 (403) 784-9261.
10. Right to complain
If you have concerns about our privacy practices, we encourage you to contact us first so we can address your concerns promptly.
You also have the right to file a complaint with the appropriate privacy regulator in Canada. Depending on your location and the applicable law, this may include the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.
We will cooperate with regulators and investigate complaints in accordance with applicable requirements.
11. Data security
We use reasonable physical, organizational, and technical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures may include:
- access controls and role-based permissions;
- password protection and authentication measures;
- encryption where appropriate;
- secure hosting and firewall protections;
- staff confidentiality obligations and privacy training;
- monitoring for suspicious activity and security incidents;
- periodic review of privacy and security practices.
No method of transmission or storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security. If we become aware of a privacy breach involving personal information under our control, we will respond in accordance with applicable law, including notifying affected individuals and regulators where required.
12. Contact information
If you have questions, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact:
NorthStar Digital Skills Ltd.
Suite 410, 3501 14 St SW
Calgary, AB T2T 3W1
Canada
Email: [email protected]
Phone: +1 (403) 784-9261
We encourage you to include sufficient detail in your request so we can respond effectively. We may ask for additional information to verify your identity and protect your privacy.
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. When we make material changes, we will take reasonable steps to notify you, which may include posting the updated Policy on our website and updating the effective date below.
Your continued use of our services after the effective date of an updated Privacy Policy indicates your acknowledgment of the revised Policy to the extent permitted by law.
Effective date: September 16, 2026