1. Scope
This Privacy Policy applies to upforce.ca and to personal information collected by Upforce Inc. in connection with our recruitment services. Upforce is headquartered in Edmonton, Alberta. The policy is governed by the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and the Alberta Personal Information Protection Act (Alberta PIPA).
2. What personal information we collect
From employers (via the Start a Hire and Contact forms)
- Company name, industry, size band, website.
- Contact first name, last name, role, work email, phone (E.164), preferred contact method.
- Province, city, country.
- Hiring need (positions count, roles, urgency, preferred pathway, budget band).
- Discovery context (how heard, notes).
- Consent record (terms accepted, marketing opt-in, privacy policy version).
- Technical metadata (submitted_at, language, source_page, referrer_url, UTM parameters).
From visitors generally
- Cookies and analytics (page views, session duration, referring source). See Section 7.
From candidates (via partner offices abroad, not via this website)
Candidate-side data is collected by our partner offices abroad under their own local privacy regimes and shared with Upforce only when an employer-side placement is being scoped. Candidate-side data is not collected via this website.
3. Why we collect it
We use personal information for the following purposes:
- To reply to hiring inquiries with a tailored proposal.
- To scope and deliver recruitment engagements.
- To meet Alberta Employment Agency Business Licensing Regulation record-keeping obligations.
- To send Upforce reports and insights, only if you opt in.
- To improve the website and our recruitment service.
- To comply with applicable laws, including Alberta record-keeping and IRPA §91 boundaries.
4. How long we retain it
- Active engagement records (employer-side placements): retained for the duration of the engagement plus 7 years (Alberta licensing record-keeping requirement).
- Inactive leads (no engagement opened): retained for 24 months from last contact, then deleted.
- Marketing list subscribers: retained until unsubscribe.
- Website analytics: retained for 26 months (default GA4 retention).
- Form audit logs (consent records, version strings): retained for 7 years.
5. How we store and protect it
Personal information is stored on Canadian-region infrastructure where available. Some service providers (such as transactional email and analytics) may store data in the United States or other jurisdictions under cross-border transfer provisions. Information is encrypted in transit over HTTPS and at rest where supported by the provider. Access is restricted to Upforce personnel with a job-related need.
We do not sell personal information. We do not share personal information with third parties for marketing purposes.
6. Your rights
- Right to access. You may request a copy of the personal information we hold about you.
- Right to correction. You may request that we correct inaccurate or incomplete information.
- Right to deletion. You may request that we delete your personal information, subject to record-keeping obligations under Alberta licensing law.
- Right to withdraw consent. You may withdraw consent to marketing communications at any time via the unsubscribe link in any email.
- Right to complain. You may complain to the Office of the Privacy Commissioner of Canada (PIPEDA) or the Office of the Information and Privacy Commissioner of Alberta (PIPA).
To exercise any of these rights, email privacy@upforce.ca.
8. Cross-border transfers
Some service providers we use (transactional email, analytics, hosting in certain configurations) may process personal information in the United States or other jurisdictions. We require these providers to handle data under contractual obligations consistent with PIPEDA. Specific provider names are available on request to privacy@upforce.ca.
Cross-border transfer is disclosed at the moment of consent. The privacy_policy_version field in our form records corresponds to the policy version in effect at the time of submission.
9. Changes to this policy
Material changes to this policy will be published with a new effective date and version string. We will notify subscribers via email and prompt for re-consent on the next form interaction where required. The most recent version always sits at upforce.ca/en/legal/privacy/.
10. Contact
Privacy questions, access requests, or correction requests: privacy@upforce.ca. General inquiries: contact us. For complaints, you may also reach the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta directly.