Privacy Policy
Last Updated: March 11, 2026 · Effective Date: March 11, 2026
This Privacy Policy explains how AlphaIT Ltd (operating CelpipPractice.com) collects, uses, stores, and discloses your personal information. We are committed to protecting your privacy in accordance with Alberta's Personal Information Protection Act (PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
Overview
At CelpipPractice.com, we take your privacy seriously. This Policy applies to all personal information collected through our website at celpippractice.com, our mobile or desktop applications, and any related services (collectively, the "Service").
By using the Service, you consent to the collection and use of your personal information as described in this Policy. If you do not agree with this Policy, please do not use the Service.
Who We Are
The data controller responsible for your personal information is AlphaIT Ltd, operating CelpipPractice.com. Our Privacy Officer can be reached at:
Privacy Officer
Our designated Privacy Officer oversees compliance with PIPA and PIPEDA and handles all privacy-related inquiries, access requests, and complaints.
Email: [email protected]
Information We Collect
We collect personal information only to the extent necessary to provide the Service. The categories of information we may collect include:
3.1 Information You Provide Directly
- Account Information: Your name, email address, and password when you register.
- Payment Information: Billing name and billing address collected at checkout. Payment card details (card number, expiry, CVV) are collected and processed directly by Stripe, Inc. We never receive, see, or store your raw card numbers.
- Practice Responses: Written responses, speaking recordings, and other content you submit while using the Service.
- Communications: Messages you send to us via email, contact forms, or support requests.
3.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent, practice scores, and interactions with the Service.
- Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution. Note: IP addresses and request metadata are also processed by Cloudflare as part of our security and content delivery infrastructure.
- Log Data: Server logs including access times, error logs, and referring URLs.
- Cookies & Tracking: Data collected via cookies and similar technologies — see Section 8 for full details.
3.3 Information We Do Not Collect
We do not knowingly collect sensitive personal information such as government-issued ID numbers, biometric data, or health information. We do not collect personal information from individuals under 18 years of age.
How We Use Your Information
We use personal information only for the purposes for which it was collected or for consistent purposes you would reasonably expect. Specifically:
| Purpose | Details |
|---|---|
| Providing the Service | Creating and managing your Account, processing payments, delivering practice content, generating scores and feedback. |
| Improving the Service | Analyzing usage patterns, identifying bugs, improving content quality and platform performance. |
| Communications | Sending account-related notices, subscription reminders, responses to your inquiries, and — with your consent — promotional emails. |
| Security & Fraud Prevention | Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other misuse. |
| Legal Compliance | Meeting our obligations under applicable law, responding to lawful requests from government authorities, and enforcing our Terms. |
| Analytics | Aggregated, anonymized analysis of how users interact with the Service to guide product decisions. No individual is identified in this analysis. |
Legal Basis for Collection (PIPA / PIPEDA)
Under PIPA (Alberta) and PIPEDA, we must have a valid basis for collecting, using, and disclosing personal information. Our legal bases are:
Consent
The primary basis for most collection. You provide consent when you register, make a purchase, or tick a marketing opt-in. You may withdraw consent at any time (subject to legal or contractual restrictions).
Contractual Necessity
Collection necessary to fulfil our agreement with you — for example, processing your payment, delivering your subscription, and maintaining your Account.
Legal Obligation
Where we are required by law to collect or disclose information — for example, tax records, fraud investigations, or responses to lawful court orders.
You have the right to withdraw consent at any time. Withdrawal of consent may mean we can no longer provide certain features of the Service to you. We will inform you of the consequences before you withdraw.
Third-Party Processors
We use the following categories of third-party service providers who may process your personal information on our behalf. All processors are bound by data processing agreements that restrict their use of your data.
| Category | Purpose | Data Shared |
|---|---|---|
| Stripe, Inc. (Payment Processor) | Securely processing all subscription and one-time payments. Stripe is PCI-DSS Level 1 certified. | Billing name, billing address, payment card data. Stripe's privacy policy: stripe.com/en-ca/privacy |
| Cloud Hosting Provider | Hosting the Service infrastructure and databases | All data stored in the Service |
| Cloudflare, Inc. (CDN & Security) | Content delivery, DDoS protection, DNS resolution, SSL/TLS termination, and bot mitigation. Every request to the Service passes through Cloudflare's network. | IP address, browser/device info, request metadata (URLs, headers, cookies). Cloudflare privacy policy: cloudflare.com/privacypolicy |
| Email Service Provider | Sending account, transactional, and marketing emails | Name, email address |
| Analytics Provider | Understanding how users interact with the Service | Anonymized/aggregated usage data, IP address (may be masked) |
| AI / Scoring Engine | Automated scoring of speaking and writing responses | Your submitted practice responses |
For a current list of specific third-party providers, or to raise a concern about a particular processor, please contact us at [email protected].
Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.
| Data Type | Retention Period |
|---|---|
| Account information (active) | For the duration of your account plus 2 years after closure |
| Payment & billing records | 7 years (as required by Canadian tax law) |
| Practice responses & scores | For the duration of your account; deleted within 90 days of account closure |
| Usage & analytics data | Up to 26 months in identifiable form; thereafter anonymized |
| Email correspondence | 3 years from the date of last communication |
| Backups | Securely overwritten within 90 days of the primary data deletion |
When personal information is no longer required, it is securely deleted or anonymized so that it can no longer be associated with you.
Cross-Border Data Transfers
AlphaIT Ltd is based in Alberta, Canada. However, some of our third-party service providers (including Stripe for payment processing, Cloudflare for CDN and security, cloud hosting, and analytics) may store or process your data in servers located outside Canada — including in the United States.
We take steps to ensure that any cross-border transfers are made to recipients who provide a comparable level of protection to that required under PIPA and PIPEDA, including by entering into data processing agreements with our service providers.
Your Privacy Rights
Under PIPA (Alberta) and PIPEDA, you have the following rights regarding your personal information:
Right to Access
You may request a copy of the personal information we hold about you, along with information about how it is being used.
Right to Correction
You may request that we correct inaccurate or incomplete personal information we hold about you.
Right to Withdraw Consent
You may withdraw your consent to our collection or use of your personal information at any time, subject to legal or contractual obligations.
Right to Complain
If you believe your privacy rights have been violated, you have the right to file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC).
Children's Privacy
If you are a parent or guardian and you believe your child under the age of 18 has provided us with personal information, please contact us immediately at [email protected]. We will take prompt steps to delete that information from our records.
Security
We implement reasonable technical, administrative, and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
Encryption
Data is encrypted in transit using TLS and at rest using industry-standard encryption.
Access Controls
Access to personal data is restricted to employees and contractors who need it to perform their duties.
Monitoring
We monitor our systems for unusual activity and potential security incidents.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Service. When we make material changes, we will:
- •Update the "Last Updated" date at the top of this page
- •Post a prominent notice on the Service
- •Send an email notification to your registered Account address (for significant changes)
Your continued use of the Service after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must stop using the Service.
Contact Us & Filing a Complaint
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a privacy complaint, please contact our Privacy Officer:
Office of the Information and Privacy Commissioner of Alberta
If your concern is not resolved by us within 30 days, you may file a complaint with the OIPC:
410 9925 109 Street NW
Edmonton, Alberta T5K 2J8
© 2026 AlphaIT Ltd. All rights reserved.
CelpipPractice.com is operated by AlphaIT Ltd, Edmonton, Alberta, Canada.