Canada Privacy Policy (PIPEDA)

Introduction

DolRise is a global platform built on principles of dignity, transparency, and responsible technology. This Canada Privacy Policy explains how DolRise collects, uses, stores, and protects personal information of individuals located in Canada, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

DolRise recognises that personal information represents more than technical data. It reflects individual identity, preferences, and personal context. For this reason, DolRise treats the processing of personal information as both a legal obligation and an ethical responsibility.

This Canada Privacy Policy operates alongside the DolRise Global Privacy Policy. The Global Privacy Policy establishes baseline privacy standards applicable worldwide, while this policy provides additional disclosures and safeguards required under Canadian law. In the event of any inconsistency, this Canada Privacy Policy shall prevail for individuals located in Canada.

Under PIPEDA, DolRise acts as an organisation responsible for personal information under its control, while users are recognised as individuals with enforceable rights regarding their personal information. DolRise processes personal information only for identified purposes and with appropriate authority.

DolRise may rely on global technical infrastructure, including data storage, security services, and operational systems located outside Canada, to deliver its services. Where personal information is processed outside Canada, DolRise applies safeguards to ensure a level of protection consistent with PIPEDA.

Certain categories of information, including identity verification (KYC) data, financial details, and account security information, are processed only where necessary and are protected using strong technical and organisational security measures such as encryption, access controls, and monitoring.

This policy reflects DolRise’s commitment to accountability, transparency, and respect for the privacy rights of individuals in Canada.

Scope & Applicability

This Canada Privacy Policy applies to the processing of personal information relating to individuals who are located in Canada and who access or use DolRise’s services, whether through web-based platforms, mobile applications, or other digital interfaces.

This policy governs the collection, use, disclosure, retention, and protection of personal information by DolRise in the course of its commercial activities, as defined under the Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy applies regardless of whether personal information is collected directly from users or indirectly through lawful interactions with DolRise’s systems, provided that such information is under the control of DolRise.

This Canada Privacy Policy does not apply to information that has been irreversibly anonymised such that it can no longer be associated with an identifiable individual. Aggregated and anonymised data may be used by DolRise for analytics, system improvement, and service reliability without further notice.

This policy applies in conjunction with the DolRise Global Privacy Policy and any other applicable regional policies. Where a conflict arises between this policy and the Global Privacy Policy, this Canada Privacy Policy shall prevail for individuals located in Canada.

This policy does not apply to third-party services, platforms, or websites that may be linked from DolRise. DolRise is not responsible for the privacy practices or content of such third-party services.

By accessing or using DolRise from Canada, users acknowledge that their personal information will be processed in accordance with this policy and applicable Canadian privacy laws.

Legal Basis & Consent

DolRise collects, uses, and discloses personal information in accordance with the consent-based framework established under the Personal Information Protection and Electronic Documents Act (PIPEDA). Consent may be obtained expressly or impliedly, depending on the nature of the information and the context in which it is processed.

Express consent is typically obtained where personal information is sensitive in nature, including identity verification (KYC) data, financial details, and account security information. Express consent may be provided through affirmative actions, such as completing forms, submitting documents, or enabling specific features.

Implied consent may apply where personal information is less sensitive and where the purpose of collection would be reasonably understood by the individual, such as basic account functionality, service delivery, and platform operations.

DolRise limits the collection of personal information to what is necessary for identified and legitimate purposes, including account creation, service provision, safety and security, regulatory compliance, and the prevention of fraud or misuse.

Individuals may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect DolRise’s ability to provide certain services or features.

In limited circumstances permitted by PIPEDA, DolRise may collect, use, or disclose personal information without consent, including where required by law, for security purposes, or to respond to lawful requests from public authorities.

DolRise documents its consent practices and periodically reviews them to ensure alignment with evolving legal standards and user expectations.

Accountability & Responsibility

DolRise is responsible for personal information under its control and is accountable for compliance with the principles set out in the Personal Information Protection and Electronic Documents Act (PIPEDA).

DolRise has implemented internal policies, procedures, and technical measures designed to protect personal information throughout its lifecycle, including collection, use, disclosure, retention, and deletion.

Access to personal information is restricted to authorised personnel and service providers who require such access to perform their duties. All such access is governed by confidentiality obligations and security controls.

DolRise conducts periodic reviews of its privacy practices to ensure continued compliance with applicable laws and to identify opportunities for improvement in privacy protection and organisational accountability.

Where personal information is processed on DolRise’s behalf by third-party service providers, DolRise requires those providers to implement appropriate safeguards and to process personal information only in accordance with DolRise’s instructions and applicable law.

DolRise takes reasonable steps to ensure that personal information is accurate, complete, and up to date for the purposes for which it is used.

Individuals may contact DolRise using the contact details provided in this policy to raise questions, concerns, or complaints regarding the handling of their personal information.

Individual Rights under PIPEDA

Individuals located in Canada have specific rights regarding their personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA). DolRise respects these rights and provides reasonable mechanisms for individuals to exercise them.

Right of Access. Individuals have the right to request access to personal information held by DolRise and to receive information about how that information is used and disclosed, subject to limited legal exceptions.

Right to Correction. Individuals may request correction of personal information that is inaccurate, incomplete, or outdated. Where appropriate, DolRise will amend the information or annotate it to reflect the correction request.

Right to Challenge Compliance. Individuals may challenge DolRise’s compliance with PIPEDA and raise concerns regarding the handling of their personal information.

Right to Withdraw Consent. Individuals may withdraw consent to the collection, use, or disclosure of their personal information, subject to legal or contractual restrictions and reasonable notice.

Requests relating to personal information must be submitted in writing using the contact details provided in this policy. DolRise may require reasonable verification of identity before responding to a request, in order to protect personal information from unauthorised access.

DolRise endeavours to respond to access and correction requests within a reasonable timeframe and in accordance with applicable legal requirements.

Where an individual is not satisfied with DolRise’s response, they may have the right to escalate the matter to the Office of the Privacy Commissioner of Canada.

Retention & Safeguards

DolRise retains personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to enforce applicable agreements.

Retention periods vary depending on the nature of the information and the purpose of processing. Where personal information is no longer required, DolRise securely deletes or anonymises such information in accordance with internal data retention policies.

Certain categories of information, including identity verification (KYC) records, financial transaction data, and security logs, may be retained for longer periods where required by law or to prevent fraud, resolve disputes, or comply with regulatory requirements.

DolRise implements administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorised access, disclosure, copying, use, or modification.

Technical safeguards may include encryption, access controls, monitoring, and secure storage systems. Organisational safeguards include staff training, confidentiality obligations, and internal policies governing data handling.

DolRise regularly reviews its security practices and updates safeguards as necessary to reflect evolving risks, industry standards, and legal requirements.

Despite these safeguards, no system can be guaranteed to be completely secure. DolRise encourages users to take reasonable steps to protect their own account credentials and devices.

International Transfers

DolRise operates as a global platform and may process personal information using systems, infrastructure, or service providers located outside Canada. This may include data storage, security services, payment processing, customer support, and operational infrastructure.

When personal information is transferred outside Canada, it may be subject to the laws of the jurisdiction in which it is processed and may be accessible to public authorities in accordance with those laws.

DolRise takes reasonable steps to ensure that personal information transferred internationally receives a level of protection comparable to that required under PIPEDA. These measures may include contractual safeguards, confidentiality obligations, security controls, and internal policies governing data handling.

DolRise does not sell personal information and does not permit third-party service providers to use personal information for their own independent purposes.

By using DolRise from Canada, individuals acknowledge and consent to the transfer, processing, and storage of their personal information outside Canada as described in this policy.

Complaints & Contact Information

DolRise is committed to addressing questions, concerns, and complaints regarding the handling of personal information in a fair and timely manner.

Individuals located in Canada may contact DolRise to request access to personal information, seek corrections, withdraw consent, or raise concerns about privacy practices by contacting:

Email: [email protected]

DolRise may require reasonable verification of identity before responding to a request, in order to protect personal information from unauthorised access.

DolRise will investigate privacy-related complaints and endeavour to respond within a reasonable timeframe in accordance with applicable law.

If an individual is not satisfied with DolRise’s response, they may have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

Contact details for the Office of the Privacy Commissioner of Canada are available at: https://www.priv.gc.ca.