Privacy. Canada's federal private-sector privacy law is PIPEDA. Alberta and British Columbia have their own similar laws, and Quebec has strengthened its rules for how businesses collect and use personal information. A site that collects names, emails or order details should say what it collects and why.
Data breaches. Under PIPEDA, a breach that creates a real risk of significant harm has to be reported to the Privacy Commissioner and to the people affected, and businesses must keep a record of breaches. Prompt updates, monitoring and tested backups make a breach less likely and easier to handle.
Email and text messages. Canada's anti-spam law, known as CASL, requires consent before sending commercial electronic messages and a working unsubscribe. It covers more than email.
Language. Businesses serving customers in Quebec often need French-language content, and Ontario sets website accessibility requirements for some organisations. These affect what your site contains. We keep the site working and secure; we do not translate it or certify its accessibility, so tell us what you need and we will say plainly what is covered.