Privacy Policy
Effective October 19, 2026
In short: we collect what we need to deliver your document (your email, the corporation, payment confirmation) and basic visit information (IP address and approximate location) to prevent fraud and understand where our customers are. We don't sell your information, we don't use advertising trackers, and we erase IP addresses after 12 months.
1. Who is responsible
forMaD Health Inc. ("we", "us") operates CorpReport (corpreport.ca) and is responsible for personal information under its control. We follow the Personal Information Protection and Electronic Documents Act (PIPEDA). Our Privacy Officer can be reached at [email protected].
2. What we collect
| Information | Why |
|---|---|
| Your email address | To deliver your documents, send order updates and, if you ask, renewal reminders. |
| The corporations you search for and order (name, Ontario Corporation Number, status, city) | To place your order with the Registry. This is public information about corporations. |
| Your order details: document type, price, dates, status, Registry transaction number | To fulfill the order, handle support and refunds, and keep business and tax records. |
| Payment confirmation from Stripe (amount, status, a reference ID) | To confirm you paid. Stripe processes your card; we never receive the full card number. |
| IP address, approximate location (city, province, country) and browser type, when you search or order | To prevent fraud and abuse, keep the Service secure, and understand where our customers are. |
| How you reached us (referring site, campaign tags in the link) | To learn which channels work, in aggregate. |
| Whether you chose "physician" or "dentist" | To show relevant instructions and time your reminder. |
| The documents we obtain for you | To let you download them again from your order page. |
| Messages you send us | To answer you. |
Approximate location is derived from your IP address by our network provider. We do not use your device's GPS and do not track your precise location.
3. Consent
By using the Service you consent to the collection and use described here. Renewal reminders are optional and you can stop them at any time with the link in each reminder. You may withdraw consent for other uses by contacting us, though we may then be unable to provide the Service.
4. Who we share it with
We don't sell or rent personal information. We share it only with providers that help us run the Service, under agreements that protect it, and only as needed:
- Ontario Business Registry: to order your document. The Registry receives the corporation number and a delivery email address that we control.
- Stripe: payment processing.
- Supabase: database and document storage.
- Railway: application hosting.
- Cloudflare: network security, routing of our email addresses, and approximate location.
- Resend: sending email.
- Google (Gmail): the mailbox that receives documents from the Registry.
We may also disclose information if required by law, or to protect our rights or the safety of others.
5. Where it's stored
Some of our providers store or process information outside Canada, including in the United States. When information is outside Canada it may be accessible to authorities there under local law. We choose reputable providers and use their security controls.
6. How long we keep it
- Order and payment records: 7 years, for tax and accounting obligations.
- Documents we obtained for you: 2 years, so you can re-download them, then deleted. You can ask us to delete them sooner.
- IP addresses and browser details: erased automatically after 12 months. City and province may be kept in aggregate statistics.
- Search logs: 2 years.
7. Security
Information is encrypted in transit (HTTPS) and stored with access controls. Order pages use private links that can't be guessed. Only authorized people at forMaD Health Inc. can see order data. No system is perfectly secure; if a breach creates a real risk of significant harm, we'll notify you and the Privacy Commissioner as PIPEDA requires.
8. Cookies
We don't use advertising or third-party tracking cookies. The site may store small, non-identifying preferences in your browser (such as whether you chose "physician" or "dentist"). Our admin area uses a login cookie for staff only.
9. Your rights
You can ask to see the personal information we hold about you, have it corrected, or have it deleted where we're not required to keep it. Email [email protected]; we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada.
10. Children
The Service is for adults acting for themselves or their organizations. We don't knowingly collect information from children.
11. Changes
We may update this policy and will post the new effective date above. Significant changes will be highlighted on the site.
12. Contact
Privacy Officer, forMaD Health Inc. · [email protected]