Privacy policy · Life Capital

Who we are

Life Capital runs financial-literacy game sessions, trainer courses and tournaments for young people, schools and organizations. We are based in Carleton Place, Ontario, Canada. This policy covers the website lifecapital.ca and its Ukrainian and French pages.

Privacy contact: info@lifecapital.ca. Write to this address for any question, request or complaint about your personal information.

Who the site is for

The enquiry forms are meant for adults: teachers, school staff, parents, trainers, sponsors and partner organizations. We do not knowingly collect personal information from children under 14. Students aged 14 to 18 may register themselves for tournament announcements; for a student under 14, a parent or the school registers. If you believe a child has sent us their details, write to info@lifecapital.ca and we will delete them.

In school sessions students play with paper ledgers. We do not collect students’ personal information through the game itself.

What we collect and why

What you type into a form. Depending on the form: your name, email address, phone number, organization, city and country, group size, the kind of enquiry, a preferred date, a registration category, the name of the trainer who referred you, and your message. We use it to answer you, arrange sessions and tournaments, and process trainer applications. Email and a phone number are for replying to you; we add nobody to a mailing list without asking.
Where you came from. Along with a form we receive the page you sent it from, the page you landed on, the referring website, campaign tags in the link you followed (such as utm tags) and the time of your visit. If you accepted analytics, these describe your first visit; otherwise, the current one. We use this to learn which schools, partners and channels bring enquiries.
A shortened fingerprint of your IP address. We store a one-way hash of your IP address with each enquiry, and short-lived counters per IP address, to stop automated spam. The IP address itself is not stored with your enquiry.
Problem reports. The “Report a bug” button sends your message, an optional email address, the page address without its query string, your screen size and your browser’s user-agent string, so we can reproduce and fix the fault.
Link clicks to our booking and registration pages. When you follow a link to our booking or tournament registration service, we record which link, on which page, in which language, the country your connection comes from, and the details in point 2. No name or contact detail is attached.
Analytics. With your consent, Google Analytics measures visits, pages viewed, device type and approximate location. Cloudflare Web Analytics counts visits and page speed without cookies.

We rely on your consent (the form you send, or your choice in the cookie notice) and, for spam protection and site security, on our legitimate interest in keeping the service working. You can withdraw consent at any time; this does not affect what was done before.

Who processes your information

Cloudflare, Inc. hosts the site, runs the code that receives forms, and stores enquiry records and counters.
Resend delivers each enquiry to our inbox by email.
Google (Google Analytics), only if you accept analytics cookies.
Our email provider holds the enquiries we receive.

These providers may process information outside Canada, including in the United States and the European Union. Information stored there may be accessible to authorities under local law. We do not sell or rent personal information, and we do not use it for advertising.

Links to our booking and registration service, Facebook, Instagram and LinkedIn take you to sites with their own privacy policies.

Cookies and browser storage

lc_consent, lc_consent_at (local storage): remember your cookie choice and when you made it. We ask again after 12 months.
lc_attr_v1 (local storage): remembers how you first arrived, so an enquiry can name its source. Set only if you accept analytics.
_ga, _ga_0F1W7PP8XP (cookies, Google Analytics): set only if you accept analytics.

Until you choose, Google Analytics does not load and sets no cookies. You can change your choice at any time with Cookie settings, a link in the footer of every page. Declining removes the Google Analytics cookies and the visit record from your browser.

Photographs

We photograph tournaments, school sessions and trainer courses, and we publish some of those pictures on this site and on our social media pages. They show play in progress: the tables, the teams and the room. The organizer of each event collects photography consent at registration — from a parent or guardian for a participant under 18, and from the school when a school books a session.

Names of participants under 18 are never published beside their photographs, and no result is published under the name of a minor. If you or your child appear in a picture and you want it taken down, write to info@lifecapital.ca with the page address and a short description of the photograph. We remove it from the site and ask for it to be removed from our social media pages.

How long we keep it

Enquiries and trainer applications: up to 24 months after we receive them, then deleted, unless an ongoing partnership or tournament registration needs them longer.
Link-click records: 13 months.
Anti-spam counters: 24 hours at most.
Google Analytics data: as set in our Google Analytics account.

Your rights

You can ask to see the personal information we hold about you, correct it, have it deleted, withdraw consent, or receive a copy in a portable format. Write to info@lifecapital.ca. We answer within 30 days.

In Canada you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca); in Quebec, to the Commission d’accès à l’information (cai.gouv.qc.ca). In the European Union and Ukraine you can complain to your national data protection authority; in Ukraine that is the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua).

Security

Forms travel over HTTPS. Access to enquiry records is limited to the people who answer them. If a breach creates a real risk of significant harm, we will notify the people affected and the regulator as the law requires.

Changes

When this policy changes, we update the date at the top of this page.