Privacy Policy

​

Effective date: March 15, 2026
Controller: GleamGo Inc., incorporated and operating in Edmonton, Alberta. Contact: gleamgo-inquiry@outlook.com

​

GleamGo respects your privacy and is committed to protecting personal information in accordance with Alberta’s Personal Information Protection Act (PIPA). This policy explains what personal information we collect, why we collect it, how we use and disclose it, how long we keep it, the safeguards we use, and how you can exercise your rights.

 

1. Scope and legal framework

Scope: This policy applies to personal information collected by GleamGo through our website, mobile apps, in‑person services, phone, email, and other interactions with customers, suppliers, job applicants, and website visitors.

 

Legal framework: GleamGo collects, uses, and discloses personal information in accordance with Alberta’s PIPA. Where federal law applies, we will also comply with PIPEDA. We process personal information only for purposes that are reasonable and that we have identified in this policy.

 

2. Data inventory, purposes, and legal basis

Below is a complete inventory of the categories of personal information we collect, the specific purposes for each category, and the legal basis under which we process it.

 

Notes:

• We do not collect more personal information than is necessary for the stated purposes.

• We will identify any additional purposes at or before the time of collection and obtain consent where required.

 

3. Retention policy and deletion

We retain personal information only as long as necessary for the purposes described and to meet legal, tax, or regulatory obligations. Below is our retention schedule.

 

​

​

 

 

 

 

 

 

 

 

 

 

 

Deletion and anonymization: When retention periods expire, we securely delete or irreversibly anonymize personal information. If deletion is not possible (e.g., backups), we isolate the data and delete it at the next backup cycle.

 

4. Security, third parties, and cross‑border transfers

Security measures

We maintain reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including:

• Encryption of payment data in transit and at rest where feasible.

• Role‑based access controls and least‑privilege access for staff.

• Multi‑factor authentication for administrative accounts.

• Logging and monitoring of access to systems containing personal information.

• Regular security assessments and staff training.

• Secure disposal procedures for physical and electronic records.

While we strive to protect personal information, no system is completely secure. If you believe your information has been compromised, contact gleamgo-inquiry@outlook.com immediately.

Third‑party processors and categories

We share personal information with third parties only as necessary to provide services and operate our business. Categories of recipients include:

• Payment processors (for billing).

• Cloud hosting and IT service providers (data storage, backups).

• Marketing and analytics providers (email delivery, analytics).

• Professional advisors (lawyers, accountants) when required.

• Government, law enforcement, or regulators when required by law.

We require third parties to protect personal information and process it only for specified purposes under contract.

 

Cross‑border transfers

Some service providers may store or process data outside Canada. When we transfer personal information across borders, we implement contractual, organizational, and technical safeguards (e.g., encryption, contractual data‑processing terms) to provide a comparable level of protection.

 

5. Your rights and how to exercise them

Under PIPA you have rights regarding your personal information. GleamGo provides the following:

• Access: You may request access to personal information we hold about you.

• Correction: You may request correction of inaccurate or incomplete information.

• Withdrawal of consent: Where processing is based on consent, you may withdraw consent at any time (withdrawal does not affect processing already carried out).

• Deletion/erasure: You may request deletion where retention is no longer necessary and no legal obligation prevents deletion.

• Objection: You may object to processing based on legitimate interest; we will assess and respond.

How to make a request: Send a written request to gleamgo-inquiry@outlook.com with sufficient detail to identify you and the information requested. We will respond within 30 days. If we need more time, we will notify you and provide a reasonable extension.

 

Fees: We will not charge for making a request unless permitted by law; if a fee is required, we will notify you in advance.

Complaints: If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta.

 

6. Breach notification procedure and template

Breach handling overview

GleamGo maintains an incident response plan. On discovery of a breach involving personal information, we will:

1. Contain and assess the incident to determine scope and risk.

2. Notify affected individuals without unreasonable delay if the breach creates a real risk of significant harm.

3. Notify the Office of the Information and Privacy Commissioner of Alberta where required by PIPA.

4. Provide remediation steps and support to affected individuals.

5. Document the incident, response actions, and lessons learned.

We aim to notify affected individuals as soon as practicable and will include the information described below.

Breach notification template (publication‑ready)

Subject: Important notice about a data security incident at GleamGo

Date: [Date of notification]

What happened: On [date discovered], GleamGo detected a security incident that resulted in unauthorized access to certain personal information.

What information was involved: The incident may have affected the following types of information: [list categories, e.g., name, email address, service history, payment last four digits].

What we are doing: We immediately contained the incident, engaged cybersecurity specialists, and are investigating the scope. We have reset affected credentials, implemented additional security measures, and are monitoring systems for further activity.

What you can do: We recommend you [change your password; monitor your account and statements; contact your financial institution if you notice suspicious charges; consider placing a fraud alert with credit bureaus] as applicable.

For help: Contact our privacy team at gleamgo-inquiry@outlook.com or call [phone number] between [hours]. We will provide updates as we learn more.

Reporting to regulator: We have notified the Office of the Information and Privacy Commissioner of Alberta as required.

We apologize for the inconvenience and take the protection of your information seriously.

 

7. Cookies, tracking, and marketing

Cookies and tracking: Our website uses cookies and similar technologies for functionality, analytics, and marketing. You can manage cookie preferences through our cookie banner or your browser settings. Essential cookies required for site operation are used without consent; analytics and advertising cookies require consent.

Marketing communications: We send marketing communications only with your consent. You may opt out at any time using the unsubscribe link in emails or by contacting gleamgo-inquiry@outlook.com .

 

8. Children’s privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

 

9. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. We will post the revised policy on our website with an updated effective date. For material changes, we will provide prominent notice.

 

10. Contact and supervisory authority

Privacy contact: gleamgo-inquiry@outlook.com ; GleamGo Inc.  We will respond to privacy inquiries and requests within 30 days.

Regulator: Office of the Information and Privacy Commissioner of Alberta (OIPC Alberta) handles complaints under PIPA.

 

Appendix A — Quick reference: data inventory (single‑line table)