Privacy Policy

This Privacy Policy explains how the Canadian Insurance Registry, operated by Buy Calls Inc., handles personal information.

1. Scope and accountability

This policy applies to Registry websites, accounts, submissions, communications and public professional profiles. Buy Calls Inc. is responsible for personal information under its control and has designated a Privacy Officer. We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial private-sector privacy laws.

2. Information we collect

• Account and contact information: name, email address, authentication identifiers, communication preferences and account roles.
• Claims and submissions: profile claims, corrections, supporting evidence, source links, feedback and communications with us.
• Saved services: subscriptions, watchlists, saved organizations and insurance-planning information you choose to save.
• Public professional information: names, professional roles, organizations, jurisdictions, relationships, verification status, source links and historical changes. Unverified licence numbers are not published.
• Usage and technical information: individual page-view paths, the search terms entered into Registry search, search result counts, interaction events and information needed to maintain and secure a session. Operational logs may also contain request status, timing and standard technical request information.

3. Where information comes from

We receive information directly from you and from public or authoritative sources, including provincial and federal regulators, corporate records, official professional or organization profiles, industry publications and submitted evidence. We may compare sources, normalize names and preserve provenance so readers can understand how a record was created or changed.

4. How we use information

We use information to operate and secure the Registry; authenticate users; review, publish and correct records; respond to requests; send requested updates; provide saved features; measure reliability and improve the service; prevent abuse; and meet legal obligations. We do not sell personal information.

5. Consent and other lawful authority

Where consent is appropriate, we explain the purpose and obtain meaningful consent. You may withdraw consent subject to legal or contractual restrictions and reasonable notice. Some processing is necessary to provide a feature you request, secure the service, maintain an accurate public-interest professional registry or comply with law. Withdrawing consent does not require us to erase authoritative public records or prior lawful processing.

6. When we disclose information

Public professional information is visible in the directory. We may also disclose information:

• to the authentication provider configured for the relevant service. The published Registry currently uses Clerk for account authentication and session management;
• to Replit and PostgreSQL infrastructure used to host the application and database;
• to a configured transactional email provider when sending a message or update you requested;
• to professional advisers and security providers under appropriate confidentiality controls;
• to a regulator, court, law-enforcement body or other person where required or permitted by law; or
• in connection with a business transaction, subject to applicable notice and protection requirements.

We do not sell personal information, use it for behavioural advertising or disclose private account details merely because someone asks.

7. Retention

Retention depends on the information and purpose. We keep account, claim, evidence, audit, subscription and security records while needed to provide the service, demonstrate decisions, meet legal obligations, resolve disputes and prevent abuse. Public professional data and change history may need to remain available for registry integrity and historical accuracy even when a correction or deletion is requested. We limit, de-identify or securely delete information when retention is no longer justified.

8. Cookies and your choices

Essential Clerk session/authentication cookies and Registry CSRF/security cookies support accounts and authenticated or administrative forms and cannot be disabled through preferences. The preference control lets you choose optional analytics browser storage or integrations if these are enabled now or later; current server-side aggregate analytics does not require cookies. You can reopen Cookie Preferences from the footer and change your choice.

Our current site analytics is first-party, server-side and cookie-free. It stores event-level page paths, search queries, result counts and selected interaction events in the Registry database so authorized administrators can understand use and diagnose failed searches. Operational logs separately record request status and timing. We retain these records only while reasonably needed for service measurement, integrity, troubleshooting and security. Do not enter sensitive personal information into the Registry search box.

The cookie preference control does not disable this cookie-free server-side measurement. No optional browser analytics integration is currently loaded. If we introduce one, it must respect the optional analytics preference. We do not use advertising cookies.

See Your Privacy Rights to request access or correction, ask for deletion where applicable, withdraw consent, or challenge our response.

9. Safeguards and international processing

We use administrative, technical and physical safeguards appropriate to the information and risk, including role-based access, authentication, audit records and security monitoring. No online service can promise absolute security. Service providers may process information in Canada or other countries, where it may be subject to local law. We use contractual and organizational measures appropriate to applicable Canadian law.

10. Children

The public directory may be browsed generally, but accounts, submissions, profile claims, subscriptions, saved plans and watchlists are intended for people aged 18 or older. We do not knowingly request personal information from children for these features. Contact the Privacy Officer if you believe a child has provided information.

11. Changes to this policy

We may update this policy as the Registry, law or our practices change. We will post the revised policy and update the date above, and provide additional notice where required. Material changes do not retroactively reduce rights required by law.

12. Contact and complaints

Contact the Privacy Officer at privacy@autovoice.ca, call +1-833-851-1400, or write to the address below. Buy Calls Inc. currently receives Canadian Insurance Registry privacy requests through its established AutoVoice privacy mailbox; include “Canadian Insurance Registry” in the subject so the request is routed correctly.

Contact us first so we can investigate. If unresolved, you may complain to the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.