Privacy
How we handle personal information
We follow the fair information principles in Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) as a best practice for this public-interest research site, whether or not a given activity is formally “commercial.”
Effective: · Last reviewed:
Accountability
Privacy contact for SyriaInsight.ca: hello@syriainsight.ca. Questions, access requests, corrections, and complaints may be sent to this address. You may also contact the Office of the Privacy Commissioner of Canada.
Guidance we follow as a baseline: PIPEDA requirements in brief (OPC) and How PIPEDA applies to charitable and non-profit organizations (OPC).
What we collect
- Support intake: email address, organization type, issue type, jurisdictions, and the description you provide.
- Optional research consent: a yes/no flag that is separate from receiving informational triage.
- Technical: standard hosting logs (for example IP address and user agent) via our host (currently Vercel). We do not sell, barter, or lease personal information or contact lists.
Identifying purposes & consent
- Primary purpose: respond to your support request and improve triage quality.
- Secondary purpose (opt-in only): use anonymized patterns for research or public-interest advocacy. Declining does not reduce support.
- We do not use intake data for marketing lists or for sale to third parties.
- Consent for optional research use is collected separately from the required privacy acknowledgement.
Limiting collection, use, disclosure & retention
Collect only what is needed for triage. Do not send passwords, government identity document images, or classified material. Intake records are retained only as long as needed for response and basic accountability (target review within 12 months), then deleted or anonymized where practicable. Access is limited to operators who need it.
Safeguards & openness
Transmission to our processors uses HTTPS. This notice is public on the website. We will update the effective date when practices change materially.
Form data processing & hosting
Support intake: Submissions are transmitted via encrypted HTTPS and may be delivered by email and/or a form processor (currently Formspree) acting on our instructions. The public site is hosted on Vercel. Intake records are restricted to SyriaInsight operators for informational case triage and are retained only as long as needed for response and basic accountability (target review within 12 months), then deleted or anonymized where practicable.
Cross-border processing: Formspree, Vercel, and related infrastructure may store or process personal information outside Canada. By submitting the support form, you should assume a cross-border transfer may occur. We do not claim Canadian-only data residency for intake or hosting.
Individual access & challenging compliance
Email hello@syriainsight.ca to request access to, correction of, or deletion of your intake record, subject to legal retention needs. We aim to respond within 30 days. If unresolved, you may contact the OPC.