Privacy Policy

1. Introduction

LearnShift Inc. ("LearnShift," "we," "us," or "our") respects your privacy and is committed to protecting personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. This Privacy Policy explains how we collect, use, disclose, retain and safeguard personal information when you visit learnshift.life (the "Site"), submit enquiries through our contact form, engage our AI transformation advisory services, or otherwise interact with us.

LearnShift provides education-focused AI transformation advisory — including strategy, governance, educator enablement and analytics interpretation — from our office at 1546 Barrington Street, Suite 200, Halifax, Nova Scotia. LearnShift holds no accreditation status. We do not sell personal information. We do not provide essay-writing, assignment-completion or exam-taking services.

2. Scope and accountability

This policy applies to personal information under our control as an organization subject to PIPEDA. Where we process personal information solely on behalf of a client under a written services agreement, the client may be the organization accountable under privacy law for that processing; we act as a service provider and process such information only according to contractual instructions.

LearnShift Inc. is accountable for compliance with the principles set out in Schedule 1 of PIPEDA: accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access and challenging compliance. We have designated a privacy contact responsible for day-to-day implementation of this policy (see Section 15).

3. Information we collect

3.1 Information you provide directly

When you complete our contact form or correspond with us, we may collect your name, email address, telephone number, organization name, job title, message content and the subject line you select (for example, "AI-readiness review request"). We require explicit PIPEDA consent via checkbox before form submission.

During advisory engagements, clients may provide additional information: stakeholder lists, policy documents, anonymized analytics exports, workshop attendance records and billing details. We collect only information reasonably necessary to deliver contracted services.

3.2 Information collected automatically

When you browse the Site, our servers and optional analytics tools (if you consent to analytics cookies) may collect technical data such as IP address, browser type, device type, referring URL, pages viewed and timestamps. Strictly necessary cookies support basic Site operation regardless of optional consent.

3.3 Information we do not seek

We do not ask Site visitors to provide student assignment content for completion, examination credentials, government identity numbers for casual browsing, or sensitive health information unrelated to an advisory mandate. If you voluntarily send such information, we will delete it unless a formal contract clearly requires its processing.

4. Purposes of use

We use personal information for purposes that a reasonable person would consider appropriate in the circumstances, including:

• Responding to enquiries and scheduling AI-readiness reviews or project discussions;
• Delivering, administering and invoicing advisory services under contract;
• Communicating about governance workshops, deliverables, retainers and account matters;
• Maintaining internal records, conflict checks and professional indemnity documentation;
• Improving Site security, performance and content (where analytics consent is granted);
• Complying with legal obligations, lawful requests and enforceable contractual terms;
• Protecting the rights, safety and integrity of LearnShift, our clients and the public.

We will not use your contact enquiry to send unrelated marketing without a separate opt-in where required. We do not use personal information to build automated employment-placement profiles or to guarantee educational outcomes.

5. Consent

PIPEDA generally requires meaningful consent for the collection, use and disclosure of personal information. For contact form submissions, consent is obtained through an unchecked box confirming that you have read this Privacy Policy. You may withdraw consent for non-essential processing by contacting us, subject to legal or contractual restrictions and reasonable notice.

Withdrawal of consent may limit our ability to respond to enquiries or continue services. We will explain the consequences when you request withdrawal.

6. Disclosure and processors

We disclose personal information only as permitted or required by law, or with your consent, including to:

• Service providers who host the Site, transmit email, store documents or provide videoconferencing — bound by confidentiality and data-processing terms;
• Professional advisors (lawyers, accountants, insurers) under confidentiality obligations;
• Public authorities when required by valid legal process;
• Successors in the event of a merger or asset sale, with notice where practicable.

We do not sell or rent mailing lists. We do not disclose client enquiry details to software vendors for commission-based referrals.

7. Cross-border processing

Some service providers may process or store information in the United States or other jurisdictions. When information crosses borders, it may be subject to access by foreign courts, law enforcement or national security authorities under local laws. We evaluate provider safeguards and contractual protections before engaging cross-border processing. By submitting information where such providers are used, you acknowledge this risk unless we agree otherwise in writing for a specific engagement.

8. Minors and education contexts

The Site is directed at education leaders, administrators and professional staff — not at children for direct commercial engagement. We do not knowingly collect personal information from individuals under 16 through the contact form without appropriate authority.

When advisory work touches K-12 contexts, we expect clients to provide anonymized or aggregated data where possible. If personal information about students is processed under contract, we apply heightened safeguards, minimize identifiers and follow client instructions aligned with provincial education privacy requirements.

9. Retention

We retain personal information only as long as necessary to fulfil the purposes described in this policy or as required by law. Illustrative periods: contact enquiries — up to twenty-four months after last correspondence unless a business relationship continues; client project files — duration of contract plus seven years for business records unless a shorter period is agreed; server logs — typically ninety days. When information is no longer needed, we securely delete or anonymize it.

10. Security safeguards

We implement administrative, technical and physical safeguards appropriate to the sensitivity of information, including access controls for staff, encrypted transport (HTTPS) on the Site, password policies and vendor due diligence. Staff with access to client files receive orientation on confidentiality and secure handling of education-sector materials. Laptops and portable devices used for advisory work are expected to employ full-disk encryption and screen locking. Physical files at our Halifax office are stored in access-controlled premises.

No method of transmission or storage is completely secure; we cannot guarantee absolute security but will notify affected individuals and regulators of significant breaches as required by law. Clients engaging us for governance advisory remain responsible for security within their own networks, LMS environments and third-party AI tools — we document recommended controls but do not assume unmanaged IT administration unless explicitly contracted.

11. Your rights under PIPEDA

Subject to limited exceptions, you have the right to:

• Request access to personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Withdraw consent for certain processing;
• Challenge our compliance and file a complaint with the Office of the Privacy Commissioner of Canada if concerns are unresolved.

We will respond to access requests within thirty days unless an extension is permitted. We may require reasonable identity verification. We may charge a minimal fee for transcription where permitted by law.

12. Breach notification

If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and report to the Privacy Commissioner of Canada as required under PIPEDA breach notification provisions. Notifications will describe the circumstances, information involved and steps we are taking.

13. Cookies and similar technologies

Our use of cookies and local storage (including consent preferences stored under the key learnshift_cookie_consent) is described in our Cookie Policy. Optional analytics and preference cookies run only after you provide consent through our banner.

14. Changes to this policy

We may update this Privacy Policy to reflect legal, technical or business changes. The effective date at the top will change when we publish a revised version. Material changes affecting how we use personal information already collected will be communicated where practicable.

15. Contact our privacy officer

Privacy enquiries and access requests may be directed to:

LearnShift Inc. — Privacy
1546 Barrington Street, Suite 200
Halifax, NS B3J 1Z6, Canada
Email: [email protected]
Phone: +1 (902) 421-7368

Please include sufficient detail for us to locate your records. We welcome questions from education organizations about how our advisory practices align with institutional privacy obligations.