Privacy Policy

Last updated: August 21, 2026  |  Effective: August 21, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service, and tells You about Your privacy rights and how the law protects You.

We collect, use, and disclose Your information as described in this Privacy Policy and, where required by applicable law, only where We have a valid legal basis to do so. The legal bases We rely on are set out in the table under “How We Use Your Personal Data.”

1. Who We Are and How to Reach Us

Controller. 15281008 Canada Inc, operating the website sharemy.page, is the organization responsible for the Personal Data described in this Privacy Policy.

Privacy Officer. We have designated an individual accountable for Our compliance with this Privacy Policy and with applicable privacy legislation. You may contact Our Privacy Officer at:

Email: hello@sharemy.page

2. Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access Our Service or parts of Our Service.
  • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Analytics Provider means a third party that helps Us measure and analyze how the Service is used. See Section 5 regarding Our planned use of Google Analytics.
  • Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Privacy Policy) refers to 15281008 Canada Inc, operator of sharemy.page.
  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website, among its many uses.
  • Country/State refers to: Ontario, Canada.
  • Device means any device that can access the Service, such as a computer, a cell phone or a digital tablet.
  • Payment Data means information relating to a payment You make for the Service, such as billing name, billing address, the last four digits and expiry date of Your payment card, the card brand, the transaction amount and currency, and the outcome of the transaction.
  • Payment Processor means the third party We use to process payments on Our behalf. We use Stripe, provided by Stripe, Inc. and its affiliates.
  • Personal Data (or “Personal Information”) is any information that relates to an identified or identifiable individual. We use “Personal Data” and “Personal Information” interchangeably unless a law uses a specific term.
  • Service refers to the Website.
  • Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals engaged by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • User means any individual who accesses or uses the Service.
  • User Content means any file, text, image, link, page, or other material that You create, upload, store, publish, or share using the Service.
  • Website refers to sharemy.page, accessible from sharemy.page.
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

3. Personal Data We Collect

3.1 Account Information

To create an Account, We ask You for:

  • Your email address, and
  • A password, which We store only in hashed form and which We cannot read or recover.

We do not ask for Your first or last name at signup. We may separately receive a billing name from Our Payment Processor if You make a purchase, as described in Section 3.2.

Your email address is used to identify Your Account, to sign You in, to verify that the address belongs to You, to send You service-related messages such as password resets and security notices, and — where You have consented, or where otherwise permitted by law — to send You marketing communications. You cannot create an Account without providing an email address, because We need it to operate and secure Your Account.

3.2 Payment Information

If You purchase a paid plan or otherwise make a payment through the Service, Your payment is processed by Our Payment Processor, Stripe.

We do not collect or store Your full payment card number, CVC/CVV, or other full card credentials on Our own servers. That information is transmitted directly to Stripe and is processed by Stripe in accordance with the Payment Card Industry Data Security Standard (PCI-DSS) and Stripe’s own privacy policy.

We do receive and store limited Payment Data from Stripe so that We can operate Your Account, including: the billing name and billing address You give to Stripe, the card brand, the last four digits and expiry date of Your card, the amount, currency, date and status of each transaction, a Stripe customer or subscription identifier, and any refund, chargeback or dispute records.

Stripe also collects information directly from You and from Your Device for its own purposes, including fraud prevention and its own legal and regulatory obligations, and acts as an independent controller of that information. We encourage You to review Stripe’s privacy policy: https://stripe.com/privacy

3.3 User Content

The Service allows You to create and share pages and related material. User Content You submit is stored on Our systems and on those of Our hosting providers so that We can deliver the Service.

User Content may be publicly accessible. Where You publish or share a page, the content of that page — including any Personal Data You choose to include in it, and any Personal Data about other people that You include in it — may be viewed by anyone who has the link or who can otherwise reach the page, and may be indexed by search engines. We cannot control what others do with User Content once it has been made accessible to them.

You are responsible for the content You publish. If You include Personal Data about other individuals in User Content, You are responsible for having a lawful basis to do so.

3.4 Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of Our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device’s unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit Our Service or when You access the Service by or through a mobile device.

3.5 Customer Support Data

If You contact Us for support, We collect the contents of Your message, Your email address, and any information You choose to provide, so that We can respond to and resolve Your request.

3.6 Data We Do Not Collect

We do not send or receive SMS or text messages. We do not ask You for a telephone number, and We have no facility for contacting You by telephone.

We do not knowingly collect special categories of Personal Data (such as health, biometric, racial or ethnic origin, political opinions, or religious beliefs), and We ask that You not submit such information to Us or include it in User Content.

4. Cookies and Tracking Technologies

We use technologies such as cookies to operate and to improve Our Service. The technologies We use may include:

  • Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of Our Service.
  • Web Beacons. Certain sections of Our Service may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages and for other related website statistics.

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your Device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

Where required by law, We use non-essential cookies only with Your prior consent, obtained before those Cookies are placed on Your Device. You can withdraw or change Your consent at any time using Our cookie preferences tool or through Your browser or Device settings.

The Cookies We use are:

CategoryTypeAdministered byPurposeConsent required
Necessary / EssentialSessionUsAuthenticating Users, maintaining sign-in state, preventing fraudulent use of accounts, and delivering features You have requested. Without these Cookies the Service cannot be provided.No
Consent PreferencePersistentUsRecording whether You have accepted or declined Cookies, so We can honor those choices on future visits.No
FunctionalityPersistentUsRemembering choices You make, such as language preference, so You do not have to re-enter them.Yes, where required by law
Analytics / Performance (planned — not currently in use)Persistent and SessionThird party (Google)Measuring how visitors find and use the Service, so We can improve it. See Section 5.Yes, where required by law
Payment and Fraud PreventionPersistent and SessionThird party (Stripe)Processing payments and detecting fraudulent transactions on pages where payment is possible.No (strictly necessary to provide payment functionality)

5. Analytics — Planned Use of Google Analytics

We do not currently use Google Analytics or any other third-party analytics service. This section describes what will happen if and when We introduce it. We will update the “Last updated” date at the top of this Privacy Policy, and amend this section to reflect current practice, before any analytics technology begins collecting data about You.

If We introduce Google Analytics, a web analytics service provided by Google LLC:

  • Google Analytics will use Cookies and similar technologies to collect Usage Data, which may include Your IP address, Device and browser information, approximate location derived from Your IP address, the pages You view, referring URLs, and Your interactions with the Service.
  • We will configure Google Analytics so that IP addresses are truncated or masked where that feature is available.
  • We will not use Google Analytics to collect Your email address, password, User Content, or Payment Data, and We will not upload Personal Data to Google Analytics.
  • We will not enable Google Signals, advertising reporting features, or remarketing audiences, and We will not use analytics data to build advertising profiles about You.
  • Where the law requires consent for non-essential cookies, analytics will be loaded only after You have given consent through Our cookie preferences tool.

How You will be able to opt out:

  • Decline analytics cookies through Our cookie preferences tool.
  • Install the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
  • Configure Your browser to block or delete cookies, or use a browser setting that blocks analytics scripts.

For more information about how Google collects and processes data, see Google’s Privacy Policy at https://policies.google.com/privacy and “How Google uses information from sites or apps that use our services” at https://policies.google.com/technologies/partner-sites

6. Service Providers We Use

The Service relies on the third parties listed below. Where they process Personal Data on Our behalf, We have entered into data processing terms requiring them to protect that data and to process it only on Our instructions.

ProviderRolePurposeData involvedPrivacy policy
Stripe, Inc.Processor and independent controllerPayment processing, subscription billing, fraud prevention, tax and financial compliancePayment Data, billing details, email address, IP address and Device datahttps://stripe.com/privacy
Google LLC (Google Analytics) — plannedProcessorWebsite and product analyticsUsage Data, IP address, Device and browser data, cookie identifiershttps://policies.google.com/privacy
Google CloudProcessorHosting, storage of Account data and User Content, backupsAll categories described in Section 3https://cloud.google.com/terms/cloud-privacy-notice

This list may change as the Service develops. We will update this Privacy Policy when it does.

7. How We Use Your Personal Data

PurposeData usedLegal basis (GDPR / UK GDPR)
To create, operate, secure and maintain Your AccountEmail address, password hash, Usage DataPerformance of a contract
To provide, host and deliver the Service, including storing and serving User ContentAccount Information, User Content, Usage DataPerformance of a contract
To process payments, manage subscriptions and renewals, issue invoices and receipts, and process refundsPayment Data, email addressPerformance of a contract
To keep financial and tax recordsPayment DataLegal obligation
To detect, investigate and prevent fraud, abuse, and security incidentsUsage Data, Payment Data, IP addressLegitimate interests — protecting the Service and Our Users
To respond to Your support requestsCustomer Support Data, Account InformationPerformance of a contract; legitimate interests
To send service-related and security communicationsEmail addressPerformance of a contract; legal obligation
To send marketing communicationsEmail addressConsent (or legitimate interests where permitted and where You have not opted out)
To measure and improve the Service through analytics (planned)Usage Data, cookie identifiersConsent
To establish, exercise or defend legal claims, and to enforce Our termsAny category, as relevantLegitimate interests; legal obligation
To evaluate or complete a merger, financing, acquisition, or sale of assetsAccount Information, Payment DataLegitimate interests

Where We rely on legitimate interests, We have assessed that Our interests are not overridden by Your rights and freedoms. You may object to that processing as described in Section 12.

8. Automated Decision-Making and Fraud Screening

Our Payment Processor, Stripe, applies automated fraud-detection systems to transactions made through the Service. These systems score transactions based on factors such as payment details, IP address, Device characteristics, and patterns observed across Stripe’s network, and may automatically decline a payment or flag it for review.

This means a payment You attempt may be refused automatically, without a person reviewing it first. A declined payment does not affect Your ability to use the free parts of the Service, and does not result in Your Account being closed.

If a payment of Yours is declined by these systems and You believe the decision was wrong, You may contact Us at hello@sharemy.page to request human review of the decision, to express Your point of view, and to contest the outcome. Where the GDPR applies, this is Your right under Article 22.

We do not otherwise use automated decision-making that produces legal effects concerning You or similarly significantly affects You, and We do not carry out profiling for advertising purposes.

9. When We Disclose Your Personal Data

We may disclose Your Personal Data in the following circumstances:

  • To Service Providers, as listed in Section 6, so that they can perform services on Our behalf.
  • To other Users and the public, where You publish or share User Content, as described in Section 3.3.
  • In business transfers, in connection with or during negotiations of any merger, sale of Company assets, financing, restructuring, bankruptcy, or acquisition of all or a portion of Our business.
  • To Affiliates, in which case We will require those affiliates to honor this Privacy Policy.
  • To law enforcement and public authorities, where required to do so by law or in response to valid legal process such as a court order, subpoena, or lawful request by a government authority.
  • To protect rights and safety, in the good-faith belief that disclosure is necessary to comply with a legal obligation, to protect and defend the rights or property of the Company, to prevent or investigate possible wrongdoing in connection with the Service, to protect the personal safety of Users or the public, or to protect against legal liability.
  • With Your consent, for any other purpose.

We do not sell Your Personal Data. We do not share Your Personal Data with third parties for their own independent advertising or cross-context behavioural advertising purposes.

We do not use Your Personal Data or Your User Content to train machine learning or artificial intelligence models, and We do not provide Your Personal Data or User Content to third parties for that purpose.

10. Marketing Communications

We will send You marketing email only where We have Your consent, or where an exception under Canada’s Anti-Spam Legislation (CASL) or other applicable law permits Us to do so.

Every marketing message We send will identify Us, will include Our contact information, and will contain an unsubscribe mechanism that works for at least 60 days after sending. You may withdraw Your consent at any time by using that unsubscribe link or by emailing hello@sharemy.page, and We will give effect to Your withdrawal within 10 business days.

Withdrawing consent to marketing does not stop service-related messages — such as password resets, billing notices, security alerts, and changes to this Privacy Policy — which We need to send You in order to operate Your Account.

11. Retention of Your Personal Data

We retain Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, and then delete or anonymize it.

CategoryRetention periodReason
Account InformationDuration of the Account, plus up to 12 months after closureHandling post-termination issues and disputes; account recovery
Inactive AccountsAccounts with no sign-in for 24 months may be deleted after We give You at least 30 days’ notice by emailPersonal Data should not be kept indefinitely where the relationship has lapsed
User ContentDeleted within 30 days of Account closure or of Your deletion of the content, subject to backup cyclesNo longer needed once the Account ends
Payment and transaction recordsUp to 7 years from the end of the tax year to which they relateCanadian tax and accounting record-keeping obligations
Support tickets and correspondenceUp to 24 months from ticket closureResolving follow-up inquiries; defending against legal claims
Server logs (IP addresses, access times)Up to 12 monthsSecurity monitoring and troubleshooting
Analytics data (if and when introduced)Up to 14 months from Your last interactionTrend analysis; 14 months is the maximum available on the standard tier
Marketing consent and unsubscribe recordsDuration of the relationship, plus 3 yearsDemonstrating compliance with CASL and other consent requirements

Payment and transaction records generally cannot be deleted on request before the statutory period expires. Records held by Stripe are retained by Stripe according to its own retention practices and legal obligations, which We do not control.

12. Your Privacy Rights

Depending on where You live, You have some or all of the following rights:

  • Access — obtain confirmation of whether We process Personal Data about You, and receive a copy of it.
  • Correction — have inaccurate or incomplete Personal Data corrected.
  • Deletion — request erasure of Your Personal Data, subject to the legal retention obligations described in Section 11.
  • Withdrawal of consent — withdraw consent at any time where We rely on it.
  • Objection and restriction — object to processing based on legitimate interests, or ask Us to restrict processing in certain circumstances.
  • Portability — receive Personal Data You provided to Us in a structured, commonly used, machine-readable format.
  • Human review of automated decisions — as described in Section 8.
  • Complaint — lodge a complaint with a supervisory authority.

How to exercise Your rights. Email hello@sharemy.page. We may need to verify Your identity before acting. We respond within 30 days of receiving a request and will tell You if We need an extension and why. We do not charge a fee for responding to a reasonable request.

Where to complain.In Canada, the Office of the Privacy Commissioner of Canada — https://www.priv.gc.ca. In Quebec, the Commission d’accès à l’information du Québec. In the EEA or UK, Your local data protection authority.

Additional Information for Quebec Residents

If You are located in Quebec, Law 25 gives You additional rights, including the right to be informed when We use technology that identifies, locates, or profiles You, and the right to deactivate such functions. As stated in Section 5, We do not currently use analytics or profiling technology. You also have the right to request that Your Personal Data cease to be disseminated, and the right to data portability.

13. Managing and Deleting Your Information

You may update, amend, or delete Your information at any time by signing in to Your Account and visiting the account settings section. You may also contact Us to request access to, correction of, or deletion of any Personal Data You have provided.

What deleting Your Account does. When You delete Your Account:

  • Your User Content is removed from public access immediately and is deleted from Our live systems within 30 days;
  • Your email address and password hash are retained in a restricted, non-active state for up to 12 months to resolve disputes, respond to complaints, and detect abuse;
  • Your billing and transaction records are retained for the statutory period described in Section 11;
  • Residual copies may persist in encrypted backups until those backups age out on Our normal cycle.

Deletion will not retrieve User Content that others copied, saved, or cached while it was accessible. You may contact search engines directly to request removal of cached pages.

14. International Transfers of Your Personal Data

Your information, including Personal Data, is processed at the Company’s operating locations and in any other place where the parties involved in the processing are located. This means Your information may be transferred to — and maintained on — computers located outside Your province, country, or other jurisdiction, where data protection laws may differ from those of Your jurisdiction.

In particular, Our Payment Processor (Stripe) and, if introduced, Our Analytics Provider (Google) are based in the United States and process data on servers located in the United States and other countries.

You may contact Us to request further information about the safeguards We apply.

15. Security of Your Personal Data

We take the security of Your Personal Data seriously and maintain administrative, technical, and physical safeguards appropriate to its sensitivity, including:

  • Encryption of data in transit using TLS;
  • Encryption of stored data and backups at rest;
  • Storage of passwords using one-way cryptographic hashing;
  • Access controls limiting Personal Data to personnel who need it to perform their duties;
  • Handling of payment card details entirely by Stripe, a PCI-DSS Level 1 certified payment processor.

No method of transmission over the Internet or method of electronic storage is completely secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.

Breach notification. If a breach of security safeguards involving Your Personal Data occurs and it creates a real risk of significant harm to You, We will notify You and the relevant regulator as soon as feasible, as required by applicable law.

You are responsible for keeping Your password confidential. Please notify Us promptly at hello@sharemy.page if You believe Your Account has been compromised.

16. Children’s and Minors’ Privacy

The Service is not directed to, and We do not knowingly collect Personal Information from, anyone under the age of 16.

If You are a parent or guardian and believe Your child has provided Us with Personal Information, please contact Us. If We become aware that We have collected Personal Information from anyone under the age of 16, We will take steps to remove that information from Our servers as soon as reasonably possible.

17. Links to Other Websites

Our Service may contain links to other websites that are not operated by Us, including links contained in User Content published by other Users. If You click a third-party link, You will be directed to that third party’s site. We strongly advise You to review the privacy policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When We do, We will post the revised Privacy Policy on this page and update the “Last updated” date at the top.

For material changes, We will notify You by email and/or by a prominent notice on the Service at least 14 days before the change takes effect, and, where the change requires Your consent under applicable law, We will obtain that consent before implementing it as to You.

Prior versions are available on request to hello@sharemy.page.

19. Contact Us

If You have any questions about this Privacy Policy or wish to exercise Your privacy rights, You can contact Us:

By email: hello@sharemy.page

We aim to respond to all privacy inquiries within 30 days.