1. Introduction
Rivaly ("Rivaly", "we", "us", or "our") is a Canadian-based competitor intelligence service that provides daily market monitoring reports to mobile accessories resellers. We are committed to protecting the privacy of individuals who interact with our website and services in a manner consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA), S.C. 2000, c. 5, and Canada's Anti-Spam Legislation (CASL), S.C. 2010, c. 23.
This Privacy Policy describes how we collect, use, disclose, and protect your personal information. By submitting information through our website or engaging with our services, you consent to the practices described in this Policy.
2. PIPEDA Compliance — The Ten Fair Information Principles
Principle 1 — Accountability
Rivaly is responsible for all personal information in its possession. Our Privacy Officer handles all privacy-related inquiries:
Principle 2 — Identifying Purposes
We collect personal information to: respond to free trial requests; configure your monitoring profile; deliver daily and weekly intelligence reports; send service communications; and comply with applicable law.
Principle 3 — Consent
We obtain your consent before or at the time of collecting personal information. The nature of consent is detailed in Section 5 of this Policy.
Principle 4 — Limiting Collection
We collect only what is necessary: first and last name; business email address; phone number (optional); store URL (optional); competitor names (optional); and technical data via cookies.
Principle 5 — Limiting Use, Disclosure, and Retention
Personal information is used only for the purposes for which it was collected. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
Principle 6 — Accuracy
We take reasonable steps to ensure personal information is accurate and up-to-date. You may request corrections as described in Section 9.
Principle 7 — Safeguards
We implement security safeguards appropriate to the sensitivity of the information held. See Section 6 for full details.
Principle 8 — Openness
This Policy is published on our website and provided to individuals upon request.
Principle 9 — Individual Access
Upon written request, we will provide access to your personal information. See Section 9.
Principle 10 — Challenging Compliance
You may challenge our compliance by contacting our Privacy Officer or escalating to the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.
3. Third-Party Processing & Cross-Border Transfers
3.1 Google Services
We use Gmail for business communications. Data processed through Google may be stored in the United States or other jurisdictions. By providing your information, you acknowledge it may be processed in the United States. See policies.google.com/privacy.
3.2 Formspree
Our web form uses Formspree (U.S.-based) to transmit submissions to our business email. Processing is transient. See formspree.io/legal/privacy-policy.
3.3 Final Data Storage
After third-party processing, all personal information is downloaded and stored on a secure, locally-held device located in Canada.
4. How We Use Your Personal Information
- Service Onboarding: To contact you within 24 hours of your trial request and configure your monitoring profile;
- Service Delivery: To generate and deliver daily and weekly intelligence reports;
- Client Communications: To send service updates, onboarding info, and account notices;
- Legal Compliance: To meet our obligations under applicable Canadian law.
5. CASL Compliance — Consent for Commercial Electronic Messages
5.1 Express Consent
By submitting our free trial form, you expressly consent to receive: onboarding communications; daily and weekly intelligence reports; and service and account-related notices. Consent is recorded with a timestamp.
5.2 Implied Consent
We may rely on implied consent for follow-up communications within two (2) years of your last transaction or active business relationship with Rivaly, or in response to an inquiry you have initiated.
5.3 Withdrawing Consent (Unsubscribe)
You may withdraw consent at any time at no cost by clicking the unsubscribe link in any commercial email, or by emailing contact@phonetastic.com with subject "Unsubscribe". We will process requests within ten (10) business days as required by CASL.
6. Data Security
6.1 Local Device Security
- Full-disk encryption on the primary storage device;
- Strong password protection and account-level access controls;
- Physical security measures at our Canadian business location;
- Regular software updates to protect against known vulnerabilities.
6.2 Transmission Security
All data transmitted between your browser and our form is protected by TLS (Transport Layer Security) encryption.
6.3 Breach Response
In the event of a breach posing real risk of significant harm, Rivaly will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA's Breach of Security Safeguards Regulations.
7. Cookies and Tracking Technologies
We collect: pages visited and time on page; browser and device type; referring URL and general location; and page element interactions. This data is used solely to improve our website and user experience. We do not serve targeted advertising.
You may opt out of Google Analytics at tools.google.com/dlpage/gaoptout, or manage cookies through your browser settings.
8. Disclosure of Personal Information
We do not disclose your personal information except to: service providers (Formspree, Google) for purposes described in Section 3; government authorities as required by law; parties where necessary to protect rights or safety; or successors in a business transfer, subject to equivalent protections and prior notice.
9. Access, Correction, and Deletion Rights
As a Canadian resident, you have the right to request access to, correction of, or deletion of your personal information. Submit a written request to:
We will acknowledge within five (5) business days and respond within thirty (30) days as required by PIPEDA. Identity verification may be required.
10. Data Retention
- Active client data: duration of relationship plus two (2) years;
- Non-converted lead data: up to twelve (12) months;
- Financial records: up to seven (7) years per Canadian tax law;
- Data subject request records: minimum two (2) years.
11. Minors
Our services are for individuals at least eighteen (18) years of age. We do not knowingly collect personal information from minors.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be reflected in the Effective Date above and, where appropriate, communicated to active clients by email.
13. Contact and Escalation
To escalate to the Office of the Privacy Commissioner of Canada:
- Website: www.priv.gc.ca
- Toll-free: 1-800-282-1376
- Address: 30 Victoria Street, Gatineau, QC K1A 1H3