Privacy notice
Last updated 2026-07-20 · applies to eldervane.com
This notice describes how personal information is handled on this site, under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for readers in Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25.
1. Who we are
eldervane is an independent, non-commercial editorial site published by Dana Fournier in Kingston, Ontario, Canada. It is not an incorporated business and has no employees. Contact: [email protected].
Person responsible for the protection of personal information
As required by Law 25, one named individual is accountable for the personal information handled here. That is Dana Fournier, publisher of eldervane, reachable at [email protected]. All access, correction, deletion and consent-withdrawal requests go to that address.
2. What we collect
- Subscription data. If you use the subscription form, we collect the name and email address you type in, and the fact and time of your consent. Nothing else. There is no phone number field on this site and we do not ask for one.
- Push and email delivery identifiers. If you allow browser notifications, OneSignal assigns your browser a subscription identifier and stores it locally. This identifier is not a name and we cannot turn it into one.
- Email you send us. If you write to us, we keep the message and your address for as long as needed to deal with it.
- Server logs. Our hosting provider records standard technical request data, including IP address, timestamp, requested page and browser user agent, for security and to keep the site running.
We do not run analytics, advertising pixels, behavioural tracking or profiling on this site. We do not buy, sell, rent or trade personal information, and we do not build reader profiles.
3. Why we collect it, and on what basis
Subscription data is used for one purpose: to send you notices when an entry in the record changes, by email and, if you allow it, by browser push notification. The basis is your meaningful consent, given by ticking the consent box on the form. The box is never pre-ticked, and the form will not submit without it.
Email you send us is used to answer you. Server logs are used to keep the site available and secure.
Withdrawing consent
You can withdraw consent at any time, and it takes effect for the future:
- use the unsubscribe link in any email we send;
- revoke notification permission in your browser's site settings, which stops push immediately and needs no message to us;
- or write to [email protected] and ask to be removed entirely. We action it within thirty days.
Withdrawing consent does not affect your ability to read the site. Nothing here is behind a subscription.
4. Service providers, including OneSignal
We use third parties to run the site. They act on our instructions and may only use the information to provide their service to us.
- OneSignal, Inc., United States. Delivers our email and web push notifications. It receives the name and email address you submit, and assigns and stores a push subscription identifier in your browser. Its script is loaded from OneSignal's content delivery network on every page of this site, registers a service worker on your device, and writes to your browser's local storage and IndexedDB. See OneSignal's own privacy policy at onesignal.com/privacy_policy.
- Our web hosting provider, which stores the site files and generates the server logs described above.
- Google Fonts, which serves the two typefaces used on this site. Your browser requests the font files from Google's servers, which means Google receives your IP address as part of that request.
5. Transfers outside Canada
Some of the providers above are located in the United States or store data there, and OneSignal, Inc. is one of them. This means your name, email address and push identifier are processed outside Canada and are subject to the laws of the country where they are stored, including lawful access requests by foreign authorities. Canadian law does not prohibit this, but it requires that we tell you plainly, so: yes, this data leaves Canada. We use contractual protections with our providers and keep the amount of data transferred to the minimum the service needs.
If you are not comfortable with that, do not subscribe. You lose nothing but the notices.
6. How long we keep it
- Subscription data: until you unsubscribe or ask for deletion, and then removed from active systems within thirty days.
- Push identifiers: until you revoke permission or clear your browser storage.
- Email correspondence: up to 24 months after the exchange ends, then deleted.
- Server logs: retained by our host for a short technical period, typically no more than 12 months.
7. Your rights
Under PIPEDA and, in Quebec, under Law 25, you can ask us to confirm whether we hold personal information about you, give you access to it, correct it if it is wrong, delete it, or stop using it. Quebec residents also have the right to receive the information they provided in a structured, commonly used technical format (portability) and to be informed about, and object to, decisions based solely on automated processing. We make no automated decisions about anyone.
Write to [email protected]. We respond within thirty days. We may need to confirm your identity first, and the only way we can usually do that is by writing back to the address on file.
8. Children
This site is written for adults deciding what to install or buy. We do not knowingly collect personal information from children. If you believe a child has subscribed, write to us and it will be removed.
9. Complaints
If you are unhappy with how we have handled your personal information, tell us first at [email protected]. If our answer does not satisfy you, you can complain to a regulator:
- Office of the Privacy Commissioner of Canada (OPC), priv.gc.ca, 1-800-282-1376.
- Commission d'acces a l'information du Quebec (CAI), cai.gouv.qc.ca, if you are in Quebec.
10. Security incidents
If personal information held by us or a provider is lost or accessed without authorization and the incident creates a real risk of significant harm, we will notify the affected people and the applicable regulator as required by PIPEDA and Law 25, and keep a record of the incident.
11. Changes to this notice
If the way we handle personal information changes, this page is updated and the date at the top moves. Material changes to what we do with subscription data will also be sent to subscribers by email, because announcing a change only to people who happen to reload a legal page is not meaningful notice.