Privacy policy
What this website collects when you read it or use the contact form, who we share it with, how long we keep it, and how to reach us about it.
Effective date: 2026-09-02 · Last updated: 2026-09-02
Who we are
Uplift Capacity is operated by Uplift Capacity Inc., a corporation without share capital incorporated under the Canada Not-for-profit Corporations Act, corporation number 1770394-5, with its mailing address at 354 Guelph St 23-450, Georgetown, ON L7G 4B5. In this document, "we", "us", and "our" mean Uplift Capacity Inc., and "Uplift Capacity" is the brand name under which we operate upliftcapacity.org.
Definitions
In this policy:
- Personal Information means information about an identifiable individual. This is the meaning the federal privacy statute, the Personal Information Protection and Electronic Documents Act (PIPEDA), gives the term, and we use it the same way throughout.
- Site means the upliftcapacity.org website and everything we publish on it.
- Service Provider means a third party that processes Personal Information on our behalf. Every Service Provider we use is listed in Who we share it with.
What we collect and why
What we collect and why. Uplift Capacity Inc. ("we", "us") collects the following categories of Personal Information when you use Uplift Capacity, and only for the purposes stated:
- What you send us through the contact form: your name if you give one, your email address, and the message you write. Purpose: answer the enquiry you sent through the form on the Site, and follow up about it.
- The bot check on the contact form: your IP address, your browser and device details, and a one-time token from the check itself. Purpose: tell a person filling in the contact form apart from an automated script, so the form cannot be used to send bulk mail.
- Records of requests to the Site: your IP address, your browser details, and information about the request itself. Purpose: serve the Site, keep it available, and investigate abuse or errors.
- Website analytics from Cloudflare: the page you viewed, the site you came from, your country, your browser and operating system, and how quickly the page loaded. Purpose: count how many people read the Site and how quickly pages load.
- Website analytics from Google: the page you viewed, the site you came from, your approximate location, your device and browser, and what you do on the page. Purpose: see which parts of the Site people read, using the same analytics account the organization used before this Site existed.
We collect only what we need for these purposes. Where we rely on your consent, you can withdraw it as described in the Consent section.
There is no account to create, nothing is sold through the Site, and we run no database: what you send through the contact form becomes an email and nothing else.
How we use your information
We use Personal Information only for the purposes listed in What we collect and why. If we want to use it for a new purpose, we will tell you what that purpose is and ask for your consent before we start. We disclose Personal Information only as described in Who we share it with.
We keep Personal Information as accurate, complete and up to date as its purposes require. Your access and correction rights explains how to have it corrected.
Consent and how to withdraw it
You give us consent through the action that provides the Personal Information: when you fill in the contact form and press Send, or when you email us at the address on the site.
Reading the Site is different. You are not asked to agree to anything to read it, and the two analytics tools described under Cookies and analytics start measuring on their own, one as soon as the page opens and the other within about five seconds. Neither of them is needed to show you the page. Separately, when the contact form scrolls into view, the bot check loads and Cloudflare receives your IP address and browser details. That happens before you decide to write to us, and we rely on it to keep the form from being used to send bulk mail. If you never scroll that far, it never runs.
You can withdraw any consent at any time, subject to legal and contractual restrictions and reasonable notice, by contacting our privacy officer (Privacy officer and complaints). If you withdraw consent, we would have no way to reply to the message you sent us.
We do not send marketing email. We do not have a mailing list, and we do not add you to one when you contact us. If we ever start sending marketing messages, we will ask for your consent first, as Canada's anti-spam law requires, and we will update this policy before we do.
Who we share it with
We do not sell Personal Information. We share it only with the Service Providers below, under the terms described at the end of Where your information is processed, and only the data each one needs for its role:
- Cloudflare, Inc.: hosts and serves the Site, runs the bot check on the contact form, and provides one of the two analytics products. Shared: your IP address, browser details, request information, the bot-check token, and page-view measurements. Region: United States, and a global network of servers.
- Resend: delivers the contact form as an email to the organization's mailbox. Shared: your name if you gave one, your email address, and your message. Region: United States.
- Google LLC (Google Workspace): runs the mailbox that receives every enquiry, whether sent through the form or by email. Shared: your name if you gave one, your email address, and your message. Region: United States and other countries where Google operates.
- Google LLC (Google Analytics): provides the second analytics product, and processes the measurements on its own systems. Shared: the page you viewed, the site you came from, your approximate location, your device and browser, and the cookie identifiers described under Cookies and analytics. Region: United States and other countries where Google operates.
That is the list of companies we hand your information to directly, and it is short because the Site does little. We use no advertising network, no customer relationship system, no email marketing platform, and no session or screen recording. Our fonts are served from our own Site rather than from a third party. Our email provider sends mail using infrastructure it runs on rather than its own servers, and our analytics providers use their own systems to process what they measure.
We may also disclose Personal Information where a law, court order, or other lawful authority requires us to.
Where your information is processed
The Site itself runs on Cloudflare's network, which serves it from whichever of their servers is closest to you. That means the request your browser makes is handled outside Canada much of the time, even when you are in Canada. Some Service Providers process or store Personal Information in the United States or other countries:
- Cloudflare: hosting, network edge, bot check, and one of the two analytics tools (United States, and a global network of servers)
- Resend: email delivery (United States)
- Google: the mailbox that receives enquiries, and the other analytics tool (United States and other countries where Google operates)
Each of these companies uses its own providers to run its services, and we do not choose them. Information held outside Canada is subject to the laws of the country it is held in, including lawful access by courts and government agencies there.
While your Personal Information is in another country, it is subject to the laws of that jurisdiction and may be accessible to the courts, law enforcement and national security authorities there. We remain accountable for it. We use each of these providers under the terms and privacy commitments they publish, and we chose them partly on that basis. We have not negotiated separate data-protection agreements with them, and we do not control how they run their own services.
Cookies and analytics
We use a small number of cookies and similar technologies. This is the complete list:
- Two cookies from Google Analytics,
_gaand_ga_NQM7CZ8C7L. They are set in your browser by our own Site rather than by another company's, and Google Analytics uses them to tell one visit apart from another so that two page views by the same person are not counted as two people. They are the ONLY things this Site stores in your browser. Measured on 2 September 2026: they appear within a few seconds of arriving on the page, and nothing else is stored at any point. - Website analytics from Cloudflare, the company that also hosts this Site. It runs on every page, from the moment the page opens, and it uses no cookies and stores nothing in your browser. It counts page views and records the page you were on, the site you came from, the country you are in, your browser and operating system, and how quickly the page loaded.
- A bot check from Cloudflare, on the contact form. It loads when the contact form comes into view as you scroll, or when you click into it, and not before: if you never reach the form, it never runs. It receives your IP address and browser details in order to tell a person from a script. When we measured it on 2 September 2026 it stored nothing in your browser.
- Nothing else. We run no advertising pixels, no cross-site tracking, and no session or screen recording. We do not sell or rent anything about you to anybody, and we do not use any of this to build a profile of you or to follow you to other websites.
We do not show a cookie consent banner; this section is our complete cookies disclosure. We do not ask you to accept anything before you read the Site.
Neither of these analytics tools is needed to show you the Site, and we would rather be plain about the fact that we do not currently offer a switch here to turn them off. What you can do instead is block or delete cookies for this Site in your browser settings, which stops the Google Analytics cookies described above, and install Google's own opt-out add-on if you want to stop Google Analytics across every site you visit. Blocking third-party scripts in your browser stops both tools. None of this prevents you from reading the Site or using the contact form.
How long we keep it
How long we keep it. We keep Personal Information only as long as its purpose needs it, or as long as a legal or evidentiary requirement needs it, and then we delete it:
- What you send us through the contact form: 24 months from your last contact with us, and then we delete it.
- The bot check on the contact form: the bot check is a yes-or-no decision made at the moment you submit the form. We keep no record of it. What Cloudflare keeps about the check is set by Cloudflare, not by us.
- Records of requests to the Site: our host keeps a record of requests to the Site for 3 days, including IP addresses, and then deletes it automatically.
- Our email provider: our email provider keeps a copy of the message, and its delivery records, for 30 days, and then deletes them.
- Website analytics from Cloudflare: we do not keep these measurements ourselves. Cloudflare holds them, and we cannot set how long it keeps them.
- Website analytics from Google: 14 months, which is the period set on our Google Analytics property. Google deletes it after that.
How we protect it
How we protect it. We protect Personal Information with safeguards appropriate to its sensitivity: the whole Site is served over an encrypted connection, and browsers are told never to load it any other way; the contact form is protected by a bot check, and the page restricts what it is allowed to load so that an injected script cannot run; there is no database on this Site and no account to break into, so your message is turned into an email and sent, and the copy that lasts is the one in a mailbox; and the keys that let the Site send email are held in a secrets manager and given only to the Site's own server code, never appearing in the page or in our public source code. No system is perfectly secure, and we do not promise that, but we notify you and the regulator when the law requires it (If there is a breach).
Your access and correction rights
Your access and correction rights. You can ask us:
- what Personal Information we hold about you, how we use it, and who we have shared it with, and we will give you access to it;
- to correct it if it is inaccurate or incomplete; and
- to delete it. We will delete what we are not required to keep.
To exercise any of these, contact our privacy officer (Privacy officer and complaints). We may need to verify your identity first, and we will respond within the time PIPEDA allows.
Privacy officer and complaints
Privacy officer and complaints. The Privacy Officer is accountable for how Uplift Capacity Inc. handles Personal Information. We will tell you who currently holds that role if you ask. Reach them at:
- Email: privacy@UpliftCapacity.org
- Mail: Uplift Capacity Inc., 354 Guelph St 23-450, Georgetown, ON L7G 4B5
If you have a complaint about our handling of your Personal Information, contact our privacy officer first: we investigate every complaint and tell you what we found and what we changed. If you are not satisfied with our response, you can complain in writing to the Office of the Privacy Commissioner of Canada (priv.gc.ca), which oversees PIPEDA.
If there is a breach
If there is a breach. If a breach of our security safeguards creates a real risk of significant harm to you, we will notify you, and report to the Office of the Privacy Commissioner of Canada, as soon as feasible after we determine the breach occurred. We also notify any other organization or government institution that can reduce the risk of harm, and we keep a record of every breach of security safeguards, whatever its size, for at least 24 months.
Changes to this policy
Changes to this policy. When we change this policy, we post the new version at https://upliftcapacity.org/privacy-policy/ and update the "Last updated" date at the top. If a change expands what we collect or how we use it, we will tell you before it takes effect, by posting a notice on the Site (we have no mailing list, so we cannot email you), and, where the change needs your consent, we will ask for it.