Privacy & Data Responsibility
Effective Date: October 10, 2024
Canadian Compliance Commitment
"DayTrack is designed to strictly adhere to the Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (PIPA)."
Mandatory Parental Consent
DayTrack requires childcare providers to obtain explicit parental consent prior to collecting, uploading, or processing any information about children. As a processor, DayTrack relies on the provider's certification that such consent has been legally obtained and documented.
1. Information Collection & Use
We collect personal information necessary to deliver our childcare management services. This includes:
- Educator Data: Legal names, emails, professional ECE credentials, and background check statuses.
- Family Data: Guardian contact information and linking metadata for student access.
- Child Data: Names, dates of birth, immunization records, and allergy profiles provided by parents or childcare centres.
2. Cookie Policy
DayTrack uses cookies to maintain secure sessions and improve your experience.
Essential Cookies
Required for secure authentication and multi-tenant isolation. These cannot be disabled.
Analytical Cookies
Help us understand platform usage to improve educator workflows. These require your consent.
3. Data Residency & Sovereignty
DayTrack prioritizes Canadian data residency. Primary application databases and student file storage are hosted on secure infrastructure in North America, with logical isolation ensuring that Canadian childcare data is processed and stored in compliance with provincial and federal sovereignty standards.
4. Data Breach Notification
In compliance with the "Mandatory Breach Reporting" requirements of PIPEDA, DayTrack will notify affected childcare centres and the Office of the Privacy Commissioner of Canada (OPC) of any data breach that poses a "real risk of significant harm" to individuals without unreasonable delay.
5. Third-Party Services
We share data with sub-processors only when essential for service delivery:
6. Cross-Border Transfers
While we prioritize Canadian residency, some processing (such as global CDN delivery or payment clearing) may involve the transfer of information across borders. We ensure that any international partners provide a comparable level of protection to that required by Canadian law.
7. Data Processing Agreements (DPA)
DayTrack enters into standard Data Processing Agreements with all childcare centres. This contractually binds us to act only on the instructions of the centre and maintains the centre's role as the Data Controller under PIPEDA.
Contact Our Privacy Officer
DayTrack Technologies Inc.
privacy@daytrack.ca
Surrey, BC, Canada
Right to Access (PIPEDA Principle 9)
Individuals have the right to challenge the accuracy and completeness of their info and have it amended as appropriate. Contact our officer for access requests.