Information We Collect

We collect different types of information depending on how you interact with our services. Here's what that looks like in practice:

When You Register for Training

To enroll in our national cuisine training programs, we need basic information to set up your account and process your registration:

• Your full name and preferred contact information
• Email address for course communications and updates
• Phone number for time-sensitive class notifications
• Mailing address if you're registering for certification programs
• Dietary restrictions or allergies (this is important for hands-on training)
• Previous culinary experience to help us place you in the right skill level

Technical Information

Like most websites, we automatically collect certain technical data when you visit plzzaplza.com. This helps us improve site performance and understand which content is most helpful:

• IP address and general location data (city/region level, not specific addresses)
• Browser type and device information
• Pages visited and time spent on each section
• Referring websites and search terms used to find us
• Click patterns and navigation behavior

Communication Records

When you contact us through email, phone, or our contact form, we keep records of those conversations. This helps us provide consistent support and remember your preferences for future interactions.

How We Use Your Information

We're not in the business of selling data. Everything we collect serves a specific purpose related to delivering quality culinary education:

• Managing your training schedule and sending reminders about upcoming classes
• Processing payments and maintaining financial records as required by Canadian tax law
• Sending educational materials, recipes, and supplementary learning resources
• Improving our curriculum based on student feedback and engagement patterns
• Maintaining safety records and accommodation documentation
• Sending occasional updates about new course offerings (you can opt out anytime)

We analyze website usage data to understand which topics interest prospective students most. This helps us create better content and improve the registration experience. But this analysis is done at an aggregate level—we're looking at patterns, not tracking individual behavior in detail.

Legal Basis for Processing (Canada)

Under Canadian privacy legislation (PIPEDA—Personal Information Protection and Electronic Documents Act), we need a valid reason to collect and process your personal information. Here's our legal basis for each type of processing:

Processing Activity	Legal Basis
Course registration and enrollment management	Contractual necessity—we need this information to deliver the training you signed up for
Payment processing and financial records	Legal obligation—Canadian tax law requires maintaining these records
Marketing communications about new courses	Consent—you can withdraw this permission anytime
Website analytics and improvement	Legitimate interest—improving user experience benefits everyone
Safety and accommodation records	Legal obligation and contractual necessity

Data Sharing and Third Parties

We're selective about who we work with. Any third-party service we use is vetted for security practices and contractually obligated to protect your information:

Payment Processors

We use Canadian-based payment processing services that comply with PCI DSS standards. When you make a payment, your financial information goes directly to the processor—we never store complete credit card numbers on our servers.

Email Service Provider

Course communications and newsletters are sent through a third-party email platform. They have access to your email address and name, but we maintain control over what messages are sent and when.

Cloud Storage

Student records and course materials are stored on secure Canadian servers. Our cloud hosting provider has physical data centers in Ontario and complies with Canadian privacy regulations.

When We're Legally Required

We'll disclose personal information if required by Canadian law, court order, or government regulation. This includes responding to valid legal requests from law enforcement. We'll notify you if this happens unless prohibited by law.

Data Security Measures

Security isn't just about technology. It's about culture, processes, and staying current with threats. Here's what we do to protect your information:

• All data transmission uses TLS encryption (the same technology banks use)
• Passwords are hashed using industry-standard cryptographic methods
• Access to student records is restricted to staff who need it for their role
• We conduct regular security audits and update systems promptly
• Physical training records are stored in locked cabinets at our Gatineau facility
• Staff receive annual training on privacy practices and data handling
• We maintain backup systems and disaster recovery procedures

Despite our best efforts, no system is completely invulnerable. If we experience a data breach that affects your information, we'll notify you within 72 hours and explain what happened, what data was involved, and what steps we're taking to address it.

Your Privacy Rights

Canadian privacy law gives you significant control over your personal information. These aren't just theoretical rights—we've built systems to make exercising them straightforward:

Access Your Information

You can request a copy of all personal information we hold about you. We'll provide this within 30 days in a readable electronic format. There's no charge for your first request in a 12-month period.

Correct Inaccurate Information

If any of your information is wrong or outdated, let us know. You can update most details through your student account, or contact us directly for help. We'll make corrections within 5 business days.

Request Deletion

You can ask us to delete your personal information, subject to some exceptions. We need to retain financial records for 7 years under Canadian tax law. And if you're currently enrolled in a course, we need basic information to fulfill that contract. But otherwise, we'll honor deletion requests within 30 days.

Withdraw Consent

For anything based on your consent (like marketing emails), you can withdraw that permission anytime. Click the unsubscribe link in any email, or contact us directly. This doesn't affect processing based on other legal grounds.

Object to Processing

If we're processing your information based on legitimate interest, you can object. We'll stop unless we have compelling reasons that override your interests or need the data for legal claims.

Data Portability

You can request your information in a structured, commonly used format. This makes it easier to transfer your data to another service if you choose.

Data Retention

We don't keep information longer than necessary. But "necessary" varies depending on the type of data and legal requirements:

Information Type	Retention Period
Active student records	Duration of enrollment plus 3 years
Financial and payment records	7 years (Canadian tax law requirement)
Course completion certificates	Permanent record (you may need proof of training)
Marketing communication preferences	Until you withdraw consent or 5 years of inactivity
Website analytics data	26 months from collection
Support correspondence	3 years from last interaction

After these periods, we securely delete or anonymize the information. Anonymized data (where you can't be identified) may be retained indefinitely for research and curriculum improvement.

Cookies and Tracking

Our website uses cookies—small text files stored on your device. Most are essential for the site to function, but some help us understand how people use the site:

Essential Cookies

These are necessary for basic site functionality. They remember your login session, maintain your shopping cart during registration, and store your privacy preferences. You can't disable these without breaking the site.

Analytics Cookies

We use basic analytics to understand which pages are popular and how people navigate the site. This data is anonymized—we see general patterns, not individual behavior. You can opt out through your browser settings.

Managing Cookies

Most browsers let you control cookies through settings. You can block all cookies, accept only certain types, or delete cookies after each session. Keep in mind that disabling essential cookies will affect site functionality.

Children's Privacy

Our culinary training programs are designed for adults and require participants to be at least 16 years old. We don't knowingly collect information from children under 16.

If we discover we've accidentally collected information from someone under 16, we'll delete it immediately. If you're a parent or guardian and believe your child has provided us with personal information, contact us right away.

Changes to This Policy

Privacy practices evolve. When we make significant changes to this policy, we'll notify active students by email and post the updated version on our website with a new "Last Updated" date.

We encourage you to review this policy periodically. Continued use of our services after changes means you accept the updated terms. If you disagree with changes, you can exercise your right to deletion (subject to legal retention requirements).

Complaints and Regulatory Oversight

If you're unhappy with how we've handled your personal information, we want to know. Contact us first so we can try to resolve the issue directly.

If you're not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada. They're the federal regulator responsible for PIPEDA compliance: