Privacy policy

What we collect

When you complete the quote form we collect the information you enter into it:

• Your name
• Your business name
• Your email address
• Your phone number
• Your monthly processing volume band
• Your industry or vertical
• Anything you choose to write in the free-text field

What we collect automatically

We also record the campaign parameters in the link you arrived through, the page that referred you, and your browser user-agent string. These tell us which marketing produced an enquiry.

We use a privacy-respecting analytics measurement that records page views, which sections of the page were reached, and whether the form was started and completed. Analytics never receives your name, business name, email address, or phone number.

Why we collect it

We use your information for one purpose: to respond to your quote request and to assess whether we can place a merchant account for your business. That means reviewing what you have told us, and where appropriate passing it to an acquiring bank or to our processor for underwriting.

We do not sell your information. We do not share it with anyone for their own marketing.

Consent

The consent checkbox on the form is never pre-ticked. By ticking it you agree that Kavara may contact you about your quote by email or phone. That is express consent under Canada's Anti-Spam Legislation (CASL).

You can withdraw consent at any time by replying to any message from us or by writing to the address below. Withdrawing consent means we stop contacting you; it does not undo anything already done at your request.

Who we share it with

We share what is necessary, with the following categories of recipient, and no others:

• Our processor and the acquiring banks it works with, TODO: PROCESSOR, for the purpose of underwriting your application
• Our hosting and infrastructure providers, who store the data on our behalf
• Our email provider, which delivers the notification of your enquiry to us
• A regulator, law enforcement, or a court, where we are legally required to

Where it is stored

Our hosting and database providers operate outside Canada, so your information may be stored or processed in another country, most likely the United States. While it is there it is subject to the laws of that country, including lawful access requests by its authorities.

We use providers that offer contractual protections comparable to those required under PIPEDA. If you would prefer not to have your information handled this way, please contact us before submitting the form.

How long we keep it

We keep quote enquiries for TODO: CONFIRM RETENTION PERIOD (24 months proposed), after which they are deleted. Where an enquiry becomes an account, records are kept for as long as the account relationship requires and for any period our processor or the card networks oblige us to retain them.

How we protect it

The site is served over HTTPS. Form submissions are written directly to a database that is not readable from the public internet, and access to it is restricted to server-side credentials held by us. We do not store payment card data on this site at any point.

Your rights

Under PIPEDA you may ask us to:

• Tell you what personal information we hold about you
• Give you a copy of it
• Correct anything that is inaccurate
• Delete it, where we are not required to keep it
• Withdraw your consent to being contacted

Cookies

This site does not set advertising or cross-site tracking cookies. Any storage it uses is limited to what is needed for the site to work and for the aggregate measurement described above.

Complaints

Write to us first at TODO: PRIVACY CONTACT EMAIL and we will respond. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada.

Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes affecting how we use information already collected will be notified to the address you gave us.

How to contact us

TODO: LEGAL ENTITY, TODO: PRIVACY CONTACT EMAIL.