1.Data protection
| Law | What it requires | How it is handled |
|---|---|---|
| PIPEDA and provincial laws | Meaningful consent, purpose limits, safeguards, accountability for processors, breach reporting where there is a real risk of significant harm. | Our DPA covers processor duties and breach notice. |
| Quebec Law 25 | Privacy impact assessments, cross-border transfer assessments, notice of automated decisions, and a person responsible for personal information. | Quebec customers should assess transfers to India and tell us about requirements. |
2.Messaging, calling, and recording
Canada's Anti-Spam Legislation (CASL) applies to commercial electronic messages, including texts. You need express consent (or narrowly defined implied consent), must identify yourself, and must include a working unsubscribe mechanism that you honour within 10 business days. Telemarketing calls must respect the National Do Not Call List and CRTC calling-hour limits. The Criminal Code allows recording when one party consents, but privacy law expects you to tell people that a call is recorded.
This page is a general summary of how Callfora approaches the law in this region. It is not legal advice, laws change, and your obligations depend on your own facts. Ask your counsel before relying on it.
Need help with this document?
Choose the route that matches your question. These links do not replace the terms above.