PIPEDA Compliance

MapleHR is built from the ground up to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Our PIPEDA Commitments

Accountability

We have a designated Privacy Officer responsible for compliance with PIPEDA and for handling all privacy-related inquiries.

Identifying Purposes

We clearly identify the purpose for which personal information is collected at or before the time of collection.

Consent

We obtain meaningful consent before collecting, using, or disclosing personal information. Consent can be withdrawn at any time.

Limiting Collection

We only collect personal information that is necessary for delivering the MapleHR platform to your organization.

Limiting Use, Disclosure & Retention

We do not use or disclose personal information for purposes other than those for which it was collected. Data is retained only as long as necessary.

Accuracy

We keep personal information as accurate, complete, and up-to-date as necessary for the purposes for which it is to be used.

Safeguards

We protect personal information with security safeguards appropriate to the sensitivity of the data, including encryption at rest and in transit.

Openness

Our privacy practices are transparent and documented in our Privacy Policy.

Individual Access

Users can access and request correction of their personal information at any time through the platform or by contacting us directly.

Challenging Compliance

Individuals may challenge our compliance by contacting our Privacy Officer. We investigate all complaints promptly.

Data Residency

All MapleHR data is stored exclusively on servers located in Canada (AWS Canada – Central, Montreal). We do not transfer personal data outside of Canada without explicit consent and appropriate safeguards in place.

For privacy inquiries, contact our Privacy Officer at privacy@maplehr.ca.