Back to sign in

Privacy Policy

Effective date:

Service provider: 2698438 Alberta Ltd.

This policy covers BractHQ at bracthq.youngwind.ca, including visitors, enquiries, subscriber accounts and users, and billing contacts. BractHQ's provider is responsible for personal information collected for its own purposes in providing cattle operations software.

Subscribers may keep records about their own customers and clients, including customer-owned cattle and custom feeding, calving or grazing. The subscriber is responsible for its own customers' data, privacy notices and collection authority. BractHQ processes that information on the subscriber's behalf under its instructions and agreement. Direct requests about those records to the subscriber; we assist as appropriate.

Our Privacy Officer, Jamie Young, oversees privacy questions, requests and complaints. Contact jamie@bracthq.youngwind.ca.

We identify why information is needed when collecting it and collect only what is reasonably needed for those purposes. Account information includes email, name, password stored as a hash, roles and operation memberships, to authenticate users, manage permissions and provide access. Subscribers are responsible for having authority to supply their users' details.

Enquiries, correspondence, customer contact details and support records help us answer questions and manage service. Billing contacts, invoices and payment status administer subscriptions, agreed payments and required financial records. Stripe handles card payment details; BractHQ does not store full card numbers. Relevant access, error and security records help investigate problems, protect accounts and prevent misuse; these may include IP addresses and browser details.

We do not use website analytics or marketing tracking. Avoid submitting sensitive information unnecessary for your request. The shared public demo is for sample data only; do not enter real or private data, as other visitors may see changes and demo data is reset regularly.

We seek meaningful consent suited to the information and purpose: an affirmative choice where express consent is needed, or implied consent where permitted, such as contact details supplied for a reply. New purposes require explanation and further consent when required.

BractHQ uses only essential cookies for sessions, security, your theme preference and your selected operation. Cloudflare Turnstile protects login and demo access against abuse. Analytics and marketing cookies are not used. We would request consent before adding analytics or marketing cookies or tracking; no analytics or marketing is enabled by default.

Browser controls can block or clear cookies, but some features may stop working. You may withdraw consent by contacting the Privacy Officer, subject to legal or contractual restrictions. We explain consequences, such as being unable to maintain an account without identification and contact details. Withdrawal does not require erasing records we must lawfully keep. Where law permits or requires handling without consent, we limit it to that lawful purpose.

We use or disclose information only for identified purposes, with consent, or as permitted or required by law. Access is limited to people who need it for their work. We do not sell personal information or provide subscriber information for unrelated advertising. We take reasonable steps through agreements and safeguards to protect information our providers handle for us.

Our providers include DigitalOcean for hosting in Toronto, Canada, and database storage and managed database backups in San Francisco, United States; DigitalOcean Spaces for off-site backups in Toronto, Canada; Stripe for payment processing; SendGrid for email delivery; Migadu in France for receiving email sent to our bracthq.youngwind.ca addresses; Synthetic in the United States for help assistant answers, which receives help questions as typed and limited record details needed to answer them; and Cloudflare Turnstile for login and demo abuse prevention. Privacy-scrubbed error reports go to our self-hosted error tracker on DigitalOcean in Toronto, Canada. Local database dumps are kept on our Toronto, Canada hosting server. Independent payment services may also handle information under their own privacy terms.

We may disclose necessary information to professional advisers under confidentiality duties or to meet lawful requirements. We assess legal requests and limit disclosure to what is required.

Information may be stored or processed in the United States for database storage, managed database backups, email delivery, payment processing and help assistant answers. DigitalOcean hosting and local database dumps are in Toronto, Canada; database storage and managed database backups are in San Francisco, United States. Off-site backups in DigitalOcean Spaces are in Toronto, Canada. Email sent to our bracthq.youngwind.ca addresses is received and stored by Migadu in France. Information abroad may be subject to that country's laws and lawful access by its authorities.

For questions about our policies and practices concerning foreign providers and their handling of personal information, contact the Privacy Officer at jamie@bracthq.youngwind.ca. We remain responsible for appropriate protection of information handled on our behalf.

We retain information as needed for its purpose, contractual duties, legal/accounting requirements or a valid legal hold. Business, agreement and financial records are kept during service and for at least seven years after termination or final payment, whichever is later, subject to law and holds.

Leaving subscribers can export their data, then a retention period applies as specified in their agreement or notice, then the account is deactivated and anonymised. We do not hard-delete customer or cattle operations records. The exit-retention period must be specified before the process is carried out; there is no single exit-retention duration, and the seven-year business-records rule still applies. Account and enquiry information is de-identified when no longer needed, subject to those retention duties.

Database backups are kept for about seven days and off-site backups for up to 30 days. Backup copies expire separately from active records; this is not a promise of immediate removal from every backup. These backup periods do not shorten business-record retention duties. We take reasonable steps to keep information accurate, complete and current for its use. Please tell us about corrections, especially contact or account changes.

We use safeguards appropriate to the sensitivity of information, including access controls, protected connections, password hashing and limited staff access. We expect confidentiality from those handling information and review protection needs as services change. No system or transmission is perfectly secure; protect credentials and report suspected misuse promptly.

We investigate privacy breaches, contain them and keep records as required. Where a breach creates a real risk of significant harm, we notify the applicable privacy commissioner and affected individuals as required by law, and take other required protective steps. Notification requirements depend on the applicable law and circumstances.

Contact the Privacy Officer to ask what personal information we hold about you, how it has been used or disclosed, to obtain access, or to request correction. We verify identity and authority proportionately and do not release another person's or subscriber's records without authority. We respond within 30 days and may extend the period only as law allows, with the required notice and reasons. If an exception limits access, we explain it and available review rights as permitted by law. We correct established errors and record unresolved correction concerns where required.

You may challenge our compliance through the Privacy Officer, who will investigate and explain our response. You may also complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada, depending on the matter. Our internal process does not remove that right. We aim to meet Alberta PIPA and PIPEDA requirements where applicable.

The Services are not directed to people under 18. Contact jamie@bracthq.youngwind.ca about a child's information so we can assess and address it. We identify the effective date of updates, give notice of material changes and seek new consent when required.