This policy describes the current preview and the planned registration service. Our public mailing address, hosting location, retention arrangements, and any participating partners will be finalized before registration opens. The preview does not save signup details.
Who is responsible
2809677 Alberta Inc. operates Key to Ki and is responsible for personal information under its control. Direct privacy questions, access or correction requests, complaints, and requests to withdraw consent to the Privacy Contact at keytoki.official@gmail.com. A public mailing address will be added before we request live registrations.
Information we collect and why
- Registration: your email address, optional first name, an adult confirmation, and the email categories you choose. These allow us to maintain your subscription and send the updates you request. We do not ask for your date of birth, password, payment information, or personal reflections.
- Consent records: the wording and version of the consent request, the choices made, registration time, and subscription or withdrawal status. These help us respect and demonstrate your preferences.
- Enquiries: your email address and information you choose to include when emailing us, used to respond and resolve the enquiry. Please do not send sensitive personal information unless we have agreed it is necessary.
- Service and security information: a necessary session cookie when the live form is submitted, and a short-lived coded identifier derived from an IP address to limit repeated submissions. Hosting providers may also process IP addresses and request logs to operate and protect their services.
In this local preview, the form does not send registration details to a subscription database. Emailing us is a separate action that sends your message through your email provider and our Gmail account.
Your choices and consent
Browsing the site does not require registration. All consent boxes start unchecked. Consent to Key to Ki stories, music, and reflective-content emails is required only if you wish to subscribe to that list. Occasional Key to Ki event, project, and announcement emails are a separate optional choice. You may decline optional contact without losing access to the site or the core list.
A link to this policy explains our practices; it is not blanket permission for unrelated uses. We will explain materially new uses or disclosures and obtain new consent where required before making them.
Associates and partners
No associates or partners are currently listed for independent marketing contact, and the signup does not authorize contact by unnamed partners. When a partner option becomes available, we will identify the organization, the proposed topics, the information to be shared, and its privacy notice before asking for a separate, optional opt-in.
If you opt in to a named partner, the proposed sharing is limited to your email address and optional first name for the purpose displayed beside that partner. No partner receives your details merely because you subscribed to Key to Ki. Service providers acting only on our instructions are distinguished from partners wishing to market independently.
Before partner sharing starts, Key to Ki will put arrangements in place to record recipients and purposes, restrict use, and communicate withdrawals. A future partner is not automatically covered by an earlier choice. We will not sell registration lists or use this registration to authorize unrelated data brokering.
How to withdraw or change consent
Email keytoki.official@gmail.com from the subscribed address and tell us whether you want to stop all updates or a particular category or partner. There is no charge. We will stop the affected use or sharing promptly and meet applicable legal deadlines, including the Canadian commercial-email deadline of no later than 10 business days. Each commercial email must include a usable unsubscribe method.
We will inform relevant partners of a withdrawal without delay where consent has been shared, and require them to honour it. Minimal records may remain to prevent further unwanted contact and demonstrate compliance. Withdrawing email consent does not prevent you from browsing our content.
Storage, providers, and international processing
The planned registration database will be on our Hostinger hosting account, separate from publicly downloadable website files. It has not been activated. The selected server region, backup settings, and any email-campaign provider have not yet been confirmed; we will update this notice before registration opens.
Enquiries sent to our listed address are processed through Google Gmail. The website currently loads typography through Google Fonts, which causes the browser to contact Google and disclose technical request information such as an IP address. Links to YouTube, Spotify, or other external sites lead to services with their own policies; they are not registration partners simply because we link to them.
Providers and their support teams may process information outside Canada, where local laws may permit access by courts or public authorities. We do not promise Canadian-only storage. Ask our Privacy Contact for information about our service-provider practices and countries of processing before submitting personal information. We remain responsible for appropriate arrangements with providers processing information on our behalf.
Safeguards
The registration service is designed to require HTTPS, validate requests and consent on the server, limit repeated submissions, and keep database credentials outside the public website. Database access will be restricted to people who need it for the stated purposes. We must verify access controls, account security, backup protection, and withdrawal procedures before activation. No internet service is completely secure, and we do not claim that unverified protections are already operating.
If a privacy incident occurs, we will assess and contain it, keep required records, and notify regulators and affected people where the applicable law requires.
Retention and deletion
Subscription information will be retained while it is needed to provide the chosen updates. After withdrawal, unnecessary profile information will be removed or de-identified, while a limited suppression and consent record may be retained to respect the withdrawal and meet legal needs. Enquiries will be kept only as needed to resolve them and meet legitimate recordkeeping requirements.
The planned rate-limit identifiers will be cleared after 48 hours. Exact retention periods for subscription records, enquiries, provider logs, and backups will be confirmed and disclosed before registration opens. Deletion must also account for scheduled backup expiry, and restored backups must respect withdrawals. We will not retain information indefinitely simply because storage is available.
Access, correction, and complaints
You can ask what personal information we hold, how it has been used or disclosed, obtain access, or request corrections or deletion subject to applicable exceptions. Contact the Privacy Contact above. We may request proportionate information to verify identity, and will explain any lawful restriction or refusal. Requests will be handled within the time required by the applicable law. You may also raise a concern with the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada, as appropriate.
Children and family use
Content may be enjoyed across generations, but this email registration is for adults aged 18 or older. Parents and caregivers can subscribe using their own details. We do not ask adults to submit a child's details. If you believe a child has registered, contact us so we can review and remove information where appropriate.
Cookies and other tracking
The website code does not include advertising trackers, analytics, or browser push notifications. The live registration endpoint uses a necessary session cookie for request protection. Provider security logs and the external font requests described above are separate. If optional tracking or new integrations are added, this notice and any required consent controls must be updated first.
Policy updates and applicable requirements
We will date changes to this notice and communicate material changes where appropriate. Posting a new policy does not retroactively expand consent. This draft was prepared with reference to Alberta's Personal Information Protection Act, PIPEDA where applicable, and Canada's anti-spam legislation. Actual legal duties depend on our activities, locations, audiences, and processing arrangements.