Privacy Policy

This Privacy Policy applies to Nunavut Youth Creative Collective (NYCC), 436 Atungauyait Drive, Iqaluit, NU X0A 2H0, Canada, when people browse the website, create an account, purchase or license digital assets, download purchased files, contact NYCC, or otherwise interact with the marketplace. Privacy questions and personal-data requests can be sent to mac@nuycc.ca.

We may collect account and contact details such as name, email, organization and mailing or billing address; transaction details such as purchased assets, selected file sizes, licence records, invoices, payment status and download history; communications sent to support; and technical information such as IP address, browser/device data, logs, cookie identifiers and usage data. Google Analytics is planned for site analytics. NYCC should not store full payment-card numbers directly if payments are handled by a third-party provider.

Information may be provided directly when a person registers, checks out, updates an account, submits a form or subscribes. Some technical information is collected automatically through the website and hosting/security systems. NYCC may also receive limited transaction or verification information from payment, hosting, analytics, email or fraud-prevention providers.

NYCC may use personal information to operate the catalogue and accounts; process purchases and taxes; issue licences, receipts and order records; provide secure downloads; prevent fraud and abuse; respond to support requests; maintain security; improve website performance; comply with legal/accounting obligations; and send newsletters or promotional messages only where consent or another lawful basis applies.

Where consent is required, it should be meaningful: people should understand what is being collected, why, and the consequences of agreeing. Optional marketing, analytics or similar non-essential uses should be separated from information necessary to complete a purchase or provide the service. Consent may be withdrawn, subject to legal or contractual limits and reasonable notice.

Payments should be processed by the payment provider identified at checkout. NYCC may receive transaction identifiers, payment status, billing details and fraud signals needed to complete or reconcile the order. The final policy must name the actual processor and accurately state whether any payment information is stored by NYCC or only by the processor.

NYCC may use vendors for hosting, ecommerce, payment processing, email, security and analytics. The payment provider has not yet been selected. Google Analytics is planned. Final vendors, processing locations, retention settings and contractual safeguards must be documented before launch, including any processing outside Nunavut or Canada.

Essential cookies may be used for login sessions, cart/checkout, security and site preferences. NYCC plans to use Google Analytics for website analytics. Analytics may collect device, browser, approximate location, referral and usage information. Non-essential analytics should not be activated before any consent mechanism required by applicable law is configured, and visitors should be able to revisit cookie settings. NYCC is not currently planning Meta Pixel or Google Ads tracking.

NYCC does not currently use a newsletter platform. If newsletter or other promotional email functionality is introduced later, sign-up must use an appropriate consent process, identify NYCC as the sender, provide contact information and include a simple unsubscribe mechanism. Transactional account and purchase messages remain separate from promotional communications.

Personal information should be retained only as long as reasonably necessary for the purposes described, including account support, licence/order history, accounting/tax, fraud prevention, dispute handling and legal obligations. NYCC should maintain a documented retention schedule and securely delete or de-identify information when it is no longer required. Some purchase and licence records may need to be kept longer than ordinary support logs.

NYCC should use safeguards appropriate to the sensitivity of the information, such as access controls, strong authentication, encryption where appropriate, secure backups, software updates and staff/vendor controls. Privacy incidents should be assessed promptly. Where a breach creates a real risk of significant harm, applicable PIPEDA reporting and notification requirements may require notice to the Privacy Commissioner and affected individuals as soon as feasible.

Individuals may request access to personal information held about them and may challenge its accuracy or completeness, subject to lawful exceptions. NYCC should provide a clear privacy contact for access, correction, deletion/retention questions, consent withdrawal and complaints, and should authenticate requesters before disclosing account or transaction information.

The marketplace is intended for people who are legally able to enter purchase and licence agreements, or who are acting with appropriate parent, guardian or organizational authority. Nunavut’s age of majority is 19. If NYCC knowingly offers services to younger users, the privacy and consent approach should be reviewed specifically for that use case.

Questions, access or correction requests, consent-withdrawal requests and privacy complaints may be sent to mac@nuycc.ca or mailed to Nunavut Youth Creative Collective, 436 Atungauyait Drive, Iqaluit, NU X0A 2H0, Canada. The current version and effective date should be posted on the website whenever this policy changes.