Privacy Policy

Apliko Consulting OÜ, with registry code 17488922 and registered office at Sepapaja tn 6, Tallinn 15551, Estonia (“we”, “us”, “our”, “Apliko Consulting OÜ” or “Apply-Assist”), is committed to protecting and respecting your privacy. This Privacy and Cookies Policy (“Policy”) explains how we collect, use, store, transfer, and protect personal data obtained through our website apply-assist.ca and related services (“Services”).

This Policy applies to all users, customers, and visitors of this Website. Please read it carefully to understand our practices regarding your personal data and how it will be treated.

Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) governs the collection, use, and disclosure of personal information in the course of commercial activities. Where applicable, this Policy also aligns with the principles of the General Data Protection Regulation (GDPR). Compliance with one regulation does not automatically imply compliance with others; therefore, we apply appropriate safeguards to protect personal information and individual rights.

Apliko Consulting OÜ acts as the data controller for personal data collected from users and customers through the Website.

By using this Website and its Services, users acknowledge that they have read and understood this Policy and consent to the processing of their personal data as described herein.

We process personal data based on the informed, explicit, and voluntary consent provided by users. Consent is obtained through affirmative actions, such as accepting this Policy via checkboxes in contact forms, service request forms, payment processes, or other interactive features of the Website.

Personal data is treated confidentially and is processed solely for the purpose of providing the requested services, including administrative assistance related to Social Insurance Number (SIN) applications and the Canadian Dental Care Plan (CDCP), in accordance with applicable data protection laws.

Privacy Officer & Accountability

In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Apliko Consulting OÜ has designated a Privacy Officer who is accountable for the personal information under our control and for our compliance with applicable Canadian privacy laws.

If you have any questions about this Privacy Policy, wish to access, correct or delete your personal information, request to withdraw your consent, or file a complaint regarding the handling of your personal information, you may contact our Privacy Officer using the details below.

Privacy Officer: Marc Gomez Position: Director, Apliko Consulting OÜ Email: privacy@apply-assist.ca Postal address: Apliko Consulting OÜ, Attn: Privacy Officer Sepapaja tn 6, 15551 Tallinn, Estonia

We will respond to your request within thirty (30) days of receipt, as required by PIPEDA. In the event that your concerns are not resolved to your satisfaction, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

Data treatment purposes

For the purposes of applicable data protection laws, including PIPEDA and, where applicable, GDPR (collectively, “Data Protection Laws”), the data controller can be contacted at privacy@apply-assist.ca.

Personal data is collected and processed for the following purposes:

  • Providing and managing the services contractually agreed with users;
  • Assisting with applications related to the Social Insurance Number (SIN) and the Canadian Dental Care Plan (CDCP);
  • Communicating with users before, during, and after the service process;
  • Facilitating communication between users and relevant public authorities where required;
  • Complying with legal, accounting, tax, and regulatory obligations, including those applicable to us as a company established in Estonia;
  • Providing information about updates, services, or relevant communications where consent has been granted.

Collected data to provide a service

The personal data collected is limited to what is strictly necessary to provide the requested services and to comply with applicable legal obligations. This may include identification details, contact details, billing information, and the specific information required to prepare and submit SIN or CDCP applications on your behalf.

Personal data is stored securely and retained only for the minimum period necessary to fulfil the purposes described in this Policy. As a general rule, personal data contained in service files is not retained for more than 12 months after completion of the service. However, personal data contained in invoices, accounting records, and transaction documentation is retained for the longer period required by applicable accounting and tax legislation, including the record-keeping obligations that apply to us as a company established in Estonia and the record-keeping obligations applicable under Canadian tax law. After the applicable retention period, personal data is securely deleted or anonymized.

Payments are processed through secure third-party payment platforms that comply with applicable security standards, including PCI-DSS. Apply-Assist does not store or directly process full payment card details.

Where applicable, personal information submitted as part of a SIN application is ultimately processed and stored by Service Canada in the Social Insurance Register, in accordance with governmental regulations.

Sensitive personal information

Some of the Services involve the processing of sensitive personal information. In particular, assistance with CDCP applications may involve health-related information, and assistance with SIN applications involves the Social Insurance Number, which is a sensitive government identifier.

We collect and process this sensitive information solely for the purpose of providing the specific service you have requested. By purchasing a service that requires sensitive information, you provide your express consent to the collection, use, and disclosure of that information for the purpose of delivering that service. We apply enhanced safeguards to sensitive personal information and limit access to it to the personnel strictly involved in delivering your service.

Social Insurance Number (SIN)

Where you request assistance with a SIN application, we collect and process your SIN-related information exclusively for the purpose of preparing and submitting that application on your behalf to the relevant Canadian government authority. We do not use the SIN for identification, authentication, record-matching, or any other purpose, and we do not disclose it to any party other than the relevant government authority and trusted service providers strictly necessary to deliver the service. We retain SIN-related information only for as long as required to deliver the service and to meet applicable legal obligations.

International transfer of personal data

Apliko Consulting OÜ is a company established in Estonia (European Union). The personal data you provide through this Website is transferred to, processed, and stored in Estonia, and may be accessed by our personnel located in the European Union for the purpose of delivering the Services. Certain trusted service providers we rely on may also process personal data in other jurisdictions.

This means that your personal data is processed outside Canada and may be subject to the laws of the jurisdictions in which it is processed, including lawful access requests by courts, law enforcement, or regulatory authorities of those jurisdictions.

Regardless of where personal data is processed, we remain accountable for its protection and apply a comparable level of safeguards through contractual, technical, and organizational measures. By using the Services and providing your personal data, you acknowledge and consent to the transfer of your personal data to Estonia and its processing outside Canada as described in this Policy.

Personal data of minors

The Website is intended for adults with legal capacity. Where a service is requested for a minor, it must be submitted by a parent or legal guardian. In such cases, we process the minor’s personal data solely for the purpose of delivering the requested service, on the basis of the consent and legal authority of the parent or legal guardian, who is responsible for confirming that they hold the necessary authority to provide that information.

Collected data to request information

Personal data collected through contact or information request forms is used solely to respond to inquiries, provide requested information, or send communications where consent has been granted.

Certain technical data, such as IP addresses or cookie identifiers, may be collected automatically to ensure website functionality, security, and analytics.

Recipients and service providers

Personal data may be disclosed to third parties only where necessary to provide the requested services, comply with legal obligations, or work with trusted service providers under contractual confidentiality and data protection obligations. We do not sell personal data.

The categories of recipients with whom personal data may be shared include: payment processors (to process payments securely), website hosting and IT infrastructure providers, email and communication service providers, and the relevant Canadian government authorities to which your application is submitted. Service providers are only permitted to process personal data on our instructions and for the purposes of delivering the Services.

Security of personal data

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. While no method of transmission or storage is completely secure, we take reasonable steps to safeguard the personal data under our control.

Breach notification

In the event of a breach of security safeguards involving personal data under our control, we will assess the breach in accordance with PIPEDA. Where a breach creates a real risk of significant harm to affected individuals, we will notify the Office of the Privacy Commissioner of Canada and the affected individuals as required by law, and we will notify any other organization or government institution that may be able to reduce the risk of harm. We maintain a record of breaches of security safeguards as required by PIPEDA.

Exercise of rights

Under PIPEDA, you have the right to access the personal information we hold about you, to request the correction of inaccurate or incomplete information, and to withdraw your consent to the processing of your personal data, subject to legal or contractual restrictions and reasonable notice. Where applicable, you may also have additional rights under the GDPR, including rights of restriction, portability, and objection.

You may exercise your rights by contacting our Privacy Officer at privacy@apply-assist.ca. Proof of identity may be required to process such requests. Please note that withdrawing consent necessary to deliver a service may prevent us from completing that service.

Embedded content from other websites

This Website may include embedded content from third-party websites. Embedded content behaves in the same way as if the user had visited the third-party website directly, which may collect data, use cookies, or track interactions independently.

COOKIE POLICY

This Website uses cookies and similar technologies to enable core functionality, remember your preferences, analyze website performance, and, where you consent, for marketing purposes.

When you first visit the Website, a consent banner allows you to accept or decline non-essential cookies and to manage your preferences by category:

  • Functional cookies are strictly necessary to enable the use of the Website and its core features and cannot be disabled.
  • Preferences cookies store choices that improve your experience.
  • Statistics cookies are used to understand how visitors interact with the Website, on an aggregated or anonymized basis.
  • Marketing cookies are used to deliver relevant advertising and may track usage across websites.

You may accept, decline, or withdraw your consent to non-essential cookies at any time through the consent banner or your browser settings. Disabling certain cookies may affect the functionality of the Website.

For questions regarding this Privacy and Cookies Policy, please contact privacy@apply-assist.ca.