Privacy Policy

Who We Are

VerityLoft publishes independent software reviews for accounting and bookkeeping practices at verityloft.com. The site is operated by Northern Dominion River Company Inc., a company incorporated in British Columbia, Canada.

For any privacy question, or to exercise a right described below, contact us through our contact page.

What We Collect

What	How it reaches us	Why	Kept for
Name, email address and message	You type it into our contact form	To answer you	24 months
Email address	You subscribe to the newsletter	To send the newsletter you asked for	Until you unsubscribe
Page views, referring site, browser, operating system, device type, country	Automatically, through Umami analytics	To see which reviews are actually useful	Indefinitely, as anonymous aggregate statistics
IP address and request data	Automatically, in our host's server logs	Security and abuse prevention	30 days
Comment content, if comments are enabled	You post it	To publish the comment	Until removed

We do not ask for, and do not want, any client information belonging to your practice. Please do not send taxpayer data, client files or credentials through our contact form. It is not a secure channel and we have no need for them.

Cookies and Analytics

Analytics is handled by Umami, and it is worth being specific about what that means because it is unusual. Umami uses no cookies in its tracking code, collects no personally identifiable information, and does not track visitors from one website to another. It records page views, referring site, browser, operating system, device type and country of origin. Nothing in that set identifies you.

We run no advertising on this site. There are no ad networks here, and therefore no advertising cookies, no personalised advertising and no ad-tech companies receiving anything about you.

The only cookies you are likely to meet on this site are WordPress's own functional cookies, if you leave a comment or log in, and cookies set by a merchant or affiliate network when you click one of our affiliate links. Those belong to the merchant rather than to us. You can clear or block cookies in your browser at any time, and blocking them will not stop you reading anything here.

Third Parties We Rely On

Running a website means other companies handle some data on our behalf. For this site there are very few.

• Hosting: Hostinger, which stores the site and its server logs. Those logs contain IP addresses and are kept for 30 days.
• Analytics: Umami, which records anonymous, cookieless statistics as described above.
• Newsletter: Hostinger
• Affiliate networks: the merchants and networks behind the links described below.

We do not sell personal information, and we do not share it with anyone for their own marketing.

Affiliate Links

Some links on this site are affiliate links, which means we may earn a commission if you buy after clicking one. Clicking such a link typically sets a cookie belonging to the merchant or their affiliate network so the referral can be attributed to us. That cookie is theirs, governed by their privacy policy rather than ours. Our full affiliate disclosure explains how this works and what it does not change.

Which Laws Apply

Northern Dominion River Company Inc. is based in British Columbia, so the law that principally governs this site is British Columbia's Personal Information Protection Act (PIPA), overseen by the Office of the Information and Privacy Commissioner for British Columbia. BC is one of three provinces whose private-sector privacy law has been declared substantially similar to the federal statute, which is why PIPA applies here rather than PIPEDA.

PIPEDA still applies to personal information that crosses a border. For a site with readers in several countries, that covers a meaningful share of it, so we treat both regimes as live.

If you are in the UK or the EU, the lawful bases we rely on are consent, for the newsletter; legitimate interests, for security logging and for understanding site usage in aggregate; and steps toward a contract, where you contact us about working together.

Your Rights

If you are in Canada

Under British Columbia's Personal Information Protection Act you can ask for access to the personal information we hold about you, ask how it has been used and to whom it has been disclosed, and ask us to correct it. You may complain to the Office of the Information and Privacy Commissioner for British Columbia.

Where PIPEDA applies, principally to personal information that crosses a border, the equivalent rights and complaint route sit with the Office of the Privacy Commissioner of Canada. If you are a Québec resident, Law 25 gives you additional rights including data portability. We do not use automated decision-making of any kind.

If you are in the UK or the European Union

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to processing based on legitimate interests, ask us to restrict processing, and ask for your data in a portable format. You can withdraw consent at any time. You also have the right to complain to your supervisory authority, which is the Information Commissioner's Office in the UK or your national authority in the EU.

If you are in the United States

Depending on your state, you may have the right to know what personal information is collected, to request deletion, and to correct inaccuracies. We do not sell or share personal information. Because we run no advertising and our analytics sets no cookies, most of the opt-out machinery those laws describe has nothing here to act on.

To exercise any of these, contact us through our contact page. We will respond within the time the applicable law requires, and within 30 days in any event.

How Long We Keep Things

Only as long as we need to. Contact form messages are kept for 24 months so we can follow up on a conversation, then deleted. Newsletter subscriptions last until you unsubscribe. Our host's server logs are kept for 30 days.

Umami statistics are kept indefinitely, and it is worth explaining why that is not the concession it might sound like. Those statistics are anonymous and aggregate. They contain nothing that identifies you, which means there is nothing in them that could be handed back to you or erased on request. What is retained is a count, not a person.

Security

The site runs over HTTPS and is hosted by Hostinger. Access to the WordPress administration is limited to its editor and protected by multi-factor authentication. We hold very little personal data by design, which is the most effective security control available to a site this size.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and the appropriate regulator where the law requires it. Under PIPEDA that threshold is a breach creating a real risk of significant harm.

Children

This site is written for professional practitioners and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Changes to This Policy

We will update this page when our practices change, and the date at the top will change with it. Material changes will be flagged on the page itself rather than made quietly.

Contact

Questions, corrections, or a request to exercise a right: verityloft.com/get-in-touch.