1. Information collected
Depending on how you use the service, BoardQBank may collect your name, email address, password hash, package selection, payment references, activation and expiry dates, login and security records, device and browser information, IP-derived security identifiers, practice progress, support communications, and feedback.
2. Payment information
Payment-card details should be collected and processed by the configured payment provider, not stored in the BoardQBank authentication database. BoardQBank may retain transaction identifiers, amount, currency, status, and fraud-prevention records needed to confirm and support a purchase.
3. Purposes
Information is used to create and secure accounts, process and verify purchases, provide entitled content, calculate expiry, save progress, prevent abuse, answer support requests, maintain audit records, improve educational quality, and meet legal or accounting obligations.
4. Consent and choices
Information is collected with consent or another lawful basis where applicable. Optional marketing communications should use a separate choice and include an unsubscribe method. Service and security messages may still be sent when necessary to operate an account.
5. Sharing
Information may be shared with service providers that support hosting, payment processing, transactional email, analytics, security, backup, and professional advice. Providers should receive only the information needed for their role and be subject to appropriate safeguards. BoardQBank does not sell personal information to advertisers.
6. Retention
Account, transaction, security, and support records are retained only for the period reasonably required for service delivery, fraud prevention, dispute handling, accounting, backup, and legal obligations. Records are deleted, anonymized, or securely archived when no longer required.
7. Safeguards
Safeguards include password hashing, secure sessions, access controls, audit logging, rate limits, encrypted transport, restricted private storage, database backups, and payment-event idempotency. No online system can guarantee absolute security.
8. Access and correction
You may request access to or correction of personal information associated with your account, subject to lawful exceptions and identity verification. Requests can be submitted through the Support page.
9. Cookies and local storage
Essential cookies are used for sign-in, security, and session continuity. Optional analytics or marketing technologies should not be enabled without the required notice and consent controls.
10. Cross-border processing
Some service providers may process information outside your province or outside Canada. Information in another jurisdiction may be subject to that jurisdiction’s lawful access rules. Provider locations and safeguards should be reviewed during deployment.
11. Children
The paid exam-preparation service is intended for candidates capable of entering a binding agreement. BoardQBank does not knowingly seek unnecessary personal information from children.
12. Privacy incidents
BoardQBank will investigate suspected privacy or security incidents and will provide notices or reports when required. Candidates should report suspected account compromise promptly.
13. Accountability, updates, and contact
KINARVA BOARDQBANK INC. is responsible for the personal information under its control. Privacy questions, access or correction requests, and complaints may be directed to the Privacy Officer through Support or board.qbanks@gmail.com. This policy may be updated to reflect operational, legal, or service changes; the effective date appears above.
This policy is designed around Canadian private-sector privacy principles, including accountability, identified purposes, consent, limiting collection, safeguards, access, and openness. Formal legal review is recommended before production launch.