Privacy Policy

Last Updated: September 25, 2025

At NorthDraw Canada ("we," "us," or "our"), protecting your privacy is a top priority. This Privacy Policy explains how we collect, use, and safeguard your personal information, in compliance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial privacy laws.

1. Collection of Personal Information

We gather personal information when you create an account, purchase draw tickets, contact support, or otherwise interact with our platform.

Types of Information Collected:

• Identity Information: Full name and Date of Birth (to verify you are 18+).
• Contact Information: Email, phone number, mailing address, and province of residence.
• Transaction Information: Details of ticket orders, purchase history, and payment method (note: full credit card numbers are never stored; payments are handled via PCI-compliant providers).
• Technical Information: IP address, device and browser type, operating system, and approximate location data.

2. How We Use Your Information

Your personal information is used to provide, maintain, and enhance our services, including:

1. Order Fulfillment: Processing ticket selections, placing orders with official draw providers, and sending confirmation emails.
2. Age Verification: Ensuring you meet the minimum age requirement of 18 for responsible play.
3. Communication: Sending transactional messages, service updates, security alerts, and promotional content (where consented).
4. Security & Fraud Prevention: Protecting against unauthorized access and fraudulent activity.
5. Platform Improvement: Analyzing usage patterns to enhance site functionality and user experience.

We will only use your personal information for purposes compatible with those for which it was collected unless otherwise legally permitted.

3. Sharing Your Information

We do not sell personal information. We may share data with trusted third parties, strictly under confidentiality agreements:

• Official Draw Providers: To process your ticket orders, including your name and transaction details.
• Payment Processors: PCI-compliant banks or gateways for secure transaction processing.
• Analytics Partners: Tools such as Google Analytics to monitor and improve site performance (data is generally anonymized).
• Legal Obligations: When required by law, such as subpoenas, court orders, or government/regulatory requests.

4. Security & Data Retention

We implement appropriate safeguards to protect your personal data:

• SSL encryption for secure data transmission.
• Internal access restrictions to ensure only authorized personnel can view personal data.
• Storage on secure servers in Canada or comparable jurisdictions with strong privacy protections.

Your data is retained only as long as necessary to provide services or comply with legal obligations.

5. Your Rights Under PIPEDA

As a Canadian user, you are entitled to:

• Access: Request access to the personal information we hold about you.
• Correction: Request corrections of any inaccurate or incomplete information.
• Consent Withdrawal: Withdraw consent for the collection, use, or disclosure of your information, subject to legal or contractual limitations.

To exercise any of these rights, contact our Privacy Officer using the information below.

6. Policy Updates

We may update this Privacy Policy from time to time. All changes will be posted on this page with a revised "Last Updated" date. We encourage you to review it periodically.