Privacy Policy
Your privacy is as important to us as the history we preserve. This document explains how Canada Rail History collects, uses, and protects your personal information when you visit CanadaRailHistory.com. It’s a detailed read—but we believe transparency is the foundation of trust. Last updated: April 2026.
1. Who We Are
The data controller for this website is Canada Rail History, a registered entity dedicated to educational rail heritage. Our contact details are:
- Address: 50 Bay Street, Toronto, Ontario M5J 2X2, Canada
- Phone: +1 416 555 3176
- Email: info@CanadaRailHistory.com
- Business Registration: ON-2847159
- VAT/GST/HST Number: CA-891542637RT0001
- Founded: 2012
We are the stewards of your data—think of us as the archivists for your personal information, handling it with the same care we apply to historical records.
2. Information We Collect
We don’t collect more than we need. Really. The data gathered falls into two categories: what you give us directly, and what we collect automatically as you navigate.
2.1 Information You Provide Voluntarily
This happens when you:
- Contact Us: Your name, email address, and message content.
- Sign up for our newsletter: Your email address and, optionally, your name.
- Submit research or content: Any personal details you include with your submission.
- Make a donation (if applicable): Billing information, which is processed securely by a third-party payment provider—we don’t store full card details.
2.2 Information Collected Automatically
Like most websites, we use cookies and similar technologies. This includes:
- Log Data: Your IP address (anonymized where possible), browser type, pages visited, time and date of visit, and time spent on pages. In a typical month, we see about 1,247 unique IP addresses.
- Cookies: Small data files stored on your device. Essential cookies keep the site functioning, while analytics cookies help us understand how people use the site (e.g., 98.3% of users find our timeline page via internal links).
- Device Information: Device type, operating system, and screen resolution—this helps us optimize the display of historical maps and photographs.
3. How We Use Your Information
We use your data for specific, legitimate purposes. The legal basis for this processing is typically your consent, the necessity to perform a contract (like responding to your inquiry), or our legitimate interest in improving our educational service.
- To Operate the Website: To deliver pages, prevent abuse, and load content efficiently.
- To Communicate: To respond to your questions or comments. We aim to reply to all inquiries within 48 hours.
- To Improve Our Content: Analytics tell us which railway stories resonate most—was it the article on the Last Spike, or the one on steam locomotive maintenance?
- To Send Newsletters: Only if you explicitly opt-in. Every email includes a one-click unsubscribe link.
- To Comply with the Law: To meet our legal, tax, or regulatory obligations in Canada.
We do not, and will not, sell your personal data to third parties for marketing purposes. That’s a firm promise.
4. Data Sharing and Third Parties
We’re not an island. Sometimes, we need to work with trusted partners to make the site function. These "data processors" act only on our instructions:
- Hosting Provider: Our website is hosted on servers located in Canada.
- Email Service Provider: For managing newsletter subscriptions.
- Analytics Provider: We use a privacy-focused analytics tool that anonymizes IP addresses and doesn’t use profiling cookies.
- Legal Authorities: We may disclose information if required by Canadian law, a court order, or to protect the rights and safety of our users and ourselves.
We ensure all third-party providers comply with stringent data protection agreements. A full list of sub-processors is available upon request.
5. International Data Transfers
Our primary operations and data storage are within Canada. However, some of our third-party service providers may process data in other countries, including the United States or within the European Economic Area (EEA). When data is transferred outside of Canada, we rely on adequacy decisions (like the EU-Canada adequacy agreement), Standard Contractual Clauses, or other legally approved mechanisms to ensure your data remains protected to Canadian and European standards.
6. Data Retention
We don’t keep your data forever. We retain it only as long as necessary for the purposes it was collected. Our retention schedule looks something like this:
- Website Analytics Data: 26 months.
- Contact Form Submissions: 24 months after the last communication, unless a longer period is required for legal reasons.
- Newsletter Subscription Data: Until you unsubscribe. Upon unsubscribing, your email is removed from the active list within 10 business days.
- Financial Records (if applicable): 7 years, as required by Canadian tax law.
After these periods, data is securely deleted or anonymized so it can no longer be associated with you.
7. Your Rights (Including GDPR & Canadian PIPEDA)
You have significant control over your personal data. Depending on your location, these rights may include:
Access & Portability
You can request a copy of the personal data we hold about you in a structured, machine-readable format.
Correction
You can ask us to correct inaccurate or incomplete data we have about you.
Erasure ('Right to be Forgotten')
You can request we delete your personal data, subject to certain legal exceptions.
Restriction & Objection
You can ask us to restrict how we process your data, or object to certain types of processing.
To exercise any of these rights, please contact us at info@CanadaRailHistory.com. We will respond within 30 days, as required by law, and will not discriminate against you for exercising your rights. We may need to verify your identity before proceeding—this is for your own protection.
8. Cookies and Tracking Technologies
You have control over cookies. When you first visit, our cookie banner allows you to accept or reject non-essential cookies. You can also manage cookies through your browser settings (though this may affect site functionality).
Essential Cookies: Required for basic functions like page navigation and security. The site cannot work properly without them.
Analytics Cookies: Help us understand aggregate user behavior. These are the ones you can refuse.
We do not use cookies for third-party advertising or cross-site tracking.
9. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption (SSL/TLS) for data in transit, secure access controls, and regular security reviews of our systems. However, no method of transmission over the Internet is 100% secure—we cannot guarantee absolute security, but we promise to do our very best.
10. Children's Privacy
Our content is educational and may be of interest to younger audiences, but our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our records.
11. Changes to This Policy
The history of railways evolves, and so does data privacy law. We may update this policy periodically. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy occasionally. Your continued use of the site after changes constitutes acceptance.
12. How to Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, the fastest route is email:
Data Protection Contact: info@CanadaRailHistory.com
Postal Address: Privacy Inquiry, Canada Rail History, 50 Bay Street, Toronto, Ontario M5J 2X2, Canada
You also have the right to lodge a complaint with a supervisory authority. In Canada, this is the Office of the Privacy Commissioner of Canada. For individuals in the EEA, you may contact your local data protection authority.
Questions About Your Data?
We’re here to help. Reach out to us for any privacy-related concerns.
Contact Our Team