Free Refund Policy Generator for Squarespace Site — PIPEDA Compliant

🇨🇦 Key PIPEDA Requirements

Canada's federal private sector privacy law, PIPEDA (Personal Information Protection and Electronic Documents Act), applies to commercial activities across Canada. Quebec's Law 25 (Bill 64) has introduced GDPR-like requirements for Quebec residents. Canada's Privacy Commissioner can investigate complaints, and courts can award damages for serious privacy breaches.

• Obtain meaningful consent before collecting, using, or disclosing personal information
• Limit collection to what is necessary for the identified purpose
• Provide individuals with access to their personal information on request
• Protect personal information with appropriate security safeguards
• Report breaches that pose a real risk of significant harm to the Privacy Commissioner
• Quebec Law 25: privacy impact assessments, data minimization, and new consent rules

Squarespace Site — Specific Considerations

Squarespace sites use Squarespace's infrastructure and built-in analytics that automatically collect visitor data. Squarespace Commerce collects customer purchase data, and Squarespace Email Campaigns processes subscriber data. Unlike open-source platforms, Squarespace's data collection is more standardized and predictable, but you must still disclose Squarespace's role as a data processor and any third-party integrations.

Data typically collected by Squarespace Site businesses: visitor analytics and session data, Squarespace Commerce customer and order data, email campaign subscriber data, form submission data, cookie and tracking data

• Squarespace as data processor disclosure
• Squarespace Commerce payment processing (Stripe)
• Squarespace Email Campaigns subscriber data
• Third-party integrations (Mailchimp, Google Analytics)
• Squarespace Analytics data retention