Canada's newest
women's cycling team

1. Accountability & Designated Privacy Officer

Project North Star Cycling has designated an accountable Chief Privacy Officer responsible for overall privacy governance, security standards, and compliance with Canadian and international data protection laws.

For any inquiries, subject access requests, or privacy concerns, contact our designated officer directly:

• Office: Chief Privacy Officer, Project North Star Cycling
• Direct Email: privacy@projectnorthstarcycling.ca
• Mailing Operations: Gatineau / Montreal / Toronto, Canada

2. Identifying Purposes of Data Collection

Before or at the time personal information is collected, Project North Star Cycling identifies and limits the purposes for collection:

• Spectator & Fan Dispatch: Delivering team race bulletins, trackside alerts for Canadian events (Tour de Gatineau, Mardis de Lachine), roster updates, and calendar dispatches.
• Athletic & Talent Recruitment: Reviewing prospective rider CVs, junior development inquiries, power profiles, and agent submissions under strict sporting confidentiality.
• Commercial & Community Partnerships: Responding to sponsorship deck requests, tier inquiries, and corporate partner alignment.
• Site Operations & Performance: Technical telemetry required to ensure page availability, asset delivery, and DDoS/bot protection.

3. Express Consent & CASL Compliance

Under PIPEDA and Canada's Anti-Spam Legislation (CASL, S.C. 2010, c. 23):

• We only send electronic communications (race dispatches, alerts) where you have provided explicit, verifiable opt-in consent.
• Every electronic dispatch includes clear sender identification and an immediate, automated one-click Unsubscribe mechanism.
• You may withdraw your consent at any time without penalty by clicking unsubscribe in any dispatch or contacting our Privacy Officer.

4. Limiting Collection & No Sensitive Data

We practice strict data minimization. We only collect the minimum personal details required for the specific interaction (such as name and email address for newsletters; CV and athletic performance metrics for rider evaluations). We do not collect sensitive personal data such as financial account credentials, government identification numbers, or biometric telemetry from general site visitors.

5. Limiting Use, Disclosure & Data Retention

Project North Star Cycling strictly observes the following operational policies:

• Zero Data Brokerage: We do not sell, rent, monetize, or barter personal information to third-party data brokers, lead aggregators, or unauthorized commercial entities.
• Restricted Service Providers: Personal information is only shared with verified infrastructure processors (such as secure email delivery nodes and transactional server hosts) bound by strict confidentiality covenants.
• Retention Period: Information is retained only as long as necessary to satisfy the purpose for which it was gathered, or to comply with statutory legal and tax record retention mandates.

6. Accuracy & Individual Access

Under PIPEDA Principles 6 and 9, you have the statutory right to:

• Request confirmation of whether we hold personal information regarding you.
• Access and review any personal records in our possession.
• Request rectification of any outdated, erroneous, or incomplete personal data.
• Request complete deletion or erasure of your subscriber profile from our active databases.

7. Safeguards & Information Security

We deploy rigorous technical, organizational, and physical safeguards appropriate to the sensitivity of personal records:

• Transport Security: 256-bit TLS/SSL encryption for all data in transit across our digital properties.
• Access Controls: Role-based access controls (RBAC) and multi-factor authentication (MFA) limiting data visibility exclusively to authorized team personnel.
• Host Security: Hardened server environments with continuous vulnerability monitoring and threat mitigation.

8. Quebec Law 25 (Loi 25) Specific Provisions

Recognizing Project North Star Cycling's deep roots in Quebec racing (including the Tour de Gatineau and Mardis Cyclistes de Lachine), we comply fully with the modernized requirements of Quebec's Act respecting the protection of personal information in the private sector:

• The Chief Privacy Officer is formally identified and published above.
• Default privacy settings on all PNSC web applications are set to the highest degree of confidentiality without user intervention.
• Privacy Impact Assessments (PIAs) are conducted prior to transferring any personal records outside Quebec.
• Mandatory confidential incident logging and rapid notification protocols are maintained in the event of an unauthorized security breach.

9. Global Fans, International Transfers & GDPR Alignment

As a candidate team for the global UCI Women's WorldTour, Project North Star Cycling engages with supporters, riders, and sponsors worldwide:

• European Union & UK: Canada was recognized by the European Commission as providing an "Adequate Level of Protection" under Article 45 of the EU GDPR. For European supporters, PIPEDA provides reciprocal baseline protections.
• Cross-Border Infrastructure: Cloud processing nodes may be situated in Canada, the United States, or the European Union under standard contractual clauses (SCCs) guaranteeing equivalent security standards.
• Global User Rights: All international spectators enjoy the full rights of data access, rectification, objection, restriction, and portability.

10. Openness, Inquiries & Recourse to the Privacy Commissioner

If you have any questions, wish to exercise any of your statutory privacy rights, or believe our privacy practices do not conform with PIPEDA or Law 25, please first contact our Privacy Officer at privacy@projectnorthstarcycling.ca.

If your inquiry is not resolved to your satisfaction, you have the legal right under PIPEDA to lodge a formal complaint with the federal supervisory authority: