Privacy Policy
About This Policy and Your Privacy
Last updated: February 20, 2026
Your privacy is important to DISCOVERYGARDEN INC. & DISCOVERYGARDEN CORP. (collectively, "DG", also referred to as "we", "us", and "our"). This Privacy Policy explains how we collect, use, and disclose your Personal Information when you interact with us or otherwise access or use any of the websites, products, or services that are owned, operated, sold, or otherwise provided by DG, including our website (https://www.discoverygarden.com/) and all associated subdomains (collectively, the "Websites"), the Islandora platform and any subsequent iteration thereof (the "Platform"), and any other websites, documents, applications, instruments, products, or services that contain a link or direction to this Privacy Policy (together, the "Services").
PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE DEAL WITH YOUR PERSONAL INFORMATION. By using or accessing our Services, you accept and agree to be bound by and comply with this Privacy Policy. If you do not agree with this Privacy Policy, you may choose not to use the Services. Please also refer to the End User Licence Agreement, Community Guidelines, and other associated documentation governing your use of the Services that is available on our Website.
DG will obtain consent where required by law for the collection, use, and disclosure of Personal Information. By accessing or using the Services or otherwise submitting your Personal Information to us, you consent to our collection, use, and disclosure of your Personal Information for the purposes and in the ways described in this Privacy Policy. If you do not agree, you may choose not to use our Services.
This Privacy Policy may change from time to time and at our sole discretion to comply with applicable privacy laws, regulations, standards, and best practices in Canada, the United States, or elsewhere, effective immediately upon posting. Where such changes are significant or materially affect your rights under this Privacy Policy, we will provide you with notice of such changes by email. Your continued use of the Services after we make any changes means that you accept and consent to those changes, so please check this Privacy Policy regularly for updates. If you have any questions or concerns about this Privacy Policy, please contact our Privacy Officer at info@discoverygarden.com.
What Is Personal Information?
"Personal Information" is information relating to an identified or identifiable individual. It can include, but is not limited, to an individual’s name, home address, phone number, email address, age, sex, gender, health, marital or family status, identifying numbers, government identification information, financial information, educational history, technical information (including device and browser type), IP address, and geo-location information.
Personal Information does not include certain business contact information used for employment, business, or professional purposes, nor does it include de-identified, anonymous, or aggregated information used for statistical or research purposes.
How Personal Information Is Collected by DG
Purposes for Collection
Personal Information is collected from you when you access or use the Services. This Personal Information is collected in many ways and for different reasons, as explained in this Privacy Policy, but is generally collected for the following purposes:
• to deliver the Services and monitor their quality and operation;
• to receive payments for the Services delivered to you;
• to understand your needs and preferences and those of our other clients;
• to respond to your requests about the Services;
• to conduct research and statistical analysis on our Services;
• to administer and enhance your and other clients' relationship with us;
• to comply with audit, compliance, and legal requirements, including any reporting or enforcement requirements, bylaws, policies, guidelines, boards, or tribunals in Canada, the United States, or elsewhere;
• to manage and develop our business, including customizing our Services for current and future clients and creating new industry partnerships;
• to communicate about current or future products, technology, and service offerings by us and/or by others;
• to conduct due diligence and carry out business transactions that may involve the purchase, sale, disclosure, or transfer of Personal Information;
• to comply with this Privacy Policy; and
• any other purposes for which we have consent (or do not need consent) under applicable law including but not limited to the Personal Information Protection and Electronic Documents Act, SC 2000, c 5, as may be amended from time to time.
Direct Collection
Most of the Personal Information we collect from you is collected directly, when you actively provide your Personal Information to us by creating an account, or by otherwise interacting with us or through our Websites, Platform, or other methods. The Personal Information we collect directly from you may include:
• individual information, such as name, age, date of birth, marital status, sex, gender, and/or preferred pronouns;
• contact information, such as email address, phone number, physical address, and mailing address;
• financial and credit information, such as credit card information, banking information, billing address, and third-party payment account information (e.g., PayPal or Stripe);
• account information, such as username and passwords to access the Services, your transaction history, interactions with us and users, communications and marketing preferences, and any other information provided in your account;
• reference information, including name, phone number, and email address;
• government identification information, including copies of photo identification for identify verification; and
• any other information you directly provide to DG.
This Personal Information is collected so you can create and maintain an account with us, purchase and use our Services safely and with full functionality, and otherwise communicate with us about our Services including our Websites and Platform.
We also need this Personal Information to protect the security of your account, to allow you to access all of our Services' features, to deliver technical support and for troubleshooting with our Services, and to send you important information about DG and our Services, such as safety information, updated features, material changes to our General Terms and Conditions and this Privacy Policy, and any violations or breaches of our policies. In addition:
We only collect financial information to verify and process payments for our Services as well as for fraud detection and prevention, and tax and financial reporting. If you are directed to a third-party payment gateway such as PayPal or Stripe, then you must refer to their privacy policy, terms of use, and any other policies they have for any complaints or any breaches of information by the third party. WE ARE NOT RESPONSIBLE FOR ANY PRIVACY OR INFORMATION BREACHES RELATED TO A THIRD-PARTY WEBSITE LINKED OR DIRECTED THROUGH OUR WEBSITES.
If you opt-in and consent to receive marketing information from DG, we will process your email address and send you marketing information about our Services, as well as newsletters and advertisements.
If you choose to link any of your social media accounts to our Services or interact with us on social media in any way, we may use your social media information for marketing and advertising purposes or to contact you about our Services.
Automatic Collection
We also collect certain information automatically when you interact with us or the Services. The Personal Information we collect automatically from you may include:
• technical information about the Services and the devices you use to access the Services, such as device type, operating system, browser type, IP address, cookies, time zone settings, time and date, language, crash/diagnostic logs, networks, battery level, and unique identifiers such as IDFA, Android Ad ID, IDFV, and MAC address;
• usage information, including information about your interaction with our Websites or other online platforms such as search engine(s) and keywords used to find our Websites, requested pages, referring pages, pages visited on our Websites, log files for our Websites, date and time of Website access, scrolling habits, search terms entered, frequency of visits, and pairing of devices to your account; and
• geo-location information, such as IP address location, the exact or approximate location from where you are accessing the Services, your location relative to other users, if such functionality is enabled on your device and within our Platform.
This Personal Information is collected to maximize how our Services work, to help identify and resolve technical errors, to monitor safety and operational issues, and to provide quality support.
Website Cookies and Collected Information
Cookies are files which are stored on your computer or device after you visit the Websites.
We may use cookies to understand how our Websites are used and to help us improve your overall online experience. Except for strictly necessary cookies (as described below), most of the cookies on our Websites expire at the end of your current session, except some that may have an extended lifespan. Some cookies, however, are persistent and will never expire.
Our Websites may use the following types of cookies:
Strictly Necessary – These cookies are necessary for the essential functions of the Websites (for example, for effective security or communication) and cannot be switched off in our systems. You can set your browser to block or alert you about these cookies, but this may impact the functionality of the Websites.
Visitor Statistics and Performance – These cookies collect aggregate information and statistics from our Websites regarding visitors, length of visit, date of visit, bandwidth used, pages viewed, and sites visited before and after leaving our Websites. Personal Information is not directly linked to this information, such as your name, address, email, or telephone number.
Website Preferences – These cookies are used to provide the Services or remember settings to enhance your visit; for example, text size or other preferences that improve your online experience. The information collected by these cookies is anonymous and does not enable us to track your browsing activity on other websites. By using our Websites, you agree that we can place these types of cookies on your device. If you prefer to restrict, block, or delete cookies from our Websites, you can adjust your browser settings (see how to change cookie settings in Edge, Chrome and Safari). If you choose to disable all cookies, we cannot guarantee that the Websites will work as expected.
How Personal Information Is Disclosed to Third Parties
We may disclose your Personal Information to DG employees and contractors, or to companies that are related to us, including any parent companies or subsidiaries of DG. However, we will only do so on a need-to-know basis as described in this Privacy Policy or as permitted by applicable law.
We may also disclose Personal Information to third parties, including service providers for our Websites and Platform or to government departments, agencies, or authorities in Canada, the United States, or elsewhere (the "Third Parties"). Third Parties may also provide us with services related to customer support, information technology, payment processing, sales and marketing, data analysis, research, legal compliance, and surveys.
These Third Parties may access the Personal Information for the following purposes:
• to help maintain the security of our Websites, network, and system;
• to collect, store, and/or process data on behalf of DG;
• to help us better deliver the Services and improve their features;
• to provide marketing and/or promotional assistance;
• to analyze how the Services are used;
• to help DG create industry partnerships to improve our Services; and,
• with your consent, for any other purpose disclosed by us at the time you provide the information.
DG does not sell your personal information or disclose it for any reason other than for the purposes set out in this Privacy Policy.
Contractual Measures and Third Parties
When possible, we will use contractual measures to restrict how Third Parties use your Personal Information under this Privacy Policy and applicable law. Such contractual measures will require Third Parties in Canada, the United States, or internationally to:
• Keep Personal Information confidential;
• Use Personal Information only for the purposes for which we disclose it to them;
• Use non-Personal Information that has been de-identified where possible;
• Process Personal Information with at least the same standards set out in this Privacy Policy; and
• Maintain privacy and security standards that comply with this Privacy Policy and applicable privacy laws.
Where possible we will contract with third parties that maintain certifications under applicable laws, such as the EU Data Privacy Framework or other similar certifications.
Our Websites may also include links to third-party websites, plug-ins, services, social networks, or applications. By clicking on those links, you may allow the third-party to collect, use, or disclose your Personal Information. If you follow a link to a third-party website, please note that the policies of those third parties will govern your interactions and any Personal Information collected by them. We do not accept any responsibility or liability for the policies of third parties. Because we do not control third-party websites, we encourage you to read the policies of every website you visit.
It is also possible that, despite our safeguards and best efforts, your Personal Information may be accessed by law enforcement, governmental agencies, or national security authorities in the places where the Third Parties are located.
We may also disclose your Personal Information in the limited circumstances described below:
When You Agree or Direct Us to Share – You may authorize us to disclose your Personal Information with others, including third-party providers related to the operation of our Services. For example, we may need to disclose your Personal Information to third parties if you share digital repository content through our Services.
For External Processing – We may disclose Personal Information to companies related to DG, to Third Parties, and to other entities who are instructed to process the Personal Information for us, using appropriate confidentiality and security measures under this Privacy Policy.
For Business Transactions – If DG’s business or assets are sold or financed (for example, in bankruptcy, receivership, or liquidation), Personal Information may be disclosed under confidentiality restrictions for due diligence purposes or collected, used, or disclosed by DG’s successor in accordance with this Privacy Policy.
For Business Transfers – If DG’s data or information is transferred to a new entity in a business transfer (including reorganizations, amalgamations, mergers, and acquisitions) the privacy policy of that entity will be posted on the Websites and will govern the collection, use, and disclosure of your Personal Information going forward. DG is not required to communicate such a transfer to you in advance; however, this Privacy Policy will be updated as needed as part of the business transfer.
For Legal Reasons or to Prevent Harm – We may use or disclose Personal Information: to comply with a law, regulation, legal process, or governmental request; to assert legal rights or defend against legal claims or proceedings; or to prevent, detect, or investigate illegal activity, fraud, abuse, violations of our terms, threats to the security of Services, public safety, or safety of an individual.
If a legal process (for example, a search warrant, court order, or subpoena) requires disclosure of your Personal Information, we will use our best efforts to notify you, except if the law prevents us from notifying you. If a legal process imposes a non-disclosure period, we will only provide notice to you after the non-disclosure period expires. We may not be able to provide you with notice in urgent or counterproductive circumstances either (for example, when there is a public safety issue or an individual emergency).
Non-Personal Information
We may aggregate, redact, de-identify, or anonymize your Personal Information so that it can no longer be associated with you individually ("Non-Personal Information"). For example, we may use anonymous markers or anonymous IDs.
We reserve the right and may use or disclose any such Non-Personal Information for any legitimate purpose including research, statistical, or business purposes, without further notice to you and without your consent. Further, we may disclose such Non-Personal Information publicly or to Third Parties (for example, in public reports about our Services, in research, statistical, or scientific studies, and to our service providers).
How Personal Information Is Retained and Protected
We will retain your Personal Information as long as needed or reasonable to fulfil the purposes for which it was collected, for our legitimate business interests, for legal and regulatory compliance, and to prevent harm, as described in this Privacy Policy.
DG processes and stores Personal Information in Amazon Web Services (AWS). Websites are hosted using dynamic IP Addresses. We use physical, electronic, contractual, and administrative measures appropriate for the sensitivity of the Personal Information and designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. We may use Third Parties to ensure the appropriate measures are used.
We only retain your Personal Information for as long as necessary to provide you with the Services or as required under law. We use appropriate security measures when destroying Personal Information, including shredding paper records and permanently deleting electronic records.
The security of your Personal Information also depends on you. Where you have a password to access your account or to use our Services, you must keep this password confidential. Please use a strong password and do not share your password with anyone.
Unfortunately, the Internet is not completely secure. Although we use all reasonable efforts to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted via our Websites or to our Services. We are not responsible for any circumvention of privacy settings, or failure to comply with security measures, on the Websites or in our Services.
How to Access, Correct, or Delete Your Personal Information
DG uses all reasonable efforts to keep your Personal Information accurate and complete. We rely on you to tell us if your Personal Information needs changes. You also have the right to correct your Personal Information.
If you discover an error in your Personal Information, or if any of your Personal Information changes, you can update that information in your DG account. If you are unable to update the Personal Information in your DG account or if you want any of your Personal Information deleted, you may also contact our Privacy Officer for this purpose and we will make changes where reasonably possible. We will not change your Personal Information if we believe the change would violate any legal requirement or cause the information to be incorrect.
We may ask you to send a correction or deletion request in writing, and we will need to confirm your identity before making a requested correction or deletion.
Users have the right to request access to their Personal Information. However, please be aware that DG may not provide access to information that is confidential commercial information, that was collected to investigate a breach of contract or a violation of law, that is related to dispute resolution, that may be withheld by law, or that may be subject to lawyer-client privilege or other form of confidentiality protection. To access the Personal Information we hold about you, please contact our Privacy Officer at info@discoverygarden.com.
There is a fundamental distinction between cancelling a contract, deactivating an account, and requesting deletion of your Personal Information.
If you choose to deactivate your account or your account or contract are otherwise cancelled, your account will remain inactive but retained within our system indefinitely. During this time, you may reactivate your account at any point and regain access to your data. If you wish for your account and all associated data to be permanently deleted, you must reach out to our Privacy Officer to formally request the permanent deletion of your account and all associated data.
If you submit a formal request for the deletion of your account or your Personal Information, this will result in the immediate and permanent deletion of your account. This action is irreversible and is processed manually by our Privacy Officer. To submit a Personal Information and / or account deletion request, please contact our Privacy Officer at info@discoverygarden.com.
We will use commercially reasonable efforts to delete your Personal Information as promptly as possible following receipt of your request. Please be aware that full deletion across all systems, including those of third-party service providers who store or process data on our behalf, may take additional time due to technical, operational, or contractual limitations. In certain cases, we may be required to retain specific information to comply with legal obligations, enforce our terms, resolve disputes, ensure the safety and integrity of our platform, or prevent harm.
You have the right to request access to the Personal Information we hold about you. Please note that DG may be unable to provide access to certain information where doing so would reveal confidential commercial data, compromise an investigation into a breach of contract or violation of law, interfere with dispute resolution processes, or where such information is protected by legal privilege or other applicable confidentiality protections.
Any request for modification, deletion, deactivation or updates to your Personal Information will be handled by our privacy team. We will use our best efforts to make updates to your Personal Information within 30 days. However, please note it may take up to 90 days to complete updates to your Personal Information, due to our systems and Third Parties who store and process data for us. We may also need to retain some information for legal or governmental reasons, for safety or security concerns, or to prevent harm.
To request access to your Personal Information, please contact our Privacy Officer at info@discoverygarden.com.
Consent and How to Withdraw
We use and disclose Personal Information only for the purposes for which the Personal Information was collected as described in this Privacy Policy. By agreeing to this Privacy Policy, you consent to our collection, use, and disclosure of your Personal Information as described in this Privacy Policy.
If we wish to collect, use, or disclose your Personal Information in any other way or for any new purpose not described in this Privacy Policy, we will ask for your consent to do so (including by updating our Privacy Policy), unless consent is waived under the applicable law.
When you consent to the collection, use, and disclosure of your Personal Information, you also have the legal right to later withdraw or modify your consent, completely or partially. To do so, please contact our Privacy Officer. Please note that any withdrawal or modification of consent could prevent us from being able to provide you with certain Services or to enable certain features or functions. We will do our best to explain the impact of your decision on the Services when you contact our Privacy Officer.
International Transfers of Personal Information
We may deliver our Services to clients outside of Canada and the United States and may transfer Personal Information to/from other countries for the purposes described in this Privacy Policy. By providing your Personal Information or purchasing or otherwise engaging with our Services, you consent to such transfer, storage, or processing.
Please note that other countries may have privacy and data protection laws that differ from, and are potentially less protective than, the laws of Canada and the United States. In these circumstances, the governments, courts, authorities, or regulatory agencies of the foreign country may be able to access your Personal Information through the laws of that country. You agree to this risk when you use our Services.
International Privacy Rights
Certain jurisdictions' consumer privacy laws may provide their residents with additional rights regarding our use of their personal information. DG would like to make sure you are fully aware of all your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request that DG provide copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that DG correct any information you believe is inaccurate. You also have the right to request that DG complete any information you believe is incomplete.
The right to erasure – You have the right to request that DG erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that DG restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to DG’s processing of your personal data, under certain conditions, and withdraw your consent to its use.
The right to data portability – You have the right to request that DG transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The exact scope of these rights may vary by jurisdiction. If you would like to exercise any of these rights, please contact us via email at info@discoverygarden.com. We will only use your Personal Information for the purposes set out in this Privacy Policy, and in accordance with applicable laws.
No Information From Children
Our Services are not intended to be used or accessed by children (minors) under 18 years of age. We do not knowingly collect, use, disclose, or solicit Personal Information from children under such age and we ask that no one under such age provide their Personal Information to us. If we learn we have accidentally collected Personal Information from a child without parental consent, we will delete that Personal Information immediately. If you believe we might have received Personal Information about a child, please contact our Privacy Officer.
How To Contact Us And Our Privacy Officer
If you object to the collection, use, or disclosure of your Personal Information, if you are seeking access to your Personal Information that is held by us, or if you wish to complain, make an inquiry, or ask questions about this Privacy Policy please contact our Privacy Officer at info@discoverygarden.com.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time as we add new Services, as we improve our current offerings, and as technologies and applicable laws change. You can check the “Last Updated” icon at the top of this page to see when changes are made. Any changes take effect as soon as we post them on our Websites.
We will notify you if material changes are made to the Privacy Policy and obtain your consent where required by applicable law. We will provide notice to you by email, by posting the notice on the Websites, or by posting on any of our applications or platforms that link to this Privacy Policy.
Last updated: February 20, 2026
Your privacy is important to DISCOVERYGARDEN INC. & DISCOVERYGARDEN CORP. (collectively, "DG", also referred to as "we", "us", and "our"). This Privacy Policy explains how we collect, use, and disclose your Personal Information when you interact with us or otherwise access or use any of the websites, products, or services that are owned, operated, sold, or otherwise provided by DG, including our website (https://www.discoverygarden.com/) and all associated subdomains (collectively, the "Websites"), the Islandora platform and any subsequent iteration thereof (the "Platform"), and any other websites, documents, applications, instruments, products, or services that contain a link or direction to this Privacy Policy (together, the "Services").
PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE DEAL WITH YOUR PERSONAL INFORMATION. By using or accessing our Services, you accept and agree to be bound by and comply with this Privacy Policy. If you do not agree with this Privacy Policy, you may choose not to use the Services. Please also refer to the End User Licence Agreement, Community Guidelines, and other associated documentation governing your use of the Services that is available on our Website.
DG will obtain consent where required by law for the collection, use, and disclosure of Personal Information. By accessing or using the Services or otherwise submitting your Personal Information to us, you consent to our collection, use, and disclosure of your Personal Information for the purposes and in the ways described in this Privacy Policy. If you do not agree, you may choose not to use our Services.
This Privacy Policy may change from time to time and at our sole discretion to comply with applicable privacy laws, regulations, standards, and best practices in Canada, the United States, or elsewhere, effective immediately upon posting. Where such changes are significant or materially affect your rights under this Privacy Policy, we will provide you with notice of such changes by email. Your continued use of the Services after we make any changes means that you accept and consent to those changes, so please check this Privacy Policy regularly for updates. If you have any questions or concerns about this Privacy Policy, please contact our Privacy Officer at info@discoverygarden.com.
What Is Personal Information?
"Personal Information" is information relating to an identified or identifiable individual. It can include, but is not limited, to an individual’s name, home address, phone number, email address, age, sex, gender, health, marital or family status, identifying numbers, government identification information, financial information, educational history, technical information (including device and browser type), IP address, and geo-location information.
Personal Information does not include certain business contact information used for employment, business, or professional purposes, nor does it include de-identified, anonymous, or aggregated information used for statistical or research purposes.
How Personal Information Is Collected by DG
Purposes for Collection
Personal Information is collected from you when you access or use the Services. This Personal Information is collected in many ways and for different reasons, as explained in this Privacy Policy, but is generally collected for the following purposes:
• to deliver the Services and monitor their quality and operation;
• to receive payments for the Services delivered to you;
• to understand your needs and preferences and those of our other clients;
• to respond to your requests about the Services;
• to conduct research and statistical analysis on our Services;
• to administer and enhance your and other clients' relationship with us;
• to comply with audit, compliance, and legal requirements, including any reporting or enforcement requirements, bylaws, policies, guidelines, boards, or tribunals in Canada, the United States, or elsewhere;
• to manage and develop our business, including customizing our Services for current and future clients and creating new industry partnerships;
• to communicate about current or future products, technology, and service offerings by us and/or by others;
• to conduct due diligence and carry out business transactions that may involve the purchase, sale, disclosure, or transfer of Personal Information;
• to comply with this Privacy Policy; and
• any other purposes for which we have consent (or do not need consent) under applicable law including but not limited to the Personal Information Protection and Electronic Documents Act, SC 2000, c 5, as may be amended from time to time.
Direct Collection
Most of the Personal Information we collect from you is collected directly, when you actively provide your Personal Information to us by creating an account, or by otherwise interacting with us or through our Websites, Platform, or other methods. The Personal Information we collect directly from you may include:
• individual information, such as name, age, date of birth, marital status, sex, gender, and/or preferred pronouns;
• contact information, such as email address, phone number, physical address, and mailing address;
• financial and credit information, such as credit card information, banking information, billing address, and third-party payment account information (e.g., PayPal or Stripe);
• account information, such as username and passwords to access the Services, your transaction history, interactions with us and users, communications and marketing preferences, and any other information provided in your account;
• reference information, including name, phone number, and email address;
• government identification information, including copies of photo identification for identify verification; and
• any other information you directly provide to DG.
This Personal Information is collected so you can create and maintain an account with us, purchase and use our Services safely and with full functionality, and otherwise communicate with us about our Services including our Websites and Platform.
We also need this Personal Information to protect the security of your account, to allow you to access all of our Services' features, to deliver technical support and for troubleshooting with our Services, and to send you important information about DG and our Services, such as safety information, updated features, material changes to our General Terms and Conditions and this Privacy Policy, and any violations or breaches of our policies. In addition:
We only collect financial information to verify and process payments for our Services as well as for fraud detection and prevention, and tax and financial reporting. If you are directed to a third-party payment gateway such as PayPal or Stripe, then you must refer to their privacy policy, terms of use, and any other policies they have for any complaints or any breaches of information by the third party. WE ARE NOT RESPONSIBLE FOR ANY PRIVACY OR INFORMATION BREACHES RELATED TO A THIRD-PARTY WEBSITE LINKED OR DIRECTED THROUGH OUR WEBSITES.
If you opt-in and consent to receive marketing information from DG, we will process your email address and send you marketing information about our Services, as well as newsletters and advertisements.
If you choose to link any of your social media accounts to our Services or interact with us on social media in any way, we may use your social media information for marketing and advertising purposes or to contact you about our Services.
Automatic Collection
We also collect certain information automatically when you interact with us or the Services. The Personal Information we collect automatically from you may include:
• technical information about the Services and the devices you use to access the Services, such as device type, operating system, browser type, IP address, cookies, time zone settings, time and date, language, crash/diagnostic logs, networks, battery level, and unique identifiers such as IDFA, Android Ad ID, IDFV, and MAC address;
• usage information, including information about your interaction with our Websites or other online platforms such as search engine(s) and keywords used to find our Websites, requested pages, referring pages, pages visited on our Websites, log files for our Websites, date and time of Website access, scrolling habits, search terms entered, frequency of visits, and pairing of devices to your account; and
• geo-location information, such as IP address location, the exact or approximate location from where you are accessing the Services, your location relative to other users, if such functionality is enabled on your device and within our Platform.
This Personal Information is collected to maximize how our Services work, to help identify and resolve technical errors, to monitor safety and operational issues, and to provide quality support.
Website Cookies and Collected Information
Cookies are files which are stored on your computer or device after you visit the Websites.
We may use cookies to understand how our Websites are used and to help us improve your overall online experience. Except for strictly necessary cookies (as described below), most of the cookies on our Websites expire at the end of your current session, except some that may have an extended lifespan. Some cookies, however, are persistent and will never expire.
Our Websites may use the following types of cookies:
Strictly Necessary – These cookies are necessary for the essential functions of the Websites (for example, for effective security or communication) and cannot be switched off in our systems. You can set your browser to block or alert you about these cookies, but this may impact the functionality of the Websites.
Visitor Statistics and Performance – These cookies collect aggregate information and statistics from our Websites regarding visitors, length of visit, date of visit, bandwidth used, pages viewed, and sites visited before and after leaving our Websites. Personal Information is not directly linked to this information, such as your name, address, email, or telephone number.
Website Preferences – These cookies are used to provide the Services or remember settings to enhance your visit; for example, text size or other preferences that improve your online experience. The information collected by these cookies is anonymous and does not enable us to track your browsing activity on other websites. By using our Websites, you agree that we can place these types of cookies on your device. If you prefer to restrict, block, or delete cookies from our Websites, you can adjust your browser settings (see how to change cookie settings in Edge, Chrome and Safari). If you choose to disable all cookies, we cannot guarantee that the Websites will work as expected.
How Personal Information Is Disclosed to Third Parties
We may disclose your Personal Information to DG employees and contractors, or to companies that are related to us, including any parent companies or subsidiaries of DG. However, we will only do so on a need-to-know basis as described in this Privacy Policy or as permitted by applicable law.
We may also disclose Personal Information to third parties, including service providers for our Websites and Platform or to government departments, agencies, or authorities in Canada, the United States, or elsewhere (the "Third Parties"). Third Parties may also provide us with services related to customer support, information technology, payment processing, sales and marketing, data analysis, research, legal compliance, and surveys.
These Third Parties may access the Personal Information for the following purposes:
• to help maintain the security of our Websites, network, and system;
• to collect, store, and/or process data on behalf of DG;
• to help us better deliver the Services and improve their features;
• to provide marketing and/or promotional assistance;
• to analyze how the Services are used;
• to help DG create industry partnerships to improve our Services; and,
• with your consent, for any other purpose disclosed by us at the time you provide the information.
DG does not sell your personal information or disclose it for any reason other than for the purposes set out in this Privacy Policy.
Contractual Measures and Third Parties
When possible, we will use contractual measures to restrict how Third Parties use your Personal Information under this Privacy Policy and applicable law. Such contractual measures will require Third Parties in Canada, the United States, or internationally to:
• Keep Personal Information confidential;
• Use Personal Information only for the purposes for which we disclose it to them;
• Use non-Personal Information that has been de-identified where possible;
• Process Personal Information with at least the same standards set out in this Privacy Policy; and
• Maintain privacy and security standards that comply with this Privacy Policy and applicable privacy laws.
Where possible we will contract with third parties that maintain certifications under applicable laws, such as the EU Data Privacy Framework or other similar certifications.
Our Websites may also include links to third-party websites, plug-ins, services, social networks, or applications. By clicking on those links, you may allow the third-party to collect, use, or disclose your Personal Information. If you follow a link to a third-party website, please note that the policies of those third parties will govern your interactions and any Personal Information collected by them. We do not accept any responsibility or liability for the policies of third parties. Because we do not control third-party websites, we encourage you to read the policies of every website you visit.
It is also possible that, despite our safeguards and best efforts, your Personal Information may be accessed by law enforcement, governmental agencies, or national security authorities in the places where the Third Parties are located.
We may also disclose your Personal Information in the limited circumstances described below:
When You Agree or Direct Us to Share – You may authorize us to disclose your Personal Information with others, including third-party providers related to the operation of our Services. For example, we may need to disclose your Personal Information to third parties if you share digital repository content through our Services.
For External Processing – We may disclose Personal Information to companies related to DG, to Third Parties, and to other entities who are instructed to process the Personal Information for us, using appropriate confidentiality and security measures under this Privacy Policy.
For Business Transactions – If DG’s business or assets are sold or financed (for example, in bankruptcy, receivership, or liquidation), Personal Information may be disclosed under confidentiality restrictions for due diligence purposes or collected, used, or disclosed by DG’s successor in accordance with this Privacy Policy.
For Business Transfers – If DG’s data or information is transferred to a new entity in a business transfer (including reorganizations, amalgamations, mergers, and acquisitions) the privacy policy of that entity will be posted on the Websites and will govern the collection, use, and disclosure of your Personal Information going forward. DG is not required to communicate such a transfer to you in advance; however, this Privacy Policy will be updated as needed as part of the business transfer.
For Legal Reasons or to Prevent Harm – We may use or disclose Personal Information: to comply with a law, regulation, legal process, or governmental request; to assert legal rights or defend against legal claims or proceedings; or to prevent, detect, or investigate illegal activity, fraud, abuse, violations of our terms, threats to the security of Services, public safety, or safety of an individual.
If a legal process (for example, a search warrant, court order, or subpoena) requires disclosure of your Personal Information, we will use our best efforts to notify you, except if the law prevents us from notifying you. If a legal process imposes a non-disclosure period, we will only provide notice to you after the non-disclosure period expires. We may not be able to provide you with notice in urgent or counterproductive circumstances either (for example, when there is a public safety issue or an individual emergency).
Non-Personal Information
We may aggregate, redact, de-identify, or anonymize your Personal Information so that it can no longer be associated with you individually ("Non-Personal Information"). For example, we may use anonymous markers or anonymous IDs.
We reserve the right and may use or disclose any such Non-Personal Information for any legitimate purpose including research, statistical, or business purposes, without further notice to you and without your consent. Further, we may disclose such Non-Personal Information publicly or to Third Parties (for example, in public reports about our Services, in research, statistical, or scientific studies, and to our service providers).
How Personal Information Is Retained and Protected
We will retain your Personal Information as long as needed or reasonable to fulfil the purposes for which it was collected, for our legitimate business interests, for legal and regulatory compliance, and to prevent harm, as described in this Privacy Policy.
DG processes and stores Personal Information in Amazon Web Services (AWS). Websites are hosted using dynamic IP Addresses. We use physical, electronic, contractual, and administrative measures appropriate for the sensitivity of the Personal Information and designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. We may use Third Parties to ensure the appropriate measures are used.
We only retain your Personal Information for as long as necessary to provide you with the Services or as required under law. We use appropriate security measures when destroying Personal Information, including shredding paper records and permanently deleting electronic records.
The security of your Personal Information also depends on you. Where you have a password to access your account or to use our Services, you must keep this password confidential. Please use a strong password and do not share your password with anyone.
Unfortunately, the Internet is not completely secure. Although we use all reasonable efforts to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted via our Websites or to our Services. We are not responsible for any circumvention of privacy settings, or failure to comply with security measures, on the Websites or in our Services.
How to Access, Correct, or Delete Your Personal Information
DG uses all reasonable efforts to keep your Personal Information accurate and complete. We rely on you to tell us if your Personal Information needs changes. You also have the right to correct your Personal Information.
If you discover an error in your Personal Information, or if any of your Personal Information changes, you can update that information in your DG account. If you are unable to update the Personal Information in your DG account or if you want any of your Personal Information deleted, you may also contact our Privacy Officer for this purpose and we will make changes where reasonably possible. We will not change your Personal Information if we believe the change would violate any legal requirement or cause the information to be incorrect.
We may ask you to send a correction or deletion request in writing, and we will need to confirm your identity before making a requested correction or deletion.
Users have the right to request access to their Personal Information. However, please be aware that DG may not provide access to information that is confidential commercial information, that was collected to investigate a breach of contract or a violation of law, that is related to dispute resolution, that may be withheld by law, or that may be subject to lawyer-client privilege or other form of confidentiality protection. To access the Personal Information we hold about you, please contact our Privacy Officer at info@discoverygarden.com.
There is a fundamental distinction between cancelling a contract, deactivating an account, and requesting deletion of your Personal Information.
If you choose to deactivate your account or your account or contract are otherwise cancelled, your account will remain inactive but retained within our system indefinitely. During this time, you may reactivate your account at any point and regain access to your data. If you wish for your account and all associated data to be permanently deleted, you must reach out to our Privacy Officer to formally request the permanent deletion of your account and all associated data.
If you submit a formal request for the deletion of your account or your Personal Information, this will result in the immediate and permanent deletion of your account. This action is irreversible and is processed manually by our Privacy Officer. To submit a Personal Information and / or account deletion request, please contact our Privacy Officer at info@discoverygarden.com.
We will use commercially reasonable efforts to delete your Personal Information as promptly as possible following receipt of your request. Please be aware that full deletion across all systems, including those of third-party service providers who store or process data on our behalf, may take additional time due to technical, operational, or contractual limitations. In certain cases, we may be required to retain specific information to comply with legal obligations, enforce our terms, resolve disputes, ensure the safety and integrity of our platform, or prevent harm.
You have the right to request access to the Personal Information we hold about you. Please note that DG may be unable to provide access to certain information where doing so would reveal confidential commercial data, compromise an investigation into a breach of contract or violation of law, interfere with dispute resolution processes, or where such information is protected by legal privilege or other applicable confidentiality protections.
Any request for modification, deletion, deactivation or updates to your Personal Information will be handled by our privacy team. We will use our best efforts to make updates to your Personal Information within 30 days. However, please note it may take up to 90 days to complete updates to your Personal Information, due to our systems and Third Parties who store and process data for us. We may also need to retain some information for legal or governmental reasons, for safety or security concerns, or to prevent harm.
To request access to your Personal Information, please contact our Privacy Officer at info@discoverygarden.com.
Consent and How to Withdraw
We use and disclose Personal Information only for the purposes for which the Personal Information was collected as described in this Privacy Policy. By agreeing to this Privacy Policy, you consent to our collection, use, and disclosure of your Personal Information as described in this Privacy Policy.
If we wish to collect, use, or disclose your Personal Information in any other way or for any new purpose not described in this Privacy Policy, we will ask for your consent to do so (including by updating our Privacy Policy), unless consent is waived under the applicable law.
When you consent to the collection, use, and disclosure of your Personal Information, you also have the legal right to later withdraw or modify your consent, completely or partially. To do so, please contact our Privacy Officer. Please note that any withdrawal or modification of consent could prevent us from being able to provide you with certain Services or to enable certain features or functions. We will do our best to explain the impact of your decision on the Services when you contact our Privacy Officer.
International Transfers of Personal Information
We may deliver our Services to clients outside of Canada and the United States and may transfer Personal Information to/from other countries for the purposes described in this Privacy Policy. By providing your Personal Information or purchasing or otherwise engaging with our Services, you consent to such transfer, storage, or processing.
Please note that other countries may have privacy and data protection laws that differ from, and are potentially less protective than, the laws of Canada and the United States. In these circumstances, the governments, courts, authorities, or regulatory agencies of the foreign country may be able to access your Personal Information through the laws of that country. You agree to this risk when you use our Services.
International Privacy Rights
Certain jurisdictions' consumer privacy laws may provide their residents with additional rights regarding our use of their personal information. DG would like to make sure you are fully aware of all your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request that DG provide copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that DG correct any information you believe is inaccurate. You also have the right to request that DG complete any information you believe is incomplete.
The right to erasure – You have the right to request that DG erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that DG restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to DG’s processing of your personal data, under certain conditions, and withdraw your consent to its use.
The right to data portability – You have the right to request that DG transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The exact scope of these rights may vary by jurisdiction. If you would like to exercise any of these rights, please contact us via email at info@discoverygarden.com. We will only use your Personal Information for the purposes set out in this Privacy Policy, and in accordance with applicable laws.
No Information From Children
Our Services are not intended to be used or accessed by children (minors) under 18 years of age. We do not knowingly collect, use, disclose, or solicit Personal Information from children under such age and we ask that no one under such age provide their Personal Information to us. If we learn we have accidentally collected Personal Information from a child without parental consent, we will delete that Personal Information immediately. If you believe we might have received Personal Information about a child, please contact our Privacy Officer.
How To Contact Us And Our Privacy Officer
If you object to the collection, use, or disclosure of your Personal Information, if you are seeking access to your Personal Information that is held by us, or if you wish to complain, make an inquiry, or ask questions about this Privacy Policy please contact our Privacy Officer at info@discoverygarden.com.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time as we add new Services, as we improve our current offerings, and as technologies and applicable laws change. You can check the “Last Updated” icon at the top of this page to see when changes are made. Any changes take effect as soon as we post them on our Websites.
We will notify you if material changes are made to the Privacy Policy and obtain your consent where required by applicable law. We will provide notice to you by email, by posting the notice on the Websites, or by posting on any of our applications or platforms that link to this Privacy Policy.
