Privacy Policy
The public notice of what personal information you collect, and why.
A document that explains how a business collects, uses, discloses and protects personal information. Any brand running social media campaigns that collect leads, run contests or use tracking tools should have a clear, accessible privacy policy.
- Business days
- 1–5Business days
- Lawyer reviewed
- 100%Lawyer reviewed
- Surprise bills
- $0Surprise bills
What a Privacy Policy should include
What you collect — the actual categories, matched to what your product really does rather than a generic list.
Why you collect it — the purpose for each category, which is the part Canadian privacy law turns on.
Who you share it with — processors, analytics, payment providers, and anyone else who touches it.
Where it is stored — including whether it leaves Canada, which Canadian customers increasingly ask about.
Individual rights — how someone accesses, corrects or withdraws, and who they contact.
Retention — how long you keep it and what triggers deletion.
When you need one
As soon as you collect personal information — which for most websites means from launch. The applicable frameworks in Canada are PIPEDA federally, Quebec's Law 25, and provincial private-sector legislation in Alberta and British Columbia; a policy ported from a US template generally addresses none of them.
How Ruby drafts it
Tell us what you need
Describe the agreement, your business context, and how fast you need it. A few smart questions, not a legal questionnaire. Your price and turnaround are confirmed before anything starts.
Ruby drafts it
Once pricing is confirmed a qualified Ruby lawyer is assigned to your file, and the first draft is built from your answers and real Canadian statute.
A licensed lawyer reviews every line
A lawyer licensed in Canada reviews and finalizes the document before it reaches you, and writes the plain-language summary that comes with it.
Signed, stored, and yours to revisit
You get the final agreement and its summary, stored so you can come back to it rather than hunting through email for the current version.
The fee is set before any of that starts. Hourly billing moves as scope does; a flat fee is one number, confirmed in writing, that doesn’t change after the work is done. See how Ruby prices agreements.
Or did you mean one of these?
These get confused with a Privacy Policy often enough to be worth ruling out before you buy the wrong document.
Questions people ask
It will describe their data practices, not yours, which is the one thing a privacy policy has to get right. A policy that says you collect things you do not, or omits things you do, is worse than a short accurate one.
It can apply to businesses outside Quebec that handle the personal information of people in Quebec. Whether it reaches you depends on your specific circumstances, which is worth confirming rather than assuming either way.
Not always, but separating it keeps the privacy policy readable and makes the cookie disclosure easier to keep current as your analytics stack changes.
Looking for the plain definition rather than the document? See Privacy Policy in the Ruby legal glossary.
This page is general information about Canadian business law and is not legal advice. Laws differ by province and change over time, and how they apply depends on your circumstances. For advice on your situation, speak with a lawyer licensed in your province.
Need a Privacy Policy?
Ruby drafts it for a flat $499 CAD, confirmed before any work begins, with a licensed Canadian lawyer on every document.