Legal

Privacy Policy

Effective: April 2026

TerraList is committed to protecting personal information in accordance with Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25 (formerly Bill 64). Residents of British Columbia, Alberta, and Quebec also benefit from their substantially similar provincial laws.

1. Privacy Officer

Our designated Privacy Officer (and the person responsible for the protection of personal information under Quebec Law 25) is:

Privacy Officer, TerraList
Email: privacy@terralist.ca

2. Information we collect

• Account information: name, email, password hash, role (buyer / seller / broker).
• Listing information: business details voluntarily submitted by sellers and brokers.
• Transaction information: subscription status and payment metadata (card data is held by our processor, not TerraList).
• Technical information: IP address, device, browser, and usage analytics.
• Communications: messages exchanged through the platform.

3. Why we collect it (purposes)

To operate the marketplace, authenticate you, process subscriptions, surface relevant listings, prevent fraud, comply with legal obligations, and improve the service. We do not sell personal information.

4. Consent

By creating an account you provide express consent to the collection and use described above. For non-essential cookies and analytics we rely on your in-banner consent choice and you may withdraw consent at any time.

5. Service providers and cross-border transfer

We use trusted service providers — including hosting (Cloudflare, edge regions worldwide), our managed database (hosted in Canadian and U.S. regions), payments (Stripe, U.S.), and AI inference (multiple Canadian and U.S. regions) — that may process personal information outside Quebec or outside Canada, including in the United States. While outside Canada, your information may be subject to lawful access requests by foreign authorities under their local laws (e.g. the U.S. CLOUD Act). Per Quebec Law 25 we have completed privacy impact assessments for material transfers and contractually require equivalent protection.

6. Retention

We retain personal information only as long as necessary for the purposes for which it was collected or as required by law. You may request deletion of your account at any time; some records (e.g. invoices, fraud logs) are retained for the periods required by tax and AML rules.

7. Your rights

You have the right to access, correct, and request deletion of your personal information; to withdraw consent; to receive your personal information in a structured, commonly used technical format (data portability under Quebec Law 25); and to lodge a complaint with the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.

8. Security and breach notification

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. In the event of a confidentiality incident or breach of security safeguards involving a real risk of significant harm, we will notify affected individuals and the relevant regulators (Office of the Privacy Commissioner of Canada and, where applicable, the Commission d'accès à l'information du Québec) as soon as feasible and in any event within 30 days of confirming the incident, in accordance with PIPEDA and Quebec Law 25.

9. Automated decision-making

TerraList does not make decisions producing legal or similarly significant effects about you based exclusively on automated processing of your personal information.

10. Cookies

See our cookie banner for the categories of cookies we use and to update your consent at any time.

11. Contact

Privacy questions or requests: privacy@terralist.ca.