Privacy Policy

1. Who We Are

jail-roster.org/ is an independent informational guide to Canada's federal corrections system (Correctional Service of Canada, Parole Board of Canada) and the 13 provincial and territorial corrections systems. We are the business and the controller for the personal information described on this page.

For any privacy-related question, contact us at info@jail-roster.org with the subject line “Privacy request” and we will respond within the time limits set out below.

2. Scope of This Policy

3. Corrections Records — How They Actually Work in Canada

4. The Personal Information We Collect About You

We do not intentionally collect sensitive personal information as defined under Quebec Law 25 (health, biometrics, intimate-nature data) or other Canadian privacy frameworks. We do not ask for it and you should not send it through our contact channel. In particular: do not send us details of your situation as a victim, family member, witness, or person involved in a corrections matter — we are not equipped to handle sensitive disclosures and we cannot act on them. Use the official CSC or PBC victim registration channels instead.

5. PIPEDA — Federal Framework

The Personal Information Protection and Electronic Documents Act (PIPEDA) is Canada’s federal private-sector privacy law. PIPEDA is built on ten Fair Information Principles: Accountability, Identifying Purposes, Consent, Limiting Collection, Limiting Use/Disclosure/Retention, Accuracy, Safeguards, Openness, Individual Access, and Challenging Compliance.

jail-roster.org/ commits to those ten principles in how we handle your personal information.

6. Federal Privacy Act — Corrections Records

The federal Privacy Act (R.S.C. 1985, c. P-21) governs personal information held by federal government institutions, including the Correctional Service of Canada, the Parole Board of Canada, Public Safety Canada, and the Office of the Correctional Investigator. It is separate from PIPEDA, which governs private-sector handling of personal information. The Privacy Act gives individuals (including federal inmates and former inmates) a right of access to their own personal information held by federal institutions, with limited exceptions for security and safety. Privacy Act complaints are handled by the Office of the Privacy Commissioner of Canada. This site does not hold any federal corrections records and is not subject to the Privacy Act.

7. Quebec — Law 25

If you are a Quebec resident, the Act respecting the protection of personal information in the private sector, as modernized by Law 25 (formerly Bill 64), applies. Law 25 is enforced by the Commission d’accès à l’information du Québec (CAI) and gives Quebec residents rights similar to the EU GDPR:

• Right of access to personal information held about you
• Right of rectification of inaccurate personal information
• Right to deletion of personal information
• Right to data portability in a structured, technologically common format
• Right to be informed about and object to automated decision-making
• Right to withdraw consent for processing
• Confidentiality by default — tracking technologies are not loaded without affirmative opt-in consent

To exercise Quebec privacy rights, email us with subject “Quebec Law 25 request.” We respond within 30 days. Escalation: the CAI at cai.gouv.qc.ca.

Quebec also has a private right of action for Law 25 violations with statutory damages starting at $1,000 per individual.

8. Other Provincial Privacy Laws

Three provinces have private-sector privacy laws deemed substantially similar to PIPEDA: BC PIPA, Alberta PIPA, and Quebec’s Law 25. Other provinces have public-sector privacy laws that apply to provincial corrections ministries (such as Ontario MFIPPA / FIPPA, BC FOIPPA, Alberta FOIP, Saskatchewan FOIP, Manitoba FIPPA, Nova Scotia FOIPOP, NB Right to Information and Protection of Privacy Act, NL ATIPPA, PEI FOIPP, Yukon ATIPPA), but those laws apply to the corrections ministry holding the record — not to us.

9. How We Collect Personal Information

• Directly from you — when you email us, complete a contact form, or set cookie preferences
• Automatically — when you visit the site, your browser sends standard technical information so the page can load
• From third-party services we use — analytics and advertising providers, but only after you have given consent through our cookie banner (and only after affirmative opt-in for Quebec residents under Law 25)

10. Identified Purposes for Collection and Use

• Providing the website and its content
• Responding to questions, corrections, and feedback
• Securing the site and protecting against abuse, fraud, and unauthorized access
• Auditing interactions and measuring site performance (analytics, where consented)
• Supporting display advertising that funds the site (where consented)
• Complying with legal obligations and responding to lawful requests

We do not use personal information for automated decision-making with legal or similarly significant effects.

11. Who We Share Personal Information With

12. Cross-Border Transfers

Some service providers we use are based outside Canada — primarily in the United States and the European Union. PIPEDA permits cross-border transfers with comparable protection through contractual safeguards. Under Quebec Law 25, before transferring personal information of a Quebec resident outside Quebec, organizations must conduct a Privacy Impact Assessment (PIA) and inform the data subject. We have assessed our service providers’ frameworks and apply contractual safeguards.

13. Cookies, Analytics, and Advertising

For full detail — including the cookies used, third-party services, and how to manage them — see our Cookie Policy. Key controls: the cookie banner (with affirmative opt-in for Quebec residents), the “Cookie settings” link in the footer, browser-level controls, and the Global Privacy Control signal.

14. Email and Canada’s Anti-Spam Legislation (CASL)

Canada’s Anti-Spam Legislation (CASL) governs commercial electronic messages sent to or from Canada. We do not send unsolicited commercial electronic messages. The Canadian Radio-television and Telecommunications Commission (CRTC) enforces CASL — see crtc.gc.ca.

15. How Long We Keep Personal Information

16. Your Rights Under Canadian Privacy Law

17. How to Exercise Your Rights

For all privacy requests, email info@jail-roster.org with the subject line indicating the relevant law (e.g., “PIPEDA request” or “Quebec Law 25 request”). Include enough information for us to identify the data you’re asking about. We may need to verify your identity before responding. We respond:

• PIPEDA — within 30 days of receiving the request, with a possible 30-day extension
• Quebec Law 25 — within 30 days of receiving the request
• BC PIPA / Alberta PIPA — within 30 business days of receiving the request

18. Children’s Privacy

This site is not directed at children. Under Quebec Law 25, the consent of a person with parental authority is required before collecting personal information from a child under 14. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without proper consent, we will delete it promptly.

19. Breach Notification

Under PIPEDA, organizations must report breaches of security safeguards involving personal information that pose a “real risk of significant harm” to the affected individuals to the OPC and notify the affected individuals as soon as feasible. Under Quebec Law 25, organizations must notify the CAI and affected Quebec residents of any “confidentiality incident” presenting a risk of serious injury, and maintain a register of all incidents. We follow these requirements.

20. Security Safeguards

Under PIPEDA Principle 7 (Safeguards), we apply security measures appropriate to the sensitivity of the information: encryption of data in transit (HTTPS across the site), access controls on administrative tools, regular software updates, secure authentication for our editorial team, and contractual security commitments from vendors.

21. Changes to This Policy

We update this policy when our practices change or when Canadian privacy laws change. The “Last reviewed” date at the top reflects the current version. Substantive changes will be flagged on the homepage banner for at least 30 days. This policy is read alongside our Cookie Policy, Terms of Service, and Disclaimer.