Privacy Policy – Information Handling

We use personal information only to deliver and refine our informational services. This includes sending schedule-related updates, handling account-related requests, improving usability, and supporting platform security.

We do not sell or lease personal data. In limited cases, information may be shared with service providers under confidentiality terms for essential tasks such as email distribution or security monitoring. External processors are reviewed for alignment with Canadian privacy expectations.

We gather a limited set of personal details required to provide information about nationally regulated prize draws. This can include contact details for service messages, usage data to help improve performance, and account details used for authentication.

In practice, this may include: email addresses for notifications, names for account administration, IP addresses for security and fraud-prevention checks, and browsing activity used to enhance service delivery. Collection is restricted to what is needed and follows Canadian privacy requirements.

You may request access to your data, ask for corrections, or request deletion by emailing support@snowfallbonus.com. We confirm identity before completing requests and typically reply within 27 days, consistent with Canadian privacy rules.

You can stop non-essential messages at any time using account preferences or the unsubscribe option in emails. Some functions may be reduced if required processing is declined, but general platform access does not depend on opting into every optional use.

Information is stored on protected servers located in Canada and secured through commonly used safeguards such as encryption, firewalls, and access restrictions. We perform periodic security reviews and apply updates to reduce the risk of unauthorized access, loss, or improper disclosure.

Retention follows defined timelines: account data remains while an account is active, browsing information is anonymized after 11 months, service communications may be retained for 18 months for quality tracking, and legally required records are kept as mandated under Canadian regulations.

If you want your personal information removed, please write to support@snowfallbonus.com and include your account details. After verifying identity, we generally complete deletion within 28 days and send confirmation once finished.

Some records may need to be held for defined periods to meet legal requirements (6 years for certain financial documentation), address disputes, enforce terms, or maintain security logs. Archived records are encrypted and access-limited until retention ends, after which they are permanently deleted.

We use security controls such as encryption, permission management, routine assessments, and staff awareness training. If a security incident affects personal information, we will notify impacted users and relevant authorities as required under Canadian law, generally within 72 hours from identification.

Our response process includes rapid containment, impact evaluation, notification steps, and corrective actions. We keep incident procedures in place and perform periodic tests to support readiness for potential security events.