Your Privacy Rights
 
What you can ask for
This page explains what you can ask us to do with your personal information, how to ask, how long we take, and what to do if you are not satisfied.
 
Right What it means
Access Ask what personal information we hold about you, and get a copy.
Correction Ask us to correct information that is wrong or incomplete.
Deletion Ask us to delete information. We can where we no longer need it, though we may have to keep some records to meet a legal, contractual or dispute requirement. We will tell you if that applies.
Withdraw consent Where we rely on your consent — marketing email is the main case — withdraw it at any time. It is as easy to withdraw as it was to give, subject to legal and contractual limits.
Object Object to our using your information where we rely on a legitimate interest. You can always object to direct marketing, and we will stop.
Restriction Ask us to pause using your information while a dispute about it is resolved.
Portability Receive information you gave us in a machine-readable format, or have it sent to another provider where that is technically feasible.
Automated decisions We do not make decisions about you by automated means without human involvement. If that changes, we will say so here.
 
Access and correction apply to everyone under Canadian law. Restriction, portability and objection are GDPR rights. We do not ask where you live before helping you — tell us what you need and we will do what we can.
 
You can tell us to stop sending you marketing at any time, and we will. You do not need a reason, it costs nothing, and it has no effect on your account or on any competition you have entered. Use the unsubscribe link in any newsletter, or email dpo@inchol.com.
 
We will make every reasonable effort to help you and to respond as completely and accurately as we can. If your request is unclear or we cannot find your records, we will come back to you and ask rather than simply refuse.
 
 
How to make a request
 
Email dpo@inchol.com, or write to our Privacy Officer: Kevin Sun, Inchol Solutions Inc., #300, 3056 Glen Drive, Coquitlam, BC V3B 0V1, Canada
 
Tell us what you want and enough detail for us to find your records — the email address on your account, and the competition or event if your request concerns one. You do not need a form or any particular wording, and there is no charge.
 
Confirming who you are
 
We verify your identity before releasing or changing anything, and we redact information about other people before disclosing a record. Usually verification means replying from the email address on the account. We ask for identity documents only where we genuinely cannot confirm it another way, and we delete them afterwards.
 
Requests about a child
 
A parent or guardian may make any of these requests for their child. Tell us the child's name, the competition, and your relationship to them.
 
How long we take
 
Request Our response time
Access or correction under BC PIPA Within 30 days. Those are days as the Act counts them, which excludes Saturdays, Sundays and British Columbia statutory holidays. The Act permits an extension in limited circumstances, and we will tell you if one applies.
Access, correction or deletion where the GDPR applies Within one month of receipt, extendable by up to two further months where the request is complex or you have made several. We will tell you within the first month, and why.
A question about a child's information Within 30 days.
Withdrawing consent to marketing Immediately using the unsubscribe link in any newsletter. If you email us instead, within 5 business days.
A privacy complaint Acknowledged within 5 business days, with a written response following. If we need longer we will tell you why and when to expect an answer.
 
If a competition organizer collected your information
 
Where a competition organizer uses our platform, they are responsible for the information they collect, and we hold it on their documented instructions. We are not permitted to answer a request about it ourselves, and we cannot change or delete it without their instruction.
 
Send us the request anyway. We forward it to the organizer's privacy contact after we receive it, tell you that we have done so and who they are, and act on their instruction promptly. If you would rather approach them directly, we will give you their contact details.
 
If we cannot do what you asked
 
Sometimes the law lets us refuse part of a request — for example where releasing information would reveal personal information about someone else, or where we must keep a record for legal reasons. If that happens we will tell you which part we have refused, the reasons the law requires us to give, and what you can do next.
 
If you are not satisfied
 
Please tell us first — email dpo@inchol.com and mark it as a complaint. We record every complaint, review the facts, respond in writing, and record any corrective action. Most things are fixed quickly once we know. You do not have to come to us first, though; you may go straight to a regulator.
 
 
Who regulates us
 
If you are in… Contact
British Columbia Office of the Information and Privacy Commissioner for British Columbia — oipc.bc.ca, 1-800-663-7867.
Elsewhere in Canada Office of the Privacy Commissioner of Canada — priv.gc.ca, 1-800-282-1376.
The European Economic Area Your national data protection authority — the list is at edpb.europa.eu. You may complain where you live, where you work, or where the problem happened.
The United Kingdom Information Commissioner's Office — ico.org.uk, 0303 123 1113.