Privacy Impact Assessment

Québec’s Act respecting the protection of personal information in the private sector (section 17) requires a business that communicates personal information outside Québec to assess that communication first. When your shop entrusts its clients’ information to Runday, part of it is processed outside Québec. It is your shop, responsible for that information, that must make this assessment.

The facts are the same for every shop using Runday: the same servers, the same providers, the same protections. So Runday made the assessment for you. Your shop adopts it as its own if it accepts the conclusion. The law asks for an assessment proportionate to how sensitive the information is; this one is.

Runday’s database is in Montréal. It holds every record: client profiles, appointments, sales, commissions, cut notes and photos. That information is kept there and only leaves it in the ways described below.

• Paying for your Runday subscription (Stripe): that is your billing information, not your clients’.
• Statistics on Runday’s public website: they do not touch the information kept in the application.
• What your shop does itself outside Runday, for example a text sent from your own phone.

This is everyday information: a name, a phone number, an email, appointments at a barbershop or salon. No card numbers, no social insurance numbers, no biometric data. One caution: free-text notes can hold a delicate detail (an allergy, a sensitive scalp). They stay in Québec, but are displayed through the Toronto server. Write only what helps the service.

Each provider receives only what it needs to run your shop’s service: show the application, send an email or a text, report an error. Nothing is sold, rented, used for advertising or used to train artificial intelligence, and no decision is made about a person by automated processing.

• Everything in transit is encrypted (TLS).
• Each shop is walled off in the database itself: another shop cannot read your records.
• Two-step verification on every Runday account with its providers.
• A data processing agreement with each provider, which binds it to use the information only to provide its service.
• The minimum in every message: error reports are scrubbed before they leave, emails and texts to your clients are off until you turn them on, each one has a way to stop, and texts are deleted at the provider within 48 hours.
• You can export all your data in one click, and delete your account and everything in it.

• Ontario (Toronto): Canada’s federal law (PIPEDA) applies, and its principles are close to Québec’s.
• United States: there is no general federal privacy law, and US authorities can compel a US company to hand over information, sometimes without telling anyone. This also applies to US companies that keep information in Canada, which is the case for several providers above, including the one hosting the Montréal database. What goes to the United States is therefore kept to the minimum described above.

Considering how sensitive the information is, the purpose of its use, the protections and the law where it goes, the information communicated outside Québec is adequately protected, in particular with regard to generally recognized principles of personal information protection. The communication is therefore authorized, on the conditions described above, which Runday commits to maintain.

• The owner adopts it in Runday, in one click. Runday keeps the version, the language, the date and who adopted it; you find them in Settings and in your data export.
• Turning on an option already described here (emails to your clients, for example) needs no new adoption: it is already assessed.
• If Runday changes what leaves Québec, why, or how it is protected, a new version is published and you are asked to adopt it before the change touches your information.
• If you disagree, write to us. You can also export all your data and close your account.