Last updated: October 24, 2026
This Privacy Policy explains how NPPE Vault ("we", "us", or "our") collects, uses, discloses, and protects personal information when you use the NPPE Vault website and services (the "Service"). We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and applicable provincial privacy laws.
By using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.
Purchases are processed by a third-party payment processor. Your card details are entered directly with the processor; we never receive or store your full card number. We receive only what we need to record the purchase, such as confirmation of payment, a transaction reference, the amount and date, and whether a refund was issued.
We do not collect passwords (you sign in with a secure link sent to your email), government-issued identification numbers, or demographic information such as age, gender, or ethnicity.
We use personal information to:
We do not sell or rent your personal information, and we do not use it for third-party advertising.
When you create an account, you expressly consent to our collecting your name and email address to provide the Service. When you use the Service, we collect study activity and technical information as reasonably necessary to deliver and secure it.
You may withdraw your consent at any time by asking us to delete your account (see Section 7). Withdrawing consent may mean we can no longer provide some or all of the Service to you.
We work with a small number of trusted third-party service providers that help us operate the Service, such as hosting and infrastructure, email delivery, and payment processing. They receive only the information they need to perform their services for us, and they are required to protect it and to use it only on our behalf.
If you submit a review and agree to have it published, your rating, comments, and the display name and province you provide may be shown publicly on the Service. Reviews you do not agree to publish are kept private and contribute only to aggregate ratings.
We may disclose information if required by law or in response to a valid request from a public authority, such as a court order or subpoena, or where necessary to protect the rights, property, or safety of NPPE Vault, our users, or others.
If NPPE Vault is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
We and our service providers may store and process personal information in Canada, the United States, or other countries. Information stored outside Canada is subject to the laws of the jurisdiction where it is held, and may be accessible to courts, law enforcement, and national security authorities in that jurisdiction. We take reasonable steps, including contractual protections, to ensure our service providers safeguard your information.
We keep personal information only as long as we need it for the purposes described in this policy:
When information is no longer needed, we delete it or de-identify it.
Under PIPEDA and applicable provincial privacy laws, you may:
To make a request, email us at support@nppevault.com. We will respond within 30 days.
We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted connections, restricted access to personal information, and passwordless sign-in. No method of transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security.
We do not use advertising cookies, third-party tracking cookies, or social media tracking.
Most emails we send are transactional or service-related: sign-in links, purchase confirmations, account and security notices, and notices of material changes to our Terms or this Privacy Policy.
From time to time, and where permitted by CASL, we may also email you about the Service, for example to ask about your exam experience. Every such email identifies us, explains why you are receiving it, and includes a way to unsubscribe. We honour unsubscribe requests within 10 business days. Unsubscribing does not stop transactional or service-related emails.
The Service is not directed to individuals under the age of 18 or the age of majority in their jurisdiction. We do not knowingly collect personal information from children, and will delete it promptly if we learn that we have.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice on the Service before they take effect. The "Last updated" date at the top shows when this policy was last revised.
If you have questions or concerns about this Privacy Policy or how we handle your personal information, contact us at support@nppevault.com.
If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.