About this privacy policy
This privacy policy describes how smartpick collects, uses, discloses and protects personal information when you use our consumer choice guides and related services. The policy is written for clarity and compliance with applicable Canadian privacy principles and, where applicable, GDPR-compliant processes for users in the European Economic Area. smartpick focuses on minimizing personal data collection, using data for clear operational purposes, and enabling user rights related to access, correction and deletion. Our operational headquarters: 141 Erie Street South, Leamington ON N8H 3B5, Canada.
Key definitions
Terms used in this privacy policy are defined to ensure a consistent understanding of how we handle personal data in the context of delivering consumer choice guides and related services on smartpick.
What data we collect
We collect data that is necessary to operate the site, improve user experience, deliver relevant content and maintain security. Collection is limited to what is reasonably required for those purposes.
Information you provide directly
You may provide information when you subscribe, send inquiries, submit reviews or otherwise interact with smartpick features. We limit direct collection to fields that support the requested service.
- Contact details: name and email address for subscription, updates and replies to inquiries.
- Profile preferences: saved categories, product preferences and notification choices to tailor guide recommendations.
- User-generated content: reviews, ratings and comments submitted to editorial pages.
- Support correspondence: information you include when contacting our team for assistance.
- Optional survey responses and voluntary benchmarking information used to improve editorial coverage.
- Billing or payment information only when you use any optional paid features; payment details are processed by third-party payment providers and are not retained by smartpick beyond transaction records.
Automatically collected information
When you visit smartpick we may automatically collect technical information necessary to operate the site, analyze usage patterns and protect against abuse. This information is handled in aggregated or pseudonymized form where possible.
- Device and browser information (type, operating system, user agent).
- IP address and approximate geolocation to provide localized content and to detect suspicious activity.
- Usage data such as pages visited, time on page, click interactions and referring URLs.
- Analytics identifiers and cookies used to measure site performance and content engagement.
- Error and diagnostic logs recorded for troubleshooting and security monitoring.
- Performance metrics used to monitor page load, responsiveness and uptime.
Data from third parties
We may receive data from trusted third parties to improve service delivery, subject to agreements that limit how that data is used and stored.
- Analytics providers who supply aggregated usage reports.
- Content delivery and hosting partners that assist with site performance and availability.
- Affiliate and merchant partners supplying product metadata and pricing for guides.
Why we collect data
We process personal data only for specific, legitimate purposes related to operating the site, delivering editorial content, and maintaining security and compliance.
- Delivering and personalizing smartpick content, newsletters and user-relevant guides.
- Providing account management, subscription services and customer support.
- Operational analytics and product development to improve content accuracy and usability.
- Preventing fraud, security incidents and misuse of the service.
- Complying with legal obligations and responding to lawful requests from authorities.
- Managing partnerships and affiliate integrations necessary to present up-to-date product information.
- Handling payments and transaction records through third-party processors, when applicable.
- Facilitating lawful transfers of data to service providers who process data on smartpick’s behalf.
Legal grounds for processing
Where relevant legal frameworks apply (including GDPR for EEA users), we rely on the following lawful bases to process personal data.
- Consent: for optional newsletters, profiling for advertising and other non-essential processing when you have explicitly opted in.
- Contractual necessity: to fulfill services you request, such as paid features or account management.
- Legitimate interests: for site security, fraud prevention, analytics and content improvement, balanced against user privacy rights.
- Legal obligation: when required to comply with applicable laws or respond to lawful requests from public authorities.
GDPR and EU/EEA users
If you are an EU/EEA resident, the following describes specific rights and safeguards applicable under the GDPR and how smartpick implements them.
- Access: you can request a copy of personal data we hold about you.
- Rectification: you may request correction of inaccurate or incomplete data.
- Erasure: you may request deletion of personal data subject to legal and contractual constraints.
- Restriction: you may request restriction of processing in certain circumstances.
- Portability: you can request a machine-readable copy of data you provided where technically feasible.
- Right to object and withdraw consent: you can object to processing based on legitimate interests or withdraw consent for optional processing activities.
How we share data
smartpick shares personal data only with service providers and partners when necessary to deliver the service, and under agreements that restrict further use of the data.
- Service providers who host the site, process payments, or deliver newsletters.
- Analytics and monitoring vendors who help us measure and improve guide relevance and site reliability.
- Affiliate merchants that provide product information and support comparisons in our guides.
- Legal and regulatory authorities when disclosure is required by law or to respond to lawful requests.
- Acquirers or advisors in the event of a sale, merger or corporate reorganization, with safeguards to protect personal data.
- Third parties for fraud detection and security incident response to protect users and the service.
International transfers
smartpick may transfer and store personal data outside your country for processing by trusted service providers. Transfers are managed in accordance with applicable law and only to jurisdictions with adequate protections or via contractual safeguards.
Where transfers occur, smartpick uses appropriate safeguards such as standard contractual clauses, reliance on adequate jurisdictions, or binding contractual obligations imposed on processors to maintain protection comparable to domestic standards.
Data retention
We retain personal data only as long as necessary for the purposes described and to meet legal, regulatory or legitimate business needs. Retention periods vary by data type and purpose.
Account and profile information is retained for the duration of your account and for a reasonable period after account closure to allow recovery and to meet legal obligations. You may request deletion sooner where permitted.
Support and correspondence records are retained for case management, quality control and legal compliance, typically for a limited number of years unless longer retention is required by law.
System logs and diagnostics are retained for security monitoring and incident contribute for a defined period, after which they are aggregated or deleted in line with internal policies.
When data is no longer required, smartpick removes it in a secure manner or anonymizes it so it can no longer be tied to an identifiable person.
Security practices
smartpick maintains administrative, technical and organizational measures designed to protect personal data against unauthorized access, disclosure or loss. Measures are reviewed periodically in line with security best practices and applicable standards.
- Encryption in transit (TLS) and encryption at rest for sensitive records where applicable.
- Access controls, role-based permissions and periodic access reviews to limit data access to necessary personnel.
- Regular security testing, vulnerability management and incident response procedures to identify and address risks promptly.
Your rights and choices
You have control over certain uses of your data. Depending on your jurisdiction, you can exercise rights to access, correct, export, restrict or delete your personal information. Requests are processed in accordance with applicable law.
- Access: request a copy of personal data we hold about you.
- Rectification: request corrections to inaccurate or incomplete data.
- Erasure: request deletion of personal data where permitted by law.
- Restriction: request limitation of processing in certain circumstances.
- Portability: request a machine-readable export of data you provided.
- Object: object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: withdraw consent for optional processing at any time without affecting processing already performed.
- Lodge a complaint: you may lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
Data Subject Rights and Requests
smartpick respects the privacy rights afforded to individuals in Canada and applicable jurisdictions. If you wish to access, correct, export, restrict processing of, or request deletion of personal information that we hold about you, please submit a formal request. We will verify your identity, respond with a description of the personal information we maintain, and outline the available actions consistent with applicable privacy law.
We aim to acknowledge receipt of privacy requests within 10 business days and to provide a substantive response within 30 calendar days where feasible. Complex requests that require additional verification or consultation may take longer; in that case we will notify you of an expected timeline and any required clarifications.
Marketing Communications and Choices
smartpick uses contact information and preferences to deliver service-related notices and marketing that may be relevant to your consumer-research interests. Marketing channels may include email, in-product messages, and occasional postal notices. We process these communications in a manner consistent with consent and applicable opt-out laws.
To stop receiving marketing messages, follow the unsubscribe link in any promotional email or update your preferences in your account settings. You may also submit a request to [email protected] or contact our privacy team at our mailing address; we will process unsubscribes promptly and confirm when your preference has been applied.
Children's Privacy
smartpick is intended for general consumer audiences and not for the collection of personal information from children under the age of majority applicable in their jurisdiction. We do not knowingly collect personal data from minors. If we learn we have collected such data without appropriate parental consent, we will take steps to remove that information in accordance with applicable law.
Third-Party Links and Services
Our site and communications may include links to third-party websites, tools and services that operate independently of smartpick. These third parties have their own privacy policies and practices. We encourage you to review those policies before submitting personal data. smartpick is not responsible for the privacy or security practices of external sites.
Changes to This Privacy Notice
smartpick periodically updates privacy and data handling practices to reflect new regulatory requirements, changes to our services, or operational improvements. When material updates are made, we will post a revised effective date and, where appropriate, provide notice via the email address associated with your account or through prominent messaging on the site.