The Breken Group is committed to protecting the personal information it collects, uses, and shares — within the framework of its activities and in accordance with applicable Canadian and international privacy laws.
The Breken Group of Companies Inc. ("Breken," "we," "us," or "our") is committed to protecting the personal information that it collects, uses, and shares within the framework of its activities.
This Privacy Policy sets out the terms and conditions relating to the collection, use, sharing, retention, and protection of personal information from users ("you" or "your") of our services, in accordance with applicable Canadian and international privacy laws and regulations, including but not limited to:
The expressions "Breken services," "our services," or the "services" mean the services provided by Breken as described in the Breken Terms of Use.
This policy was last updated on October 2, 2025. We encourage you to review this policy periodically to stay informed about how we protect your personal information.
Under the provisions of applicable laws and regulations, Breken is responsible for the personal information that we collect or that we have in our possession or under our control. To ensure accountability:
Breken collects, uses, and shares personal information based on the following legal grounds:
You have the right to withdraw your consent at any time by contacting our Privacy Officer. Withdrawal of consent may affect your ability to use certain Breken services.
When you create your user account to access Breken services, you must provide the following personal information:
We save this personal information in order to identify you and provide you with access to our services. Passwords are stored using industry‑standard hashing algorithms and are never stored in plain text.
When you use the Breken online payment link, we use a third‑party payment platform (Stripe — stripe.com/en-ca). For information about how Stripe collects and processes your data, please review Stripe's privacy policy.
Credit card information is handled as follows:
We collect certain personal information automatically when you use the Breken platform, including:
Breken uses only strictly necessary cookies required to maintain your authenticated session. We do not use advertising, tracking, or analytics cookies. Cookies are used to recognize your visits to the site. At the end of each session, you may delete your cookies without affecting your use of the services during the following session.
We collect and use personal information for the following purposes:
We will not use your personal information for purposes other than those described in this policy without first obtaining your consent.
In accordance with applicable privacy laws, you have the following rights regarding your personal information:
You have the right to request access to the personal information that Breken holds about you. Upon request, we will provide you with a copy of your personal information in a commonly used electronic format.
You have the right to request the correction of any inaccurate or incomplete personal information that we hold about you.
You have the right to request the deletion of your personal information, subject to certain legal exceptions — for example, where retention is required by law or for legitimate business purposes.
You have the right to receive your personal information in a structured, commonly used, and machine‑readable format, and to transmit that information to another data controller.
You have the right to withdraw your consent to the collection, use, or sharing of your personal information at any time. To withdraw your consent, please contact our Privacy Officer at privacy@breken.com. Please note that withdrawal of consent may affect your ability to use certain Breken services.
You have the right to object to the processing of your personal information where such processing is based on legitimate interest.
You have the right to request that we restrict the processing of your personal information under certain circumstances — for example, while a complaint is being investigated.
You have the right to file a complaint with the applicable privacy regulatory authority if you believe that your privacy rights have been violated. In Canada, you may contact:
For users in the European Union, you may contact your local Data Protection Authority (DPA).
To exercise any of these rights, please contact our Privacy Officer at privacy@breken.com, by phone at (705) 741‑5867, or by mail at 541 Weller Street, Peterborough, Ontario, K9H 2N9.
We will respond to your request within 30 days of receiving it. If we are unable to fulfill your request within this timeframe, we will notify you and provide a revised timeline.
Breken retains personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations.
Personal information associated with active accounts is retained for as long as your account remains open and active.
Within 90 days following the closing of your account or your online payment account, the information associated with your account will be deleted, with the exception of:
Credit card information stored by a certified third‑party processor will be deleted upon your request or within 90 days of account closure, unless the processor is required by law to retain it.
Cookies are deleted at the end of each session or when you manually delete them. Log data is retained for a maximum of 12 months for analytics and security purposes.
In some cases, personal information may be transferred to and processed in countries outside of Canada — for example, credit card information processed by certified third‑party processors.
When personal information is transferred outside of Canada, Breken ensures that:
For users in the European Union, Breken ensures that international data transfers comply with the requirements of the GDPR, including the use of Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.
You may request information about the safeguards in place for international data transfers by contacting our Privacy Officer.
Breken has adopted comprehensive security measures to protect against unauthorized access, use, disclosure, alteration, or destruction of personal information. These measures include but are not limited to:
All subcontractors and certified processors have signed written agreements with Breken that provide at least the same level of protection as this policy.
Breken conducts regular security audits and privacy impact assessments to identify and mitigate risks.
Breken maintains a data breach response plan to ensure timely and effective response to any security incidents (see Section 11).
In the event of a data breach involving personal information that creates a real risk of significant harm to individuals, Breken will:
The notification to affected individuals will include a description of the breach, the types of personal information affected, the steps Breken has taken to address the breach, recommendations for individuals to mitigate potential harm, and contact information for Breken's Privacy Officer.
Breken services are not intended for use by individuals under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children under this age. If we become aware that we have collected personal information from a child under the applicable age of consent, we will take steps to delete that information as soon as possible.
If you believe that a child under the applicable age has provided us with personal information, please contact our Privacy Officer immediately at privacy@breken.com.
Our services may allow you to be directed to other websites, including Breken partner websites and third‑party websites. The operators of these websites may collect your personal information, as well as information produced through the use of cookies when you use a link to their website.
Breken is not responsible for how third parties collect, use, or share your personal information. We strongly encourage you to review the privacy policies of any third‑party websites before providing personal information to them.
Breken does not currently engage in automated decision‑making or profiling that produces legal effects or similarly significantly affects you. If this changes in the future, we will update this policy and obtain your explicit consent where required by law.
If you have a concern or complaint about how Breken handles your personal information, we encourage you to follow these steps:
Breken reserves the right to update or modify this Privacy Policy at any time. When we make changes, we will:
We encourage you to review this policy periodically. Your continued use of Breken services after any changes to this policy constitutes your acceptance of those changes.
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:
The Breken Group of Companies Inc.
Email: privacy@breken.com
Phone: (705) 741‑5867
Address: 541 Weller Street, Peterborough, Ontario, K9H 2N9
This Privacy Policy is available in both English and French. In the event of a discrepancy between the two versions, the English version shall prevail.
Last updated · October 2, 2025
Back to topWhether you want to access, correct, or delete the personal information we hold about you — our Privacy Officer is the right person to ask.
Email the Privacy Officer