How we handle your data

Two separate consents

When you sign the petition at /take-action, you agree to two different things independently:

• Campaign updates (required to sign). Submitting the form adds you to the campaign’s advocacy list. We’ll email you about the legalization campaign — progress, action alerts, policy wins — and nothing else. Every such email has an unsubscribe link.
• Product updates (optional, unchecked by default). A separate checkbox below the form asks whether, after plug-in solar becomes legal in your province, you’d like to hear about balcony solar products you can buy. If you leave it unchecked, you will never receive product marketing from us — not now, not after the campaign succeeds, not ever. If you check it, those messages are a separate list you can unsubscribe from independently.

These lists are never bridged. Advocacy emails from us will never link to commercial product pages. We make this promise because that’s what the Canadian anti-spam law (CASL) requires, and because it’s what someone signing a petition has a right to expect.

What we collect

When you sign the petition we store:

• Your name. Used on the email you send your representative. Shown to you during the flow; not published.
• Your email address. Used to send you campaign updates. Also used to de-duplicate signatures so one person can’t inflate the counter.
• Your postal code. Used once, at the moment you sign, to look up your MP or MLA/MPP via the OpenNorth Represent API. We keep the postal code on your record so the campaign can report petition reach by riding.
• The campaign you signed. So we can count signatures per province and federal campaign.
• Your IP address and browser user-agent. Stored on each consent record as proof of origin. CASL requires us to be able to demonstrate, if challenged, that a specific person consented at a specific time from a specific device. IP is not shown publicly.
• The exact wording you saw when you consented. Stored as a version tag on your consent record. If we later change the petition copy, your record keeps the version you actually agreed to.

We don’t set advertising cookies. We don’t run third-party trackers or analytics pixels. We don’t sell data. A light-mode / dark-mode preference is stored in your browser’s localStorage if you use the theme toggle — nothing leaves your device.

How we use it

• To send you campaign updates you’ve agreed to receive.
• To count signatures per campaign so we can show accurate totals and report reach to policymakers.
• To prove consent if a regulator asks us to produce it.
• To de-duplicate signatures so the counter reflects real people.

We do not use your information to profile you, to re-target ads, or for any purpose other than the campaign you signed up for.

Who we share it with

We use a small number of third-party services to run the site. They see only what they need:

• Resend (email delivery) processes outbound campaign emails. Your name and email pass through Resend so your message can be delivered. Their privacy policy.
• Cloudflare serves the site and runs the Turnstile bot check on the petition form. Cloudflare sees the IP you connect from. Their privacy policy.
• OpenNorth Represent is the API that turns your postal code into your elected representative. We call it from your browser when you sign; the request carries your postal code but not your name or email. About Represent.

Your name and the message you compose go to your representative directly from your own email client — we don’t send that email for you, and we don’t keep a copy of it.

We do not share the petition list with political parties, other campaigns, or any third party for their own use.

How long we keep it

• Consent records are append-only. If you unsubscribe, the record is stamped with the time and source of revocation but not deleted — the audit trail is what makes the consent demonstrable if challenged.
• Signature records persist for the life of the campaign so counts stay accurate. When a campaign is archived, we keep an anonymized aggregate (count by riding, count by date) and delete the per-person rows on request, or by default after a reasonable wind-down period.
• Unsubscribes take effect immediately. CASL allows up to ten business days; we honour it on the spot.

Your choices

• Unsubscribe. Every email includes a one-click unsubscribe link for the specific lane (campaign updates or product updates) that email belongs to. You can drop one without affecting the other.
• Ask what we have. Email us and we’ll send you everything we hold about you.
• Ask us to correct it. Same address — tell us what’s wrong and we’ll fix it.
• Ask us to delete it. We’ll delete your signature and your commercial consent record (if any). Your advocacy consent record stays on file, revoked, as the proof it was ever given — this is a CASL requirement, not a choice we’re making.

Contact

Questions or requests go to david@peopleandplanet.consulting. We’re a small team; a reply may take a few days.