Last updated: September 10, 2025
Who we are
KIOOSK (“KIOOSK”, “we”, “us”, “our”) operates a Canadian business directory and classified advertisements platform (the “Service”) available at www.kioosk.ca . Our contact email is support@kioosk.ca. This Policy explains how we collect, use, disclose, and protect personal information in Canada.
Scope
This Policy applies to personal information about individuals who visit the Site, create accounts, publish listings/ads, message other users, or contact us. It does not apply to information about organizations that is not personal, or to third-party sites we do not control.
What we collect
Depending on your use of the Service, we collect:
- Account & identity: name, email, phone number, password (hashed).
- Business listing/ad details (public): business name, business contact details, addresses, categories, descriptions, photos, pricing, and other information you choose to publish. Listings are publicly displayed on our Site.
- Contact & support: messages you send us (e.g., to support@kioosk.ca).
- Payments: we use Stripe, PayPal, credit cards, and may accept Interac e-Transfer. We do not store full payment card numbers on our servers.
- Technical data: IP address, device and browser information, cookie identifiers, approximate location, log data.
- Marketing preferences: your newsletter or promotional opt-ins/opt-outs.
- Trust & Safety: we currently do not conduct KYC/ID verification.
How we use personal information (purposes)
- Provide, operate, and improve the Service; publish and manage listings and ads.
- Create and administer accounts; provide support and service notifications.
- Enable user-to-user communications (where available).
- Analytics and advertising (see Section 6) to measure performance and reach audiences.
- Prevent, detect, and investigate spam, fraud, abuse, and violations of our Terms.
- Send marketing messages where permitted by law and your choices (CASL).
- Meet legal, regulatory, tax, and security obligations.
We generally rely on consent (express or implied as permitted by law). We may also process information without consent in limited cases recognized by law (e.g., fraud prevention, legal claims, or where obtaining consent is inappropriate).
Information that is public on our Service
Directory entries and classified ads are intended to be public. If you include personal information (e.g., your name or phone number) in a listing, it will be visible to visitors and may be indexed by search engines. You can edit or remove listings you control; however, copies may remain in caches, backups, or archives for a limited period, and we may retain information as permitted or required by law (see Retention).
Cookies, analytics, and ads
We use cookies and similar technologies to keep you signed in, remember preferences, and measure/improve performance. We may use Google Analytics, Google Ads, and Facebook (Meta) ads/retargeting. Our cookie banner lets you review or change preferences; you can also manage cookies in your browser. If you opt out of certain cookies, some features may not work.
Marketing messages (CASL)
We may send newsletters, promotions, or updates via email or other digital channels. We do so only as permitted by CASL (e.g., with your express or applicable implied consent). Every message will identify us and include a working unsubscribe method. You can opt out at any time, and we’ll respect your choice.
Payments
Payments are handled by Stripe and/or PayPal; we may also accept credit cards and Interac e-Transfer. These providers process your payment information on their systems. We receive limited details (e.g., transaction IDs, amounts, and status) and do not store full card numbers.
Sharing and service providers
We use service providers to host our platform, send emails, provide analytics/ads, process payments, and support security. They may access personal information only to perform services for us and are required to protect it appropriately.
We may also disclose information:
- to other users based on your actions (e.g., when you publish a listing or send a message);
- to comply with law or respond to valid legal process;
- to investigate and mitigate fraud, abuse, or security issues;
- as part of a business transaction (e.g., merger or sale), subject to legal requirements.
- No sale of personal information. We do not sell personal information.
Location of data and cross-border processing
Our intent is to store personal information in Canada. However, some of our service providers (for example, payment processors or advertising/analytics providers) may process or access information from other countries. If this happens, your information may be subject to the laws of those jurisdictions. We remain accountable for personal information under our control and take contractual and organizational measures to ensure a comparable level of protection.
How long we keep information (retention)
We keep personal information only as long as needed for the purposes above and as required by law. Our current practices are:
- Accounts & profile data: while the account is active and 24 months after last activity, then delete or anonymize unless needed for legal or fraud-prevention reasons.
- Listings/ads: for the life of the listing. Expired listings may be retained in our systems for up to 24 months for record-keeping, dispute resolution, and fraud detection, then deleted or anonymized.
- User-to-user messages & support tickets: 24 months after closure.
- Logs & analytics data: up to 24 months (aggregated or anonymized thereafter where possible).
- Backups: rolling backups are typically overwritten within 90 days.
Security
We use standard security measures such as encryption in transit, access controls, system monitoring, and vendor due diligence to protect personal information. While no method of transmission or storage is completely secure, our website is provided on an “as-is” basis, and we are committed to continually reviewing and improving our safeguards.
Your choices and rights
- Access & correction: You can request access to, or correction of, your personal information.
- Deletion: You can request deletion of your account and personal information (we may retain what is necessary for legal, security, or fraud-prevention purposes).
- Consent withdrawal: You can withdraw consent to non-essential uses (e.g., marketing) at any time.
- How to exercise rights: Contact support@kioosk.ca. We will respond within a reasonable time.
Children and minimum age
The Service is intended for individuals 18 years and older. We do not knowingly collect personal information from children under 18.
Québec-specific rule for minors: While we do not target or serve minors in Québec, if we become aware that we have collected personal information from a user under 14 who is located in Québec without parental or guardian consent, we will delete it or obtain appropriate consent in accordance with Québec law.
Law enforcement and legal requests
We respond to law-enforcement or government requests only with valid legal process (e.g., subpoena, warrant, or court order), or where otherwise required or permitted by law. Where legally permissible, we will notify affected users before disclosing information.
Data incidents and breach reporting
Most of the information shared on our website is business-related or otherwise public in nature, and generally does not include sensitive personal data. We strongly advise users not to post or share confidential or sensitive information on our platform. While we maintain reasonable safeguards to protect the website, the platform is provided “as is,” without guarantees, and users are responsible for ensuring that the information they publish is suitable for a public business directory or classified environment.
We also maintain processes to detect, investigate, and mitigate potential security incidents. In the unlikely event that a breach of our safeguards creates a real risk of significant harm, we may notify affected individuals in accordance with applicable laws and regulations.
Third-party links and user content
Our Site may link to third-party websites or services and hosts user-generated content. Their privacy practices are their own; please review their policies before interacting.
Changes to this Policy
We may update this Policy from time to time. If changes materially affect your rights, we will provide prominent notice (e.g., by email or on the Site). The “Last updated” date above shows when this Policy was revised.
Contact us
- Email: support@kioosk.ca
- Toronto, Canada

