Privacy Policy
Maple Sprouts Child Care Ltd. (“we,” “our,” or “us”) is committed to protecting the privacy and personal information of children, parents, guardians, employees, visitors, and other individuals whose information we collect and process in connection with our daycare services.
1. Introduction and company information
This Privacy Policy explains how Maple Sprouts Child Care Ltd. collects, uses, discloses, stores, and protects personal information in the course of operating our daycare business in Canada. We comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and where applicable, provincial privacy laws and sector-specific requirements.
Maple Sprouts Child Care Ltd.
2450 Yonge Street, Toronto, ON M4P 2H7, Canada
Email: [email protected]
Phone: +1 (416) 782-5943
Because we provide childcare services, we may collect personal information relating to children and their parents or guardians, including sensitive information such as health, emergency contact, pickup authorization, dietary, developmental, and attendance information. We take the handling of such information seriously and apply safeguards appropriate to the sensitivity of the information.
2. Data collection and processing
We collect personal information directly from parents/guardians, through enrollment forms, registration records, communications, attendance records, billing records, incident reports, photographs or videos where consent is provided, and through our website or digital forms where applicable. We may also collect information from authorized third parties, such as emergency contacts, healthcare providers, or government authorities, where permitted or required by law.
The categories of personal information we may collect and process include:
- Child and family identification information, such as names, dates of birth, addresses, and contact details;
- Parent/guardian information, including employment details, emergency contacts, and authorized pickup persons;
- Health and care-related information, including allergies, medical conditions, medications, immunization status, dietary restrictions, and incident/injury information;
- Enrollment, attendance, and billing information;
- Communications with parents/guardians and related service records;
- Images, audio, or video recordings, where applicable and consented to;
- Information required for compliance with licensing, regulatory, tax, insurance, or legal obligations;
- Website usage information, device data, and technical logs if you use our website or online services.
We limit collection to what is reasonably necessary for the identified purposes and retain personal information only as long as required for those purposes and legal obligations.
3. Purpose of data processing
We process personal information for the following purposes:
- To provide daycare and child care services;
- To enroll children and maintain service records;
- To communicate with parents, guardians, and authorized contacts;
- To manage attendance, scheduling, and pickups/drop-offs;
- To ensure child safety, health, well-being, and emergency response;
- To administer billing, payments, invoices, and account management;
- To comply with legal, regulatory, licensing, insurance, tax, and recordkeeping obligations;
- To manage incidents, complaints, disputes, and claims;
- To improve our services, operations, and internal training;
- To send operational notices and, where permitted, service-related communications;
- To use photographs or videos for internal documentation or promotional purposes only where consent is obtained or otherwise permitted by law;
- To protect the security, integrity, and lawful operation of our business, premises, systems, and records.
4. Legal basis for processing
Under Canadian privacy law, we generally rely on knowledge and consent, necessity for service delivery, contractual and pre-contractual requirements, legal obligations, and, in limited circumstances, our legitimate business interests as permitted by law.
Depending on the context, our legal basis for processing may include:
- Consent: where you have provided express or implied consent, including for optional uses such as certain communications or photographs;
- Performance of a service: where processing is necessary to provide daycare services and related care;
- Legal obligation: where processing is required to comply with applicable laws, licensing rules, court orders, or regulatory obligations;
- Protection of vital interests: where processing is necessary to protect the health or safety of a child or other person;
- Legitimate business purposes: where permitted under applicable law and where the processing is reasonable for operating our daycare business, maintaining security, preventing fraud, or improving services.
Where consent is required, you may withdraw it at any time subject to legal or contractual restrictions, as described below.
5. Data sharing and third parties
We do not sell personal information. We may disclose personal information to third parties only as necessary and in accordance with applicable law, including:
- Emergency medical responders, healthcare professionals, or hospitals in the event of an emergency;
- Authorized parents, guardians, and pickup contacts;
- Regulators, licensing bodies, law enforcement, courts, or other public authorities where required or permitted by law;
- Payment processors, accounting providers, and financial institutions for billing and payment administration;
- Insurance providers, legal advisors, auditors, or consultants in connection with claims, compliance, or business operations;
- Technology service providers, including email, cloud storage, website hosting, and administrative software providers, who act on our behalf as service providers or processors;
- Professional service providers assisting with recordkeeping, IT security, or operational support.
When we share information with service providers, we require them to use appropriate safeguards and to process the information only for the purposes we specify, subject to contractual and legal obligations.
6. Data transfer to third countries
Some of our service providers or data storage systems may be located outside of Canada, including in the United States or other jurisdictions. As a result, personal information may be transferred to, stored in, or accessed from other countries.
Where personal information is transferred outside Canada, it may be subject to the laws of those foreign jurisdictions and may be accessible to courts, law enforcement, or governmental authorities in those countries. We take reasonable steps to ensure that such transfers are protected by contractual, technical, and organizational safeguards appropriate to the sensitivity of the information.
7. Storage duration
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to meet legal, regulatory, insurance, and accounting obligations, and to resolve disputes or enforce our agreements.
Retention periods may vary depending on the type of information and the reason for collection. For example:
- Enrollment and service records may be retained for the duration of the child’s enrolment and for a reasonable period afterward;
- Billing and accounting records are retained in accordance with tax and financial laws;
- Incident, injury, and medical-related records may be retained for safety, legal, and insurance purposes;
- Consent records and communication records may be retained as necessary to demonstrate compliance and manage service history.
When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our retention practices and applicable law.
8. User rights
Subject to applicable law, parents, guardians, and other individuals whose personal information we hold may have the following rights:
- Access: to request access to the personal information we hold about you or your child;
- Rectification: to request correction of inaccurate, incomplete, or outdated information;
- Erasure: to request deletion of information, where permitted by law;
- Restriction: to request that processing be limited in certain circumstances;
- Data portability: to request a copy of certain information in a structured, commonly used format, where applicable;
- Objection: to object to certain processing activities, where applicable under law.
To exercise these rights, please contact us using the information below. We may need to verify your identity and may not be able to comply with a request if legal exceptions apply, such as where we must retain information for child safety, legal compliance, or legitimate recordkeeping purposes.
9. Withdrawal of consent
Where our processing is based on consent, you may withdraw your consent at any time by contacting us. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, and it may not apply where we are required or permitted by law to continue processing without consent.
If you withdraw consent for certain optional uses, some services or features may be limited or unavailable. We will explain the implications of withdrawal where relevant.
10. Right to complain
If you have concerns about how we handle personal information, we encourage you to contact us first so we can address your concern promptly and fairly.
You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator, depending on the circumstances and the governing law.
Office of the Privacy Commissioner of Canada Website: https://www.priv.gc.ca/ Phone: 1-800-282-1376
11. Data security
We use reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures may include access controls, secure storage, password protection, staff training, and restricted access to sensitive records.
No method of transmission or storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security. In the event of a privacy incident involving personal information, we will respond in accordance with applicable legal requirements and notify affected individuals and authorities where required.
12. Contact information
If you have questions, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact:
Maple Sprouts Child Care Ltd.
2450 Yonge Street, Toronto, ON M4P 2H7, Canada
Email: [email protected]
Phone: +1 (416) 782-5943
Please include enough detail for us to identify your request and respond appropriately. We may require additional information to verify identity before responding to certain requests.
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any revised policy will be posted in an accessible location or otherwise made available to you, and the “last updated” date may be included if applicable.
We encourage you to review this Privacy Policy periodically. Your continued use of our daycare services after changes are posted may signify your acknowledgement of the updated policy, subject to applicable law and any consent requirements.
Maple Sprouts Child Care Ltd. thanks you for trusting us with the care and privacy of your family. We are committed to handling personal information responsibly, transparently, and in a manner that supports the safety and well-being of the children in our care.