Privacy Policy
Last updated August 2026
Hurt Square publishes recovery documentation guides for injured people in Canada. This policy explains what information we collect through hurtsquare.ca, why we collect it, who we share it with and what you can do about it.
We have written this in plain language on purpose. Our products exist because people in difficult situations deserve to understand what is happening to them. The same standard applies here.
Who is responsible for your information
Hurt Square is operated from Oakville, Ontario, Canada. We are the organization accountable for the personal information described in this policy.
Our person responsible for the protection of personal information can be reached at Recovery@hurtsquare.ca. We answer every request.
What we collect
Information you give us
- Your name and email address when you place an order, download a free resource or subscribe to updates
- Billing information and address when you buy a guide
- Anything you choose to tell us in an email or a form
We do not ask for and do not want details of your injury, your medical history, your claim or your insurer. Our guides are documents you fill in yourself. What you write in them stays with you. We never see it.
Information collected automatically
- Device and browser type, operating system and screen size
- IP address and approximate location derived from it
- Pages you viewed, how you arrived at the site and how long you stayed
- Products viewed, added to cart or purchased
This is collected using cookies and similar technologies placed by us and by the third parties listed below.
Payment information
We never see or store your full card number. Payments are processed by Shopify and its payment providers, who handle card data directly under their own security standards.
Why we collect it
- To deliver the guide or resource you asked for
- To process payments, issue receipts and handle refunds
- To answer your questions and provide support
- To send updates and offers, where you have agreed to receive them
- To understand how the site is used so we can improve it
- To measure and improve our advertising
- To meet our legal and tax obligations
Who we share it with
We do not sell your personal information. We share it with the service providers below, each for a specific purpose.
Shopify
Our online store runs on Shopify, which processes orders, hosts the site and stores customer records on our behalf.
Meta, meaning Facebook and Instagram
We use the Meta Pixel and the Meta Conversions API on this site. Together these tell Meta which pages you viewed, which products you looked at and whether you completed a purchase.
The Meta Pixel runs in your browser. The Conversions API sends the same information from our servers directly to Meta, which means it is not affected by browser settings or ad blockers.
To help Meta recognize you as the same person across their services, we share identifying information including your name, email address, phone number and location where we hold it. Meta uses this to measure our advertising, to show you our ads and to build audiences of people similar to our customers.
You can limit this. Meta provides controls under Off-Facebook Activity and in your Facebook and Instagram ad settings, where you can disconnect this activity from your account.
Analytics and email
We use analytics services to understand site traffic in aggregate and an email service to send the updates you have subscribed to. These providers process information on our instructions only.
Legal disclosure
We will disclose information where we are required to by law, by a court order or by a regulator, or where it is necessary to protect our rights or the safety of others.
Where your information goes
Shopify, Meta and our other providers store and process information on servers outside Canada, including in the United States. While it is there it may be accessible to courts, law enforcement and government authorities of that country under their laws. By using this site you understand that your information may be processed outside Canada.
Before disclosing personal information outside Quebec we carry out a privacy impact assessment as required by applicable law.
Email and your consent
We send commercial email only where we have your consent or another basis permitted under Canada's Anti-Spam Legislation. Every commercial message we send identifies us, gives our contact details and carries a working unsubscribe link. Unsubscribe requests are honoured within ten business days, usually far sooner.
Unsubscribing from marketing does not stop transactional messages such as order confirmations and download links, which we have to send to fulfil your purchase.
Cookies and how to control them
Cookies keep your cart working, remember your preferences and support the measurement described above. Your browser lets you block or delete cookies, though blocking them may stop parts of the store working.
How long we keep it
Order and payment records are kept for as long as Canadian tax and business law requires. Marketing contact details are kept until you unsubscribe or ask us to delete them. Analytics and advertising data is retained according to the schedules of the providers named above.
Security
The site runs over an encrypted connection and our providers apply their own security controls to the information they hold. No system is perfect, so we collect as little as we can and keep it no longer than we need it.
Confidentiality incidents
If a confidentiality incident occurs that presents a risk of serious harm, we will notify you and the appropriate authorities, and we will keep a register of incidents as required by applicable law.
Your rights
You may ask us to:
- Tell you what personal information we hold about you
- Correct anything that is wrong
- Delete your information, subject to records we are legally required to keep
- Withdraw your consent to marketing at any time
- Provide your information in a structured, commonly used technological format
- Stop the dissemination of information or de-index it where the law allows
Write to Recovery@hurtsquare.ca and we will respond within thirty days. We may need to verify who you are before we act.
If you are not satisfied with our response you may complain to the Office of the Privacy Commissioner of Canada, or to the Commission d'accès à l'information du Québec if you live in Quebec.
Children
This site is not directed at children and we do not knowingly collect personal information from anyone under the age of majority in their province or territory. Our guides are frequently used on behalf of injured young people by a parent or guardian, who remains the account holder and the person we deal with.
Changes to this policy
We update this policy when our practices change. The date at the top shows when it was last revised. Material changes will be announced on this page.
Contact
Hurt Square
Oakville, Ontario, Canada
Recovery@hurtsquare.ca