Privacy Policy

DNA Technology (“DNA Technology”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information you entrust to us. This Privacy Policy explains what we collect, why we collect it, how we use and safeguard it, who we share it with, and the choices and rights you have. It applies to our website at dnatechnology.ca, our template and services marketplace, customer and reseller portals, and the related products and services we provide (together, the “Services”).

Effective date: July 22, 2026. Last updated: July 22, 2026.

1. Who we are and how to reach us

DNA Technology is an information technology company based in Toronto, Ontario, Canada. For any privacy question, request, or complaint, or to exercise any of the rights described below, contact our Privacy Office:

For security vulnerability reports, please use security@dnatechnology.ca and see our Security page.

2. Scope of this policy

This policy covers personal information about visitors, account holders, customers, and sales representatives (resellers). It does not apply to third-party websites or services that we link to but do not operate, or to information you provide directly to independent businesses that use our marketplace. Where we act as a service provider or processor on behalf of a business customer, that customer’s own privacy policy governs the handling of end-user data, and we process such data only on their documented instructions.

3. Personal information we collect

We collect only the information we need to provide the Services. The categories below describe what we may collect, depending on how you interact with us.

We do not intentionally collect special categories of sensitive information (such as health, biometric, racial, or precise geolocation data), and we ask that you not submit such information through the Services.

4. How we collect personal information

We collect information directly from you when you create an account, make a purchase, complete your profile, contact support, or otherwise use the Services. We collect certain technical information automatically through your device and our infrastructure. We also receive limited information from third parties, such as sign-in providers that confirm your identity and payment processors that confirm a transaction result.

5. How and why we use personal information

We use personal information for the following purposes:

6. Cookies and similar technologies

We use only strictly necessary and functional cookies. These keep you signed in, protect authentication flows (for example, single-use passkey challenges), and remember basic preferences. We do not use cookies for cross-context behavioural advertising, and we do not allow third parties to track you across other websites through our Services. Because our cookies are essential to operate the site, disabling them in your browser may prevent parts of the Services from working.

7. When and with whom we share information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose personal information only in the following circumstances:

8. International transfers and storage

We are based in Canada, and your information may be stored and processed in Canada, the United States, and other countries where we or our service providers operate. Laws in those countries may differ from those in your home jurisdiction, and personal information may be accessible to courts, law enforcement, and government authorities under the laws of the country in which it is held. We take reasonable steps, including contractual safeguards with our providers, to ensure a comparable level of protection wherever your information is processed.

9. How long we keep information

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, to provide the Services while your account is active, and thereafter to meet our legal, tax, accounting, and dispute-resolution obligations. When information is no longer needed, we delete it or de-identify it using appropriate methods.

10. How we protect information

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These include HTTPS everywhere with strict transport security, a strict Content Security Policy, row-level security in our database, multi-factor authentication and phishing-resistant passkeys, isolation of privileged credentials to server-side systems, and payment handling by certified processors so that card data never reaches our servers. No method of transmission or storage is completely secure, but we work continuously to protect your information and to detect and respond to incidents. You can read more on our Security page.

11. Your consent and choices

Where the law requires consent, we obtain it, and the form of consent we seek reflects the sensitivity of the information. You may withdraw consent for non-essential processing at any time, subject to legal or contractual limits, by contacting us or by using in-product controls. You can also unsubscribe from marketing messages at any time using the link in those messages or by emailing us. Withdrawing consent may limit our ability to provide certain features.

12. Your privacy rights in Canada

We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy laws including Quebec’s Law 25, and Canada’s Anti-Spam Legislation (CASL) for commercial electronic messages. Subject to legal limits, you have the right to:

Quebec residents may have additional rights, including data portability and rights concerning automated decision-making. To exercise any right, contact our Privacy Office. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca, or, for Quebec residents, the Commission d’accès à l’information du Québec.

13. Your privacy rights in the United States

If you are a resident of California or another US state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, and a growing number of others), you have rights with respect to your personal information. Subject to the applicable statute and its exceptions, these include the right to:

We will not discriminate or retaliate against you for exercising any of these rights. To make a request, contact us using the details in section 1. We will verify your request using the information associated with your account before responding. You may use an authorized agent where the law permits. If we decline a request, you may appeal by replying to our response, and, where your state law provides, you may contact your state Attorney General.

14. Children’s privacy

The Services are intended for businesses and adults and are not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age required by your jurisdiction). If you believe a child has provided us with personal information, please contact us and we will delete it.

15. Automated decision-making

We do not use personal information to make decisions that produce legal or similarly significant effects about you solely by automated means without human involvement. Where automated tools help us detect fraud or abuse, meaningful human review remains part of any consequential decision.

16. Third-party links and services

The Services may link to or integrate with websites and services we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them. We are not responsible for the content or privacy practices of third parties.

17. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and, where changes are material, provide a more prominent notice. Your continued use of the Services after an update means you accept the revised policy.

18. Contact us

If you have any question, request, or complaint about this policy or your personal information, contact our Privacy Office at privacy@dnatechnology.ca. We will respond within the time required by applicable law.