Privacy Policy

Last updated: September 28, 2026

Identity and Role of the Data Controller

headlinexel.org operates this website as the data controller responsible for the collection and processing of personal information in connection with the photographic exploration of everyday routines, people and changing urban environments. We are committed to handling personal data in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws. All decisions regarding the purposes and means of processing are made by headlinexel.org.

Scope of This Notice and People It Covers

This Privacy Policy applies to all visitors to the website, including individuals who submit information through the contact form or interact with the site-wide cookie banner. It covers residents of Canada and any other users who access the site from outside the country. The policy explains how we collect, use, disclose and protect personal information when you browse or communicate with us.

Categories of Personal Data and Sources

We collect personal data directly from you when you use the contact form. This may include your name, any message content you provide, and technical information such as IP address, browser type and device identifiers obtained automatically through cookies or similar technologies. No data is collected from third-party sources or public records. The site does not enable customer reviews, blog contributions or other user-generated content features.

Purpose-by-Purpose Explanation of Processing and Legal Basis

We process personal data for the following purposes: responding to inquiries submitted via the contact form (legal basis: legitimate interests and consent where required); operating and improving the website (legal basis: legitimate interests); displaying the cookie banner and managing preferences (legal basis: consent); and complying with legal obligations (legal basis: legal requirement). Each purpose is limited to what is necessary for the non-commercial informational nature of the site.

Whether Providing Data Is Required and Consequences

Providing personal data through the contact form is entirely voluntary. You are not required to submit any information to browse the site. However, if you choose not to provide contact details when submitting a message, we may be unable to respond to your inquiry. Technical data collected via cookies can be managed through browser settings or the cookie banner without preventing access to content.

Cookies and Similar Technologies

The website uses cookies and similar tracking technologies to support essential functions and analyze usage. A site-wide cookie banner allows you to manage preferences. Please refer to our separate Cookie Policy for detailed information on the types of cookies used and how to control them.

Processors, Service-Provider Categories, Recipients and Disclosures Required by Law

We may engage service providers such as web hosting companies and analytics platforms to assist with site operations. These processors are bound by contractual obligations to protect data and use it only for the specified purposes. Personal information may be disclosed if required by law, regulation or legal process, or to protect the rights and safety of headlinexel.org or others.

International Transfers and Safeguards

Some service providers may be located outside Canada. When personal data is transferred internationally, we ensure appropriate safeguards are in place, including contractual clauses that meet PIPEDA requirements, to protect your information at a level comparable to Canadian standards.

Specific Retention Periods or Criteria

Contact form submissions are retained only as long as necessary to respond to your inquiry and for a reasonable period thereafter to address follow-up questions, typically no longer than two years. Technical logs are kept for a shorter period, generally up to one year, unless a longer retention is required for legal compliance. Criteria for retention include the purpose of collection, legal obligations and the need to resolve disputes.

Security and Data-Minimisation Practices

We implement reasonable administrative, technical and physical safeguards to protect personal data against loss, theft and unauthorized access. Data collection is limited to what is necessary for the stated purposes. While we strive to maintain strong protections, no system can guarantee absolute security, and users should take precautions when transmitting information.

Data-Subject Rights and How to Exercise Them

Under PIPEDA you have the right to access your personal information, request corrections, and withdraw consent where applicable. To exercise these rights, please contact us using the details on the Contacts page or by calling (613) 990-1985. We will respond within the timeframes required by law.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

You may withdraw consent at any time by contacting us. The site does not engage in direct marketing or profiling activities. If such activities were introduced in the future, you would have the right to object without affecting the lawfulness of prior processing.

Right to Complain to the Competent Supervisory Authority

If you believe your personal information has been handled in a manner inconsistent with PIPEDA, you may file a complaint with the Office of the Privacy Commissioner of Canada. Contact information for the Commissioner is available on their official website.

Children or Age Restrictions

The website is intended for a general audience and is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that data from a child has been collected, it will be deleted promptly.

Automated Decision-Making and Profiling

The site does not use automated decision-making or profiling that produces legal or similarly significant effects. Any analytics performed are aggregate and do not involve individual automated decisions.

Policy Changes and Effective Date

We may update this Privacy Policy periodically to reflect changes in practices or legal requirements. The effective date of the current version is September 28, 2026. Continued use of the site after changes constitutes acceptance of the updated policy. 380 Sussex Drive, Ottawa, ON K1N 9N4, Canada (613) 990-1985