Introduction
GoJumbo provides communication and engagement services to businesses (“Clients”) who use our platform to send reminders, confirmations, review requests, and other engagement messages to their customers (“End Users”).
We take the protection of personal information seriously. This Privacy Policy explains how we collect, use, disclose, and protect information in compliance with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).
2. Information We Collect
We collect and process two categories of information:
a) Client Information
Name, business name, email address, billing details, login credentials.
Used for account setup, billing, and support.
b) End User Information (provided by Clients)
Name, phone number, and/or email address.
Consent status for SMS and email communications.
Appointment-related information (e.g., date/time of reminders or confirmations).
We do not collect or process sensitive health information, financial records, or government identifiers.
3. How We Use Information
To provide SMS and email communication services on behalf of our Clients.
To manage Client accounts, billing, and authentication.
To send automated reminders, recalls, or review requests, only if consent has been obtained.
To improve service performance, analytics, and fraud prevention.
4. Consent
Clients are responsible for obtaining valid, express consent from their customers before uploading contact data into GoJumbo.
Consent must comply with CASL requirements (clear, informed, opt-in).
End Users can withdraw consent at any time by replying STOP to SMS or by unsubscribing from emails.
5. Sharing and Disclosure
We do not sell or rent personal information. We may share data only in these circumstances:
With service providers (e.g., telecommunication carriers, payment processors) under strict contracts.
To comply with legal obligations (e.g., law enforcement requests).
In case of merger, acquisition, or sale of assets (with continued protection obligations).
6. Data Retention
End User data is retained only as long as necessary to provide services or as required by law.
Consent records (timestamp, method of opt-in) are stored for compliance auditing.
Clients may request deletion of their account data at any time.
7. Security
We implement reasonable administrative, technical, and physical safeguards:
SSL encryption on all connections.
Role-based access control.
Logging of opt-in/opt-out events.
Regular security updates.
However, no system is 100% secure. Clients are responsible for maintaining strong passwords and safe access practices.
8. Responsibilities of Clients
Clients must ensure End User data uploaded to GoJumbo is collected lawfully and with consent.
Clients must not use GoJumbo for spamming, harassment, or unlawful marketing.
Clients are solely responsible for the accuracy of the data they provide.
9. International Transfers
Data may be processed outside Canada (e.g., via SMS carriers). In such cases, foreign governments may access the data under applicable laws.
10. Rights of End Users
End Users have the right to:
Withdraw consent at any time.
Request access, correction, or deletion of their personal data.
File a complaint with the Office of the Privacy Commissioner of Canada if they believe their rights have been violated.
11. Updates
We may update this Privacy Policy from time to time. Clients will be notified of material changes by email or platform notice.
Contact
GoJumbo Digital Solutions
Email: [email protected]
Website: gojumbo.ca