Privacy Policy

This Privacy Policy describes how Rentable Affordable Homes Inc. collects, uses, discloses, retains, and protects personal information when you visit https://www.rentablecanada.com (the "Site") or use our related services (together, the "Service").

Rentable is an educational platform for renters in British Columbia. We help users discover below-market and means-tested housing programs, housing operators, locations, eligibility information, and related educational content. We also offer an eligibility quiz and optional email alerts. We are not a housing operator, landlord, property manager, or rental broker. We do not list private-market rentals.

This Policy applies to personal information we collect through the Site, email communications, and related online tools. It does not apply to third-party websites or services that we do not control, including websites operated by housing programs, providers, or government agencies linked from our Site.

By using the Service, you acknowledge this Policy. If you do not agree, please do not use the Service.

We are governed by British Columbia's Personal Information Protection Act("PIPA") and, where applicable, Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA"). For commercial electronic messages, we also follow Canada's anti-spam legislation (" CASL").

Rentable Affordable Homes Inc. is the organization responsible for personal information collected through the Service.

For privacy questions, access requests, correction requests, deletion requests, or complaints, contact us at:

• Email: privacy@rentablecanada.com
• Contact form: https://www.rentablecanada.com/contact (choose the privacy category where available)
• Mail: Rentable Affordable Homes Inc., 5-4333 Central Blvd, Burnaby, BC V5H 4W8, Canada

We aim to respond to privacy requests within 30 days, unless a longer period is permitted by law.

We collect only the information reasonably needed to operate the Service, improve it, communicate with you, and meet legal and security obligations. What we collect depends on how you use Rentable.

3.1 Information you provide directly

Eligibility quiz

If you use our housing eligibility quiz, we may collect:

• Housing situation and household composition
• Number of dependent children in your household
• Household income band (broad ranges only; we do not ask for exact income amounts)
• Current city and target cities where you want to rent
• Bedroom needs
• Age range, citizenship or immigration status, primary income source, and BC Housing Registry status where relevant to your answers
• Optional sensitive follow-up answers, such as disability-related status or Indigenous identity, where the quiz asks for them

Sensitive optional quiz answers are stored using additional technical protections separate from general quiz answers.

Email alerts and preferences

If you subscribe to alerts or manage preferences, we may collect:

• Email address
• Consent records required under CASL
• Alert preferences such as target cities, bedroom needs, and programs of interest
• Classification data used to tailor communications (for example, persona track based on quiz or signup inputs)

We do not require a password. Alert subscribers authenticate through secure magic links sent to their email address.

Contact and correction requests

If you contact us, we may collect:

• First and last name
• Email address
• Optional phone number
• Message content and inquiry category (for example, general question, data correction, partnership, press, accessibility, or privacy)

Other voluntary information

You may provide additional information in free-text fields. Please do not include information you do not want us to process, such as government ID numbers, full financial account details, or other highly sensitive identifiers, unless we specifically ask for them.

3.2 Information collected automatically

When you use the Site, we and our service providers may automatically collect:

• IP address
• Browser type, device type, operating system, and user agent string
• Pages viewed, links clicked, referring URL, and general usage patterns
• Date and time of access
• Cookie, local storage, and similar technology identifiers

We use a first-party anonymous identifier (rentable_uid) stored in a cookie and browser storage to support quiz continuity and product analytics before you provide an email address. If you later sign up for alerts, we may associate that identifier with your account.

We configure product analytics so that client-side event payloads do not include email addresses, exact income, or sensitive quiz answers.

When you submit a form protected by Cloudflare Turnstile, Turnstile may process additional technical Signals as described in Section 7.

3.3 Information we do not collect

Unless you voluntarily provide it in a message, we do not intentionally collect:

• Government-issued identification numbers
• Exact household income amounts
• Payment card or banking information (the Service is free to renters)
• Precise geolocation from device GPS

We do not sell renter personal information.

We use personal information for the following purposes:

We do not use sensitive optional quiz answers to narrow your public program match list today. We may use aggregated or de-identified data for product improvement and reporting.

Where required by law, we rely on one or more of the following:

• Consent: For example, when you subscribe to email alerts, submit the contact form, or choose to receive product updates.
• Contractual necessity: To provide the Service you request, such as delivering alerts you signed up for.
• Legitimate interests: To secure, maintain, and improve the Service, provided those interests are not overridden by your rights.
• Legal obligation: To comply with applicable law, regulatory requests, or enforce our terms.

5.1 Email and CASL

If you subscribe to Rentable emails, we will ask for your express consent before sending commercial electronic messages, except where CASL permits messages without consent (for example, certain transactional messages related to your existing relationship with us).

Our emails identify Rentable Affordable Homes Inc. and include our mailing address and an unsubscribe or preference mechanism as required by CASL.

You can manage alert and communication preferences through the preference centre linked in our emails or by contacting us.

We use cookies, local storage, and similar technologies for:

• Essential operation: Site security, session continuity, quiz resume, and preference authentication
• Analytics: Understanding how the Site is used in aggregate
• Abuse prevention: Supporting bot detection on forms

6.1 Cookies we use

We do not use advertising cookies to sell renter data to third parties.

6.2 Your choices

Most browsers let you block or delete cookies. If you disable essential cookies, parts of the Service may not function correctly, including quiz resume, alert preference management, and form submission protected by Turnstile.

Where required by law, we will provide additional cookie choices or notices.

Rentable uses Cloudflare Turnstile, developed by Cloudflare, Inc. ("Cloudflare"), on certain public forms (including contact, alert signup, and preference authentication flows). We deploy Turnstile as an invisible widget. You will not see a challenge in most cases; Turnstile runs in the background to help distinguish human visitors from bots before a form can be submitted.

This section supplements Cloudflare's main Privacy Policy and applies to your interaction with Turnstile on our Site. Where this section provides more specific information about Turnstile on Rentable, that information applies instead of the general Cloudflare Privacy Policy for Turnstile on our Site. This section also applies to personal data processed through Cloudflare's Challenge Platform where Turnstile uses it.

7.1 What Turnstile collects

Turnstile processes minimal client-side signals ("Signals"), which may include:

• Client IP address
• TLS fingerprint
• User-Agent header
• Sitekey and associated website origin

Cloudflare states that it does not have the ability to directly identify any individuals from Turnstile Signals, including IP addresses.

7.2 How Turnstile data is used

Bot detection and blocking (Rentable as organization responsible; Cloudflare as service provider)

Turnstile protects our Site by distinguishing human users from bots and blocking bot traffic that could harm the safety and security of the Service. Cloudflare evaluates Signals specific to both the visitor and the Site. The purpose is not to identify, profile, or target individuals, but solely to detect and block bots.

For this purpose, Rentable Affordable Homes Inc. determines why Turnstile is used on our forms and instructs Cloudflare to process Signals on our behalf. If you have questions or wish to exercise data protection rights relating to Cloudflare's processing of Turnstile Signals to provide bot protection on Rentable, contact us at privacy@rentablecanada.com or through our contact form.

Improving Turnstile's bot detection (Cloudflare as organization responsible)

Cloudflare also processes Turnstile Signals to improve Turnstile's bot detection capabilities, including refining algorithms to respond to evolving bot threats. For this purpose, Cloudflare acts as the organization responsible for that processing, and Cloudflare's Privacy Policy and Turnstile documentation govern that use.

7.3 Cookies and strictly necessary processing

Signals collected by Turnstile are strictly necessary to detect and block bots so visitors can use protected forms safely. For more information about Cloudflare cookies, see Cloudflare's Cookie Policy and Turnstile developer documentation.

7.4 Notice to EU and UK residents

To the extent Turnstile Signals qualify as personal data under applicable law:

• When Cloudflare processes those Signals as a processor to protect our Site, Rentable determines the lawful basis for that processing on our Site, and Cloudflare processes the data under our instructions.
• When Cloudflare processes those Signals as a controller to improve Turnstile, Cloudflare relies on its legitimate interests in improving bot detection effectiveness.

7.5 Contact for Cloudflare-specific concerns

Questions or concerns about Cloudflare's processing of Turnstile data for bot protection on Rentable should be directed to us using the contact details in Section 16 of this Policy.

For questions about Cloudflare's own Turnstile privacy practices or personal data processed by Cloudflare as controller (including improvement of Turnstile), contact Cloudflare's Data Protection Officer at dpo@cloudflare.com.

We do not sell, rent, or trade your personal information. We share information only as described below.

8.1 Service providers

We use trusted service providers that process personal information on our behalf under contractual terms appropriate to their role. These providers may include:

These providers may access or process information only to perform services for us and are required to protect it consistent with this Policy and applicable law.

8.2 Legal and safety disclosures

We may disclose information if we believe in good faith that disclosure is necessary to:

• Comply with law, regulation, legal process, or governmental request
• Enforce our Terms of Use or protect our rights, property, or safety
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of users or the public

8.3 Business transactions

If Rentable is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction subject to confidentiality obligations and notice where required by law.

Rentable is based in Canada. Some service providers may process or store personal information in Canada, the United States, or other countries where they or their subprocessors operate.

When information is processed outside Canada, it may be subject to the laws of that jurisdiction, including lawful access by courts, law enforcement, or national security authorities. We take reasonable steps to require service providers to protect personal information with contractual and organizational safeguards appropriate to the sensitivity of the information.

We keep personal information only as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

Our current retention practices include:

When information is no longer needed, we delete it, anonymize it, or aggregate it so it can no longer reasonably identify you.

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. Measures include access controls, encryption for sensitive quiz data, row-level database protections, rate limiting, bot protection on public forms, monitoring, and staff access limitations.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

If we become aware of a breach of security safeguards involving personal information under our control that creates a real risk of significant harm, we will notify affected individuals and regulators as required by applicable law.

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Withdraw consent where processing is based on consent, subject to legal or contractual restrictions
• Delete personal information, subject to exceptions required for legal compliance, security, or legitimate business needs
• Manage email preferences, including unsubscribing from commercial emails and pausing alerts
• Ask questions about our privacy practices

12.1 How to exercise your rights

• Alert subscribers: Use the preference centre and magic-link tools linked in our emails where available.
• All users: Email privacy@rentablecanada.com or use our contact form.

We may need to verify your identity before fulfilling a request. We will respond within 30 days unless an extension is permitted by law.

12.2 Complaints

If you believe we have handled your personal information improperly, please contact us first so we can try to resolve your concern.

You may also contact:

• Office of the Information and Privacy Commissioner for British Columbia
  Website: https://www.oipc.bc.ca
• Office of the Privacy Commissioner of Canada
  Website: https://www.priv.gc.ca

The Service is intended for individuals who are old enough to seek housing independently or with appropriate guardian involvement. It is not directed to children under 16.

We do not knowingly collect personal information from children under 13 without verifiable parental or guardian consent. If you believe a child under 13 has provided us personal information without appropriate consent, contact us and we will take reasonable steps to delete it.

The Site may link to websites operated by housing providers, government agencies, non-profits, and other third parties. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies before providing personal information to them.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes are material, we will provide additional notice where required by law, such as by email or a prominent notice on the Site.

Your continued use of the Service after an updated Policy is posted means you accept the revised Policy, subject to applicable law.

Rentable Affordable Homes Inc.

5-4333 Central Blvd
Burnaby, BC V5H 4W8
Canada

Privacy: privacy@rentablecanada.com

Website: https://www.rentablecanada.com

Contact form: https://www.rentablecanada.com/contact