Privacy notice

This notice explains what RunnerEdit collects when you read the site or sign up for updates, why we hold it, who processes it on our behalf, and how you can have it corrected or deleted. It is written to sit alongside the Personal Information Protection and Electronic Documents Act (PIPEDA), and alongside the comparable provincial statutes that apply to readers in Quebec, British Columbia and Alberta.

1. Who is responsible

RunnerEdit is an independent editorial desk publishing from Canada at runneredit.com. We decide what personal information is collected through this site and why, which makes us the entity accountable for it. To contact the desk about anything in this notice, write to desk@runneredit.com. We answer privacy requests within thirty days and usually much sooner.

2. What we collect

• Server log data. Your IP address, the user agent your browser sends, the page requested, the referring page, and the date and time of the request. This is created automatically by the hosting infrastructure whenever any page is served.
• Cookies and similar identifiers. A small local record of your cookie choice, and, if you sign up, the identifiers our messaging processor sets so it can recognise the same browser again. The categories are itemised in the cookie notice.
• Sign-up form data. The e-mail address you enter, the name if you choose to supply one, and the fact that you ticked the consent box, with the date and time. No phone number field exists on this site and we do not ask for one.
• Web push identifiers. If you allow browser notifications, a subscription identifier issued by your browser vendor and held by our messaging processor. It is not an e-mail address and cannot be read as one.
• Membership waiting list. If you join the Plus list, we record your address against that list together with the date you joined.
• Correspondence. Anything you send to the desk by e-mail, kept so we can answer you and check the history of a correction.

We do not ask for date of birth, address, government identifiers or any of the sensitive personal information that Canadian privacy law treats as calling for express consent, and the site has no user accounts to create.

3. Why we hold it, and on what basis

• To serve the site and keep it standing up. Log data supports delivery, capacity planning and the investigation of abuse. This is a routine function of publishing a website.
• To send the digest and catalogue updates. Based on the express consent you give by ticking the box on the sign-up form, which is what Canada’s Anti-Spam Legislation (CASL) requires before a commercial electronic message may be sent. Every digest names RunnerEdit as the sender, gives a contact address for the desk, and carries an unsubscribe link that keeps working for at least sixty days after the message goes out. You may revoke that consent at any time and we act on it immediately.
• To send browser notifications. Based on the separate permission your browser asks you for. Declining it has no effect on the e-mail digest, and the site works exactly the same either way.
• To administer the Plus waiting list. Based on your consent when you join the list, and on our interest in running the membership fairly and in order.
• To answer you. Correspondence is held so we can reply and, where a correction was made, show what changed.

4. Membership and payment details

Plus is in staged activation. Joining the list records only your name, if given, and your e-mail address. RunnerEdit does not collect or store payment card details, bank details or any other payment credentials on this site. There is no checkout here and no field in which such details could be entered. When a seat opens, the confirmation e-mail explains the arrangement in writing before anything is charged, and any handling of payment details at that stage is carried out by an established payment provider under its own terms, not by this site.

5. Who processes information for us

• OneSignal — messaging processor for the e-mail digest and browser notifications. It receives the address you submit, the name if given, and the tags recorded with your sign-up, and it stores the notification identifier your browser issues. It acts on our instructions and may transfer data outside Canada.
• Hosting and content delivery providers — they process log data in order to serve pages and protect the site from abuse.
• Google Play — only if you follow a link to a store page. From that point you are on Google’s service and Google’s own privacy terms apply. We receive nothing back about what you do there.

We do not sell personal information, we do not trade it, and we do not pass it to advertising networks for profiling. Where a processor is located overseas, we take reasonable steps to satisfy ourselves that it handles information consistently with PIPEDA.

6. How long we keep it

• Server log data: generally up to twelve months, then discarded or aggregated.
• Cookie choice: stored locally in your browser until you clear site data.
• Digest and notification records: for as long as you stay subscribed, and deleted within thirty days of you unsubscribing.
• Plus waiting list: until a seat is taken up or you ask to be taken off the list.
• Correspondence: up to twenty-four months, so that a correction can be traced back.

7. Your rights

Under PIPEDA, and under the comparable provincial laws in force in Quebec, British Columbia and Alberta, you may ask for access to the personal information we hold about you, ask for it to be corrected if it is wrong or out of date, ask for it to be deleted, and revoke your consent to the digest or to notifications at any time. Every digest carries an unsubscribe link, and browser notifications can be switched off in your browser settings for this site without contacting us at all.

To make a request, write to desk@runneredit.com from the address concerned, or tell us which address it relates to. If you are not satisfied with how we handled it, you may complain to the Office of the Privacy Commissioner of Canada (OPC), the federal regulator for privacy, or to the provincial privacy authority for Quebec, British Columbia or Alberta if you live in one of those provinces.

8. Security

The site is served over an encrypted connection. Access to the sign-up list is limited to the two people who run the desk, and processors are chosen on the basis that they can protect what we pass to them. No system is beyond failure, so we do not promise perfect security — but if a breach of our security safeguards were likely to cause significant harm, we would notify the people affected and the Office of the Privacy Commissioner of Canada, and keep a record of the incident, as PIPEDA requires.

9. Children

The site is written for a general adult audience and is not directed at children. We do not knowingly collect information from a child. If you believe a child has signed up, write to the desk and the record will be removed.

10. Changes to this notice

If this notice changes materially, the date at the top of the page changes with it and the revised version is published here. Continuing to use the site after that date means the current version applies to you.