Privacy Policy

1. Who We Are

Testabrand Canada is operated by Purple Panda Limited, a company organized under the laws of Hong Kong ("Testabrand CA," "we," "us," or "our"). We operate the platform available at ca.testabrand.com and connect Canadian consumers with brands seeking genuine product feedback.

For privacy questions, contact us at support@testabrand.com.

2. Information We Collect

We collect the following categories of personal information:

Account Information

• Full name
• Email address
• Password (stored as a one-way hash — we cannot read it)
• Province/territory of residence

Campaign & Transaction Data

• Amazon Order ID and order confirmation screenshots you submit
• Payment method email address (for sending your Coins payouts)
• Campaign booking records and claim status
• Payout amount, status, and transaction records
• Survey responses (shared with the relevant brand as described in this Policy)
• Communications relating to campaigns, claims, and payouts
• Refund, cancellation, or disputed-order information
• Information used to identify duplicate accounts or fraudulent claims

Technical Data

• IP address and general location (city/province level)
• Browser type and device type
• Pages visited and session duration
• Login and security logs
• Cookie and session identifiers
• Error and diagnostic information

Purchase Evidence

Before uploading order confirmations, screenshots, or other documents, you must remove or obscure information that is not required for claim verification, including full payment-card information, passwords, unrelated purchases, and personal information belonging to another person. You are responsible for ensuring that submitted information is accurate, lawful, and relevant. We may reject, redact, restrict, retain, or delete submissions where reasonably necessary to protect privacy, comply with law, prevent fraud, or manage platform integrity.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Confirm your eligibility and identity for campaigns
• Verify your proof of purchase and process your Coins claim
• Credit your Coins and send payouts to your payment method upon request
• Deliver campaign instructions and confirmation emails
• Share survey responses with the brand that ran the campaign, as described in this Policy
• Detect and prevent fraud, abuse, and policy violations
• Send you important account and campaign notifications (not marketing)
• Comply with legal, tax, accounting, and regulatory obligations
• Improve our platform and user experience

4. How We Share Your Information

We do not sell your personal information to any third party. We share information only as follows:

With Brands

Survey responses are generally shared with the relevant brand in aggregated, anonymized, or de-identified form. We seek to remove direct identifiers such as your name and email address before sharing responses. Limited identifiable information may be disclosed where reasonably necessary to administer a campaign, investigate suspected fraud, resolve a dispute, protect legal rights, comply with law, or where you have otherwise been informed and any required consent has been obtained.

Do not include identifying, financial, medical, or other unnecessary sensitive information in free-text survey answers.

With PayPal

We share your PayPal email address with PayPal solely for the purpose of sending your Coins payout.

With Service Providers

We use third-party service providers for functions such as hosting, cloud storage, email delivery, customer support, analytics, security, fraud prevention, authentication, and payment administration. These providers may process personal information only for authorized purposes and are subject to contractual or other safeguards appropriate to the circumstances.

International Processing

Some service providers may process or store personal information outside Canada, including in the United States. Information processed in another jurisdiction may be subject to that jurisdiction's laws and may be accessible to courts, regulators, law-enforcement bodies, or other authorities. We remain responsible for personal information under our control as required by applicable Canadian privacy law.

Legal Requirements

We may disclose information when required by Canadian law, court order, or to prevent imminent harm.

5. Data Retention

We retain personal information only for as long as reasonably necessary to operate accounts, administer campaigns and payouts, prevent fraud, resolve disputes, enforce our agreements, and satisfy legal, tax, accounting, regulatory, and recordkeeping requirements. Retention periods vary depending on the type of information and the reason it is held. After account closure, certain information may continue to be retained where reasonably necessary for these purposes. When information is no longer required, we will take reasonable steps to destroy, delete, erase, or convert it to an anonymous form.

Information that has been irreversibly anonymized so that it no longer identifies an individual may be retained for research, analytics, and reporting.

6. Your Rights (Canadian Privacy Law)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate information
• Withdrawal of consent — withdraw consent for non-essential data use at any time
• Deletion or account closure — request deletion of information that is no longer required, subject to fraud-prevention, legal, tax, accounting, dispute-resolution, backup, and recordkeeping requirements

We may need to verify your identity before processing a request. We may refuse or limit a request where permitted or required by law.

To exercise any of these rights, email us at support@testabrand.com. We will respond within the period required by applicable law, ordinarily within 30 days. Where legally permitted, the response period may be extended.

7. Cookies and Tracking

We use essential cookies to operate accounts and maintain security. We may also use analytics technologies to understand platform performance and usage. We do not use personal information for third-party behavioural advertising unless this Policy and any required consent mechanism are updated accordingly.

You can disable cookies in your browser settings, but some features may not function correctly.

8. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the personal information, which may include HTTPS transmission, password hashing, access restrictions, authentication controls, monitoring, and service-provider safeguards.

No website, network, transmission method, or storage system is completely secure, and we cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

You are responsible for protecting your login credentials, email account, payment account, and devices, and for notifying us promptly if you suspect unauthorized account access.

Where required by law, we will notify affected individuals and applicable regulators of qualifying privacy breaches.

9. Children's Privacy

Testabrand CA is intended only for users who are at least 18 years old and legally capable of accepting our Terms of Service. If we learn that an account is operated by a person under 18, we may suspend or terminate the account and delete or retain associated information as reasonably necessary for legal compliance, fraud prevention, dispute resolution, and platform protection.

10. Changes to This Policy

We may update this Privacy Policy from time to time by publishing a revised version on ca.testabrand.com. The "Last updated" date shows when the Policy was most recently revised.

You are responsible for reviewing this Privacy Policy periodically. Except where additional notice or consent is required by applicable law, changes may become effective when published on the website without individual email, text message, or other direct notification.

Where a material change introduces a new purpose, materially different collection, or new disclosure requiring notice or consent under applicable law, we will provide such notice or obtain such consent as legally required.

11. Contact & Complaints

For privacy questions, access or correction requests, account-deletion requests, or complaints, contact:

We may request information necessary to verify your identity before responding.

If you are not satisfied with our response, you may have the right to complain to the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator.