Privacy Policy

Last updated: July 27, 2026.

This Privacy Policy describes how Uncrossable Rush (hereinafter, the "Website", "we", "our" or "the Company"), accessible via the domain uncrossable-rush.co, collects, uses, stores and protects the personal data of users (hereinafter, the "User" or "you") within the framework of applicable data protection legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws in Canada.

We recognize the importance of your privacy and are committed to ensuring the security and confidentiality of the personal information you provide to us. Please read this policy carefully before using our services or interacting with our platform.

Identity and Contact Information of the Data Controller

• Website Owner: Uncrossable Rush.
• Website: uncrossable-rush.co.
• Contact and Privacy Email: [email protected].
• Reference Oversight Authority (Canada): Office of the Privacy Commissioner of Canada (OPC), 30 Victoria Street, Gatineau, Quebec K1A 1H3 (www.priv.gc.ca).

Principles of Data Protection

In accordance with applicable Canadian privacy standards, the processing of your personal data by Uncrossable Rush is governed by the following guiding principles:

• Lawfulness, fairness and transparency: Your data will always be processed lawfully, fairly and transparently in relation to you.
• Purpose limitation: Data will be collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes.
• Data minimization: The data collected will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
• Accuracy: Data will be accurate and, where necessary, kept up to date.
• Storage limitation: Data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
• Integrity and confidentiality: Data will be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage.

Personal Data We Collect

We collect personal information when you interact directly with us, register, use our digital services, perform financial transactions or contact our customer support team via [email protected].

3.1. Categories of Data Collected

• Identification and contact data: First name, last name, email address, phone number and postal address (if strictly necessary).
• Account and profile data: Access credentials, username and configuration preferences within the platform.
• Transaction and payment data: Information related to payment methods commonly used in the Canadian territory (such as Visa and Mastercard debit/credit cards, Interac e-Transfers, bank transfers, or authorized digital wallet services). Important note: Your full card or bank account details are processed in an encrypted format by external payment gateways certified under PCI-DSS standards; we do not store your full credit card numbers.
• Technical and browsing data (Cookies and connection logs): IP address, browser type, operating system, pages visited, session duration, date and time of access, and data derived from the use of analytical or preference cookies.

Purposes of Data Processing

We process your personal information for the following legitimate purposes:

• Platform management and service delivery: Enabling the proper functioning of the website, the creation and management of user accounts, and access to interactive features of the service.
• Payment processing and commercial management: Managing billing, processing payments securely using available methods in Canada, and preventing any type of financial fraud.
• Customer service and technical support: Responding to your inquiries, requests, complaints or technical issues submitted via [email protected].
• Commercial and promotional communications: Sending newsletters, service updates, offers and special promotions, provided we have obtained your prior and explicit consent, or where a prior business relationship exists allowing us to send communications about similar products (with the option to opt out at any time).
• Regulatory compliance and legal obligations: Complying with tax, commercial and data protection regulations in force in Canada, as well as responding to requests from competent authorities.

Legal Basis for Data Processing

The processing of your personal data is based on the legal grounds established by applicable Canadian privacy legislation:

• Execution of a contract: Processing is necessary for the performance of the service agreement or terms of use that you accept when registering for or using Uncrossable Rush.
• User consent: For sending personalized commercial communications, the use of certain non-essential cookies, and the processing of sensitive data (if any), we request your explicit, free and unambiguous consent.
• Compliance with a legal obligation: Processing necessary to comply with accounting, tax and security regulations required by Canadian legislation.
• Legitimate interest: For the continuous improvement of our services, fraud prevention, network security and internal administrative management.

Recipients of Data and International Transfers

Your personal data will not be transferred, sold, rented or made available to third parties, except in the following circumstances necessary for the operation of the service:

• Technology service providers: Companies responsible for web hosting, IT maintenance, email delivery platforms and payment gateways. These providers act as data processors and are subject to strict confidentiality agreements and applicable data protection compliance standards.
• Public authorities, law enforcement agencies or judicial bodies: When there is an imperative legal obligation or a legitimate judicial request within the framework of Canadian legislation.

International Transfers

In the event that any of our technology service providers are located outside Canada, we ensure that such international data transfers are carried out under appropriate security guarantees, such as the implementation of standard contractual clauses or verifying an adequate level of protection in the destination country.

Data Retention Periods

We will retain your personal data only for as long as strictly necessary to fulfill the purposes for which it was collected:

• Account and service data: Retained while the user maintains an active account or until deletion is requested. Following account closure, data will be blocked during applicable legal limitation periods.
• Tax and transaction data: Retained for a minimum period in accordance with applicable Canadian commercial and tax regulations (e.g, tax and anti-money laundering obligations where applicable).
• Commercial communication data: Retained until the user revokes their consent or exercises their right to object or delete.

User Rights

As the owner of personal data, applicable legislation grants you the following rights that you may exercise at any time:

• Right of access: Know what personal data we process about you and obtain a copy of it.
• Right of rectification: Request the modification of inaccurate or incomplete data.
• Right to erasure ("to be forgotten"): Request the deletion of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
• Right to restriction of processing: Request that we suspend the processing of your data under certain legally prescribed circumstances.
• Right to data portability: Receive your data in a structured, commonly used and machine-readable format, and transmit it to another data controller.
• Right to object: Object to the processing of your data for reasons related to your particular situation (including objection to direct marketing).
• Right to withdraw consent: Withdraw consent granted at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

How to exercise your rights?

You can exercise any of these rights by sending a written and signed request to our privacy department via email at: [email protected].

To ensure security and verify your identity, we may ask you to attach proof of identity to your request in accordance with applicable standards.

Furthermore, if you consider that your rights have not been duly addressed, you have the right to file a formal complaint with the competent supervisory authority in Canada, the Office of the Privacy Commissioner of Canada (OPC), through its official website (www.priv.gc.ca).

Information Security Measures

At Uncrossable Rush we apply appropriate technical and organizational security measures to guarantee a level of security appropriate to the risk of processing. These measures include:

• Data encryption in transit using secure protocols (SSL/TLS).
• Strict physical and logical access controls to our databases and servers.
• Periodic procedures for evaluating, analyzing and assessing the effectiveness of the technical and organizational measures implemented to guarantee the security of processing.
• Confidentiality commitment and ongoing training for personnel with access to personal data.

Minors

Our services and interactions on uncrossable-rush.co are directed exclusively to adults in accordance with Canadian legislation (age of majority in your province or territory, 18 or 19 years old). We do not knowingly or intentionally collect personal data from minors. If we become aware that a minor has provided us with personal information without proper parental authorization or legal representation, we will proceed to immediately delete such records from our systems. If you detect any case of a minor registering, please notify us immediately at [email protected].

Modifications to the Privacy Policy

We reserve the absolute right to modify, update or adapt this Privacy Policy at any time to adapt it to legislative developments, jurisprudential changes, guidance from the Office of the Privacy Commissioner of Canada, or technical changes in our services.

Any substantial modification will be duly notified to registered users through our website or by email prior to its entry into force. We strongly recommend that you periodically review this section to stay informed about how we protect your information.