Legal

Privacy Policy

Last updated March 30, 2026

Last updated: March 30, 2026

This Privacy Policy describes how Broken Leg Software Inc. ("Broken Leg Software", "we", "us", or "our") collects and uses personal information when you visit our website at www.brokenleg.ca (the "Site").

By using the Site, you acknowledge that you have read and understand this Privacy Policy.

Applicable Law

We are a British Columbia corporation subject to the Personal Information Protection Act, SBC 2003, c. 63 ("PIPA"), which is BC's primary private-sector privacy law. The federal Personal Information Protection and Electronic Documents Act (PIPEDA) applies where PIPA does not — principally to data flows involving federally regulated activities or transfers outside British Columbia.

What This Policy Covers

This Privacy Policy applies when you:

  • visit or browse the Site;
  • submit our contact form;
  • receive communications from us; or
  • otherwise interact with us through the Site.

This Policy does not apply to our products and services (such as Odeumate), which are covered by separate privacy notices, or to information we collect as an employer.

Personal Information We Collect

Information You Provide

  • Contact information — your name, email address, and any other information you include when you submit our contact form.
  • Communications — the content of messages you send to us.

Information We Collect Automatically

Analytics

With your consent, we use Google Analytics to collect information about how visitors use the Site, including pages visited, time on site, and general geographic location based on IP address. This data is transmitted to and processed on Google's servers, which may be located outside Canada, including in the United States. Google processes this data in accordance with its own Privacy Policy. Analytics data is only collected if you accept cookies when prompted.

Google reCAPTCHA

Our contact form uses Google reCAPTCHA v3 to detect and prevent automated submissions. Unlike older CAPTCHA systems, reCAPTCHA v3 operates invisibly in the background — no challenge is displayed. It collects information about your interaction with the page, including mouse movements, keystrokes, browsing behaviour, device characteristics, and browser fingerprinting data, and sends this information to Google for risk analysis. This processing occurs regardless of your cookie consent choice, as it is required for the contact form to function. It is subject to Google's Privacy Policy and Terms of Service.

Server Logs

Our web server automatically records your IP address, browser type, operating system, referring URL, and access times. We collect this information for security monitoring, troubleshooting, and abuse prevention. It is not used for marketing or profiling.

Cookies and Local Storage

We use the following cookies and browser storage on the Site:

  • bls_cookie_consent (localStorage) — stores your analytics preference (accepted or declined). Set when you interact with the cookie banner.
  • _ga, _ga_* (Google Analytics cookies) — used to distinguish visitors and sessions for analytics purposes. Only set with your consent. Expires after 13–24 months depending on the specific cookie.
  • _GRECAPTCHA (Google reCAPTCHA cookie) — used by Google to provide spam and abuse prevention on the contact form. Set when the contact page loads. Expires after 6 months.

You can control analytics cookies using the cookie banner when you first visit the Site, or by adjusting your browser settings. Declining analytics cookies will not affect your ability to use the Site.

How We Use Your Information

  • To respond to your inquiries — when you contact us, we use your information to respond to your message.
  • To understand Site usage — analytics data (with consent) helps us understand how the Site is used and how to improve it.
  • To prevent abuse — server logs and reCAPTCHA data help us detect and prevent malicious activity.
  • To comply with legal obligations — we may use or retain information as required by law.

How We Share Your Information

We do not sell your personal information. We may share information with:

  • Service providers — Google Analytics (analytics) and Google reCAPTCHA (spam protection). These providers operate under their own privacy policies and may process data outside Canada.
  • Legal requirements — where required by law, court order, or governmental authority.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, personal information may be transferred as a business asset.

International Transfers

We are based in British Columbia, Canada, and this Site is intended for visitors in Canada. If you contact us from outside Canada, your information may be transferred to and processed in Canada. Where we use third-party services (such as Google Analytics and Google reCAPTCHA) that process data outside Canada, those providers are subject to their own privacy frameworks. We rely on appropriate safeguards for any such transfers.

How Long We Keep Your Information

  • Contact form submissions — retained for up to two years from the date of submission, then deleted.
  • Server logs — retained for 90 days, then deleted.
  • Analytics data — retained in accordance with Google Analytics' configured retention settings (up to 14 months).
  • Cookie and consent records — retained in your browser until cleared or until expiry as noted above.

You may request deletion of your personal information at any time by contacting our Privacy Officer (see below).

Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, disclosure, or loss. No method of transmission over the internet is completely secure. You are responsible for keeping any credentials or access information you receive from us confidential.

Your Rights

Under BC PIPA and applicable federal law, you have the right to:

  • request access to the personal information we hold about you;
  • request correction of inaccurate information;
  • withdraw consent to the collection, use, or disclosure of your information; and
  • request deletion of your information.

We will respond to access and correction requests within 30 business days of receipt, as required by PIPA s. 29. In some cases we may extend this period; if so, we will notify you of the extension and the reason for it.

To exercise any of these rights, please contact our Privacy Officer at privacy@brokenleg.ca.

Withdrawing Consent

You may withdraw consent to the collection or use of your personal information at any time by contacting us at privacy@brokenleg.ca. Withdrawal of consent does not affect the lawfulness of any collection or use that occurred prior to withdrawal. Please note that if you withdraw consent for certain uses (such as responding to your inquiry), we may be unable to provide the service you requested.

To withdraw consent for analytics cookies specifically, click the "Decline" option in the cookie banner, or clear your browser's cookies and localStorage for this site.

Children

The Site is not directed at individuals under 16 years of age. We do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has provided us with personal information, please contact us so we can delete it.

Complaints

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to make a complaint to the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC):

  • Website: oipc.bc.ca
  • Phone: 250-387-5629
  • Toll-free: 1-800-663-7867

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. Your continued use of the Site after changes are posted constitutes acceptance of the updated Policy.

Privacy Officer

Broken Leg Software Inc. has designated a Privacy Officer responsible for ensuring compliance with this Policy and with applicable privacy law. To reach our Privacy Officer with questions, concerns, or requests: