Privacy Policy
Last updated: October 27, 2026
Introduction
Scandium Technologies Corp., operating as New Canadian Careers ("NCC," "we," "our," or "us"), operates the newcanadian.careers platform (the "Platform"), a job board connecting newcomers to Canada with Canadian employers. We are based in British Columbia, Canada.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform. This policy applies to all users, including candidates, employers, recruitment agencies, and visitors.
We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (BC PIPA). We are committed to compliance with these laws and to protecting the privacy of all individuals who interact with our Platform.
By accessing or using our Platform, you consent to the collection, use, and disclosure of your personal information as described in this policy. If you do not agree with this policy, you must not use our Platform.
Definitions
- "Personal Information" means information about an identifiable individual, as defined under PIPEDA. This includes your name, email address, phone number, resume, work history, credentials, and any other information that can identify you directly or indirectly.
- "Platform" means the newcanadian.careers website, mobile-optimized website, APIs, and all related services operated by NCC.
- "Candidate" means an individual who creates a profile on the Platform for the purpose of seeking employment.
- "Employer" means a company or individual that uses the Platform to post job listings and recruit candidates.
- "Agency" means a recruitment agency that uses the Platform to post jobs and manage applicants on behalf of client employers.
- "Service Provider" means a third party that processes personal information on our behalf under contractual obligations.
- "Consent" means express or implied consent as defined under PIPEDA, depending on the sensitivity of the information and the reasonable expectations of the individual.
Information We Collect
We aim to collect only the personal information we need for the purposes in this policy. The categories of personal information we collect include:
- Account Information: Name, email address, password (hashed), phone number, and profile photo.
- Social Sign-In Information: If you choose to sign in with Google or LinkedIn, we receive a unique account identifier and the name and email address associated with that account, which we use to create or match your NCC account. We ask only for basic sign-in details; we do not post on your behalf or access your contacts. This option is available only where the relevant provider has been enabled for this site.
- Professional Information: Resume, work history, education, skills, professional certifications, and cover letters.
- Credential and Assessment Information: certifications and licences you add to your profile, and any credential assessment results (such as WES or IQAS) or language test scores (such as IELTS, CELPIP, TEF, or CLB levels) you include in your profile or resume.
- Employment Preferences: Desired roles, salary expectations, location preferences, work schedule preferences, and availability date.
- Company Information: Company name, size, industry, website, business registration details, and authorized representatives.
- Payment Information: Billing address and payment method details. We never store your full card number, CVV, or PIN. Payments are handled by our payment processor, Stripe. We keep only the card type and last four digits for receipts and billing. Payment processing is subject to Stripe's Privacy Policy.
- Communications: Support requests and feedback you send us.
- Usage and Device Data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, timestamps, click patterns, and feature usage data collected through cookies and server logs. We also collect performance data (such as page load times and errors) to keep the Platform working well; this data is not used for advertising.
- Approximate Location: When you open our jobs page without a search, we may show jobs in the province your internet connection appears to come from. We don't save it to your account or profile, but like any search filter it can appear in our usage records. If you're signed in as a candidate, we may use the province saved in your profile instead. If you select "Use my location", your browser asks your permission, then works out your province on your device: your exact location is never sent to us. Once you allow it, the jobs page uses your device's location the same way on later visits. The province becomes part of the page address like any search filter, and your last choice is saved in your browser so the page opens on it next time. You can switch to all of Canada at any time, or turn off location in your browser settings.
How We Collect Information
We collect personal information through the following means:
- Directly from you: When you create an account, build your profile, submit a job application, post a job listing, contact our support team, or subscribe to our communications.
- Automatically: Through cookies, server logs, and analytics tools when you use our Platform. See the Cookies and Tracking Technologies section below for details.
- From third parties: From identity providers (Google, LinkedIn) when you choose to sign in with them, payment processors (transaction confirmations), and employers (application status updates and feedback shared through the Platform).
How We Use Your Information
We use the personal information we collect for the following purposes:
- Operate, maintain, and improve the Platform
- Match candidates with job listings based on the job preferences in their profile and their saved searches
- Show jobs near you, using your province only, never your exact location
- Process job applications and share application materials with the relevant employer
- Process payments for employer job posting packages and subscriptions
- Send transactional communications such as application confirmations, status updates, and billing receipts
- Send commercial electronic messages (job alerts, newsletters, platform updates) with your express consent, in compliance with CASL. We may use third-party email service providers to deliver these messages on our behalf; these providers process your email address solely for the purpose of message delivery and under contract
- Detect and prevent fraud, spam, abuse, and security threats
- Enforce our Terms of Service and investigate violations
- Comply with legal obligations under Canadian federal and provincial law
- Generate anonymized, aggregate analytics to improve the Platform (this data is not used to identify you)
Automated Decision-Making
NCC uses automated tools and algorithms to provide certain Platform features, including:
- Matching candidates with job listings based on the job preferences in their profile (such as job categories, desired titles, employment type, work setting, and minimum salary) and their saved searches
- Sorting and ranking search results
- Detecting and preventing fraud, spam, and abuse
These automated processes assist in connecting candidates with relevant opportunities but do not make final hiring or application decisions. All employment decisions are made solely by employers and candidates.
AI-Assisted Features
Where you choose to use our AI-assisted features, such as resume parsing, resume summaries, skill suggestions, tailoring your resume to a job description, or applicant-tracking (ATS) scoring, the text you provide for that feature (such as your resume content and the relevant job description) is sent to third-party AI service providers that process it on our behalf as our service providers, under contractual data-processing terms. We do not authorize these providers to use your personal information for their own purposes, including training their models, except as needed to provide the feature to you. These features are optional and assistive; they do not make hiring or application decisions.
If you believe an automated process has significantly affected you in a way that is inaccurate or unfair, you may contact us at [email protected] to request a review. We may review it and, where appropriate, have a person look at the result.
Legal Basis for Processing
Under PIPEDA and BC PIPA, we process your personal information on the following bases:
- Consent: We obtain express consent for the collection and use of sensitive personal information (such as credential assessments and language test scores). For non-sensitive information collected in the context of our service relationship with you, we may rely on implied consent where reasonable.
- Contractual Necessity: Processing that is required to fulfill our contract with you, such as operating your account, processing applications, and facilitating job matching.
- Legal Obligation: Processing required to comply with applicable Canadian federal or provincial law, including tax reporting, breach notification, and responding to lawful government requests.
- Reasonable Business Purposes: Processing necessary for platform security, fraud prevention, and service improvement, as permitted under PIPEDA where a reasonable person would consider it appropriate.
Information Sharing and Disclosure
We may share your personal information in the following circumstances:
- With Employers: When you apply for a job, your application materials (your name and contact information, resume, cover letter, links, and answers to any screening questions) are shared with the posting employer. Employers may download, print, or export this data for their recruitment purposes. We do not currently offer employers a way to browse or search candidate profiles; employers see your information only through the applications you submit.
- With Recruitment Agencies: We do not let recruitment agencies browse or search candidate profiles. Agencies see your information only through applications you submit to jobs they manage.
- Service Providers: We share information with third-party service providers who process data on our behalf, including payment processing (Stripe); transactional and marketing email delivery (including newsletters and job alerts sent with your consent); cloud hosting, file storage, content delivery, and security; error and performance monitoring (configured to minimize personal data); authentication providers when you use social sign-in (Google, LinkedIn); first-party product analytics where you consent (Google Analytics 4, Google Tag Manager, and Mixpanel); and the AI service providers described in the Automated Decision-Making section above. We use contracts to require our service providers to protect your information and use it only for the purposes we specify.
- Legal and Regulatory: We may disclose your information when required to comply with applicable law, regulation, legal process, or governmental request; to enforce our Terms of Service; to prevent or investigate possible wrongdoing in connection with the Platform; to protect against legal liability; or to protect the rights, property, or safety of NCC, our users, or the public.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. Where the law requires it, we will tell you about the transfer.
- With Your Consent: We may share your information for any other purpose with your express consent.
- Job-Post Distribution: Public job-posting content (job title, description, location, and employer name) may be distributed to third-party platforms, such as X (formerly Twitter), as part of our job syndication features.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. This policy does not cover other websites we link to; their own privacy policies apply.
Cross-Border Data Transfers
NCC is based in British Columbia, Canada. Your personal information may be stored and processed in Canada, the European Union, the United States, and other countries where our service providers operate.
Under PIPEDA, organizations may transfer personal information to service providers in other jurisdictions provided that comparable protections are in place. We do this through:
- Contracts with our service providers that require them to protect personal information to a standard comparable to PIPEDA
- Encryption of your information while it travels between your device and our systems, and encryption of certain sensitive information we store
- Limits on who at NCC can open personal information, wherever the server is
By using our Platform, you acknowledge and consent to the transfer, storage, and processing of your personal information in jurisdictions outside of Canada as described above. You understand that your personal information may be subject to the laws of those jurisdictions, which may differ from Canadian law. NCC remains accountable for your personal information under PIPEDA regardless of where it is processed, in accordance with PIPEDA's Accountability Principle.
Data Security
We take reasonable technical and organizational steps to protect your personal information. For example:
- Your information is encrypted when it travels between your device and our systems, and certain sensitive information we store is also encrypted
- Only people who need your information for their work can see it
- We watch our systems for signs of a security problem
- You can turn on multi-factor authentication (a second step when you sign in) for your account
- We have a plan for security incidents (described below)
If a data breach creates a real risk of significant harm, we will notify the affected people and the Office of the Privacy Commissioner of Canada, and any other regulator, where the law requires it. We keep records of breaches of security safeguards for as long as the law requires (currently at least 24 months).
No way of sending or storing information online is completely secure. We take reasonable steps, but we cannot guarantee that your information will always be safe.
Incident Response
If there is a security incident, we will take the steps the law requires. These may include:
- Looking into the incident and taking reasonable steps to contain it
- Deciding whether the incident is a breach of security safeguards under PIPEDA
- Where the breach creates a real risk of significant harm, notifying the Office of the Privacy Commissioner of Canada and affected people as soon as feasible, including: a description of the incident, the types of personal information involved, steps NCC has taken to reduce the risk of harm, and steps individuals can take to protect themselves
- Recording the breach and keeping the record for as long as PIPEDA requires
Third-Party Service Providers
Our Platform relies on third-party infrastructure and services, including server hosting, content delivery and security, payment processing (Stripe), email delivery, and analytics tools. These providers operate in multiple countries. Our contracts with service providers require them to protect your information, but NCC cannot guarantee the security practices of third parties. If a security incident at a service provider affects your data, NCC will notify you where PIPEDA requires it.
Your Role in Security
You play a critical role in protecting your personal information. We strongly recommend that you: use a strong, unique password; do not share your login credentials; log out after using shared devices; and promptly report any suspicious account activity to [email protected].
Data Retention
We keep your personal information as follows:
- Active Accounts: We retain your personal information for as long as your account remains active and as needed to provide our services.
- Deleted Accounts: After you delete your account, we will delete or anonymize your personal information within a reasonable time, unless the law requires us to keep it.
- Payment Records: Kept for as long as Canadian tax law (including the Income Tax Act) requires.
- Breach Records: Records of breaches of security safeguards are kept for as long as PIPEDA requires (currently at least 24 months).
- Legal Holds: We may retain data longer where required by law, regulation, or active legal proceedings.
- Anonymized Data: Aggregated, anonymized analytics data that is not used to identify individuals may be retained indefinitely.
Your Privacy Rights
Under PIPEDA and BC PIPA, you have the following rights regarding your personal information:
- Right of Access: You may ask for a copy of the personal information we hold about you. We will respond within the time required by law.
- Right of Correction: You may ask us to correct personal information that is wrong or incomplete. We will respond within the time required by law.
- Right to Withdraw Consent: You may withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. We will inform you of the implications of withdrawal.
- Right to Deletion: You may request that we delete your personal information, subject to our legal retention obligations.
- Right to Complain: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca or the BC Office of the Information and Privacy Commissioner (OIPC) at www.oipc.bc.ca.
To exercise any of these rights, contact us at [email protected] or use our Privacy Center. We may ask you to confirm your identity before we act on your request. Access requests are free or at minimal cost, as the law allows. If there is a cost, we will tell you before we go ahead.
Commercial Electronic Messages (CASL)
We follow Canada's Anti-Spam Legislation (CASL). We send commercial electronic messages (such as job alerts, newsletters, and promotional content) only with your consent, as CASL requires.
Each commercial message we send names NCC as the sender, gives our mailing address, and has an easy way to unsubscribe. We act on unsubscribe requests within the time CASL requires (no more than 10 business days).
Transactional messages (such as application confirmations, security alerts, password resets, and billing receipts) are exempt from CASL consent requirements and may be sent as needed to operate your account.
Children's Privacy
Our Platform is intended only for adults. It is not directed to, and may not be used by, anyone under 18 years of age (or the age of majority in their province or territory of residence, if that is higher). We do not knowingly collect personal information from anyone below this age. If we become aware that we have collected personal information from someone below this age, we will take reasonable steps to delete that information. If you believe someone below this age has given us personal information, please contact us at [email protected].
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will update the "Last updated" date at the top of this page.
For important changes, we may also tell you by email or with a notice on the Platform, and we will give any notice the law requires. Your continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the changes.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint about our handling of your personal information, please contact us:
You may also contact the relevant privacy regulator:
- Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca
- BC Office of the Information and Privacy Commissioner (OIPC): www.oipc.bc.ca