Who is responsible
Bright Pine Web is responsible for the personal information under its control. Sameer Al Lathqani is the privacy lead and can be reached at sameer.lathqani@unb.ca.
What is collected
The public contact form prepares an email on your device and does not submit or store its fields on this website. If you create a portal account, Bright Pine collects your email address, name, optional business name, project information, notes, decisions, account-security details, and essential technical logs needed to operate and protect the service.
Please do not submit passwords, payment-card details, government identifiers, health information, or other sensitive personal information in project fields.
Why it is used
Information is used to authenticate you, provide your project workspace, communicate about requested services, protect the portal, respond to support or privacy requests, and meet legal obligations. Bright Pine does not sell personal information or use portal data for targeted advertising.
Service providers and location
Portal authentication and database services are provided by Supabase. The primary project database is hosted in Canada Central. The public website is delivered by Cloudflare. These providers process limited information on Bright Pine’s behalf under their terms and security practices; some logs or support systems may be processed outside your province or Canada and may be subject to local law.
Consent and choice
Account creation requires an affirmative acknowledgement of this notice and the Terms. You may decline by not creating an account and contact Bright Pine by email instead. You may withdraw consent by deleting your account, subject to information Bright Pine must retain for legal or contractual reasons.
Retention
Active portal records are kept while your account or project is active and only as long as reasonably needed for the stated purposes. Deleting your account removes its active profile, projects, notes, and approvals. Limited security logs, email records, or provider backups may remain for their normal retention periods or where law requires retention.
Security
Bright Pine uses encrypted connections, confirmed email, strong-password rules, optional authenticator MFA, least-privilege database permissions, per-account row-level access controls, and restricted administrative access. No online system is risk-free. If a breach creates a real risk of significant harm, Bright Pine will follow applicable notification and record-keeping requirements.
Your rights
Inside the portal you can correct profile information, download a copy of active portal data, delete individual projects, or delete the account. You may also ask about access, correction, use, disclosure, retention, or a privacy concern by emailing the privacy lead. Identity may need to be verified before a request is completed.
Cookies and analytics
The portal uses essential browser storage to maintain a signed-in session. Bright Pine currently does not use advertising cookies or third-party behavioural analytics. If that changes, this notice and any required choices will be updated before the new use begins.
Changes and questions
Material changes will be explained clearly and, where required, fresh consent will be requested. Questions or complaints can be sent to the privacy lead. You may also contact the Office of the Privacy Commissioner of Canada about unresolved concerns.