الامتثال والثقة

CARVED and hello@carvedcanada.ca are confirmed. Legal operator, incorporation jurisdiction, mailing address, phone, designated person in charge of privacy and governing-law details remain pending in BUSINESS_IDENTITY.

Recommended before activating paid contracts, commercial messaging, commissioned placements or server-side personal data; not a universal statutory precondition for a free educational site.

Before offering services commercially in Quebec, the complete customer-facing product and customer service must be available in French with quality and conditions comparable to English; commercial publications must be available in French, and contracts of adhesion provided or offered in French first as applicable. In-app screens and page metadata are available in English, French and Arabic; no professional Quebec French review has been completed.

Replace every illustrative rule with the official program criteria and reference URL, then set confidence to verified with a last-verified date.

Complete a privacy impact assessment and a data-transfer review before enabling any backend, analytics or messaging processor, particularly before communicating personal information outside Quebec.

Execute data processing agreements with every processor before it goes live.

Implement express opt-in records, sender identification, current contact details and prompt one-click unsubscribe before sending any commercial electronic message.

Recurring billing, all-in pricing presentation, cancellation and refund policy and the distance-contract disclosure flow require counsel review before payments are activated.

Security review and testing before any personal data is stored server-side.

Independent accessibility review and remediation of the customer-facing product.

Document the incident procedure, roles, assessment of real risk of significant harm, notification and record-keeping duties.

Publish a retention schedule and test access, correction, deletion and consent-withdrawal workflows end to end.