Independent WHMIS 2015 (GHS) training for Canadian workplaces · Not a Government of Canada site
WHMISCert

Legal

Privacy policy

Last updated November 3, 2026 · AFFINITI, 655 Windermere Rd, London, ON N5X 2W8, Canada

What we collect

  • Reading the course: nothing personal. Module progress is stored in your own browser (local storage), not on our servers.
  • Enrolling for the exam: your name, email, jurisdiction, whether you consented to review reminders, the landing page or ad click that brought you (if any), and your IP address.
  • Taking the exam: your answers, score, number of attempts and date.
  • Buying a certificate: Stripe collects your payment details; we receive a payment reference, the amount and your billing email. We never see your card number.
  • Analytics: Google Analytics and Google Ads conversion tracking (cookies), used to measure which pages and ads lead to course starts and purchases. After a purchase we send Google a hashed version of your email for ad measurement ("enhanced conversions"). You can block these with a cookie blocker or Google's opt-out.

Why

To issue your certificate with the right name, to email it to you, to let employers verify it, to send review reminders you asked for, to prevent fraud, to handle support and refunds, and to measure and improve the Site and our advertising.

The verification page

Anyone who enters your certificate ID sees your name, completion date, jurisdiction and recommended review date. That is the purpose of the certificate. Your score, email and other details are never shown.

Who else sees it

Stripe (payment), Resend (email delivery), Upstash (database), Vercel (hosting), Google (analytics and ads). Each processes data on our instructions under its own privacy terms. Servers may be located in the United States. We don't sell or rent personal information.

How long we keep it

Certificate records are kept as long as the verification service exists, so employers can confirm them. Exam attempts and enrolment data are kept for 3 years. Payment records are kept for 7 years as required for tax purposes.

Your choices

  • Review reminders are opt-in; reply to any reminder or email us to stop them.
  • You can ask for a copy of your data, a correction, or deletion. Deletion removes the certificate from the verification record, so we'll confirm before doing it.
  • Questions or complaints: contact@whmiscert.ca. You may also contact the Office of the Privacy Commissioner of Canada.

Security

Data is transmitted over HTTPS, access links are signed, and exam answers are graded on the server. No system is perfectly secure; if we learn of a breach affecting you we will tell you.

Children

The Services are for people of working age. We don't knowingly collect information from anyone under 16.

Changes

We'll update the date above when this policy changes.