Privacy Statement for Traditional Knowledge Inc.

Effective Date: March 1, 2025

Traditional Knowledge Inc. (“we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of the personal information we collect and use in the course of providing our services. This Privacy Statement outlines how we comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and explains your rights regarding your personal information.

1. Accountability

1. Responsible Privacy Officer
   We have designated a Privacy Officer who is accountable for our compliance with this Privacy Statement and PIPEDA. If you have questions, concerns, or complaints about our privacy practices or this Privacy Statement, you may contact the Privacy Officer using the information at the end of this document.
2. Third-Party Service Providers
   We ensure that any third-party service providers acting on our behalf uphold comparable privacy and security commitments, and we remain responsible for personal information transferred to these providers for processing.

2. Identifying Purposes

1. Purpose of Collection
   We collect personal information to:
   • Provide you with access to and use of our platforms, including our Protektant application.
   • Facilitate signups for early access to our services, including verifying your identity and contacting you about updates or relevant opportunities.
   • Record and administer honoraria for eligible participants.
   • Enable Indigenous communities to exercise data sovereignty and protect personal data through our walled-garden approach.
   • Conduct research and development to improve our technology, with a focus on secure data sharing and “masking” for privacy protection.
   • Comply with legal and regulatory requirements, including Indigenous data sovereignty and meaningful consultation processes.
2. Notification
   When we collect your personal information, we will explain the purpose of the collection at or before the time of collection, or as soon after as practicable.

3. Consent

1. Obtaining Consent
   Your knowledge and consent are required for the collection, use, and disclosure of your personal information, except where inappropriate or permitted by law. By providing your information (such as when signing up for early access), you consent to our collection, use, and disclosure of that information as described in this Privacy Statement.
2. Withdrawal of Consent
   You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. However, withdrawing consent may limit our ability to provide you with certain services, including access to our Protektant platform or opportunities to participate in honoraria-based engagements.

4. Limiting Collection

1. Collection Scope
   We collect only the personal information necessary for the purposes identified in this Privacy Statement. For example, when you sign up for early access, we may collect your name, contact information, user type, and optional address details.
2. Fair and Lawful Means
   All personal information is collected by fair and lawful means, in accordance with PIPEDA.

5. Limiting Use, Disclosure, and Retention

1. Use and Disclosure
   We use and disclose your personal information only for the purposes for which it was collected, or for other purposes to which you have consented, or as otherwise permitted or required by law. For instance:
   • Walled-Garden Approach: Personal information you provide in our Protektant platform is accessible only to authorized users within that secure environment.
   • Data Sovereignty: We honor Indigenous data sovereignty principles by ensuring your data is not disclosed to external parties without your consent or unless legally required.
   • Masking: Where possible, we apply data-masking techniques so that only necessary metadata is shared for consultation purposes.
2. Retention Period
   We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or to meet legal requirements. When personal information is no longer required, we securely destroy, anonymize, or erase it.

6. Accuracy

We strive to maintain personal information in an accurate, complete, and up-to-date form. If your personal information changes or you notice any inaccuracies, please notify us so we can update our records. You can also request correction of your personal information at any time by contacting our Privacy Officer.

7. Safeguards

1. Security Measures
   We employ physical, organizational, and technological safeguards to protect personal information against unauthorized access, theft, or disclosure. These measures include (but are not limited to):
   • Secure server environments and encryption of data in transit and at rest.
   • Access controls to ensure only authorized personnel have access to personal information.
   • Regular security assessments and updates to maintain our systems’ integrity.
2. Walled-Garden Environment
   In keeping with Indigenous data sovereignty, our walled-garden approach restricts data access to authorized individuals only, giving Indigenous knowledge holders control over their personal data and how it is used in consultation processes.

8. Openness

This Privacy Statement and any related policies are available to individuals upon request. We are transparent about our privacy practices and will provide further information about our policies and procedures upon request.

9. Individual Access

1. Access to Your Information
   Upon written request, you have the right to access your personal information in our possession, and to know how it has been used or disclosed (if applicable). We will respond to your request within a reasonable timeframe, as required by law.
2. Challenging Accuracy
   If you successfully demonstrate that personal information we hold is inaccurate or incomplete, we will amend the information as required.

10. Challenging Compliance

1. Inquiries and Complaints
   You have the right to challenge our compliance with PIPEDA. If you have questions or concerns about this Privacy Statement or our practices, please contact our Privacy Officer:
   
   Privacy Officer
   Traditional Knowledge Inc.
   Email: privacy@protektant.com
   Address: 283 Via San Marino, Ottawa, ON, K2J 5X8
2. Escalation to the Privacy Commissioner
   If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada and file a complaint.

Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our practices or to remain compliant with legal requirements. When we do, we will post the revised statement on our website and update the effective date at the top.

Contact Us

For more information, requests, or concerns related to this Privacy Statement, or if you wish to withdraw your consent or exercise any of your rights under PIPEDA, please contact our Privacy Officer using the details provided above.

By using our services or providing us with your personal information, you acknowledge that you have read and understood this Privacy Statement and agree to its terms.