Upstreams is a Winnipeg waste-stream marketplace operated from Manitoba, Canada. This policy explains what personal information we collect, why, and what you can do about it. It is written to meet our obligations under the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
Questions, corrections, and deletion requests go to hello@upstreams.ca. That inbox is monitored by the person who runs Upstreams, who also acts as our privacy officer.
To run the marketplace: publishing listings, connecting businesses with people who can use their material, sending the emails that make an introduction happen, keeping the service secure, and understanding which waste streams are in demand. We do not sell personal information, and we do not use it for advertising.
We use a small number of service providers, and they only process information on our instructions:
Some of these providers store and process data outside Canada, including in the United States. While information is in another country it is subject to that country’s laws, and may be accessible to its courts and government authorities. If that is a problem for you, contact us before creating an account or a listing.
Upstreams sets cookies for one purpose: keeping you signed in. There are no advertising cookies, no analytics cookies, and no third-party trackers, which is why you are not reading this through a consent banner. Blocking cookies will stop you from signing in but will not otherwise affect browsing the site. If we ever add analytics, we will update this page before turning it on.
Listings stay published until the business withdraws them or we retire them as stale. Account records last as long as the account. Email threads and Smart Match queries are kept while they are useful for operating the service, and we clear them out periodically.
You can ask us what personal information we hold about you, ask us to correct it, and ask us to delete your account and listings. Email hello@upstreams.ca and we will respond within 30 days. You can withdraw consent at any time, though we may not be able to keep your listings live afterwards.
If you are not satisfied with how we have handled your information, you can complain to the Office of the Privacy Commissioner of Canada.
Access to the database is restricted by row-level security rules, traffic is served over HTTPS, and only the operator has administrative access. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner as the law requires.
If this policy changes, the date at the top changes with it. Material changes will be announced on the site.
See also our Terms of Use.