Privacy Policy
Last updated: January 10th, 2026
Voltra Energy ("Voltra", "we", "us", or "our") values and respects your privacy. We have prepared this privacy policy to explain the manner in which we collect, use, and disclose personal information when you visit our websites, use our web application, use Connected Equipment that operates on our platform, or otherwise interact with us.
This policy applies to:
Our main website at https://www.voltra.com/
Our documentation site at https://docs.voltra.com/
Our blog at https://blog.voltra.com/
Our developer portal and resource center
Our web applications at https://console.voltra.com/, https://portal.voltra.com/, https://pay.voltra.com/ (the "App")
Partner applications powered by Voltra's platform
Connected Equipment operating on our platform
Any other Voltra-owned or operated web properties
(collectively, the "Website" or "Websites")
Voltra provides an operating system for connected energy devices. We're the back-end software powering energy management, EV charging, and industrial control services provided by a range of organizations. We enable users to manage, monitor, and control Connected Equipment such as EV chargers, batteries, inverters, and industrial control systems using equipment provided by us or third parties that resell our services or own, operate, or otherwise control particular Connected Equipment at a particular location ("Operators").
"Voltra" or "we" or "us" refers to: (i) Voltra Energy Inc., a company registered in Ontario, Canada, with its principal place of business at 151 Charles St W Suite 100, Kitchener, ON N2G 1H6, Canada, if you are accessing our services from Canada; or (ii) Voltra Energy U.S. Inc., a company registered in Delaware, with its principal place of business at 713 N Shoreline Blvd, Mountain View, CA 94043, if you are accessing our services from the United States or any other country.
Language / Langue
This Privacy Policy is available in English. Une version française de cette politique de confidentialité est disponible sur demande à privacy@voltra.com.
(A French version of this Privacy Policy is available upon request at privacy@voltra.com.)
Table of Contents
Collection and Use of Personal Information
Website Information
App Data
Connected Equipment Data
Interest-Based Advertising
Sharing of Personal Information
Safeguards and Retention
Data Retention Schedule
Transfers Across Borders
Your Choices
Your Rights
California Residents (CCPA/CPRA)
Other US State Privacy Laws
European Economic Area, UK, and Switzerland (GDPR)
Canadian Residents (PIPEDA)
Quebec Residents (Law 25)
Children's Privacy
Updates to the Privacy Policy
Security Breach Notification
Contact us
1. Collection and Use of Personal Information
We may collect personal information when you:
Create a Voltra account
Use the Voltra web application
Pay for your usage session
Use Connected Equipment
Sign up to receive marketing emails such as newsletters, offers, and promotions
Enter a contest or participate in a promotion or beta products
Engage with Voltra through social media
Apply for a job at Voltra
Participate in our surveys
Contact us for customer support or with a comment, question, or complaint
Voltra Account
Voltra offers a single sign-on experience. In order to use Connected Equipment offered by Voltra or one of our Operator or reseller partners, you may create a Voltra account. To create your account, we collect your first and last name, email address, and phone number and may also collect a password that you create. When you create an account on a partner's app, you will automatically also create an account that can be used on the Voltra app (and vice versa). When you log in to any new partner applications, your account with the new partner will be created using the same user ID and linked to your Voltra account. See "Sharing of Personal Information" below to learn how we share data with our partners.
Payment Processing
We collect personal information in order to process your payment on Voltra applications. To process your payment, we require your first and last name, billing address, and payment card information (payment card information including credit card number, expiry date, and CVV/CVC code is processed by our third-party payment processor such as Stripe). You may be required to have a payment card on file in order to start certain sessions. You can change or update your payment method at any time. To delete your payment method, please delete your account. We may also process payments on behalf of certain of our Operators or reseller partners.
Using Connected Equipment
In order to use Connected Equipment, you may be required to authenticate yourself using a valid authentication method such as an RFID access card, phone number, or account login. When you use Connected Equipment using your Voltra account at a Voltra or partner location, we collect information about your session including timestamp, duration, equipment location, energy data, and operational metrics, and we may make this data available to you through your Voltra account. We use this data to track usage and improve equipment reliability.
Marketing Communications
If you sign up to receive our email marketing communications, we will collect your mobile number or email address in order to send you newsletters, offers, promotions, and the latest updates that may be tailored to your interests and preferences. You can unsubscribe at any time by clicking the "unsubscribe" link included at the bottom of each email. Alternatively, you can opt out of receiving marketing communications by contacting us at the contact information provided in the "Contact Us" section below. Please note that you may continue to receive transactional or account-related communications from us.
If you sign up to receive our email marketing communications, we may use services provided by third-party platforms (such as social media and other websites) to serve tailored advertisements on such platforms to you or others, and we may provide a hashed version of your email address or other information to the platform provider for such purposes. To opt out of the sharing of your information for these purposes, please send a request to privacy@voltra.com.
Contests and Promotions
When you enter a contest or participate in a promotion, we may collect your name, address, email address, phone number, and any additional information or content required for the contest or promotion, including to deliver a prize to you. We use this information to administer your participation in the contest or promotion.
Employment
In connection with a job application or related inquiry, you may provide us with certain personal information about yourself (such as that contained in a resume, cover letter, or similar employment-related materials). We use this information for the purpose of processing and responding to your application for current and future career opportunities.
Surveys
From time to time, we may offer you the opportunity to participate in one of our surveys. The information obtained through our surveys is used in an aggregated, de-identified form. We use this information to help us understand our users, enhance our Website, and improve our products and services.
Contact Us
When you contact us with a comment, question, or complaint, you may be asked for information that identifies you, such as your name, address, and a telephone number, along with additional information we need to help us promptly answer your question or respond to your comment. We may retain this information to assist you in the future and to improve our customer service and products. We may record telephone calls to our customer service line for quality assurance and training purposes. If you don't wish for your call to be recorded, please let us know.
2. Website Information
Visiting our Website
In general, you can visit our Website without telling us who you are or submitting any personal information. However, we collect the IP (Internet protocol) addresses of all visitors to our Website and other related information such as page requests, browser type, operating system, and average time spent on our Website. We use this information to help us understand our Website activity and to monitor and improve our Website.
Cookies
When you visit our Website, we may obtain certain information by automated means, such as through cookies, web beacons, pixels, and other technologies. A "cookie" is a text file that websites send to a visitor's computer or other internet-connected device to uniquely identify the visitor's browser or to store information or settings in the browser. A "web beacon," also known as an internet tag, pixel tag, or clear GIF, links web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server.
You may set your browser to notify you when you receive a cookie or to not accept certain cookies. However, if you decide not to accept cookies from our Website, you may not be able to take advantage of all of the Website features. We use these technologies to operate the Website, such as to enable you to log into secure areas. We also use these technologies to recognize when you return to the Website and to personalize our content for you, greet you by name, remember your preferences (for example, your choice of language or region), and to integrate useful services provided by third-party providers into our Website.
For more information about our use of cookies, please see our Cookie Policy.
Analytics
We may use a third party such as Google Analytics to help us gather and analyze information about the areas visited on the Website (such as the pages most read, time spent, search terms, and other engagement data) in order to evaluate and improve the user experience and the Website. These third parties may use cookies and other tracking technologies. For more information about Google Analytics or to prevent the storage and processing of this data (including your IP address) by Google, you can download and install the browser plug-in available at: https://tools.google.com/dlpage/gaoptout?hl=en
You can also obtain additional information on Google Analytics' data privacy and security at:
Third-Party Links
Our Website may contain links to other websites that Voltra does not own or operate. We provide links to third-party websites as a convenience to the user. These links are not intended as an endorsement of or referral to the linked websites. The linked websites have separate and independent privacy policies, notices, and terms of use. We do not have any control over such websites, and therefore we have no responsibility or liability for the manner in which the organizations that operate such linked websites may collect, use, disclose, secure, and otherwise treat personal information. We encourage you to read the privacy policy of every website you visit.
3. App Data
Location Information
With your consent, we may collect your location information by accessing your device's GPS coordinates so that we can provide you with location-based services, such as locating the nearest Connected Equipment. You can opt out at any time by turning off your location services for the App in the settings of your device.
Push Notifications
If you sign up to receive push notifications, we will send push notifications to your device. If you wish to stop receiving push notifications from us, you can turn off push notifications for the App either within the settings page of the App, or in the settings of your device.
App Usage Information and Analytics
As with many applications, certain limited data is required for the App to function on your device. This data includes the type of device hardware and operating system, unique device identifier, IP address, language settings, and the date and time the App accesses our servers. We use this information to help us understand the activity on our App, to monitor and improve our App, and to tailor your in-App experience. In addition, we may use third-party service providers to collect analytical information about your use of the App, such as the App features used and time spent on the App, to help us tailor your in-app experience, improve our products and the quality of our App, and to manage and analyze data in order to better understand our users. You can manage how your device and browser share certain device data by adjusting the privacy and security settings on your device.
4. Connected Equipment Data
Device Data
When you use Connected Equipment connected to our platform, we collect operational data from those devices, including:
Device identifiers and configuration
Operating status and health metrics
Energy consumption and production data
Session information (timestamp, duration, energy delivered)
Error logs and diagnostic information
Control command history
We use this data to provide the Services, monitor equipment performance, troubleshoot issues, improve reliability, and generate usage reports.
Aggregated Data
We may create aggregated and de-identified data from Connected Equipment data and use it for any purpose, including:
Product development and improvement
Machine learning and AI model training
Grid modeling and energy forecasting
Industry benchmarking and analytics
Research and publications
Aggregated data cannot be used to identify any individual or specific customer.
Carbon Credits
We may use Connected Equipment data to generate, file, claim, and retain carbon credits, renewable energy credits, or similar environmental attributes.
5. Interest-Based Advertising
We work with third parties such as ad networks and other advertising companies that use their own tracking technologies (including cookies, web beacons, and pixel tags) on our Website in order to provide you with tailored advertisements across the Internet. This is a common marketing practice referred to as interest-based or online behavioral advertising. These companies may collect information about your activity on our Website and third-party websites (such as web pages you visit and your interaction with our advertising and other communications) and use this information to make predictions about your preferences, develop personalized content, and deliver ads that are more relevant to you on third-party websites. This information may also be used to evaluate the effectiveness of our online advertising campaigns.
Opting Out of Interest-Based Advertising
To adjust your preferences or exercise control over the third parties who collect data on our Website for interest-based advertising purposes, you can revoke your cookies on our website here: https://www.voltra.com/cookie-preferences. For more information about interest-based advertising and to understand your options, including how you can opt out of receiving behavioral ads from third-party advertising companies participating in the Digital Advertising Alliance of Canada, please visit the Digital Advertising Alliance of Canada website at http://youradchoices.ca/choices.
Please note that even if you opt out of interest-based advertising by a third party, these tracking technologies may still collect data for other purposes including analytics, and you will still see ads from us, but the ads will not be targeted based on behavioral information about you and may therefore be less relevant to you and your interests.
To successfully opt out, you must have cookies enabled in your web browser (see your browser's instructions for information on cookies and how to enable them). Your opt-out only applies to the web browser you use, so you must opt out of each web browser on each computer you use. Once you opt out, if you delete your browser's saved cookies, you will need to opt out again.
6. Sharing of Personal Information
We do not sell or disclose your personal information to third parties without your consent, except as set forth below or as required or permitted by law.
Operators and Resellers
When you use Connected Equipment at a partner location, we share certain personal information (including information about your session) with the applicable Operator for the purposes of providing customer support, troubleshooting issues related to the Connected Equipment, and to validate payment remittances from Voltra. The partner will collect, use, disclose, and otherwise handle your personal information in accordance with their own practices or privacy policies, which we recommend that you obtain and review carefully.
Service Providers
Your personal information will be transferred (or otherwise made available) to certain third parties that provide services on our behalf. We use service providers to provide services such as hosting the Website, sending communications on our behalf, processing payments, providing advertising, marketing, and analytics services. Our service providers are only provided with the information they need to perform their designated functions and are not authorized to use or disclose personal information for their own marketing or other purposes. Our service providers may access or store personal information in the U.S., Canada, or other foreign jurisdictions.
Carbon Credits
We may also generate aggregated and anonymized statistical data and share that data in order to generate or purchase carbon credits.
Grid Services and Energy Programs
If you have signed up for an energy program with your local utility provider, grid operator, or demand response program and provided consent, we may share usage information with such providers to verify eligibility, participation, and redemption of benefits.
Legal and Compliance
We and our Canadian, U.S., and other foreign service providers may provide your personal information in response to a search warrant or other legally valid inquiry or order, or to another organization for the purposes of investigating a breach of an agreement or contravention of law or detecting, suppressing, or preventing fraud, or as otherwise may be required or permitted by applicable Canadian, U.S., or other law or legal process, which may include lawful access by U.S. or foreign courts, law enforcement, or other government authorities. Your personal information may also be disclosed where necessary for the establishment, exercise, or defense of legal claims and to investigate or prevent actual or suspected loss or harm to persons or property.
Sale of Business
We may transfer any information we have about you as an asset in connection with a proposed or completed merger, acquisition, or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Voltra or as part of a corporate reorganization or other change in corporate control.
Aggregated Data
We may share aggregated and de-identified data with third parties for any purpose, including product improvement, machine learning and AI training, grid modeling and forecasting, and research.
7. Safeguards and Retention
We have implemented reasonable administrative, technical, and physical measures in an effort to safeguard the personal information in our custody and control against theft, loss, and unauthorized access, use, modification, and disclosure. We restrict access to personal information on a need-to-know basis to employees and authorized service providers who require access to fulfill their job requirements.
We have record retention processes designed to retain personal information for no longer than necessary for the purposes set out herein or as otherwise required to meet legal or business requirements.
8. Data Retention Schedule
We retain different categories of personal information for different periods based on our legitimate business needs and legal requirements:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account Information (name, email, phone) | Duration of account + 3 years after deletion | Contract performance; legal compliance |
| Payment Information (transaction records) | 7 years after transaction | Tax and financial reporting requirements |
| Payment Card Details | Not stored by Voltra (processed by 3rd party gateways such as Stripe) | N/A |
| Session/Usage Data | 3 years after session | Service improvement; billing disputes |
| Connected Equipment Data | Duration of service + 1 year | Service delivery; troubleshooting |
| Customer Support Records | 3 years after last interaction | Service quality; dispute resolution |
| Marketing Preferences | Until consent withdrawn + 30 days | Consent |
| Contest/Promotion Data | 1 year after contest ends | Contest administration; legal compliance |
| Job Application Data | 2 years after application | Recruitment; legal compliance |
| Website Analytics | 26 months (Google Analytics default) | Legitimate interest |
| Export Compliance Records (account country, IP logs, screening results, access denials) | 5 years from transaction or access | U.S. Export Administration Regulations (15 CFR § 762); OFAC requirements |
| Aggregated/De-identified Data | Indefinitely | Not personal information |
Deletion Requests: When you request deletion of your personal information, we will delete or anonymize your data within 30 days, except where retention is required for legal compliance, dispute resolution, or fraud prevention.
Backup Systems: Data in backup systems may persist for up to 90 days after deletion from primary systems.
9. Transfers Across Borders
Your personal information may be stored outside of the country, province, or region where you reside, including in Canada and the United States. Your personal information will be subject to the laws of the jurisdictions in which it is stored, including laws that may permit access by law enforcement, courts, or government authorities in those jurisdictions. For written information about our policies and practices regarding our use of service providers outside of Canada to process personal information, please contact us using the contact details set out below.
10. Your Choices
You can withdraw your consent to our collection, use, and disclosure of personal information at any time by providing us with reasonable notice, subject to legal or contractual restrictions. Please note that if you withdraw your consent, we will not be able to continue to provide services to you. We may retain your personal information where required to meet our legal and contractual obligations.
As indicated above, if you have signed up to receive our email communications, you can unsubscribe any time by clicking the "unsubscribe" link included at the bottom of the email. Alternatively, you can opt out of receiving our marketing communications by contacting us at the contact information under "Contact Us" below.
To opt out of interest-based advertising, see the "Interest-Based Advertising" section above.
11. Your Rights
Subject to limited exceptions under applicable law, you have the right to access, update, and correct inaccuracies in your personal information in our custody or control. You may request access, updating, and corrections of inaccuracies in your personal information in our custody or control by emailing or writing to us at the contact information set out below. We may request certain personal information for the purpose of verifying the identity of the individual seeking access to his or her personal information records.
Response Timeframes: We will acknowledge receipt of your request within 10 business days and will respond to your request within 30 days. If we require additional time (up to an additional 60 days), we will notify you of the reason for the extension. There is no fee for submitting a request, although we may charge a reasonable fee for excessive or repetitive requests.
Verification: To protect your privacy, we may ask you to verify your identity before responding to your request. We will use information you have previously provided to us to verify your identity.
You can also view certain of your personal information, including your usage data and payment history for all sessions made under your Voltra account, by logging into the Voltra app. You may delete this information through our application.
12. California Residents (CCPA/CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Categories of Personal Information Collected
In the preceding 12 months, we have collected the following categories of personal information:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, email, phone number, IP address, device identifiers, account ID | Yes |
| B. Personal information under Cal. Civ. Code 1798.80(e) | Name, address, phone number, payment card information (via processor) | Yes |
| C. Protected classification characteristics | N/A | No |
| D. Commercial information | Purchase history, session records, payment history | Yes |
| E. Biometric information | N/A | No |
| F. Internet or network activity | Browsing history, interaction with website/app, device information | Yes |
| G. Geolocation data | Device location (with consent) | Yes |
| H. Sensory data | N/A | No |
| I. Professional or employment information | Job application data (if you apply) | Yes (applicants only) |
| J. Education information | N/A | No |
| K. Inferences | Preferences, characteristics based on usage | Yes |
| L. Sensitive personal information | Precise geolocation (with consent) | Yes (with consent) |
Sources of Personal Information
We collect personal information from the following sources:
Directly from you: When you create an account, use our services, contact us, or apply for employment
From your devices: Automatically collected through cookies, pixels, and similar technologies
From Connected Equipment: Device data, usage metrics, and session information
From our Operators and partners: When you use Connected Equipment at partner locations
From service providers: Analytics providers, payment processors, and marketing platforms
From public sources: Publicly available information (e.g., for employment verification)
Business Purposes for Collection
We collect and use personal information for the following business purposes:
Providing our services and processing transactions
Creating and managing your account
Customer support and service improvement
Marketing and advertising (with consent where required)
Analytics and product development
Security, fraud prevention, and legal compliance
Processing job applications
Categories of Third Parties with Whom We Share Personal Information
We may share personal information with the following categories of third parties:
| Third Party Category | Categories of PI Shared | Purpose |
|---|---|---|
| Service Providers | A, B, D, F, G | Service delivery, payment processing, analytics |
| Operators and partners | A, D | Customer support, session validation |
| Advertising partners | A (hashed), F | Interest-based advertising |
| Analytics providers | F, K | Website/app analytics |
| Payment processors | A, B, D | Payment processing |
| Legal/government | As required | Legal compliance |
Your CCPA/CPRA Rights
Right to Know: You have the right to know what personal information we have collected about you in the preceding 12 months, including the categories of information, sources, purposes, and third parties with whom we share it.
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt Out: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
Right to Limit Use of Sensitive Personal Information: You have the right to limit the use of sensitive personal information to purposes necessary to provide the services.
Right to Non-Discrimination: You have the right to non-discrimination for exercising your privacy rights.
Sale and Sharing of Personal Information:
We do not "sell" personal information for monetary consideration. However, our use of certain advertising technologies may constitute "sharing" for cross-context behavioral advertising under CPRA. You may opt out of this sharing by:
Clicking "Do Not Sell or Share My Personal Information" on our website
Contacting us at privacy@voltra.com
Enabling the Global Privacy Control (GPC) signal in your browser
Exercising Your Rights
To exercise your CCPA/CPRA rights, you may:
Email us at privacy@voltra.com
Call us at +1 (647) 601-9731
Submit a request through our website at https://www.voltra.com/legal/privacy-request
We will verify your identity before processing your request using information you have previously provided to us. You may also designate an authorized agent to make a request on your behalf.
Response Time: We will respond to verifiable requests within 45 days. If we need additional time (up to an additional 45 days), we will notify you.
13. Other US State Privacy Laws
Several US states have enacted comprehensive privacy laws that provide residents with rights similar to CCPA. If you are a resident of Virginia, Colorado, Connecticut, Utah, or other states with applicable privacy laws, you may have the following rights:
Virginia Consumer Data Protection Act (VCDPA)
Colorado Privacy Act (CPA)
Connecticut Data Privacy Act (CTDPA)
Residents of these states have rights to:
Access: Confirm whether we process your personal data and access such data
Correction: Correct inaccuracies in your personal data
Deletion: Delete personal data you have provided or we have obtained
Data Portability: Obtain a copy of your personal data in a portable format
Opt-Out: Opt out of targeted advertising, sale of personal data, and profiling
How to Exercise Your Rights
To exercise your rights under any applicable state privacy law:
Email us at privacy@voltra.com
Submit a request through our website
We will respond to your request within the timeframe required by applicable law (generally 45 days, with possible extensions).
Appeals
If we decline to take action on your request, you may appeal our decision by contacting us at privacy@voltra.com with "Privacy Appeal" in the subject line. We will respond to your appeal within the timeframe required by applicable law.
14. European Economic Area, UK, and Switzerland (GDPR)
If you are located in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:
Right to Access: You have the right to access your personal data.
Right to Rectification: You have the right to rectification of inaccurate data.
Right to Erasure: You have the right to erasure ("right to be forgotten").
Right to Restrict Processing: You have the right to restrict processing.
Right to Data Portability: You have the right to data portability.
Right to Object: You have the right to object to processing.
Right to Withdraw Consent: You have the right to withdraw consent.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority.
Legal Basis for Processing
We process your personal data based on:
Contract: To perform our agreement with you.
Legitimate Interests: For our business operations, provided they do not override your rights.
Consent: Where you have given consent.
Legal Obligation: To comply with applicable laws.
International Transfers
We transfer data to the United States and other countries. We use appropriate safeguards such as Standard Contractual Clauses to protect your data.
To exercise your GDPR rights, contact us at privacy@voltra.com.
15. Canadian Residents (PIPEDA)
If you are a Canadian resident, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
PIPEDA Principles
We adhere to the ten fair information principles under PIPEDA:
Accountability: We are responsible for personal information under our control and have designated a Privacy Officer.
Identifying Purposes: We identify the purposes for which personal information is collected at or before the time of collection.
Consent: We obtain your knowledge and consent for the collection, use, or disclosure of personal information, except where inappropriate.
Limiting Collection: We limit collection to that which is necessary for the purposes identified.
Limiting Use, Disclosure, and Retention: We do not use or disclose personal information for purposes other than those for which it was collected, except with consent or as required by law. We retain information only as long as necessary.
Accuracy: We keep personal information as accurate, complete, and up-to-date as necessary.
Safeguards: We protect personal information with security safeguards appropriate to the sensitivity of the information.
Openness: We make information about our policies and practices readily available.
Individual Access: Upon request, we inform you of the existence, use, and disclosure of your personal information and provide access to that information.
Challenging Compliance: You may challenge our compliance with these principles by contacting our Privacy Officer.
Your Rights Under PIPEDA
As a Canadian resident, you have the right to:
Access: Request access to personal information we hold about you
Correction: Request correction of inaccurate or incomplete personal information
Withdraw Consent: Withdraw your consent to the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
Challenge Compliance: File a complaint with our Privacy Officer or the Office of the Privacy Commissioner of Canada
How to Exercise Your Rights
To exercise your rights under PIPEDA:
Email our Privacy Officer at privacy@voltra.com
Write to us at the address in the "Contact" section
Call us at +1 (647) 601-9731
Response Time: We will respond to your request within 30 days. If we require additional time, we will notify you.
Cost: There is generally no fee for accessing your personal information, although we may charge a minimal fee for extensive requests.
Office of the Privacy Commissioner of Canada
If you are not satisfied with our response to your privacy concern, you may contact:
Office of the Privacy Commissioner of Canada
30 Victoria Street Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca
16. Quebec Residents (Law 25)
If you are a resident of Quebec, your personal information is protected under the Act respecting the protection of personal information in the private sector ("Law 25"), which provides rights beyond those available under PIPEDA.
Your Rights Under Law 25
In addition to the rights described in Section 15, Quebec residents have the right to:
Data Portability: Receive your personal information in a structured, commonly used technological format, or request that we transfer it directly to another organization where technically feasible
De-indexing: Request that we cease disseminating your personal information or de-index any hyperlink attached to your name that provides access to information about you, where the dissemination contravenes the law or a court order
Automated Decision-Making: Be informed when a decision affecting you is based exclusively on automated processing, and upon request, be informed of the personal information used to make the decision, the reasons and principal factors that led to the decision, and your right to have the information corrected
Posthumous Rights: Designate a person to exercise your privacy rights after your death
Cross-Border Transfers
Your personal information may be stored and processed in Canada (including outside Quebec) and the United States. Before transferring personal information outside Quebec, we conduct a privacy impact assessment and implement contractual and technical safeguards to ensure your information receives protection equivalent to that provided under Quebec law.
Automated Decision-Making Disclosure
We use automated processing for fraud detection, account management, and service personalization. We do not make decisions with legal or similarly significant effects based exclusively on automated processing without human review.
Commission d'accès à l'information du Québec
If you have concerns about our privacy practices that are not resolved to your satisfaction, you may file a complaint with:
Commission d'accès à l'information du Québec
525, boul. René-Lévesque Est, bureau 2.36 Québec (Québec) G1R 5S9
Telephone: 1-888-528-7741
Website: www.cai.gouv.qc.ca
17. Children's Privacy
The Voltra Services are not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16 years of age. If you are under 16, please do not use the Services or provide any personal information to us.
If we learn that we have collected personal information from a child under 16, we will take steps to delete that information as soon as possible. If you believe that we may have collected personal information from a child under 16, please contact us at privacy@voltra.com.
Parents or guardians who believe that their child has provided personal information to Voltra without their consent may contact us to request that such information be deleted.
For users in jurisdictions where a different age of consent applies for data processing, we comply with the applicable age requirements in those jurisdictions. In the United States, COPPA applies to children under 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent.
18. Updates to the Privacy Policy
We may update this privacy policy periodically to reflect changes to our privacy practices. We encourage you to periodically review this page to ensure you are familiar with those changes. We will indicate at the top of this privacy policy when it was most recently updated.
19. Security Breach Notification
In the event of a security breach affecting your personal information, we will notify you in accordance with applicable law.
How We Will Notify You
If we determine that a breach of security has occurred that is likely to result in a real risk of significant harm to you, we will notify you:
By email to the address associated with your account
By prominent notice on our website
By other means as required by applicable law
Content of Notice
Our notification will include:
A description of the nature of the breach
The types of personal information involved
Steps we have taken or will take to address the breach
Steps you can take to protect yourself
Contact information for further questions
Timing
We will provide notice without unreasonable delay and in accordance with the timeframes required by applicable law:
United States: As required by applicable state breach notification laws (typically within 30-60 days)
Canada: As soon as feasible under PIPEDA
Regulatory Notification
We will also notify applicable regulatory authorities as required by law, including:
The Office of the Privacy Commissioner of Canada for breaches affecting Canadian residents
The Commission d'accès à l'information du Québec for breaches affecting Quebec residents
Subprocessors
A list of our current subprocessors is available at our Trust Center: https://trust.voltra.com
We will update this list as subprocessors change.
Contact
If you have any questions about this Privacy Policy, Cookie Policy, or how your information is handled, you may contact us at support@voltra.com or at our offices:
Voltra Energy Inc.
151 Charles Street West, Kitchener, ON, Canada, N2G 1H6
Voltra Energy US Inc.
713 N Shoreline Boulevard, Mountain View, CA, USA, 94043