This policy describes how Iguane Media Inc. processes the personal information of visitors and account holders. Commercial rules (Services, Attribution, credits, fees, indices) are set out in the Terms of Use, the Terms and Conditions — Experts, and the Terms and Conditions — Publishers. In the event of a conflict about processing necessary for a Service, the applicable role terms specify the operational framework; this policy describes the processing of personal information.
Controller
Iguane Media Inc., a corporation constituted under the federal laws of Canada, registered in the Québec enterprise register under NEQ 1165016511, 916, av. Aimé-Bibeau, Laval (Québec), Canada.
Person responsible for the protection of personal information: Nicolas Estor.
Email: support@buylined.com
Scope
This policy applies to:
- –consultation of the public pages of the site;
- –the opening and use of an account;
- –use of the Platform as an Expert or a Publisher.
It applies to persons located in Canada, the United States, the European Union, the United Kingdom, Switzerland, and any other country from which the Platform is used.
It does not govern third-party sites, including Stripe, Wise, PayPal, Google, or Publishers’ sites on which an Attribution is published.
Data collected
We collect only what is necessary for the purposes in article 4.
3.1Visitors to public pages.
Technical identifiers (IP address, device and browser type, pages viewed, traffic source), cookies and, where applicable, advertising identifiers, through audience-measurement tools and pixels that may be present on those pages. None of these tools is deployed inside the Platform once you are signed in.
3.2Account.
Email address, password (stored in a secure form) or Google sign-in identifiers, name, language, sign-in log, support messages and tickets.
3.3Expert.
Profile information (professional identity, photo, biographies, field of expertise, years of experience, social profile URLs, declared follower counts).
An identity document and a selfie showing the date of the day, solely for identity verification.
Billing, tax-residence, and wallet data: see the Terms and Conditions — Experts, articles 15 and 16.
Data related to the Services (offers, orders, Validation, Certification, Contribution, social share): see the Terms and Conditions — Experts.
3.4Publisher.
Account and billing information, declared sites, site-verification file, orders, submitted Content, publication URLs provided, credit balance.
Credit-payment data: collected by Stripe; Buylined does not receive the full card number.
TRUSTEDITOR index: see the Terms and Conditions — Publishers, article 14, and the published methodology.
3.5Data from third parties.
Google sign-in: the identifiers Google transmits to us (generally email, name, identifier).
Payments and withdrawals: transaction confirmation transmitted by Stripe, Wise, or PayPal.
We do not collect social-network audience data by API. Follower counts are declared by the Expert and verified manually by Buylined.
Purposes
- –Provide the site and the Platform, create and secure the account, authenticate access.
- –Verify the Expert’s identity, then destroy the documents (article 8).
- –Make Expert profiles available only to Publishers whose site has been approved.
- –Perform the Services, including Validation, Certification, Attribution and, after Validation, making the Author Kit available to the identified Publisher — see Terms and Conditions — Experts, articles 4, 6 and 18, and Terms and Conditions — Publishers, articles 6, 8 and 18.
- –Process credits, collections, and withdrawals — see the applicable role terms.
- –Assign and operate TRUSTEXPERT and TRUSTEDITOR according to the published methodologies.
- –Provide support, handle complaints and requests relating to rights.
- –Prevent fraud, abuse, and security incidents.
- –Comply with legal obligations (tax, accounting, retention, incidents).
- –Measure audience on public pages and, where applicable, run advertising campaigns on those pages.
- –Send the transactional emails necessary for the service, and informational or reminder emails (new Experts, an invitation to sign in again), under the conditions in article 10.
We do not use identity documents for any purpose other than verification. We do not use automated facial recognition.
Consent and legal bases
In Québec, information is collected for the purposes determined above, with your consent where the law requires it. Consent to an Attribution is express, specific, and time-stamped — Terms and Conditions — Experts, article 6.
Processing strictly necessary for the account, the contract, and the law (performance of the Services, billing, tax, security, legal retention) may be carried out without separate consent.
Identity documents and the selfie are subject to express consent.
Non-essential cookies and pixels on public pages, and informational or reminder emails, rest on consent where applicable law requires it. You may withdraw it at any time, without affecting the lawfulness of prior processing.
Where the GDPR or the UK GDPR applies, the bases are, depending on the processing: performance of the contract (account, Services, payments); legal obligation (tax, retention, incidents); legitimate interest (security, fraud prevention, support, limited service improvement); consent (marketing, non-essential cookies, pixels, identity documents).
Who has access
The information is accessible to the people at Iguane Media Inc. who need it.
It is not made public.
It is disclosed only:
- –to Publishers whose site has been approved, for Expert catalogue profiles (the catalogue is not accessible to the public, to visitors, or to unauthorized accounts);
- –to the Publisher identified in the order, for the Author Kit, after Validation — Terms and Conditions — Experts, article 18, and Terms and Conditions — Publishers, articles 8 and 18;
- –to the following processors, for the purposes indicated only:
| Provider | Role | Principal location |
|---|---|---|
| Vercel | Hosting of the Platform | United States |
| Stripe | Purchase of credits | United States |
| Wise | Withdrawals by transfer | According to the transaction |
| PayPal | Withdrawals | According to the transaction |
| Account sign-in; where applicable, audience measurement or advertising on public pages | United States |
An internal transfer of credits to a Publisher wallet on the Platform involves no external payment processor.
We do not sell personal information. We do not disclose it for third-party prospecting. An authority may have access if the law requires it.
Transfers outside Québec and Canada
Data is hosted in the United States (Vercel). Stripe, Google, Wise, and PayPal may also process data outside Québec, outside Canada, and where applicable outside the European Union.
These transfers are necessary for the operation of the Platform. Buylined ensures, to the extent required by law, that the information benefits from adequate protection, including through contractual and organizational measures.
Retention
- Identity document and selfie
- destroyed as soon as identity is verified. They are not archived.
- Account, profile, billing, Services
- duration of the relationship, then statutory retention periods (including tax, accounting, and evidential), in accordance with the applicable role terms, article 18.
- Tickets and correspondence
- duration of the relationship, then applicable statutory periods.
- Cookies on public pages
- the period set by the tool concerned, limited to what is necessary.
- Data of a closed account
- what is no longer needed is deleted or anonymized; what the law requires to be kept is kept for the prescribed period only.
Closing the account does not allow you to require the erasure of an Attribution already published under the role terms; removal of the name follows article 9 of the Expert / Publisher terms.
Visibility of profiles
No profile is public.
Access to the Expert catalogue requires, for the Publisher: confirmation of the email address, acceptance of the Terms and Conditions — Publishers, addition of a site, deposit of the verification file, and approval of the site by Buylined.
Until those steps are completed, the Publisher has access neither to the catalogue nor to the profiles.
The Author Kit is provided only after Validation, to the Publisher on the order, for the Content and the site indicated.
Emails
Transactional — necessary for the service (account, order, Validation, Certification, withdrawals, Attribution-removal requests, security). They do not require separate consent.
Information and reminders — including availability of new Experts and an invitation to sign in again. They are sent with the consent required by applicable law (including Canada’s Anti-Spam Legislation). Each message includes a way to unsubscribe. Unsubscribing does not affect transactional emails.
Cookies and public pages
Inside the Platform: only the cookies necessary for the session, authentication, and security. No audience-measurement tool, no advertising pixel.
On public pages: cookies and trackers for audience measurement and, where applicable, third-party advertising pixels. Where the law requires it, a consent mechanism is presented before non-essential cookies are placed. You may withdraw it through that mechanism or your browser settings.
The cookies actually used are described on the site.
Security
Buylined implements reasonable measures (access control, encrypted transmission, destruction of identity documents after verification). No system is infallible.
Your rights
Subject to applicable law, you may:
- –access your information;
- –have it corrected;
- –withdraw your consent where the processing is subject to it;
- –request that dissemination cease or that information be de-indexed in the cases provided by law;
- –object to processing or request its restriction, where the GDPR applies;
- –request portability, where the GDPR applies;
- –request erasure, subject to legal retention and Attributions already granted.
How: email to support@buylined.com, or a ticket on the Platform.
Time limit: seven days from receipt of the request, together with elements that make it possible to identify you.
Withdrawal of consent to an Attribution already granted follows article 9 of the Terms and Conditions — Experts and the Terms and Conditions — Publishers; it does not replace this policy.
You may lodge a complaint with the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada, or, if the GDPR or the UK GDPR applies, with the authority of your place of residence.
Under eighteen
The Platform is reserved for adults. We do not knowingly collect information from minors. If such a case is reported to us, the data is deleted.
Incidents
In the event of a confidentiality incident presenting a risk of serious harm, Buylined notifies the persons concerned and the competent authority, under the conditions provided by law.
Amendments
Any substantial amendment is notified by email or by a notice on the Platform. The version in force is the one published at the time of the processing. The date appears at the head of the document.
Contact
Iguane Media Inc.
Nicolas Estor, person responsible for the protection of personal information
916, av. Aimé-Bibeau, Laval (Québec), Canada
support@buylined.com
A ticket on the Platform, if you have an account.
A French version was made available. If an English version is published, it is published for the same information. In the event of a discrepancy, the French version prevails for persons in Québec, unless you chose to conclude in English.