Last updated: May 6, 2026
This Privacy Policy is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable laws of the Province of Alberta.
NPPE Preparation ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your personal information. By using our Services at https://www.nppepreparation.com, you consent to the practices described in this Policy.
NPPE Preparation is a sole proprietorship operating in the Province of Alberta, Canada. We provide an independent online NPPE exam preparation service. For privacy-related inquiries, contact us at administration@nppepreparation.com.
We collect the following categories of personal information:
Account Information: Your name and email address, collected when you create an account through our authentication provider (Clerk). Your password is hashed and stored securely by Clerk — we never see your plain-text password.
Payment Information: Your payment is processed by Stripe, Inc. We receive only a transaction confirmation and a Stripe payment identifier. We never see, store, or process your credit card number, CVV, or full payment details.
Device and Technical Information: Device fingerprint hashes (a privacy-preserving cryptographic representation of your browser and device combination), IP addresses at the time of login, session timestamps, and browser type. This information is collected for security purposes to enforce our individual use license.
Usage Information: Pages visited within our Services, tabs accessed, and general interaction patterns. We do not log individual answers submitted during practice examinations on our servers — answer selections are processed in your browser session only.
Communication Records: Emails you send to us and our responses, retained for customer service purposes.
We collect and use your personal information only for the following purposes:
(a) To provide and administer your access to our Services, including verifying your identity and your active subscription;
(b) To process your payment and maintain transaction records for accounting and tax purposes;
(c) To send you transactional emails, including purchase confirmations, access expiry reminders, and service notifications;
(d) To detect, investigate, and prevent unauthorized account sharing, fraud, and abuse of our Services;
(e) To respond to your questions, support requests, and communications;
(f) To comply with our legal obligations under applicable Canadian law;
(g) To improve and maintain our Services.
We do not use your personal information for any purpose beyond what is described above without your prior consent.
We process your personal information on the following legal bases under PIPEDA: (a) Your consent, given at the time of account creation and purchase; (b) The performance of our contract with you (providing the Services you purchased); (c) Our legitimate interests in operating a secure and fraud-free service; and (d) Compliance with applicable legal obligations, including tax and accounting requirements. You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us at administration@nppepreparation.com. Note that withdrawing consent may affect our ability to provide Services to you.
We share your personal information only with the following third-party service providers who assist us in operating our Services. Each provider is contractually bound to protect your information and use it only for the purposes we specify:
Clerk, Inc. (authentication and account management) — clerk.com — United States
Stripe, Inc. (payment processing) — stripe.com — United States
Supabase, Inc. (database hosting and storage) — supabase.com — may be hosted in the United States or Canada
Resend, Inc. (transactional email delivery) — resend.com — United States
Vercel, Inc. (website hosting and infrastructure) — vercel.com — United States
Cloudflare, Inc. (security, DNS, and content delivery) — cloudflare.com — United States
All providers located in the United States are subject to US laws including the USA PATRIOT Act, which may allow US government authorities to access your data in certain circumstances. By using our Services, you consent to the transfer of your information to these providers and to the jurisdictions in which they operate.
We do not sell, rent, trade, or otherwise disclose your personal information to any third party for marketing, advertising, or commercial purposes.
We use the following types of cookies and tracking technologies:
Essential cookies: Required for authentication and session management, provided by Clerk. These cannot be disabled without affecting your ability to log in.
Analytics: We use Cloudflare Web Analytics, which is privacy-preserving and does not use personally identifiable cookies or track individuals across websites.
We do not use advertising cookies, third-party tracking pixels, or any cross-site tracking technologies. We do not participate in any advertising networks.
We retain your personal information for the following periods:
Account information: For as long as your account remains active, plus 7 years after account closure for tax and accounting compliance.
Payment and transaction records: 7 years from the date of transaction, as required by the Income Tax Act (Canada) and the Excise Tax Act (Canada).
Device fingerprint hashes: 12 months after your access period expires.
Email communications: 3 years from the date of communication.
When retention periods expire, we securely delete or anonymize your personal information.
We implement appropriate technical and organizational security measures to protect your personal information, including: encryption of data in transit using TLS; encryption of data at rest in our database; access controls limiting which systems and personnel can access personal information; device fingerprinting and session monitoring to detect unauthorized access; and regular review of our security practices. No security measure is 100% effective. In the event of a data breach that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required under PIPEDA.
Under PIPEDA and applicable Alberta privacy law, you have the following rights:
Right of access: You may request a copy of the personal information we hold about you.
Right to correction: You may request that we correct inaccurate or incomplete personal information.
Right to withdraw consent: You may withdraw your consent to our processing of your personal information at any time, subject to legal and contractual restrictions.
Right to complain: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you believe we have not handled your personal information in accordance with PIPEDA.
To exercise any of these rights, please contact us at administration@nppepreparation.com. We will respond within 30 days of receiving your request.
Our Services are intended for adults who are pursuing professional engineering or geoscience licensure in Canada. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected information from a minor, we will delete it promptly. If you believe we have inadvertently collected information from a minor, please contact us at administration@nppepreparation.com.
Our Services may contain links to third-party websites, including the websites of professional regulators and engineering organizations. We are not responsible for the privacy practices of these websites. We encourage you to review the privacy policies of any third-party sites you visit.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. We will notify registered users by email of material changes at least 30 days before they take effect. The date of the most recent update is displayed at the top of this page. Your continued use of our Services after the effective date of changes constitutes your acceptance of the updated Policy.
For privacy-related questions, access requests, correction requests, or complaints, please contact us:
NPPE Preparation
Email: administration@nppepreparation.com
Website: https://www.nppepreparation.com
We are committed to resolving privacy concerns promptly and will respond to all inquiries within 30 days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376 or priv.gc.ca.