Privacy Policy

Last updated: June 8, 2026

Overview

The Canadian Offset Registry (“COR”, “we”, “us”) is a free public directory of habitat offset and habitat banking projects in Canada. This policy explains what information we collect, how we use it, and the choices you have. We aim to collect only what we need to run the registry.

COR is operated by AJM Environmental Inc., a private Canadian company based in Alberta. This policy is written in line with the principles of Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

We collect three categories of information:

  • Account information. When you create an account, we collect your email address and a hashed password (we never see your actual password). Authentication is handled by Supabase.
  • Listing submissions. If you list a project, we collect the project information you enter on the form, including organization name, contact name, contact email, phone number, project description, location (map boundary or pin), photos, and supporting documents.
  • Contact-request and contact-form information.When you ask a project holder for their contact details via the “Request Contact Details” button, or submit our general contact form, we collect your name, email, message, and the listing or topic involved.

We do not use third-party advertising trackers, analytics that profile you, or social sharing widgets that collect data when you load a page.

How we use it

  • To display listings and connect interested parties with project holders.
  • To review and approve submissions before they appear publicly.
  • To process and respond to your contact requests and contact-form messages.
  • To send transactional emails (e.g., when a contact request is approved, when a new listing is submitted for review).
  • To prevent abuse and maintain the security of the site.

We do not sell, rent, or share your personal information with third parties for marketing.

What is public on the site

Listings are public by design. The project title, description, location, habitat and offset types, organization name, and uploaded photos are visible to anyone visiting the site.

Contact details (name, email, website) are public onlyif the lister explicitly checks “Show my contact details publicly on this listing.” Otherwise they are private, and interested parties must request access, and each request is reviewed by us before being shared.

Phone numbers are never displayed publicly. We collect them so we can follow up with you about your listing if needed.

Third-party processors

To operate the site we use a small number of trusted service providers. Each only processes information that's necessary for the service it provides:

  • Vercel (USA): web hosting and content delivery.
  • Supabase (USA, hosted in Canada): database, authentication, and file storage.
  • Mapbox (USA): map tiles and geocoding (lookups of place names from coordinates).
  • Resend (USA): transactional email delivery.

Some processing happens in the United States. By using the site, you understand your information may be stored or processed in jurisdictions outside Canada and subject to local laws.

Cookies and similar technology

We use the minimum set of cookies needed to operate the site: a session cookie to keep you signed in when you have an account, and short-lived cookies used by Supabase authentication. We do not use tracking, advertising, or third-party analytics cookies.

How long we keep information

  • Listings: until the project holder removes them or asks us to.
  • Account records: until you delete your account or ask us to.
  • Contact-form messages and contact requests: typically kept for up to two years for support and audit purposes, then deleted.

Your rights

Under PIPEDA, you have the right to:

  • Access the personal information we hold about you.
  • Ask us to correct information that's inaccurate or incomplete.
  • Withdraw your consent and ask us to delete your account or listings.
  • Make a complaint to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

To exercise any of these rights, contact us via the contact form or email info@ajmenv.com. We will respond within 30 days.

Children

COR is not directed at children under 13, and we do not knowingly collect information from anyone under that age.

Security

We protect your information using industry-standard practices: HTTPS encryption in transit, encryption at rest at our database provider, hashed passwords, signed upload URLs for file uploads, and access controls on the admin area. No service is perfectly secure, however, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy as the registry evolves. The “Last updated” date at the top will change when we do. For material changes we'll make it visibly clear on the site.

Contact

Privacy questions or requests: email info@ajmenv.com or use the contact form.

This page is provided for general information. It is not legal advice. Specific privacy questions about your situation should be directed to a qualified Canadian privacy lawyer.