Privacy Policy

Last updated: October 13, 2026

Overview

The Canadian Offset Registry (“COR”, “we”, “us”) is a free public directory of habitat offset and habitat banking projects in Canada. This policy explains what information we collect, how we use it, and the choices you have. We aim to collect only what we need to run the registry.

COR is operated by AJM Environmental Inc., a private Canadian company based in Alberta. This policy is written in line with the principles of Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

We collect the following information:

Account information. When you create an account, we collect your email address and a hashed password (we never see your actual password). Authentication is handled by Supabase.
Listing submissions. If you list an offset, we collect the information you enter on the form, including organization name, contact name, contact email, phone number, project description, location (map boundary or pin), photos, and supporting documents.
Contact-request and contact-form information.When you ask an offset provider for their contact details via the “Request Contact Details” button, or submit our general contact form, we collect your name, email, message, and the listing or topic involved.
Questions about a listing.When you use “Ask COR about this project” on a listing, we collect your name, email, organization (optional), message, and the listing involved. These go to the COR team only and are never shown to the organization named on the listing unless you agree.
Offset needs. If you post an offset need, we collect what you tell us (habitat type, quantity, location, timeframe, regulatory driver, project stage, budget range, organization and contact details), your visibility choice, and when you agreed to our terms. The COR team sees all of it. The public sees only what your visibility choice allows: totals by area on the demand map, or a listing with a general area and a quantity range. Contact details, budget and exact location are never published, and we ask for your consent before sharing your identity with anyone.
Expressions of interest and offers of help. If you tell us what habitat work you could deliver, or offer to help with a listed need, we collect what you tell us, your organization and contact details, and when you agreed to our terms. Only the COR team sees it. It is never published, and the proponent of a need is not told about your offer unless both of you agree to an introduction.
Email updates. If you sign up for updates (for example about Bill C-39), we store your email address, the topic, the wording you agreed to and when you agreed, and when you confirmed. Every update includes a link to unsubscribe, and you can unsubscribe at any time.
Introductions.When the COR team thinks a proponent and an offset provider could work together, we keep a private record of the introduction: which need and which project or expression of interest it involves, each party's answer and when they gave it, the emails we sent, and the team's internal notes. Only the COR team sees it.

We do not use third-party advertising trackers, analytics that profile you, or social sharing widgets that collect data when you load a page.

How we use it

To display listings and, with the consent of both parties, introduce proponents and offset providers.
To answer questions about listings.
To send the email updates you signed up for, and only those.
To review and approve submissions before they appear publicly.
To process and respond to your contact requests and contact-form messages.
To send transactional emails (e.g., when a contact request is approved, when a new listing is submitted for review).
To prevent abuse and maintain the security of the site.

We do not sell, rent, or share your personal information with third parties for marketing.

What is public on the site

Listings are public by design. The project title, description, location, habitat and offset types, organization name, and uploaded photos are visible to anyone visiting the site.

Contact details (name, email, website) are public onlyif the lister explicitly checks “Show my contact details publicly on this listing.” Otherwise they are private, and interested parties must request access, and each request is reviewed by us before being shared.

Phone numbers are never displayed publicly. We collect them so we can follow up with you about your listing if needed.

How introductions work

Proponents and offset providers can contact each other directly through public listings. When the COR team makes an introduction instead, it does so by hand. Before anyone's identity is shared, we ask each side by email, starting with the proponent. Until both have said yes, each side sees only a general description of the other: the type of habitat, the province, a rough size and timing. Never a name, an organization, contact details or an exact location.

Only when bothparties have agreed do we send each of them the other's name, organization and contact details, and only to each other. If either side says no, nothing is shared and the other side is not told who declined. Each answer link works once and expires after 30 days.

After an introduction, the two parties deal with each other directly. COR does not hold funds, take part in any agreement or decide whether an offset meets a regulatory requirement.

Third-party processors

To operate the site we use a small number of trusted service providers. Each only processes information that's necessary for the service it provides:

Vercel (USA): web hosting and content delivery.
Supabase (USA, hosted in Canada): database, authentication, and file storage.
Mapbox (USA): map tiles and geocoding (lookups of place names from coordinates).
Resend (USA): transactional email delivery.

Some processing happens in the United States. By using the site, you understand your information may be stored or processed in jurisdictions outside Canada and subject to local laws.

Cookies and similar technology

We use the minimum set of cookies needed to operate the site: a session cookie to keep you signed in when you have an account, and short-lived cookies used by Supabase authentication. We do not use tracking, advertising, or third-party analytics cookies.

How long we keep information

Listings: until the offset provider removes them or asks us to.
Account records: until you delete your account or ask us to.
Contact-form messages and contact requests: typically kept for up to two years for support and audit purposes, then deleted.

Your rights

Under PIPEDA, you have the right to:

Access the personal information we hold about you.
Ask us to correct information that's inaccurate or incomplete.
Withdraw your consent and ask us to delete your account or listings.
Make a complaint to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

To exercise any of these rights, contact us via the contact form or email info@ajmenv.com. We will respond within 30 days.

Children

COR is not directed at children under 13, and we do not knowingly collect information from anyone under that age.

Security

We protect your information using industry-standard practices: HTTPS encryption in transit, encryption at rest at our database provider, hashed passwords, signed upload URLs for file uploads, and access controls on the admin area. No service is perfectly secure, however, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy as the registry evolves. The “Last updated” date at the top will change when we do. For material changes we'll make it visibly clear on the site.

Contact

Privacy questions or requests: email info@ajmenv.com or use the contact form.

This page is provided for general information. It is not legal advice. Specific privacy questions about your situation should be directed to a qualified Canadian privacy lawyer.