YOUR INFORMATION

Privacy Policy

Last updated: October 14, 2026 · Version 2026-10-14-v1

1. Who is responsible

Kardashev Vision Inc., operating as Injury North (“we”, “us”), operates this Ontario marketing and intake service. We are not a law firm, do not provide legal advice and do not decide whether you have a legal claim. This policy covers our website, questionnaire and communications with us about your request.

Our Privacy Officer handles privacy questions, access and correction requests, withdrawal of consent and complaints at privacy@injurynorth.ca. General inquiries go to info@injurynorth.ca. These two addresses are monitored through the same business inbox. A receiving law firm is independently responsible for its own professional services and records.

2. What we collect and why

• Your request: name, phone, email, city, contact preferences, incident date or uncertainty, location and description, accident or fall details, injuries, treatment and lawyer or claim status. We use these details to organize your intake, communicate with you and, with your permission, facilitate review by an identified Ontario personal injury lawyer or law firm.
• Submission evidence: a reference number, receipt time, the acknowledgement wording and versions accepted, policy versions, administrative review flags and delivery status. These support reliable receipt, follow-up, consent records and handling of privacy requests. Flags do not decide legal eligibility or deadlines.
• Campaign identifiers: if your link includes supported campaign tags, we associate them with your submitted request to understand which campaign brought the inquiry. We do not send your answers to an advertising platform.
• Communications: information you choose to provide when asking questions or requesting help. We use it to respond, resolve the issue and maintain necessary records.
• Technical information: our providers process network information such as IP addresses to deliver and protect the website. Our application logs contain limited operational metadata, such as request identifiers, response status and timing. We do not deliberately record questionnaire answers in application logs.

Provide only what is needed for an initial intake. Do not include health card or social insurance numbers, financial account details, identity documents or full medical files. Avoid identifying other people unless necessary and you have authority to disclose their information. There is no document-upload feature.

3. Your decision to submit

You can browse without completing the questionnaire. Before sending, you can review and edit your answers, read this policy and the Terms of Use, and choose the acknowledgements. All boxes start unchecked. The optional select-all control changes the same six visible boxes; it does not submit the form or add any advertising permission.

Submitting authorizes the intake processing explained here, including processing sensitive information about injuries and treatment. The requested intake cannot be handled without that information and permission. Contact us before submitting if you want to discuss a less detailed way to make an inquiry. Contact permission concerns this request, not newsletters or unrelated promotions. We take your selected communication preference into account.

For a child’s request, a request on someone else’s behalf, or where someone needs help understanding and authorizing this processing, contact us first using only contact details. We will establish the appropriate authority and consent before collecting sensitive information through that route.

4. Who receives your information

Injury North: at this initial launch, the operator receives and organizes submissions. A submission is not automatically delivered to a lawyer. Access is limited to people who need the information to perform the stated intake, support or privacy functions.

A lawyer or law firm: before disclosing your request, we will tell you the proposed firm’s identity and purpose and obtain and record your permission. You may decline or choose a lawyer independently. We do not distribute your questionnaire to an undisclosed list of firms. A firm that receives information may need its own consent, conflict checks and engagement agreement, and may have separate retention duties.

Service providers: Amazon Web Services hosts the site and intake database and sends notifications through Amazon Simple Email Service. The complete intake notification is delivered to the operator’s Microsoft Outlook.com inbox. Namecheap Private Email handles messages to our public contact addresses. These services necessarily process information to perform their functions. We remain responsible for information under our control when using providers.

Required or permitted disclosures: we may disclose the necessary information where law requires or permits it, for example in response to a binding legal demand or to address a security incident. We assess the basis and scope of such a disclosure rather than treat this policy as unlimited permission.

We do not sell submissions to data brokers, use injury details to build advertising audiences or share them for unrelated marketing.

5. Storage location and security

The primary intake database and its configured recovery backups are in AWS’s Canada (Central) region. CloudFront website delivery, email routing, Microsoft and Namecheap email systems, and provider support can involve the United States and other countries. Information processed abroad may be accessible under those countries’ laws. Canadian database storage is not a promise that every copy stays in Canada.

The website uses HTTPS; database storage is encrypted; AWS administration requires authenticated access; and automated notifications go to a fixed recipient list rather than visitor-selected destinations. We restrict access and avoid unnecessary copies. Email is not a confidential client portal, and neither email nor internet systems can be guaranteed free of interception, misdelivery or unauthorized access. Use a contact address and device you can access privately. Do not send further medical documents by ordinary email unless an appropriate arrangement has been made.

If a breach occurs, we assess and contain it, keep the required records and notify affected people and regulators when required by applicable law.

6. Cookies, browser state and campaign tags

This website does not install advertising pixels, behavioural analytics, session replay or tracking cookies. It does not save questionnaire answers in localStorage or sessionStorage. Answers remain in the open page’s memory until you leave, refresh or receive a confirmed submission receipt; an attempted request is kept there for safe retries. Browser autofill, history, device backups or extensions are controlled by your browser and device.

We carry only supported short campaign identifiers—utm_source, utm_medium, utm_campaign and utm_content—through internal navigation and include them with a submitted request. Tags can remain in browser history because they are part of the link. We do not intentionally put questionnaire answers in URLs. If we introduce optional tracking later, we will update the notice and provide any required choice before enabling it.

7. How long we keep information

• Routine intake database records: scheduled to expire 90 days after receipt. Expired records are no longer eligible for automated notification or receipt retry; physical removal by the database service normally follows within a few days.
• Routine intake emails and working copies: reviewed monthly and removed from operator-controlled mail folders, exports and downloads when no longer needed, no later than 120 days after receipt unless an exception below applies. We use the available trash and recovery deletion controls; providers may retain residual recovery, backup or legally required copies beyond our deletion.
• Recovery and operational records: database recovery backups roll off within a maximum 35-day window; operational logs are retained for 30 days and notification failure-queue records for up to 14 days. Restored data is checked against deletion and preservation records before being put back into use.

We may preserve necessary information longer for active follow-up, an access or correction request, a complaint, a specific dispute or a legal preservation requirement. We document the reason, restrict access and review continued need. Information subject to an access request is preserved while the applicable recourse remains available. Required breach records are kept for at least 24 months after we determine that the breach occurred. These exceptions do not authorize indefinite retention of every questionnaire.

A receiving firm’s records are governed by its own obligations and policy. Ask us or the firm if you need details about a particular copy.

8. Access, correction, withdrawal and complaints

Write to privacy@injurynorth.ca with your request and, if available, your submission reference. Please do not repeat medical details or send identity documents in your first message. We verify identity and authority using information proportionate to the request before releasing or changing records.

You may ask what information we hold, how it has been used or disclosed, request access, challenge its accuracy, request correction or deletion, or withdraw consent to future processing. We respond to access requests generally within 30 days; if a lawful extension or exception applies, we explain it and your available recourse. Where appropriate, corrections are passed to recipients of the inaccurate information.

Withdrawal may prevent us from continuing the intake or arranging a lawyer review. It does not undo a disclosure already made, and some information may need to be preserved for the reasons above. We explain any limitation rather than assume that a deletion request can always be fulfilled immediately.

Our Privacy Officer will investigate privacy complaints. You may also contact the Office of the Privacy Commissioner of Canada. Nothing here removes your rights under applicable privacy law.

9. Changes to this policy

We publish the current version and date here. Material new uses or disclosures will be explained before they begin, and we obtain fresh consent where required. Posting a changed policy does not retroactively authorize an unrelated use of information already collected.