Privacy Policy

Last updated: August 31, 2026

CanadaNVR handles personal information as part of authenticating coins and maintaining the provenance registry. This policy explains what we collect, how it's protected, and what — if anything — is ever made public.

1. What We Collect

• Order & contact information: name, email, and return shipping address.
• Item information: photographs, physical characteristics, and authenticator notes for each submitted coin.
• Payment information: processed directly by our payment provider; CanadaNVR does not store full card numbers on our own servers.

2. What's Public vs. What's Private

The public verification lookup at canadanvr.ca/verify.html shows only the coin's provenance record — photographs, certificate ID, issue date, and authenticator notes. It never shows your name, email, address, or any other personal contact information. There is no way to search the registry by owner — only by certificate ID.

3. How Your Data Is Secured

• All data in transit between your device and our servers is encrypted (TLS/HTTPS).
• All stored records — order details, personal information, and registry data — are encrypted at rest.
• Access to personal (non-public) submission data is limited to authorized CanadaNVR staff performing authentication or order fulfillment.
• Passwords, where accounts are used, are hashed and never stored in plain text.
• We do not sell personal information to third parties.

4. How Long We Keep It

The public provenance record for an authenticated coin is retained permanently, by design — that permanence is what makes the registry trustworthy over time. Personal order information (name, address, email) is retained only as long as needed to fulfill your order and meet our legal and accounting obligations, then deleted or anonymized.

5. Your Rights

You can request a copy of the personal information we hold about you, request correction of inaccurate personal information, or request deletion of personal information we're not legally required to retain, by contacting us through the address on our homepage. Note that deleting personal order information does not remove the public provenance record itself, which exists independently of your contact details.

6. Cookies & Analytics

We use only the minimum technical storage needed to operate the site (such as remembering a checkout in progress). If analytics are added later, this policy will be updated first.

7. Changes to This Policy

We may update this policy as the Service evolves. Material changes will be reflected here with an updated date.

8. Contact

Privacy questions or data requests can be sent to the contact address listed on our homepage.