Privacy Policy — Boreal Living

Last updated: March 29, 2026

Boreal Living ("we," "us," or "our") operates borealliving.ca (the "Site"). This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit the Site or interact with our newsletter or contact features. It is intended to align with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws where they apply (including Quebec's Act respecting the protection of personal information in the private sector, commonly referred to as Law 25, and Alberta's Personal Information Protection Act).


1. Who we are

Boreal Living publishes home, garden, and lifestyle content for a general audience. We are the organization responsible for the personal information we collect through the Site.

Privacy contact / person responsible for the protection of personal information:

2. Consent

By using the Site, subscribing to our newsletter, or submitting a contact form, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. Where required by law, we will obtain your express consent before collecting, using, or disclosing personal information (for example, before subscribing you to marketing emails). You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us using the coordinates in Section 1.

3. Information we collect

3.1 Usage and technical data

When you browse the Site, our hosting and analytics tools may automatically collect information such as:

  • Pages viewed and referring URLs
  • Approximate geographic region (e.g. country or city derived from IP address)
  • Device type, operating system, screen resolution, and browser type/version
  • Language preference
  • Date, time, and duration of visit
  • Internet Protocol (IP) address (which may be truncated or anonymized where technically feasible)

This information helps us understand readership patterns, diagnose technical issues, and improve Site performance.

3.2 Newsletter sign-ups

If you subscribe to our email list, we collect:

  • The email address you provide
  • The date and time of subscription
  • Your consent record (proof that you opted in)

We use this information only to send the newsletter or related editorial updates you signed up for, unless you separately consent to other communications.

3.3 Contact form

If you use our contact form, we collect:

  • Your name
  • Your email address
  • The subject line (optional)
  • The content of your message

We use this information solely to respond to your inquiry and for related follow-up, if necessary.

3.4 Information from third-party services

When third-party advertising or analytics tools operate on the Site (see Sections 5 and 6), those providers may collect certain technical data directly. We do not merge this third-party data with personally identifiable information you provide to us.

3.5 Information we do not collect

  • We do not require you to create an account to read articles.
  • We do not knowingly collect sensitive personal information (such as health data, biometric information, financial account details, or government-issued identification numbers) through the Site.
  • We do not sell personal information to third parties.

4. Legal bases for processing

We process personal information based on one or more of the following grounds, depending on the context and applicable law:

PurposeLegal basis
Providing and operating the SiteLegitimate interest in running and improving our publication
Sending newslettersYour express consent at the time of subscription
Responding to contact form inquiriesYour implied consent when you submit the form; performance of a requested interaction
Analytics and performance monitoringLegitimate interest in understanding and improving Site usage
Serving advertisementsConsent (where required by law) or legitimate interest in funding free content
Legal complianceCompliance with applicable laws and regulations

5. Cookies and similar technologies

We and our service providers may use cookies, local storage, pixels, web beacons, and similar technologies to:

  • Operate the Site — e.g. remembering preferences, maintaining session state
  • Measure traffic and performance — e.g. page load times, popular content
  • Deliver and measure advertising — e.g. frequency capping, attribution

Types of cookies we may use

CategoryPurposeExamples
Strictly necessaryRequired for core Site functionalitySession cookies, security tokens
Analytics / performanceAggregate usage statistics and speed metricsVercel Analytics, Google Analytics
Advertising / targetingServe relevant ads and measure ad campaignsGoogle AdSense cookies
FunctionalRemember user preferences (e.g. language)Preference cookies

Managing cookies

You can control or delete cookies through your browser settings at any time. Most browsers allow you to view what cookies are set, delete individual or all cookies, block third-party cookies, and block all cookies from specific sites. Disabling certain cookies may affect how features of the Site work. Where required by applicable law (for example, under Quebec's Law 25), we will present a cookie consent mechanism before setting non-essential cookies.

For more information on managing cookies, visit www.allaboutcookies.org.

6. Analytics and performance

We use the following analytics and performance tools to understand how the Site is used:

  • Vercel Analytics — Collects aggregated page-view and visitor data. See Vercel's Privacy Policy.
  • Vercel Speed Insights — Measures real-user performance metrics (e.g. page load speed). See Vercel's Privacy Policy.
  • Google Analytics (when enabled) — Collects usage data including pages visited, session duration, and approximate location. We enable IP anonymization where available. Google may process data according to its own privacy policies. You can opt out by installing the Google Analytics Opt-Out Browser Add-on. See Google's Privacy Policy.

Where possible, we configure these tools to minimize the collection of personally identifiable information and to aggregate or de-identify data.

7. Advertising and affiliate links

7.1 Third-party advertising

The Site may display third-party advertisements, for example through Google AdSense. Advertising partners may use cookies, device identifiers, or similar technologies to show ads that may be more relevant to your interests, limit how often you see an ad, and measure campaign effectiveness. We do not control the data-collection practices of these advertising partners. We encourage you to review Google Ads Privacy & Terms.

You may opt out of personalized advertising by visiting:

7.2 Affiliate links

Some links on the Site are affiliate links. When you click an affiliate link and make a purchase from a third-party retailer, we may earn a commission at no additional cost to you. The retailer may place cookies or use other tracking mechanisms to attribute the sale. We may participate in affiliate programs including the Amazon Associates Program and others listed in our Affiliate Disclosure. Your interactions with retailers are governed by their own privacy policies.

8. How we use personal information

We use the personal information we collect to:

  • Operate, maintain, and improve the Site and our editorial content
  • Send newsletters and editorial updates to subscribers who have opted in
  • Respond to messages and inquiries submitted through our contact form
  • Analyze readership and Site performance, in aggregate or de-identified form where possible
  • Ensure security by detecting, preventing, and addressing technical issues, fraud, or abuse
  • Comply with law, enforce our Terms of Use, and protect the rights, property, and safety of Boreal Living, our users, and the public

9. How we share personal information

We do not sell your personal information. We may share personal information in the following limited circumstances:

9.1 Service providers

We engage trusted third-party service providers who perform functions on our behalf, including:

FunctionProvider(s)
Website hosting and deliveryVercel
Newsletter subscriber storageSupabase (PostgreSQL) when configured; secure on-server JSON fallback otherwise
Contact form email deliveryResend
AnalyticsVercel Analytics, Google Analytics (when enabled)
AdvertisingGoogle AdSense

These service providers are contractually or terms-bound to use personal information only to provide services to us and in accordance with this Privacy Policy and applicable law.

9.2 Legal requirements and protection

We may disclose personal information if we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or enforceable governmental request; enforce our agreements; detect, prevent, or address fraud, security, or technical issues; or protect the rights, property, or safety of Boreal Living, our users, or the public.

9.3 Business transfers

If Boreal Living is involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice before personal information becomes subject to a different privacy policy.

10. International transfers

Our service providers may process or store information in Canada, the United States, or other countries. When personal information is transferred outside Canada, it may be subject to the laws of those jurisdictions. We take steps appropriate in the circumstances to protect your personal information during transfer, including selecting providers with robust practices, contractual safeguards where appropriate, and compliance with cross-border transfer requirements under PIPEDA and provincial legislation.

11. Data retention

We retain personal information only as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data typeRetention period
Usage / analytics dataAggregated and/or anonymized; retained as configured in our analytics tools (typically up to 14–26 months)
Newsletter subscriber dataUntil you unsubscribe or request deletion
Contact form submissionsUp to 24 months after the inquiry is resolved, unless needed longer for legal purposes
Consent recordsRetained as long as needed to demonstrate compliance with applicable consent requirements

When personal information is no longer needed, we will securely delete or anonymize it. Minimal records (e.g. a record that a subscription was removed) may be retained for legal or operational needs.

12. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction, including encryption of data in transit (TLS/SSL), access controls, and secure hosting infrastructure. No method of transmission over the Internet or electronic storage is 100% secure.

If we become aware of a security breach involving personal information that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (or applicable provincial authority) as required by law.

13. Your choices and rights

Depending on your jurisdiction and applicable law, you may have the right to access, correct, delete, or port your personal information; withdraw consent; and file a complaint.

  • Unsubscribe from the newsletter: Click the unsubscribe link in any marketing email, or contact us at support@borealliving.com.
  • Other requests: Email support@borealliving.com with a description of your request. We may need to verify your identity and will respond within the timeframe required by applicable law (generally within 30 days).

If you are not satisfied with our response, you may contact:

  • Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca
  • Commission d'accès à l'information du Québec (CAI): www.cai.gouv.qc.ca (Quebec residents)
  • Office of the Information and Privacy Commissioner of Alberta (OIPC): www.oipc.ab.ca (Alberta residents)
  • Office of the Information and Privacy Commissioner for British Columbia (OIPC): www.oipc.bc.ca (British Columbia residents)

14. Do Not Track signals

Some browsers transmit "Do Not Track" (DNT) signals. There is currently no industry standard for how websites should respond to DNT signals. At this time, the Site does not respond to DNT signals, but you may use the cookie and opt-out controls described in Sections 5 and 7 to manage tracking preferences.

15. Children

The Site is not directed at children under the age of 13 (or such higher age as may be required by applicable law). We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at support@borealliving.com and we will take prompt steps to delete such information.

16. Third-party links

The Site may contain links to third-party websites, products, or services that are not owned or controlled by Boreal Living. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

17. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page, update the "Last updated" date at the top, and, if changes are material, provide additional notice where appropriate (for example, a prominent notice on the Site or a notification in our newsletter). We encourage you to review this page periodically.

18. Governing law

This Privacy Policy and any disputes arising from it shall be governed by the laws of Canada, including applicable federal statutes and the laws of each province and territory to the extent they apply, without regard to conflict-of-law principles.

19. Contact us

Questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

Boreal Living
Email: support@borealliving.com
Mailing address: request by email at support@borealliving.com

This Privacy Policy was last reviewed and updated on March 29, 2026.

This policy is provided for general information and does not constitute legal advice. Have a lawyer review it if you need binding compliance advice for your jurisdiction or business structure.