NurtureLoop

Privacy Policy

Version 1.0  |  Effective Date: September 14, 2026

NurtureLoop Technologies Inc. (“NurtureLoop,” “we,” “us,” or “our”) operates an online technology marketplace connecting childcare centres and Early Childhood Educators through the NurtureLoop website, applications and related services (collectively, the “Platform”).

This Privacy Policy explains how NurtureLoop collects, uses, discloses, stores, protects and otherwise handles personal information. NurtureLoop is based in Alberta and handles personal information in accordance with applicable privacy law, including Alberta’s Personal Information Protection Act where applicable.

1. Privacy Principles

NurtureLoop seeks to collect personal information only for reasonable and legitimate purposes, limit collection to information reasonably necessary for those purposes, explain collection purposes, obtain consent where required, restrict access according to legitimate need, protect information with reasonable safeguards, retain information only as long as reasonably necessary or legally required, and provide access and correction rights as required by law.

2. Account and Profile Information

We may collect legal and preferred names, contact information, account type, authentication information, profile photographs, account status, communication preferences, Platform activity, verification information and other information reasonably required to establish and administer an account.

For Educators, we may also collect professional biography, ECE certification and level, education, training, employment history, childcare experience, age-group experience, skills, strengths, teaching philosophies, languages, availability, preferred work locations, travel preferences, permanent-employment preferences, desired wage, start date, résumé, cover letters, references, ratings and reviews.

3. Professional Credentials

We may collect Alberta ECE certification information, Standard First Aid information, issue and expiry dates, credential issuer information, verification results and other credential information reasonably necessary for Platform eligibility, credential verification, expiry reminders, staffing due diligence and Platform integrity.

A verification indicator is an administrative result and does not guarantee character, competence, suitability or future behaviour.

4. Police Information and Vulnerable-Sector Documentation

Where required or permitted for Platform eligibility, we may collect or process Police Information Check and Vulnerable Sector Search documentation, issuing service, issue date, identifying information necessary to match the document to the Educator, verification status, review date, renewal information and internal verification notes.

This information is sensitive and is not publicly available. Access is restricted to authorized personnel and systems with a legitimate need. Complete police or vulnerable-sector documents are not automatically made available to Centres merely because a Centre can view an Educator profile.

NurtureLoop seeks to minimize retention of full sensitive documents and will securely delete or otherwise dispose of them when retention is no longer reasonably necessary or legally required, in accordance with its internal retention schedule.

5. Centre Information

We may collect Centre legal and operating names, business address, contact information, childcare licence information, director or administrator information, authorized team-member information, staffing needs, Shift and Permanent Job postings, subscription and payment status, correspondence, applicant-management activity, ratings, reviews, complaints and other information reasonably required to operate Centre functionality.

6. Shift, Application and Work Information

We may collect Shift postings, applications, invitations, bookings, acceptances, cancellations, attendance, scheduled and actual hours, clock-in/out records, approved hours, timesheets, work history, compensation information displayed in opportunities, applicant status, interview or hiring status, Permanent Job applications, résumés, cover letters and related communications.

A Centre may access work information relating to work performed at that Centre. An Educator may access their own consolidated work history. Unrelated Centres are not intended to receive an Educator’s work history at other Centres.

7. Messages and Communications

We may process Platform messages, support requests and other communications. Private messages are not intended for unrestricted staff browsing. Authorized personnel may access or preserve communications where reasonably necessary for user-requested support, child-safety concerns, serious complaints, fraud or security investigations, legal compliance, Platform enforcement or lawful legal process. Access should be limited and controlled.

8. Ratings, Reviews, Safety and Complaint Information

We may collect ratings, reviews, moderation information and records concerning child-safety concerns, misconduct allegations, unsafe conditions, harassment, discrimination, threats, violence, suspected abuse or neglect, credential fraud, non-payment, timesheet disputes, account misuse or security concerns.

Where reasonably possible, records should distinguish allegations or reported information from verified information or final findings made by an appropriate authority. Such information may be used for Platform safety, investigations, account restrictions, legal compliance and protection of Users.

9. Technical Information

Our systems and service providers may automatically collect IP address, device and browser information, operating system, login and session information, security and error logs, referral information, pages or features accessed, approximate location derived from network information, cookie identifiers and similar technical information for authentication, security, fraud prevention, troubleshooting, analytics and Platform performance.

10. Cookies and Similar Technologies

NurtureLoop and its service providers may use cookies, local storage and similar technologies for login, authentication, security, sessions, preferences, fraud prevention, analytics and performance. If materially different advertising or tracking technologies are introduced, this Policy and any required consent mechanisms will be updated.

11. Purposes of Use

We may use personal information to create and administer accounts; verify identity and credentials; manage Centre eligibility; display appropriate profile information; connect Centres and Educators; facilitate applications, invitations, bookings and Permanent Jobs; enable messaging; generate timesheets and monthly reports; provide notifications and credential reminders; administer reviews; provide support; administer subscriptions; prevent fraud and abuse; investigate complaints; protect children and Users; enforce agreements; maintain cybersecurity; perform analytics; troubleshoot and improve services; comply with law; and establish, exercise or defend legal rights.

12. Consent and Withdrawal

Where consent is required, NurtureLoop may obtain it electronically, in writing, through an affirmative checkbox or another legally recognized method appropriate to the sensitivity and purpose of the information.

Where NurtureLoop relies on consent, an individual may withdraw consent subject to reasonable notice, legal restrictions, contractual requirements and lawful retention or processing grounds. Withdrawal may affect access to features that reasonably require the information, such as Shift functionality requiring verified credentials.

13. Information Shared with Centres

Depending on Platform functionality and an Educator’s actions, authorized Centres may receive profile and professional information reasonably relevant to staffing or employment, including name, photograph, biography, ECE level, verification indicators, experience, skills, languages, availability, employment preferences, résumé, position-specific cover letter, ratings, reviews and relevant work information with that Centre.

Sensitive credential documents are not intended to be automatically exposed in full to every Centre. Access and disclosure should be limited to legitimate staffing, employment, verification, safety and legal purposes.

14. Information Shared with Educators

Educators may receive Centre information reasonably necessary to evaluate or perform an opportunity, including Centre name, location, contact information, Shift or job details, compensation information, schedules, ratings or reviews and relevant operational instructions. Information concerning individual children should be provided only where reasonably necessary for legitimate care and safety purposes.

15. Children’s Information

NurtureLoop is not designed as a child-record-management platform and does not intend to create general child profiles or collect information directly from children. Users should not enter unnecessary child-identifying, medical or other sensitive information into public profiles, reviews, job postings or ordinary messages.

Limited information relating to a child may be processed where reasonably necessary in connection with a serious incident, safety complaint, support matter, legal obligation or similar legitimate purpose. NurtureLoop seeks to limit such processing to what is reasonably necessary.

16. Employment-Related Information

Certain information processed through NurtureLoop may relate to establishing, managing or terminating employment relationships between Centres and Educators. NurtureLoop will use the legal basis appropriate to the particular information and purpose, including consent where required. NurtureLoop does not assume that every employment-related record is personal employee information of NurtureLoop.

17. Service Providers and Processing Outside Canada

NurtureLoop uses third-party service providers for functions such as hosting, database infrastructure, authentication, email, SMS, payment processing, analytics, cybersecurity, error monitoring, file storage, backups and customer support. Service providers may process personal information on NurtureLoop’s behalf.

Some service providers may process personal information outside Canada. Information about the countries in which NurtureLoop’s service providers process personal information, the purposes for that processing, and NurtureLoop’s related policies and practices may be obtained by contacting the Privacy Officer at support@nurtureloop.ca. NurtureLoop maintains and updates internal service-provider information as required by applicable law.

18. Payments

Centre subscription payments may be processed by third-party payment processors. NurtureLoop generally does not store complete payment-card numbers where the payment processor can handle them. We may receive billing name, transaction identifiers, subscription plan, payment status, invoice information, limited payment-method descriptors, billing information, refund information and payment-failure status. The payment provider’s own privacy practices apply to information it processes directly.

19. Legal and Regulatory Disclosures

NurtureLoop may disclose personal information without consent where permitted or required by law, including in response to valid legal process or to appropriate law-enforcement, child-protection, childcare licensing, professional, credential or government authorities. NurtureLoop may also disclose information as otherwise authorized by applicable privacy law, including in connection with qualifying business transactions.

20. No Sale of Personal Information

NurtureLoop does not sell Users’ personal information to data brokers or unrelated third parties for their independent marketing purposes and does not sell Educator credential information, police or vulnerable-sector documentation, résumés, work history or private messages.

21. Marketing Communications

NurtureLoop may send marketing communications where permitted by law. Recipients may unsubscribe from commercial marketing messages. Unsubscribing from marketing does not stop transactional or service communications reasonably necessary for account operation, security, Shifts, applications, credentials, payments, safety, work summaries or legal notices.

22. Retention and Account Closure

NurtureLoop retains personal information only as long as reasonably necessary for the purpose collected, account administration, Platform operation, work records, disputes, fraud prevention, safety, credential verification, legal compliance, accounting, legal claims, regulatory requirements and other lawful purposes.

Account closure does not necessarily require immediate deletion of every associated record. Information may be retained where reasonably necessary or legally authorized for transactions, work records, complaints, fraud prevention, child safety, legal claims, regulatory compliance, accounting or enforcement. When retention is no longer reasonably necessary or legally required, information will be securely destroyed, anonymized or otherwise appropriately disposed of.

23. Access and Correction

Subject to applicable exceptions, individuals may request access to personal information NurtureLoop holds about them and may request correction of inaccurate or incomplete information. NurtureLoop may require reasonable identity verification and may withhold information where permitted or required by law. Requests should be directed to the Privacy Officer.

24. Security Safeguards

NurtureLoop takes reasonable measures appropriate to the sensitivity of information to protect against unauthorized access, collection, use, disclosure, copying, modification, loss, disposal or destruction. Measures may include authentication, role-based access controls, secure credential management, database policies, encryption where appropriate, secure transport, audit logging, backups, administrative controls, vendor security practices, confidentiality obligations, account monitoring and incident response.

No online service can guarantee absolute security.

25. Sensitive Information Controls

Police or vulnerable-sector documentation, identity information, child-safety allegations, confidential employment information, private communications and credential documents receive heightened access restrictions. NurtureLoop personnel are not intended to have unrestricted casual access to sensitive User records merely because they administer the Platform.

26. Privacy and Security Incidents

If NurtureLoop becomes aware of an actual or suspected loss, unauthorized access to, or unauthorized disclosure of personal information, NurtureLoop will investigate, contain and assess the incident as appropriate.

Where a privacy breach creates a real risk of significant harm, NurtureLoop will notify the Office of the Information and Privacy Commissioner of Alberta without unreasonable delay and will provide notification to affected individuals as required by applicable law, direction of the Commissioner, or where NurtureLoop otherwise determines notification is appropriate.

27. Privacy-by-Design Controls

NurtureLoop seeks to enforce privacy through technical controls, including limiting Centre access to work performed at that Centre; restricting applications and résumés to appropriate recipients; restricting private messages to authorized participants plus narrowly authorized administrative access; protecting credential documents from public access; restricting sensitive incident information; and keeping Educator consolidated work histories private from unrelated Centres.

28. Automated Matching

NurtureLoop may use software to help Users discover potentially relevant opportunities or profiles based on information such as location, qualifications, availability, preferences, Shift requirements and experience. Matching or ranking tools support User decisions and do not make hiring decisions, guarantee suitability or replace Centre due diligence.

29. Minors

Centre and Educator account services are intended for persons legally capable of using the applicable business and employment services. NurtureLoop does not knowingly invite children to create Centre or Educator accounts. This does not prohibit limited processing of information relating to children where legitimately necessary for a safety incident, legal obligation or similar purpose.

30. Third-Party Links

The Platform may contain links to third-party websites or services. NurtureLoop is not responsible for the independent privacy practices of those third parties.

31. Changes to this Policy

NurtureLoop may update this Privacy Policy. The current version will display an effective date and version identifier. Where a material change introduces a materially different collection, use or disclosure, NurtureLoop will provide appropriate notice and obtain additional consent where required. Historical versions may be retained for compliance and audit purposes.

32. Privacy Officer and Complaints

Privacy questions, access or correction requests, consent questions, questions concerning service providers outside Canada, and privacy complaints may be directed to: Privacy Officer, NurtureLoop Technologies Inc., Calgary, Alberta, Canada; support@nurtureloop.ca.

NurtureLoop will review legitimate privacy complaints. Individuals may also have the right to contact the Office of the Information and Privacy Commissioner of Alberta.

33. Website

Website: nurtureloop.ca.