End The PhishProtection Kit
← Back to the Protection Kit

Privacy

Privacy policy

This policy explains what End The Phish collects, why we use it and the choices available to you.

Last updated: September 21, 2026

1. Who is responsible for your information

End The Phish operates this website and its scam-awareness services. Our mailing address is 4645 Jane Street, North York, Ontario, Canada. Privacy requests can be sent to ndifordee@gmail.com.

2. Information we collect

We may collect your email address, quiz answers, score, result category, main weak spot, consent choice, unsubscribe status and the date and source of your submission. When you contact us, we receive the information you include in your message.

When you purchase, Paddle collects and processes payment, billing, tax and transaction information. We receive order details needed to confirm delivery, provide support and maintain business records, but we do not receive or store your complete payment-card number.

Our website host and technical providers may process basic device, browser, IP-address, request and error information needed to operate, secure and diagnose the website.

3. Why we use information

4. Report email and marketing consent

The requested quiz report is a service email. Marketing emails are separate and are sent only when you actively select the optional consent checkbox or otherwise give valid consent. You can unsubscribe at any time using the link in a marketing email. We retain a limited suppression record so we can respect your choice.

5. Legal grounds

Depending on your location and the activity, we process information to provide a requested service or fulfil a purchase, based on your consent, to comply with law, or for legitimate interests such as security, support and service improvement where those interests do not override your rights.

6. Who receives information

We use service providers only as needed to run the business, including Resend for email delivery, Paddle for checkout and payment administration, and our website and data-hosting providers. These providers may process information under their own terms and privacy notices. We may also disclose information where legally required, to investigate fraud or to protect rights and safety.

7. International processing

Some providers may process information outside your province or country. Where required, we use provider terms and safeguards intended to protect information during international processing.

8. Retention

We keep personal information only as long as reasonably needed for the purposes described above, including delivery, support, consent records, suppression lists, fraud prevention and legal or tax obligations. Retention periods vary by record type.

9. Security

We use reasonable administrative and technical safeguards designed to protect information. No website, email service or storage system can guarantee absolute security.

10. Your privacy choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, withdrawal of consent or objection to certain processing. You may also complain to the privacy or data-protection authority in your jurisdiction.

Send a request to ndifordee@gmail.com. We may need to verify your identity before completing a request. Withdrawing consent does not affect processing that was lawful before withdrawal.

11. Children

This website is intended for adults and families and is not designed to collect personal information directly from children. A parent or guardian should submit an email address and supervise use by a minor.

12. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The current version and effective date will remain available on this page.