First Exposure Comprehensive Privacy Policy

1. Introduction

First Exposure is dedicated to upholding the highest standards of data privacy, transparency, and ownership. This comprehensive policy outlines our approach to cookies, data sovereignty, and user data management. By navigating our website or using our services, you agree to the practices described herein.

2. Definition and Use of Cookies

Cookies are small data files placed on your device when you visit our website. They help remember preferences, optimize user experience, and ensure website functionality. Our cookies serve multiple purposes:

• Functionality: Ensure efficient website operations like user login and language preferences.
• Analysis: Analyze website traffic patterns to refine the user experience.
• Personalization: Offer a tailored website experience based on user preferences.
• Security: Facilitate security measures, such as user authentication.

3. Cookie Categories

• Session Cookies: Active during a user’s visit and removed once the browser is closed.
• Persistent Cookies: Stored on a user’s device for 400 days or until deleted, remembering preferences across sessions.

4. User Control and Third-Party Cookies

Users can control the cookies we place through their browser settings. However, limiting certain cookies might affect website functionality. First Exposure does not use third-party cookies, emphasizing first-party cookies for enhanced data control.

5. Data Residency, Collection, and Management

All data collected is stored within Canada, compliant with Canadian and U.S. data protection regulations. Our data collection is based on the principle of minimality, ensuring only necessary data is acquired. Every piece of data is treated with respect, and its management aligns with best industry practices and legal standards.

6. Regulatory Compliance

First Exposure complies with various regulations, including PIPEDA in Canada and HIPAA and CCPA in the U.S., ensuring the highest data protection standards.

7. Data Security and Incident Response

Our data security architecture employs leading encryption and security protocols, with strict access controls. In case of a data breach, we have robust response mechanisms in place, emphasizing both technological solutions and transparent communication.

8. Third-Party Vendors and Data Storage

All agreements with third-party vendors emphasize data sovereignty and protection. Data from cookies is stored securely within Canada, never sold, or used for advertising purposes.

9. User Rights and Feedback

Users have the right to access, amend, and, under specific conditions, request data deletion, aligning with PIPEDA provisions. We value user feedback, addressing insights and concerns systematically.

10. Policy Revisions and Updates

Both our cookie and data sovereignty policies may undergo changes. We recommend users periodically review this policy to stay informed.

11. Conclusion and Contact

We reaffirm our commitment to data protection and management, continuously guided by legal and ethical obligations. For questions or feedback, contact our data protection officer at [email protected].