← Back to the Assessment

StockLifter Assessment Privacy Policy

Effective date: November 5, 2026

Who we are

StockLifter, operating in Vancouver, British Columbia, Canada, is responsible for personal information handled through the StockLifter Assessment at https://assessment.stocklifter.com/ (the “Assessment”). You can reach our Privacy Officer at info@stocklifter.com.

What we collect and why

Website and assessment information. When you request an assessment, we collect the website URL you enter, information available on public pages associated with that website, and any answers you provide. We use this information to analyze the website and generate an assessment report with findings and recommendations. Public pages can contain personal information such as the names and business contact details of people identified on the site. Please submit public URLs and keep confidential information, credentials and sensitive personal information out of your submissions.

Contact and company information. If you enter your name, work email, company details or other information in the form, we use it to associate your request with the report, verify your email address, provide the report or access to it, respond to your questions, and handle any consultation or other service you request.

Technical information. When you visit or use the Assessment, our systems and hosting providers may process IP addresses, request timestamps, browser and device information, and error or usage logs. We use this information to operate the service, diagnose problems, apply usage limits and detect abuse.

Marketing preferences. If you opt in to marketing, we use your contact details and consent record to send relevant updates and manage your preferences. Receiving your requested report is separate from opting in to marketing. You can unsubscribe using the link in a marketing email or by contacting our Privacy Officer.

How we use service providers

We use service providers for hosting, data storage, website analysis, report generation and report delivery. We share information needed to perform the relevant service. For example, our hosting and storage providers process assessment submissions and reports, and our email delivery provider (Resend) receives your email address and the verification code needed to confirm it.

The Assessment does not currently send your submissions to artificial intelligence providers. Reports are generated by our own automated checks of public website material.

We send the public URL being assessed to Google's PageSpeed Insights and Chrome UX Report APIs to obtain website performance and diagnostic results, and we may use Google's Places API to find a public Google Business Profile for the business. These features use an application API key and do not require access to your Google Account.

If you choose to sign in with Google to unlock your report, we receive only your basic profile information (name, email address and whether Google has verified it) to confirm your identity. We do not receive your Google password. Where a business owner chooses to connect Google Business Profile or Search Console, we request read-only access to that data solely to add it to that owner's report; the data is held only for the session, is not used for advertising, and is cleared when the owner disconnects or signs out. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can also remove access at any time from your Google Account permissions page.

We may also disclose personal information where required by law, or where permitted by law to investigate abuse or protect the security of the Assessment and its users.

Cookies and similar technologies

We use only essential storage needed to run the Assessment:

• A secure, HTTP-only session cookie that links your browser to your assessment and verification status. It lasts up to 24 hours.
• For business owners who sign in to connect Google services, a secure, HTTP-only owner session cookie lasting up to 8 hours.
• Browser session storage that lets an in-progress assessment recover if you reload the page. It is cleared when you close the tab and expires after 24 hours.

We do not use advertising cookies or third-party analytics tags on the Assessment.

Processing outside Canada

We operate from British Columbia. Our service providers may process or store information in Canada and other countries, including the United States. Information processed abroad may be subject to local laws and lawful access by courts or government authorities. We remain accountable for personal information transferred to service providers for processing and use contractual and other measures appropriate to the information. Contact our Privacy Officer for information about our practices for service providers outside Canada.

Retention and safeguards

We keep personal information for as long as reasonably necessary to provide the Assessment, manage requests, maintain security and meet legal obligations. Incomplete submissions and verification codes expire automatically (codes after 10 minutes, assessment sessions after 24 hours). Completed reports are available only during your visit and are not kept in a saved account. Contact records you choose to share with us are kept while we have an ongoing relationship with you or until you ask us to delete them. We delete or de-identify personal information when we no longer need it, subject to legal retention requirements.

We use reasonable administrative and technical safeguards appropriate to the information, including limiting access to people who need it for their work.

Your privacy rights

Our handling of personal information is subject to British Columbia’s Personal Information Protection Act and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act. If you use the Assessment from outside Canada, you may also have rights under the privacy laws that apply to you.

You can contact our Privacy Officer to ask how we handle your information, request access or correction, or withdraw consent, subject to applicable legal and contractual restrictions. You can also ask us to delete your information. We will assess the request in accordance with applicable law. We may need to verify your identity before responding. Depending on the law that applies, you may also have rights to object to or restrict certain processing, receive a portable copy of your information, or complain to your local privacy regulator.

You can contact the Office of the Information and Privacy Commissioner for British Columbia at https://www.oipc.bc.ca/ or, for matters within federal jurisdiction, the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca/.

Changes to this policy

We will post updates on this page and revise the effective date. Where required, we will notify you of material changes and obtain consent before using personal information for a new purpose.

Contact