PIPEDA Compliance

Last updated: 2026-04-12

GridPlay Studios operates in Canada and complies with the Personal Information Protection and Electronic Documents Act (“PIPEDA”). Although GridPlay does not collect traditional personal identifiers such as email addresses, phone numbers, or real‑world names, certain information—such as a Second Life UUID—may still be considered “personal information” under Canadian law.

This section explains your rights under PIPEDA and how GridPlay handles personal information within our UUID‑based identity system.

1. Right to Access Your Information

You may request a copy of the personal information we hold about you, which may include:

  • Your Second Life UUID
  • Account‑related metadata
  • Logs or records associated with your use of GridPlay services

We will provide this information within a reasonable timeframe, typically within 30 days.

2. Right to Correct Information

If any information associated with your account is inaccurate or incomplete, you may request a correction. Because GridPlay accounts are tied to immutable Second Life UUIDs, corrections generally apply to metadata or configuration data, not identity data.

3. Right to Withdraw Consent

If GridPlay introduces optional features that require additional data collection, you may withdraw consent at any time. Withdrawing consent may affect your ability to use certain features, but never the core UUID‑based identity system.

4. Right to Know How Your Data Is Used

We will always explain:

  • What information we collect
  • Why we collect it
  • How long we retain it
  • Who has access to it
  • Whether it is shared with third parties

GridPlay does not sell or trade user data.

5. Right to File a Complaint

If you believe your privacy rights have been violated, you may contact us directly. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

Breach Notification

If a data breach occurs that creates a real risk of significant harm, GridPlay will:

  • Notify affected users
  • Notify the Office of the Privacy Commissioner of Canada
  • Document the breach and mitigation steps

Because GridPlay does not store emails or phone numbers, breach impact is significantly reduced.

Designated Privacy Officer

GridPlay Studios has appointed a Privacy Officer responsible for PIPEDA compliance.

Privacy Officer
GridPlay Studios
support@gridplay.ca

How This Applies to GridPlay’s UUID‑Only System

GridPlay’s identity system is intentionally minimal. We do not collect:

  • Emails
  • Phone numbers
  • Real names
  • Addresses
  • Payment information (handled by Stripe)

This reduces privacy risk and simplifies compliance. However, because UUIDs can still be linked to an identifiable person within Second Life, PIPEDA applies. This section ensures full compliance.