← Back
← Back
Last Modified: June 4, 2026
WorkAssess is an online ergonomic assessment service (the “Service”) operated by WorkAssess Inc., a corporation incorporated under the Canada Business Corporations Act (“WorkAssess”, “we”, “us” or “our”). The Service is offered through the website at workassess.ca (the “Website”).
Further to our Terms of Service, available at workassess.ca/terms (the “Terms”), this Privacy Policy sets out how we collect, store, use, retain and disclose personal information in connection with the Service and the Website. Unless otherwise indicated, capitalized terms in this Privacy Policy have the same meaning attributed to them in our Terms. This Privacy Policy also incorporates and replaces any previous standalone data retention policy maintained by WorkAssess; the retention schedule set out in Part IV below is the current data retention policy of WorkAssess.
By agreeing to our Terms, by purchasing or completing an Assessment, or by otherwise accessing or using the Service or the Website, you consent to the collection, use, retention and disclosure of personal information in accordance with this Privacy Policy.
As the Service continues to evolve, we may revise this Privacy Policy from time to time by updating this page. The date of the last revision is posted above. We will provide at least thirty (30) days’ prior notice of any material amendments to this Privacy Policy by email to each individual (a) who, as of the date the notice is sent, has an active business subscription or unfulfilled order with WorkAssess, or (b) whose personal information WorkAssess continues to hold at that date and whose privacy rights or obligations would be materially affected by the amendment, in each case using the email address most recently provided to the Service.
For all other users, we will post the amended Privacy Policy on the Website by updating this page, and the amendment will take effect for new use of the Service on the date the amended Privacy Policy is posted.
Material amendments include, without limitation, changes to the types of personal information collected, the purposes for which personal information is used or disclosed, retention periods, data handling practices, third-party sharing arrangements, or any other provision that materially affects your privacy rights or obligations. Non-material amendments (such as corrections of typographical errors or minor clarifications that do not adversely affect your rights or obligations) may be made by updating this page without prior notice. Your continued use of the Service following the effective date of any amendment constitutes your acceptance of the amended Privacy Policy. If you do not agree with a material amendment, you must stop using the Service before the amendment takes effect.
Intended Use — Canada Only (Excluding Quebec). The Service and Website are intended solely for use by individuals physically located in Canada (excluding the Province of Quebec) who are at least nineteen (19) years of age. They are not directed to, or intended for use by, individuals located outside Canada, individuals located in Quebec, or individuals under the age of nineteen (19).
Our data collection and processing practices were not designed to meet the requirements of the European Union General Data Protection Regulation (“GDPR”), the United Kingdom Data Protection Act 2018, the California Consumer Privacy Act, Quebec’s Act respecting the protection of personal information in the private sector (“Law 25”) or any other non-Canadian or Quebec privacy regime. WorkAssess has elected not to handle personal information governed by Law 25, and for that reason residents of Quebec are not permitted to use the Service or the Website. If you are located outside Canada, or are located in Quebec, you should not access the Service or the Website or provide us with personal information.
Sensitivity of Information. Some of the information collected through the Service (including descriptions of physical discomfort, ergonomic risk factors and workplace conditions) is health-adjacent and is treated by WorkAssess with a level of care equivalent to, or stricter than, the standards applicable to other personal information under the Personal Information Protection and Electronic Documents Act (Canada) (“PIPEDA”), having regard to the principles set out in Newfoundland and Labrador’s Personal Health Information Act.
If you believe that we have not adhered to this Privacy Policy, or would like to exercise any of the rights described below, please contact our Privacy Officer by email at support@workassess.ca.
To purchase or complete an Assessment, we collect the following personal information directly from you:
You are not required to create an account to use the Service. Visitors to the Website who do not purchase an Assessment are not required to provide personal information.
To the extent you provide us with, or upload to the Service, any data that includes the personal information of another individual (for example, a workstation photograph that incidentally depicts another person), you represent and warrant that you have obtained all necessary consents and authorizations required by Applicable Law to provide us with that information and to permit our use of it in accordance with this Privacy Policy and the Terms. If the required consents and authorizations have not been obtained, you agree not to upload or provide us with any such information.
You are directed to take, and to upload, photographs that do not depict any individual (including yourself) and that do not include any personal information of any individual. Before uploading a photograph of your workstation, please remove or obscure any items in the frame that display personal information, including without limitation names, addresses, phone numbers, email addresses, identification documents, financial or banking information, health information, photographs of people, and any visible screen contents (such as emails, messages, documents or browser tabs) that contain personal information about you or any other individual. WorkAssess does not require any such information in order to generate your Report, and you should not upload it.
WorkAssess does not employ tracking, advertising, behavioural or third-party analytics cookies, and does not maintain user accounts that persist across sessions. When you access or use the Service or the Website, we (and our service providers acting on our behalf) automatically collect a limited set of technical information necessary to operate the Service securely, including your IP address, browser type and version, operating system, the pages or features of the Website you accessed, the date and time of access, and security and error logs. This information is collected through our hosting and content-delivery providers (currently Replit and Cloudflare) for the purposes of providing the Service, protecting it against fraud, abuse and denial-of-service attacks, and complying with Applicable Law.
If you contact us at support@workassess.ca or otherwise communicate with us, we collect the contents of your correspondence (including any personal information, screenshots or attachments you elect to include), the time and date of the communication, and our reply. This correspondence is hosted on Google Workspace.
Payment for an Assessment, a Business Package or a business subscription is processed by our third-party payment processor (currently Stripe, Inc. and its affiliates), whose privacy policy is available at stripe.com/en-ca/privacy. Although we may display or link to payment forms on the Website, when you provide payment details in connection with the Service, you are providing them to the payment processor. We do not receive or store complete payment card details. We may receive limited information from the payment processor, such as the name on the card, billing address, card brand, last four digits, card expiration date, and a transaction identifier, for the purposes of completing the transaction, providing receipts, processing refunds, and meeting our tax and record-keeping obligations.
WorkAssess does not sell, rent, license or trade personal information. WorkAssess does not use Customer Content to train, fine-tune, evaluate or otherwise improve any artificial intelligence or machine learning model. When you submit your questionnaire responses and any uploaded workstation photographs through the Service, that information is transmitted to our third-party AI service provider (currently Anthropic PBC) and processed through its commercial application programming interface (the “Anthropic API”) under Anthropic’s commercial terms of service for the sole purpose of generating your Report. WorkAssess does not control Anthropic’s independent practices; Anthropic’s commercial terms and privacy policy are available at anthropic.com/legal/commercial-terms and anthropic.com/legal/privacy. You may contact us at support@workassess.ca for current provider details.
We use personal information solely to:
We rely on a small number of third-party service providers to operate the Service. Each provider has access only to the personal information necessary to provide its service, and is contractually or by virtue of its own policies obligated to use that information only for the purpose of providing the service. As at the date of this Privacy Policy, our service providers fall into two categories. The following providers handle Customer Content (questionnaire responses, uploaded workstation photographs, and/or the contents of the Report):
The following providers do not process Customer Content but support the infrastructure and ancillary services of the Service:
Each provider operates under its own privacy policy. We may update the above list of service providers from time to time as the Service evolves. We will use commercially reasonable efforts to engage successor providers that offer comparable confidentiality, security and privacy practices.
Anthropic, Stripe, Resend, Google, Replit and Cloudflare are United States–based companies, and PDFShift is a France-based company. Your personal information may be transferred to, stored, accessed or processed in the United States, France or other jurisdictions outside Canada in connection with the operation of the Service. While personal information is being processed or stored outside Canada, it may be subject to the laws of those jurisdictions and may be accessible to foreign courts, law enforcement and national security authorities. By using the Service, you acknowledge and consent to this transfer and processing. WorkAssess takes reasonable contractual, administrative and technical measures to ensure that your personal information receives a level of protection comparable to that required under Canadian privacy law regardless of where it is processed or stored.
We may share personal information and any information you have submitted to the Service where required by law, including in response to a subpoena, court order, production order, statutory demand or other legal process. We may also share personal information where we reasonably believe doing so is necessary to: (a) comply with Applicable Law; (b) detect, prevent, investigate or take action in respect of suspected fraud, abuse, threats to physical safety or unlawful activity; (c) enforce our Terms; (d) protect the rights, property or safety of WorkAssess, our customers or any third party; or (e) report a breach of security safeguards to the Office of the Privacy Commissioner of Canada in accordance with PIPEDA. Where the law permits us to do so, we may but are not required to notify you of any such disclosure.
If WorkAssess sells, transfers, reorganises, restructures or otherwise disposes of the WorkAssess business, the Service or any related assets, personal information may be transferred to the acquiring or successor entity as part of the transaction, subject to appropriate confidentiality arrangements and to the limits set out in PIPEDA.
Reports may contain links to third-party retailers (currently amazon.ca through the Amazon Associates program). When you click on an affiliate link, you leave the Service and your interaction with the linked retailer is governed by that retailer’s privacy policy and terms. WorkAssess may receive aggregated commission and clickthrough information from the affiliate program; WorkAssess does not receive personal information about your purchase, except to the extent inherent in receiving a commission for a qualifying purchase.
WorkAssess retains personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by Applicable Law, in accordance with PIPEDA Principle 4.5. The retention periods set out in the table below apply in the ordinary course and replace any previous standalone data retention policy of WorkAssess. Where personal information is no longer required, it is deleted, anonymized or de-identified using methods appropriate to its sensitivity.
| Personal information | Retention period |
|---|---|
| Assessment questionnaire responses and uploaded workstation photographs | Held as a transient draft on WorkAssess’s hosting infrastructure for a maximum of one (1) hour while the Report is being generated, then automatically deleted (immediately on Report generation, or by an automated one-hour expiry sweep, whichever occurs first). Not otherwise retained on WorkAssess infrastructure. |
| Customer name, email address and a copy of the emailed Report (held in the WorkAssess support inbox on Google Workspace) | Ninety (90) days from the date the Report is emailed, after which the copy is deleted by automated process. |
| Customer support correspondence (held in the WorkAssess support inbox on Google Workspace) | Up to twenty-four (24) months from the date of the most recent message in the correspondence, after which the correspondence is deleted, except where retention is required to resolve an ongoing matter or to defend a legal claim. |
| Payment, billing and transaction records (held by Stripe) | Seven (7) years, in accordance with the record-keeping requirements of the Income Tax Act (Canada). |
| Technical, security and error logs (held by hosting and content-delivery providers) | Retained by the applicable provider for periods set by that provider, generally not exceeding twelve (12) months for non-security records. |
| Aggregated or de-identified analytical data (cannot reasonably be re-associated with an identifiable individual) | Retained indefinitely. |
If you would like personal information that we hold about you to be deleted earlier than the periods set out above, you may contact our Privacy Officer at support@workassess.ca. We will respond to your request in accordance with Part VI. We may decline to delete personal information where retention is required by Applicable Law (including the seven-year retention requirement applicable to payment records under the Income Tax Act (Canada)), or where retention is necessary to resolve a dispute, prevent fraud, or defend a legal claim.
WorkAssess protects personal information using security safeguards appropriate to its sensitivity, including encryption of data in transit (TLS) and, where applicable, at rest; access controls that restrict access to personal information to authorized personnel on a need-to-know basis; multi-factor authentication for administrative accounts; the use of reputable third-party service providers with industry-standard security practices; and regular review of administrative, physical and technical controls. No method of electronic storage or transmission is completely secure, and WorkAssess cannot guarantee absolute security.
In the event of a breach of security safeguards involving personal information under WorkAssess’s control that creates a real risk of significant harm to an individual, WorkAssess will comply with PIPEDA and the Breach of Security Safeguards Regulations.
Subject to Applicable Law and the limitations set out below, you have the right to:
To exercise any of these rights, contact our Privacy Officer at support@workassess.ca. We will respond in writing within thirty (30) days as required by PIPEDA. We may require you to verify your identity before responding to a request, and we may charge a reasonable fee for processing a request to the extent permitted by Applicable Law (we will notify you of any fee in advance and you may withdraw your request at no cost).
WorkAssess does not use tracking, advertising, behavioural or third-party analytics cookies on the Website. The Website may set a limited number of strictly necessary cookies or similar technologies for purposes such as maintaining your session during the assessment process, remembering language preferences and similar settings, protecting the Website against bots and denial-of-service attacks (currently through Cloudflare), and securing payment processing forms (currently through Stripe). These technologies are necessary for the secure operation of the Service. Disabling them may prevent the Service from functioning correctly.
Most modern browsers allow you to view, manage or delete cookies and similar technologies through the browser’s settings. Methods for doing so vary by browser; please consult the documentation for your browser.
The Service is not intended for use by, and is not directed to, individuals under the age of nineteen (19). We do not knowingly collect personal information from individuals under nineteen (19). If you are aware that a person under the age of nineteen has provided personal information to the Service, please contact our Privacy Officer at support@workassess.ca and we will take reasonable steps to delete the information.
If you are not satisfied with our response to a privacy-related inquiry, request or complaint, you may file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca). Residents of Alberta and British Columbia may, in the alternative, file a complaint with the Information and Privacy Commissioner of their province. We encourage you to contact our Privacy Officer first so that we have an opportunity to address your concern directly.
If you have any questions about this Privacy Policy or about our handling of personal information, you may contact us at:
WorkAssess Inc.
Email: support@workassess.ca