Last changes to this policy were made: 06/11/19


At Lexya Inc. we are extremely concerned and serious about protecting the personal data of students. To make sure that we respect our commitment to the protection of your personal data, we have joined the recognized program in North America, the Student Pledge Privacy Policy.

 This privacy policy governs the use and functionality of the Lexya platform on the web platform.


1. What personal information is collected and used

Personal data and any information that relates to an identified or identifiable person. Personal Data that you provide to us directly through our Sites will appear in the context in which you provide the data. In particular:

  • When you register to access the Lexya platform, we collect your full name, email address, and login credentials.
  • When you claim an offer in the website section : we collect your email address. 
  • When you fill out our online form to contact our sales team or when you subscribe to our newsletter, we collect your full name and e-mail address.
  • When replying to Lexya e-mails or surveys, we collect your e-mail address, your name, and any other information you choose to include in the body of your e-mail or your answers.
  • If you contact us by phone, we will collect the phone number you will use to call Lexya. If you contact us by phone as a user, we may collect additional information to verify your identity.
  • If you are a customer, when you make payments or make transactions through the Lexya website or application, we receive your transaction information. The information we collect will include information only the following : last name, first name, email address, phone number, street address, zip code, Purchase amount, purchase date and payment method. Credit or debit card numbers and bank account information are not collected by Lexya. These private informations are collected by the two payment gateways we use on our platform : Snipcart & Stripe.
  • We use Snipcart for their online shopping cart service. Here's the link to their privacy policy.
  • We use Stripe to collect payments. Here's the link to their privacy policy.
  • You may also submit information to us through other methods, including: (i) in response to marketing or other communications, (ii) via social media or online forums, (iii) participating in an offer, a program or promotion (iv) in the context of a real or potential business relationship with us, or (v) giving us your business card or contact information at trade shows or other events.


The student agrees to share his data when he registers

When the student logs in for the first time on the Lexya platform, he agrees to share the following information: his student user code from his institution, his email address and his full name. This information is shared directly in Lexya by the partner institution.

The information that will automatically be sent to Lexya

The application collects the following parameters: the courses to which the student is registered as well as the books associated with each of these courses. These parameters are only transmitted and collected by Lexya when the student agrees to transmit his personal data during his first connection. This data will be specifically used to improve the user experience of the student on the platform. In any case, this data will not be sold, transmitted or shared to any other tier (see below '' How is the information used).


2. The servers used

Our service is hosted on Microsoft Azure servers. Our main server is located in Canada.


3. Use of information

We do not collect, use or share any information we have without the consent of the school or student. We do not sell any information on our platform. The information that is collected by Lexya allows the student user to access all the features offered by the application. The data will be used only to better meet the needs of the student. The nominal data of the student does not have to be shared with Lexya. They will serve to improve the social functions between each student interaction. We will use anonymous settings to improve the user experience at all times in our future development. In no circumstances, we share or sell student data to external companies. 

The LEXYA website and platform use cookies and other technologies to function effectively. These technologies record information about your use of our sites, including:

  • Browser and device data, such as IP address, device type, browser type and browser type, screen resolution, operating system name and version, manufacturer and the model of the device, language, plug-ins, modules and language version of the sites you visit;
  • Usage data, such as time spent on sites, pages visited, links clicked, language preferences and pages that led you to or referred to our sites.

We may also collect information about your online activities from websites and devices that are connected with over time and to third-party websites, devices, applications and other online features and services. We use Google Analytics on our sites to help us analyze your use of our sites and to diagnose technical problems. To find out more about the cookies that may be displayed on our Sites and how you can control the use of cookies and third party analytics, please contact us at [email protected]

We reserve the right to send you information related to the LEXYA services. For example, we can send : modification to our privacy policy, new features, event, promotions, special offers, feedback and newsletters. Students may at any time unsubscribe from any communication. 


4. Location of the connected device

This Application does not collect precise information about the location of your mobile device.


5. Access to Documents by Public entities and Protection of Personal Information Act (A-2.1) and the Privacy Act in the Private Sector (P-39.1)

 The protection of student data is paramount and that's why interactions with our web application are controlled and done in a safe environment. In accordance with the Access to Government Records and Privacy (A-2.1) Act, we have adopted and adhered to policies to ensure that student information is always secure. 

The privacy and security of each student's personal information is more than important to us. That is why the Web application is thoughtful and thoughtful about adopting and respecting privacy legislation in the private sector (P-39.1).

  • Lexya does not request any nominal data.
  • First name, Last Name, email address and gender are optional information. They are there only to enhance the user experience on the platform. 
  • No "private" or confidential information is therefore required for the proper functioning of the platform.
  • All web services are in HTTPS.
  • The data is saved in a database on the Microsoft Azure infrastructure.
  • The data repository is located in Canada.
  • At the first connection the student must agree to share his data with Lexya.
  • Before the student's first login, Lexya does not have any information about the student.


6.Access to information collected by the Platform by third parties

Lexya does not collect, store, use or share any personal information of the student beyond what is necessary for educational or academic purposes authorized by the educational institution. Only aggregated, some anonymous information will be periodically transferred to external sources to allow us to improve the user experience. We will only allow third parties certified and validated by us, the school and the student association partner, while respecting the following:

We may disclose information provided by the user and collected automatically:

  • as required by the Privacy Act in the Private Sector (P-39.1)
  • when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or that of others, investigate fraud or respond to a request from the government;
  • If Lexya Inc. is faced with a merger / acquisition or even the entire sale of all of our assets, we will mandatorily require the company that will support Lexya to adhere to the same policies we face. We will erase all personal information before the change of direction. We will notify users of these changes by e-mail, as well as our customers via a general meeting.

7. Exit fees

All personal information is confidential unless its disclosure is authorized by the person to whom it relates. To be valid, consent must be free and enlightened. Consent may be withdrawn partially or completely at any time; it is not necessary that this withdrawal be in writing. In general, the law recognizes the right of any person to receive the communication of any personal information concerning him as well as the right to request the rectification of such information that is inaccurate, incomplete or equivocal. Regarding the exercise of the right of access to information that will be collected as part of Lexya, the student must be aware of the information he sends to Lexya.


8. Retention of data, maintains your data

We process personal data as a Processor as defined by the GDPR regulations.

We will remember the user's personal details for as long as they use the Lexya App and 3 months after the termination of use. The main objective in relation to the retention of user data is to improve and constantly improve the student experience. We will automatically collect anonymous information for up to 12 months after the termination of use of Lexya. The data will be erased when the student withdraws his consent or finishes his studies. The student has the right at any time to request a copy of his personal data. If the student wishes to review, update or delete any of his personal information, he may contact our Privacy Officer. The student can reach him by email at [email protected] Please note that we will ask security questions in order to properly identify you.


9. Security of the Platform and information

We are concerned with how your data is secure and we make reasonable efforts to ensure a level of security appropriate to the risk associated with the processing of personal data. We "maintain a comprehensive security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of student personal information against risks – such as unauthorized access or use, or unintended or inappropriate disclosure – through the use of administrative, technological, and physical safeguards appropriate to the sensitivity of the information. Your personal data is only accessible to a limited number of people who need to access information to perform their tasks such as the mandate to develop, operate or improve the platform. Unfortunately, no data transmission or storage system can be guaranteed 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you believe that the security of your account has been compromised), please contact us immediately. If there is a case where there is a security breach, we will notify customers and users as quickly as possible within an ideal 72 hours.

If something happens, we have already put technology appliances in place such as a firewall, a subnetwork and a system continually up to date. Moreover, our people are trained to act quick in case of a breach with the help of a tight protocol already in place. 

If you are a Stripe user, we will retain your personal data as long as we provide you with the services. We can keep the necessary Personal Information for the platform, for a period not exceeding 1 year after the end of the student's studies. We retain the Personal Data after we cease to provide Services to you, even if you close your Lexya account or if you are no longer a student, to the extent necessary to fulfill our legal and regulatory obligations, and for monitoring purposes, detection and prevention of fraud. We also retain Personal Data to comply with our tax, accounting and financial obligations, where we are required to maintain the data by our contractual commitments to our financial partners, and where the retention of data is dictated by the payment methods we use. support. When we store data, we do so in accordance with the limitation periods and document retention requirements that are imposed by applicable law.

10. Changes

This Privacy Policy may be updated from time to time for any reason. We will notify you of changes to this Privacy Policy by sending an email to schools and partner associations. We will also publish the new Privacy Policy here. You are advised to review this Privacy Policy regularly to be aware of any changes. The "Last Updated" legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes are effective when we post the revised Privacy Policy on the Services."

Our users will receive either a email notification or a notification push (banner) on the website and directly on the Lexya App that will advise them the new consent such as including a button that says “i agree” or “Ok” or a prominent statement stating the changes are effect and where they give consent by continuing the first time the user logs on following the change. 

Typically, email notification or a banner on the signatory's website is sufficient if accompanied by new consent such as including a button that says "I agree" or "OK" or a prominent statement stating the changes are in effect and they give consent by continuing the first time the user logs on following the change


11. Links to other websites

The Services may provide the ability to connect to other websites. These websites may operate independently of us and may have their own privacy notices or policies, which we strongly suggest you to consult. If a linked website is not owned or controlled by us, we are not responsible for its content, the use of the website or the privacy practices of the website operator.


12. Consent

By using the Lexya application, you consent to us using the information that is treated by this Privacy Policy and corrected by us. '' Treated '' means using the information in any way, including but not limited to collecting, storing, deleting, using, combining and disclosing it, all for activities taking place in Canada. Our Privacy Policy covers the use of the application but does not cover other third-party software and programs.


13. Contact us

If you have any questions about our privacy policy, or questions about our practices, contact us by email at [email protected]