Privacy policy

Scope and roles

This policy covers the public CanForce1 website, agency-connection requests, workspace requests, and the platform services operated by Roalla. For information an agency collects and manages in its workspace, that agency is responsible for its staffing purpose and decisions; Roalla processes the information to provide and secure the service. An agency may provide additional notices that apply to its recruiting relationship.

This page explains current product practices. It is not a certification that every agency or deployment has the same legal obligations.

Information we collect

• Worker connection information: name, email, optional phone, city, province, work interests, shift availability, travel range, availability date, and an optional experience summary.
• Agency workspace requests: agency and contact details, province, staffing focus, team size, and optional notes.
• Agency workspace records: information submitted through private links or entered by authorized agency users, such as applications, skills, availability, credentials, assignments, communications, and shift events.
• Technical and security information: request timestamps, IP-derived security signals, device/browser information, session identifiers, audit events, and error or delivery records.

The public worker referral does not ask for a social insurance number, banking details, government-ID images, or payroll information.

How we use information

• Send a worker referral only to agencies the worker selects.
• Allow an agency to review a referral and invite the worker to a private application.
• Operate intake, readiness, matching, scheduling, communications, shift operations, privacy requests, and audit controls.
• Authenticate users, prevent abuse, investigate incidents, and maintain service reliability.
• Respond to workspace requests and support inquiries.
• Meet legal, regulatory, security, and record-keeping obligations where applicable.

CanForce1 does not make an automatic hiring, rejection, or placement decision. Authorized agency personnel review recommendations and take the final action.

How information is shared

A public worker referral is disclosed only to the agencies the worker selects. Each agency receives its own tenant-isolated copy and cannot browse another agency's referral. Within an agency, access is limited by assigned roles and purposes.

Information may also be processed by approved infrastructure, authentication, storage, security, and communications providers needed to operate the service. It may be disclosed when required by law, to protect people or the service, or during a legitimate business transaction with appropriate safeguards. Personal information is not sold or rented.

Consent to receive a requested staffing response is not consent to unrelated marketing. Commercial messages, when used, require the appropriate consent, sender identification, and unsubscribe mechanism.

Retention, safeguards, and processing location

Records are kept only as long as needed for the identified staffing, operational, legal, security, or audit purpose. Agency retention settings and legal holds may affect exact periods. Expired capability links and unnecessary application records are designed for controlled disposal or anonymization.

Safeguards include tenant isolation, role and purpose checks, encryption provided by hosting services, restricted-data boundaries, hashed capability tokens, immutable audit records, and monitored service access. No system is risk-free.

Canadian hosting is preferred and must be confirmed for the specific deployment. Approved service providers may process limited information from other locations, subject to their contracts and applicable law.

Your choices and rights

Depending on the relationship and applicable law, a person may request access, correction, a portable copy, deletion, or withdrawal of consent. Some information may need to be retained for legal, security, dispute, or audit reasons.

• Workers with a private application link can use its privacy-request controls.
• Workers or agency users can contact the agency responsible for their staffing record.
• Agency users can use workspace privacy controls for managed requests.
• Browser-stored referral tracking tokens can be removed by clearing site storage; this does not delete the agency's referral.

Questions, requests, and complaints

For an agency-controlled staffing record, contact the agency named on the application, offer, or shift page. For the public service or Roalla's operation of CanForce1, use the contact options at Roalla. We may need to verify identity before acting on a request.

Material changes will be reflected on this page with a revised date, and new consent will be requested when required for a new use or disclosure.