Legal
Our commitment to your personal data — what we collect, what we never collect, and your rights under Canadian and international privacy law.
Last updated: June 3, 2026
WinnipegFalls Entertainment Inc. operates the website at palettedale.com (the "Platform"). We are incorporated in the Province of Manitoba, Canada. Our registered address is 342 Portage Avenue, Winnipeg, MB R3B 2H3. Data protection inquiries should be addressed to [email protected].
This Privacy Shield describes how WinnipegFalls collects, uses, and protects information in connection with your use of the Platform. It applies to all pages under palettedale.com. By accessing the Platform after reading this document, you acknowledge that you have been informed of our practices.
We reserve the right to update this Privacy Shield when our practices change or when applicable law changes. Updates are posted on this page with a revised "Last updated" date. We encourage you to check this page periodically. Continued use of the Platform following a posted update constitutes your acceptance of the changes.
WinnipegFalls collects a minimal set of technical data required to deliver and improve the Platform. Specifically:
wf_consent_v2 and a corresponding localStorage key. This data never leaves your device — it is read by our JavaScript to determine whether to display consent prompts on subsequent page loads. Expiry is 180 days.wf_age_ok (and corresponding localStorage key) records your self-declaration that you are 18 or older. This data never leaves your device. Expiry is 180 days.WinnipegFalls does not and has never collected any of the following:
Because we do not have an account system, we hold no persistent record of any individual visitor. We cannot link a visit on one day to a visit on another day beyond what the 30-day server log retention window allows, and that data is not used for profiling.
WinnipegFalls uses the following third-party services:
rel="preconnect" with crossorigin and the display=swap parameter.We have no agreements with advertising networks, data brokers, or identity resolution companies. We do not participate in any form of audience sharing or cross-site tracking.
We use a small number of cookies and localStorage items. Full details are on our Cookie Log page. In summary:
wf_age_ok — strictly necessary. Stores your age self-declaration so you are not repeatedly prompted. 180-day expiry.wf_consent_v2 — strictly necessary. Stores your cookie preference choices. 180-day expiry._ga, _ga_* — optional analytics. Set only when you have accepted analytics cookies. 13-month expiry as set by Google Analytics 4.Google Analytics cookies are not set until you explicitly click "Accept All." If you click "Essential Only," only wf_age_ok and wf_consent_v2 are written. You can reset your preferences at any time via the cookie preferences panel (the gear icon at the bottom of every page).
Server logs are used exclusively for security monitoring (detecting bot attacks, abuse, and server errors) and for diagnosing technical problems reported by users. We do not use server log data for marketing, profiling, or any commercial purpose.
Analytics data (when consented) is used to understand which pages receive traffic and what device types visit the Platform, so we can prioritise engineering improvements. We do not use analytics data for individual user tracking, re-targeting, or advertising.
Consent and age-gate data stored on your device is used only to control whether prompts are displayed on your next page load. It is processed entirely client-side by JavaScript and is never transmitted to our servers.
Because we do not operate an account system or a database of visitor records, there is no additional retention layer for personal data. When the log retention window expires, the data is permanently gone.
PIPEDA (Canada — federal): Under the Personal Information Protection and Electronic Documents Act, you have the right to access personal information we hold about you, to correct inaccurate information, and to withdraw consent for non-essential processing. Given our minimal data collection, the only personal information we could feasibly hold about you is in the 30-day server access logs (IP address, user-agent). You can request access or deletion by emailing [email protected]. We will respond within 30 days.
PIPA (Alberta / British Columbia): Similar to PIPEDA with provincial additions. The same request mechanism applies.
Loi 25 (Québec): If you are a Québec resident, Bill 64 (Loi modernisant des dispositions législatives en matière de protection des renseignements personnels) grants you additional rights including the right to data portability and the right to be forgotten. Requests under Loi 25 should be addressed to our privacy officer at [email protected]. We target a 30-day response window for Loi 25 requests.
GDPR / UK GDPR (if applicable): While WinnipegFalls is a Canadian platform primarily serving Canadian users, visitors from the EEA or UK benefit from GDPR/UK GDPR protections under our legitimate-interest and consent legal bases. You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Contact: [email protected].
We serve the Platform over HTTPS with TLS 1.2 or higher. Server access is restricted to authorised personnel using key-based authentication. We do not store payment data, so there is no payment card data to protect. Our hosting environment applies automatic security patches. We perform quarterly reviews of our dependencies and update them promptly when security advisories are issued.
Despite our precautions, no internet-connected system can be guaranteed 100% secure. In the unlikely event of a data breach involving personal data from server logs, we will notify affected parties and the relevant data protection authority within 72 hours as required by applicable law.
When you accept analytics cookies, your anonymised analytics data is transferred to Google LLC in the United States. This transfer is governed by Google's EU Standard Contractual Clauses and Canada-equivalent data transfer agreements. No other international transfers of personal data take place.
We will update this Privacy Shield when our practices change, when new third-party processors are added, or when applicable law changes. Material changes will be flagged with a "Last updated" date revision. For significant changes that affect your rights, we will display a notice on the Platform for at least 30 days before the change takes effect. If you disagree with a material change, you may stop using the Platform before the change date.
Privacy inquiries, access requests, correction requests, erasure requests, and complaints should be directed to:
WinnipegFalls Entertainment Inc.
Privacy Officer
342 Portage Avenue, Winnipeg, MB R3B 2H3, Canada
[email protected]
+1 (204) 771-0342
We aim to respond to all privacy inquiries within 30 calendar days. If you believe your privacy rights have been violated and we have not resolved your complaint satisfactorily, you may lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.