PIPEDA · CASL · Free scan
See where your website stands on Canada’s federal privacy and anti-spam laws in 5 minutes. Free, no signup, nothing to install.
The scan reads only publicly visible content. It isn’t a legal opinion or a compliance certification.
yourrestaurant.ca
Reading 36 pages…
Tick what your site already does. Be honest, nobody’s watching.
General information, not legal advice. Provincial rules (Alberta, BC, Ontario, Québec) layer on top, and the scan’s provincial checks outside Québec are still being built. A scan always lists what it didn’t check.
$10M
per violation, for a business
Maximum anti-spam penalty. One marketing message sent without proper consent is a violation. $1M for an individual.
Source: CASL, s. 20(4)$100K
per offence
Knowingly failing to report or record a breach, or obstructing the Privacy Commissioner.
Source: PIPEDA, s. 28Personal
liability for directors
People who run the business can be personally liable, and the business answers for messages its staff or agencies send.
Source: CASL, ss. 31 and 53By name
privacy findings are public
The Privacy Commissioner investigates and publishes its findings. The Federal Court can award damages after a finding.
Source: PIPEDA, ss. 16 and 20(2)10 days
to honour an unsubscribe
Business days. Every message sent after the deadline counts as a violation.
Source: CASL, s. 11(3)Per address
consent is proven one by one
You must prove consent for each recipient, with dates and the wording shown. Without records, due diligence isn’t a defence.
Source: CASL, s. 13Statutory maximums, not predictions. Not legal advice.
On any plan. We move your existing site for free. Nothing goes live until you approve it.
Every page, form, tracker and sign-up box, with a plain-language readout.
Consent beside every form, and a privacy policy that matches what you collect. In the code, not a widget.
Preview every change. Approve by text or in your dashboard.
Consents logged, unsubscribes applied right away, a 30-day clock on requests, and a breach log.
Requests to see or delete data are logged, actioned and recorded. Old data clears on schedule.
Servers, keys and operators in Canada, with immutable audit logs. No cross-border assessment needed.
No re-platforming, no IT project. Keep your tools; Nestor runs the compliance layer underneath.
No. The scan and this page are general information. They aren’t a legal opinion or a compliance certification.
Free, no signup. You’ll know exactly what to fix.