
Privacy Policy
Last revised date: February 9, 2026
EnStream LP (“EnStream”, “we”, “us” and “our”) is committed to protecting the privacy and security of personal information. Protecting the personal information that we handle is important to our company, our leadership, and all employees within our organization. We actively take steps to ensure that your personal information is safe and secure, including implementing policies and procedures to comply with applicable Canadian privacy laws and regulations, including the Personal Information Protection and Electronic Documents Act (PIPEDA). Personal information is information about an identifiable individual, and can include name, address, date of birth, mobile number, email address, location and other identifiable information.
This Privacy Policy sets out how we collect, use, store, disclose, protect, retain, destroy, and otherwise handle the personal information of those that interact directly or indirectly with our services.
Who We Are
EnStream is a joint venture owned by Bell Mobility, Rogers Communications, and TELUS Communications. We provide a number of services, including (i) mobile connect services, (ii) mobile subscriber verification services to approved merchants and aggregators, using information and services provided by participating mobile network operators (the “Participating Mobile Network Operators) and (iii) other technical solutions to trusted third parties, including financial institutions. EnStream is dedicated to increasing online trust and convenience for consumers and businesses. We achieve this by leveraging real-life, verified identities and network information held by trusted mobile devices and networks, ensuring a secure and reliable experience for all users.
How we are accountable
We maintain a privacy governance program that includes:
- Implementing procedures to protect personal information through use of physical, organizational, contractual, and technical security measures;
- Establishing procedures to receive and respond to inquiries and complaints regarding the disclosure of personal information in collaboration with third party merchants and Participating Mobile Network Operators;
- Training and communication to our staff about this Privacy Policy;
- Accountability for compliance by our Executive Management; and
- Providing information to the public about this Privacy Policy at www.enstream.com.
Personal information we collect and access
We may collect and/or access the following personal information from Participating Mobile Network Operators with your consent:
- Name, address, date of birth, mobile telephone number, email address and other contact information;
- Mobile account status, service provider, device type and related device information;
- Mobile service configuration and features (e.g. call forwarding status) and usage history;
- Domestic and roaming location and history; and
- Other identifiable information related to your mobile account and services.
Purpose for collection and use of personal information
We may collect and/or access personal information for the following purposes:
- To enable mobile payment and trusted service management solutions;
- To enhance identity assurance and fraud detection services related to mobile users;
- To streamline enrolment with third party services based on mobile number and related personal information;
- To conduct internal reviews and audits;
- To conduct investigations related to complaints;
- To manage and develop our business and operations;
- To develop, enhance and offer future products and services; and
- To comply with regulatory and legal obligations.
We do not support any applications related to database marketing. Further, we will not sell, trade or rent personal information to any third party unless we receive your consent. We do however reserve the right to use, disclose, sell, trade, or rent aggregated information, provided that the aggregated information is not linked to any specific individual and does not constitute personal information.
Obtaining consent
Third parties who use our services are required to confirm that they have collected your consent by identifying the specific personal information requested and its intended purpose before the time the information is collected. They are contractually bound to implement all such necessary technical, procedural, and commercial means in order to ensure that consent is properly collected and auditable.
By providing consent to such third parties, you authorize your Participating Mobile Network Operator, or other applicable third party, to disclose the specific personal information, through us, for the purposes identified at such time consent was collected. You may withhold your consent and/or elect not to use the services supported by us. You may also withdraw your consent at any time, subject to applicable contractual and legal restrictions and reasonable notice.
Access and Correction Requests
If you wish to access your personal information, you must make a request in writing. To respond, we require sufficient details to understand your specific request, including a full description of the information you wish to access and the period relevant to the request. Before providing you with any information we will verify your identity and confirm that we understand your request. Once we have confirmed the details of your requests and validated your identity, we will respond within the prescribed timeframes set out in applicable Canadian privacy law and confirm if EnStream holds any of your personal information and if so details in respect of such personal information.
Limiting Collection, Use, Disclosure and Retention
We will not use or disclose personal information for purposes other than those for which it was collected, except with your consent or as required by law.
As a general rule, we will only hold personal information temporarily, often instantaneously, in order to process specific transactions. After the purpose has been fulfilled, such personal information will be destroyed immediately in a confidential and secure manner. While we may retain records regarding the date and time of specific transactions for audit and analytics purposes, none of the retained information contains personal information.
In some cases, personal information collected by us may be processed outside of Canada to support our operations, and may therefore be subject to the legal jurisdiction of these countries. As a result, that country’s courts, government or law enforcement agencies could obtain disclosure of such information under that country’s laws. The information is provided only after detailed contracts are set out with the companies that provide us with these services. Moreover, the information may only be used for the purposes of providing the services in question. When outsourcing certain functions, we strive to minimize the personal information processed outside of Canada. Wherever possible, we anonymize any personal information processed outside Canada, such that the data cannot be associated with identifiable individuals.
Security and safeguards
We protect personal information using physical, electronic or procedural security measures appropriate to the sensitivity of the information in our custody or control. These security measures include safeguards to protect against loss or theft, as well as unauthorized access, disclosure, copying, use or modification, including the use of encryption within our systems and on any communications links between our systems, systems at Participating Mobile Network Operators, and systems at all third parties who use our services.
We have established secure data destruction, media disposal and secure wipe practices and procedures in accordance with industry accepted best practices in order to dispose of any personal information we no longer need after delivering our services.
Changes to the Privacy Policy
This Privacy Policy may be updated periodically to reflect changes to our personal information practices, to reflect company and customer feedback, and/or changes to privacy legislation. Our most current version of the Privacy Policy is available online at www.enstream.com/privacy-policy.
Questions or comments
iIf you have any questions, comments or complaints about this Privacy Policy, please feel free to contact us at:
EnStream LP
55 University Avenue, Suite 903
Toronto, Ontario M5J 2H7
Canada
Attention: General Counsel and Privacy Officer.
Email: info@enstream.com
We will investigate all complaints concerning compliance with the Privacy Policy. If a complaint is found to be justified, we will take appropriate measures to resolve the complaint including, if necessary, amending its policies and procedures. You will be informed of the outcome of the investigation.