MakerHub is designed for institution-directed use, not consumer self-service use.
Each deploying institution is responsible for determining the legal basis for collection, use, disclosure, parent or guardian notice, consent, records retention, and cross-border transfer analysis required in its jurisdiction.
For Alberta public-body deployments, collection should be limited to personal information authorized by law and reasonably necessary for the program or activity, commonly under section 4(c) of the Protection of Privacy Act.
Personal information should be protected with reasonable security arrangements and used or disclosed only as authorized by the Protection of Privacy Act, the Access to Information Act, and the institution's own statutory authority, privacy management program, and collection notices.
Institutions remain responsible for privacy impact assessments, family notice or consent where required, and the internal access or correction request process that applies to the deployment.