When a business operates online, whether through a website, mobile application, or digital platform, it enters into a legal relationship with every user who accesses that digital space. The documents that govern this relationship are the terms of service and privacy policy, and while these documents have become so ubiquitous that users often click past them without reading, they represent binding contractual arrangements that courts across Canada will enforce, provided they meet certain fundamental legal requirements. For Canadian business owners operating in digital and e-commerce contexts, understanding what these documents must contain to be legally binding is not merely a matter of best practice but a question of whether the protections and obligations outlined in those documents will actually hold up when disputes arise.
The foundation of terms of service and privacy policies lies in basic contract law principles that apply across Canada, though with important variations between common law provinces and Quebec's civil law system. In common law provinces such as British Columbia, Alberta, Saskatchewan, Ontario, and the Atlantic provinces, a valid contract requires offer, acceptance, consideration, and an intention to create legal relations. When a user accesses a website or downloads an application, the terms of service represent an offer from the business owner, and the user's continued use of the service or explicit agreement constitutes acceptance. In Quebec, the Civil Code of Quebec governs contract formation, requiring consent of the parties, capacity to contract, a cause for the obligation, and an object for the contract. While the terminology differs, the practical effect is similar: there must be a meeting of minds, the terms must be brought to the attention of the party being bound, and the agreement must be formed in a manner that demonstrates genuine consent rather than imposition.