Under Law 25, personal information includes any information related to an identified or identifiable person. The types of personal information that we may collect include, but are not limited to:
- Your first name and last name;
- Your date of birth, age, gender, citizenship;
- Your phone number;
- Your residential address;
- Your e-mail address;
- Your IP address;
- Credit card, money order or cheque information;
- Banking information, in the case of donors who give monthly through automated account withdrawals;
- Responses to program-specific registration questions;
- Medical information, including but not limited to, your medical symptoms and conditions, health screenings, exercise habits and other health habits, and your family medical history; and
- Any other personal information that we did not request from you (such as personal information you voluntarily provide in an e-mail message to us or in a comments box on our site).
We may collect your personal information when you voluntarily provide it to us by using the Services. For example, we may ask you to provide personal information if you:
- Use our Services;
- Set up a user account;
- Sign in to your account;
- Make a donation to the Foundation;
- Purchase an item from the site;
- Use our e-tool features;
- Send a question or comment to the Foundation by e-mail, phone, fax, or through our site;
- Communicate with Foundation representatives by phone or in person;
- Take part in an event organized by or associated with the Foundation;
- Post comments, messages, or other content on our site, including but not limited to, via our e-tools, blogs, Contact Us page, or other features of the site that permit you to post your comments, messages, and content;
- Subscribe to electronic communications tools, such as our e-newsletter; and
- Otherwise, use features of our site that require personal information.
We limit the collection of personal information to that which is necessary to fulfill the purposes identified in this Policy, and we collect, use, and disclose your personal information in accordance with it.
The Foundation does not knowingly collect information from children or other persons under the age of 14. If you are a minor under the age of 14, please do not provide us with personal information without the express consent of a parent or guardian. If you are a parent or guardian and you know that your children have provided us with personal information, please contact us. If we learn that we have collected personal information from minor children without verification of parental consent, we will take steps to remove that information from our servers.
We retain your personal information only for as long as we need it to fulfill the purposes for which it was collected and to comply with our legal obligations. We may also use and disclose your personal information to third parties under the following limited circumstances:
- With service providers that help with the Foundation’s operations and services including, without limitation, for customer services, monitoring and analyzing site activity, and operating and maintaining the site. Such service providers and partner companies may only use your personal information for the purposes described in this Policy;
- When necessary to protect the safety, property or other rights of the Foundation, its representatives, and users of the Services, including to detect and protect against fraud;
- With other charities, through an exchange list brokerage, unless you have opted out. Specifically, the Foundation may trade your name and mailing address, but never your e-mail address, with other charities. You will always be allowed to opt-out.
- With your consent; or
- When otherwise required or permitted by law.
If you voluntarily submit or post any information, photographs or other content to any of the Foundation’s forums, e-tools, X (formerly Twitter) pages, Facebook pages or other social networking pages/sites, your personal information, including, without limitation, your user name and e-mail address, may be automatically included in the posting. This information may be collected and used by others.
To provide you with Services, we may use service providers, data processors and other third parties to perform certain services on our behalf. These third parties may store, process and transfer personal information on servers located outside Canada, in jurisdictions whose data protection laws may differ from those of Canada, which may include the United States of America. As a result, personal information may be subject to access requests from governments, courts, or law enforcement in those jurisdictions, according to the laws in those jurisdictions. For example, information may be shared in response to valid demands or requests from government authorities, courts and law enforcement officials in those countries. Subject to applicable laws in such other jurisdictions, we will use reasonable efforts to ensure that appropriate protections are in place to require our third parties to maintain protections on personal information that are equivalent to those that apply in Quebec.
If you make a credit card payment through the Foundation, we request the information reasonably needed by us to complete the processing of the transaction. For one-time payments, when you provide payment information, such as credit card numbers, credit card security codes, the name on your credit card and the expiration date, we transmit this data directly from you to the credit card processing company; the Foundation only stores the credit card type, the last four digits of the credit card number and the expiration date in the event an incorrect payment needs to be refunded. The Foundation will send you a confirmation email to confirm successful credit card charges.
For pre-authorized debits for recurring payments, all information is stored by the Foundation or third parties acting on our behalf, in an encrypted manner (i.e., coded data) such that only those who require access to update financial information can see the credit card number. The encrypted data is provided at the appropriate intervals to the credit card processing company. We may also share your personal information with third parties including credit card processing companies in order to bill you, but we do not provide any more information than reasonably necessary for this purpose.
As you interact with the Services, we may use automatic data collection technology and services that record and collect information that identifies your computer, tracks your use of this site and collects certain other information about you and your Internet navigation habits. This data collection technology may include cookies, web beacons and other similar devices on this site to enhance functionality and navigation for our visitors.
A cookie is a small data file that is placed on the hard drive of your computer so that your computer will “remember” information when you visit a site. Web beacons and tags are small strings of code that are used in conjunction with a cookie and allow us to record activity on our site. Internet tags, graphic tags and similar web beacon type functions allow us to count the number of users who have visited a particular web page or to access certain cookies. We may use web beacons on this site to count users and to recognize users by accessing our cookies. Being able to access our cookies allows us to personalize this site and improve your experience at this site. We may also include web beacons in HTML-formatted e-mail messages that we send to determine which e-mail messages were opened.
Information tracked through these mechanisms includes, but is not limited to:
- Your IP address;
- The type of web browser and operating system being used;
- The pages of the Site that a user visits; and
- Other sites that a user visited before visiting this site.
Note that only the Foundation can use web beacons on its site. You can reject or disable cookies by managing your browser settings and following the directions provided in your Internet provider’s help file. Note that if you disable cookies, you may be unable to access some customized features on this site. Cookies and web beacons do not collect or contain any of your personal information.
Our site uses Google Analytics, a web analytics service of Google, Inc. (referred to as “Google”), or comparable technology. Google Analytics uses “cookies,” which are text files stored on your computer, to analyze how you use our site. The information generated by the cookies about your use of our site (including your IP address) is sent to a Google server in the United States and stored there. Google will use this information to evaluate your use of our site, compile reports on site activity for our site operators, and to provide other site activity related to Internet services. Additionally, Google may transfer this information to a third party when required by law or in the case of a third party processing information on Google’s behalf. In no case will Google use your IP address in connection with any other information held by Google. You can set your Internet browser to prohibit the installation of cookies, although we must point out that some features and functions of our site will then be unusable.
By using our site, you consent to the processing of data about you collected by Google in the manner described and for the above-mentioned purpose. Consent to the collection and storage of data can be withdrawn at any time in the future by clicking the following link: https://tools.google.com. Given the ongoing debate concerning the use of analytical tools using full IP addresses, we wish to point out that our site uses the “Anonymize IP” function of Google Analytics, which works with a shortened form of IP addresses to avoid direct personal identification.
Furthermore, we use the cookies to carry out frequency assessments, page usage assessments, and marketing assessments. For the above-mentioned assessments, we use this cookie information without a link to your personal information, so it is completely anonymous.
You can set up your Internet browser so that you are notified when cookies are stored, you can decide in each individual case whether you want to accept cookies, or you can refuse to accept any cookies. However, if you do not accept cookies, you may be restricted in how you are able to use our site. You can delete cookies that are already stored on your hard drive at any time. You will find more details on how to do this in your Internet browser operating guide.
To help protect the confidentiality of your personal information, the Foundation employs security safeguards appropriate to the sensitivity of that information. We maintain reasonable technical, physical and administrative security safeguards to protect your personal information against loss, theft and unauthorized access. Any personal information that you provide to us is exchanged on a secure server. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we are committed to protecting your personal information, we cannot ensure or warrant the security of any information, including personal information, that you provide to us.
We take reasonable steps to verify your identity before granting you access to your account on our site; however, you are solely responsible for maintaining the secrecy of your username, password and any other account information. We also take reasonable steps to ensure that the Foundation’s employees and volunteers are aware of the importance of maintaining the confidentiality of personal information and that unauthorized persons do not gain access to personal information that we have disposed of or destroyed.
You can request access to the personal information that we hold about you by contacting us using the means set forth below, and we will respond within the periods provided for under applicable laws. We will need to verify your identity before providing you with the personal information we hold about you. There is no cost for such access requests unless you require copies of records. We may not be able to provide you with access to your personal information if the information cannot be separated from the personal information of others, cannot be disclosed for reasons of security or commercial confidentiality, or is protected by legal privilege. If we cannot provide you with access to your personal information, we will advise you of the reasons why access is being denied, unless we are prohibited by law from doing so.
You may request to update and change your personal information by contacting us using the means set forth below. We will endeavor to correct or complete any personal information which you advise us is inaccurate or incomplete. Where appropriate, the amended information will be transmitted to third parties having access to such information.
The Foundation complies with Canada’s anti-spam legislation (CASL) and we will not send you electronic communications in contravention of this law.
We will ensure that each e-mail message includes an opt-out feature and instructions on how to unsubscribe if you no longer wish to receive e-mail from the Foundation. You can unsubscribe using the link included in the e-mail message or by e-mailing us at email@example.com or calling us at 514-871-1717. If you do not expressly consent to receiving electronic communications, we will only communicate with you for the limited purposes permitted under CASL.
This Policy may be amended by the Foundation from time to time at its sole discretion and without prior notice to you. The collection, use and disclosure of your personal information by the Foundation will be governed by the version of this Policy in effect at that time. We will post the most current version on our site and will indicate at the top of this page the date this Policy was last revised. Please check back from time to time to ensure that you are aware of any updates or changes to the Policy. By continuing to access or use this site after any such changes, you consent to the Policy as revised.
By using our Services and providing us with your personal information, you agree that the Foundation may collect your personal information and you voluntarily consent to the collection, use, disclosure, and transfer of your personal information in accordance with this Policy. If you do not agree with any terms of this Policy, please do not use our Services or provide us with any personal information. If you do not understand the nature, purpose and consequences of collection, use and disclosure of your personal information by the Foundation, please do not use our Services or provide us with any personal information, and contact us using the means set forth below so that we can address your questions or concerns.
Subject to legal and contractual requirements, you may refuse or withdraw your consent to certain of the purposes identified in this Policy at any time by contacting us using the means set forth below. If you refuse or withdraw your consent, you acknowledge that the Foundation may not be able to provide you or continue to provide you with certain Services or information that may be of value to you.
We welcome your feedback. If you have questions, comments or concerns about this Policy, or would like to do any of the following:
- See the personal information that you have already sent us so that you can correct or update it, or have it deleted from our records;
- Ask that we not stop sending you electronic communications or otherwise contacting you; or
- Report any violation of this Policy;
Our Privacy Officer is Karine-Iseult Ippersiel, who may be reached as follows:
- By mail at 279 Sherbrooke Street West, Suite 305, Montreal, Quebec H2X1Y1;
- By phone at 514 871-1717 / Toll-free: 1 877 990-7171;
- By e-mail at firstname.lastname@example.org.
The Privacy Officer may delegate their duties to Simon Boisjoly, Manager, Donations and Philanthropic Relations, 279 Sherbrooke St. W., Suite 305, 514 871-1717, ext. 233.
If, after contacting us, you feel that your rights under Law 25 have not been respected, you may contact the Commission d’Accès à l’Information du Québec.
Effective date and amendments