Policy Statement
SelfDesign Learning Foundation (SDLF) is committed to protecting the personal information in its custody and/or under its control.
Definitions
Business Contact Information – means information to enable an individual at a place of business to be contacted and includes the name, position name or title, business telephone number, business address, business email or business fax number of the individual.
Personal Information – means recorded information about an identifiable individual excluding business contact information.
Policy
SDLF contractors, volunteers, and Board members are required to demonstrate compliance with SDLF’s privacy obligations, principles, and processes as outlined in this policy.
Protocol
Collection of personal information
SDLF collects personal information which relates directly to its operational and/or administrative mandate for the purpose of providing its programs and services, following BC’s Personal Information Protection Act (PIPA). Adhering to PIPA, SDLF follows its key principles, including: Requiring consent for and providing the purpose for collection of personal information; Limiting collection, use, and disclosure of personal information; Ensuring accuracy and security of personal information; and Providing access to one’s personal information and to a complaints process. In most circumstances, SDLF collects personal information directly from the relevant individual. Indirect collection occurs in very limited and specific circumstances, or as required by law.
Website visitors
Like most website operators, SDLF collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. SDLF’s purpose in collecting non-personally identifying information is to better understand how SDLF’s visitors use its websites.
SDLF also collects potentially personally-identifying information like Internet Protocol (IP) addresses for logged in users and for users leaving comments on our sites. SDLF only discloses logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described above.
Cookies
A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. SDLF uses cookies to help SDLF identify and track visitors, their usage of SDLF’s websites, and their website access preferences. SDLF visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using SDLF’s websites, with the drawback that certain features of SDLF’s websites may not function properly without the aid of cookies.
Gathering of personally-identifying information via our website
Certain visitors to SDLF’s websites choose to interact with SDLF in ways that require SDLF to gather personally-identifying information. The amount and type of information that SDLF gathers depends on the nature of the interaction. For example, visitors who sign up to receive SDLF’s newsletter are asked to provide their name and email address. Those who engage in transactions with SDLF – by purchasing content from the SDLF store, for example – are asked to provide additional information, including as necessary the personal and financial information required to process those transactions. In each case, SDLF collects such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with SDLF. SDLF does not disclose personally-identifying information other than as described below. And visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.
Aggregated statistics
SDLF may collect statistics about the behavior of visitors to its websites. For instance, SDLF may use screened spam to help identify spam. SDLF may display this information publicly or provide it to others, however, SDLF does not disclose personally-identifying information other than as described below.
How personal information is used
Personal information is used only by individuals authorized by SDLF to fulfill the purpose for which it was originally collected or for a use consistent with that purpose.
Compliance with Canadian anti-spam legislation
SDLF will never send spam emails. The Canadian anti-spam legislation requires that all organizations that send electronic communications to Canadians provide an opt-in regime prior to sending electronic communications. SDLF will only send electronic communications (including emails, text messages, and social media messages) to those individuals who have provided their consent to receive electronic communications.
Personal information disclosure
SDLF treats personal information in its custody or under its control with confidentiality. Personal information is only disclosed for the purposes of our programs and/or services for which it was collected, as required by law, or in specific circumstances with consent of the relevant individual. SDLF does not sell, share, or disclose personal information to others for any type of mailing list.
SDLF may offer links to other sites that are not operated by us as an option to enrich service provision. SDLF does not disclose your personal information to these third-party sites. However, a user’s visit to a third-party site may result in the user disclosing their personal information to the third-party site. If users choose to use offered links to third-party sites, any personal information the user chooses to disclose during their time on the third-party site is not protected by SDLF’s Privacy Policy. SDLF strongly advises users to review the Privacy Policy of every site they visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Safeguarding of personal information
SDLF administers security standards to ensure the personal information in its custody or under its control is secure. Individuals are responsible for ensuring the physical and technical security of all data (including data at rest or in transit) and must meet all applicable security standards.
Retention of personal information
SelfDesign utilizes records retention policies. If an individual’s personal information is used to make a decision, the personal information will be kept for a minimum of one year after the decision has been made.
Related Documents
- Personal Information Protection Act