Introduction
DAWN Canada (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal data in compliance with applicable laws, including GDPR and Quebec’s Law 25. This policy applies to our website and all online services we offer.
1. Data We Collect and Why We Collect It
We collect personal data for the following purposes:
Mailing List Sign-Up:
- Purpose: To provide relevant information by email.
- Data Collected: Name, email, region (province).
Donation:
- Purpose: To issue tax receipts (when available), coordinate donation gift delivery (if applicable), and re-engage by email (if requested).
- Data Collected: Name, email, address, payment details.
Event Registration:
- Purpose: To identify attendees, coordinate travel and lodging (if applicable), and provide accessibility, dietary or other accommodations.
- Data Collected: Name, email, phone number, address (if travel required), payment details (if applicable).
Webinar Registration:
- Purpose: To identify participants, understand attendee profiles, share webinar-specific information, and re-engage by email if requested.
- Data Collected: Name, email, region, associated organization.
Research Project Participation:
- Purpose: To contact participants, assess eligibility, and meet project objectives.
- Data Collected: Name, email, phone number, personal information governed by research ethics rules.
Membership Application:
- Purpose: To contact applicants, assess eligibility, and send communications.
- Data Collected: Name, email, phone number, address, organization, disability self-identification, and other demographics (age, race).
Membership Portal Sign-up and Usage:
- Purpose: For community-building purposes.
- Data Collected: Profile photo, name (optional display), nickname, organization, title, region, email, projects/initiatives, content shared, social media accounts.
2. Access to Your Data
Access to personal data is limited to authorized personnel based on roles:
- Mailing List Sign-up: Communications Department.
- Donation: Communications, Outreach, and Finance.
- Event Registration: Administrative Department.
- Webinar Registration: Communications Department.
- Research Project Participation: Research team working directly on the project.
- Membership Application: Membership Team and Communications.
- Membership Portal Sign-up and Usage: Membership Team and Communications.
3. Data Retention Policy
We retain personal data only as long as necessary:
- Mailing List Sign-up: Until unsubscribed or deleted, reviewed every 2–3 years.
- Donation: Retained for 7 years for tax purposes, then anonymized or deleted.
- Event Registration: Retained for up to 1 year post-event; specific accommodation details are deleted once no longer needed.
- Webinar Registration: Retained for 1 year post-webinar unless consent for future contact is given.
- Research Project Participation: Retained for the project duration plus 3–5 years per ethics guidelines, then anonymized or deleted.
- Membership Application: Retained during active membership, with up to 2 years post-membership retention for queries, then anonymized or deleted.
- Membership Portal Sign-up and Usage: Retained during active membership, reviewed annually, deleted 1–2 years post-membership.
4. Third-Party Data Processors
We use trusted third-party services to process data:
- Zeffy: For donations.
- Zoom: For webinar registrations.
- Mailchimp: For mailing lists.
- WordPress: For the membership portal.
- Microsoft SharePoint: For secure cloud storage.
- Google Analytics: For anonymized cookies.
Each third-party processor follows industry standards for data security and privacy.
5. Data Security
We take the following measures to protect your data:
- Encryption: All data transmitted between our site and your device is encrypted using SSL/TLS protocols.
- Access Control: Personal data access is role-based, ensuring only authorized personnel have relevant data access.
- Data Minimization and Anonymization: We regularly review data to minimize collection and anonymize where identification is unnecessary.
- Secure Storage: All digital data is stored on secure, access-restricted servers, with cloud storage on Microsoft SharePoint.
- Regular Audits and Data Reviews: We conduct audits and reviews for data accuracy, user consent, and compliance with retention policies.
- Employee Training: Staff and contractors receive training on data privacy and security.
- Cookies and Tracking: Google Analytics is used to track anonymized website usage data; no personal information is collected via cookies.
6. Data Access, Correction, and Deletion Requests
You have rights regarding your data:
- Access: Request a copy of your personal data.
- Correction: Request updates to inaccuracies in your data.
- Deletion: Request deletion of your data, subject to legal requirements.
To exercise these rights, contact us at communications@dawncanada.net. We will acknowledge and respond to your request within 30 days. Verification of identity may be required for security.
7. Data Collection from Minors
We do not knowingly collect data from individuals under 18 without verifiable parental consent. If we become aware of such collection, we promptly delete the information. Parents or guardians who believe we may have collected data from a minor can contact us to request deletion.
8. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect legal and operational changes. We encourage you to review this page regularly for the latest information on our privacy practices.
Contact
For questions about this Privacy Policy or your data, please contact us at communications@dawncanada.net.