Canadian privacy legislation defines “personal information” broadly as information about an identifiable individual or as information that allows an individual to be identified. For the purposes of this policy, personal information means information about an identifiable individual as defined from time to time in applicable privacy legislation. Generally speaking, personal information does not include what is considered business contact information: name, title or position, business address, telephone number, facsimile number or e-mail address.
The Foundation gathers and uses personal information for the following purposes:
The Foundation’s Privacy Practices
- To solicit and process donations and to issue tax receipts
- To process applications for funding (e.g. financial assistance, grants, bursaries, subsidies) from The Foundation
- To process applications for services (e.g. peer support, attendance at camp, etc.)
- To process applications for membership or to volunteer
- To provide information (e.g. patient manual, brochures, newsletters, etc.)
- To compile profiles on directors and members of committees
- To occasionally exchange direct mail lists with other charities to reduce costs
- For any other purpose to which consent is given
The Foundation shall in all respects comply with applicable privacy legislation. The Foundation’s privacy practices are designed to achieve this. Therefore, in the course of collecting, using and storing personal information, the Foundation will ensure that:
- Consent to the collection, use, retention and disclosure of personal information must always exist. In obtaining consent, the purpose(s) for the collection, use and/or disclosure will be obvious by the very nature of the transaction or, will be as described in this policy or will be stated either at the time or before the information is collected. Consent can be either express or implied and can be provided directly by the individual or by an authorized representative. Express consent can be given orally, electronically or in writing. Implied consent is consent that can reasonably be inferred from an individual’s action or inaction.
- Any further use of this information is subject to consent, and the Foundation routinely offers individuals the opportunity to opt not to have their information used for purposes beyond those for which it was explicitly collected.
- Information will be carefully protected from inappropriate or unauthorized use.
- Internally, access to personal information is based only on the need to deal with the information for the reason(s) for which it was collected.
- Personal information is stored in secured locations and on servers controlled by The Foundation or at the offices of our service providers. Specific safeguards (physical, organizational and technological) are in place to ensure that the information is not shared or disclosed more widely than is necessary to achieve the purpose(s) for which it was collected.
- Measures are taken to ensure that the integrity of this information is maintained.
- Personal information is retained only for as long as is necessary to fulfill the purpose(s) for which it was collected and to meet specific legal obligations. When personal information is no longer needed (relating to the reason(s) for which it was collected), it will be appropriately destroyed.
- Individuals have the right to access their personal information, which the Foundation has on file and to challenge its accuracy, if necessary.
- From time to time, the Foundation may disclose personal information to:
1. Service providers, including an organization or individual retained by The Foundation to perform functions on its behalf (e.g. data processing, office/professional services, document management, bulk mailings, etc.)
2. Volunteers/staff who act as adjudicators on behalf of the Foundation in the assessment of applications for funding or to assess applications to volunteer.
3. Other charitable organizations, with consent.
4. Any third party or parties, where consent to such disclosure is provided or where disclosure is required or permitted by law.
The Foundation’s Website
- Where personal information is transferred to outside service providers, all reasonable steps will be taken to ensure that any such provider has personal information procedures and policies in place that are at least comparable to those of the Foundation.
The Foundation uses the appropriate technological safeguards (e.g. robust firewalls, virus protection, passwords, encryption software) to protect all personal information which is received online.
Any person whose personal information is held by the Foundation has:
- the right to know of the existence of such personal information and to have access to that information to ensure that it is accurate, and
- the right to complain if that personal information is improperly collected, used, stored or disclosed.
- A Local Privacy Officer is available at each Branch and the National Office of the Foundation to administer this Policy and related procedures, and to deal with requests for access to information.
Requests in writing can be sent to:
The Kidney Foundation of Canada National Office
ATTN: Chief Privacy Officer
310-5160 Decarie Blvd.,
Montreal, QC H3X 2H9