Privacy Policy.

1 Introduction

1.1 Purpose of the Policy

The Canadian Association of the Last Luminary (CALL) is committed to protecting the
privacy and security of the personal information we collect from our members, donors,
volunteers, and other stakeholders. This Privacy Policy outlines how we collect, use,
disclose, and safeguard your personal information in accordance with the Personal
Information Protection and Electronic Documents Act (PIPEDA) and applicable
provincial privacy laws in Canada.

1.2 Commitment to Privacy

We value your privacy and strive to handle your personal information with the utmost
care, transparency, and responsibility. By joining CALL or interacting with our
services, you agree to the practices described in this policy.

2 Information We Collect

2.1 Types of Personal Information Collected

• Basic Identifiers: Full name, date of birth, gender, address, postal code,
phone number, and email address.
• Sensitive Information: Religious affiliation, educational background,
employment information, marital status, spouse and children’s details,
and financial information for donations.
• Engagement Information: Membership status, proposer details, event
participation, notification preferences, and volunteer activities.

2.2 Methods of Collection

• Membership application forms (online).
• In-person registrations at events and activities.
• Communication via email, phone, or mail.
• Donations and associated financial transactions.
• Information provided by proposers and other members, with consent.

3 How We Use Your Information

We use your personal information for the following purposes:
• Managing memberships, applications, and renewals.
• Communicating with you about upcoming events, news, and updates.
• Processing donations, managing financial records, and issuing tax receipts.
• Facilitating volunteer activities and coordinating community engagement.
• Administering educational, cultural, and religious programs and activities.
• Personalizing your experience by providing access to specific benefits
and resources.
• Complying with legal and regulatory requirements.

4 Consent

4.1 Obtaining Consent

We obtain your consent to collect, use, and disclose your personal information.
Consent may be explicit (e.g., signing a form) or implied (e.g., participation in
CALL activities), depending on the context and sensitivity of the information.

4.2 Withdrawing Consent

You have the right to withdraw your consent at any time. To do so, please contact us
using the information provided in the Contact Information section. Withdrawal of
consent may limit your ability to access certain services, but it will not affect the
lawfulness of any processing carried out before your request.

5 Sharing Your Information

5.1 Third-Party Service Providers

We may share your personal information with third-party service providers who
assist us in our operations, such as payment processors, email marketing services,
and IT support. These providers are contractually obligated to protect your
information and are prohibited from using it for any other purpose.

5.2 Legal Requirements

We may disclose your personal information if required by law or to comply with legal
processes, such as court orders, subpoenas, or regulatory obligations.

5.3 Community Engagement

CALL is a community-driven organization, and members’ names and general
involvement may be shared within the community for purposes such as event
planning and recognition, with your prior consent.

6 Data Security

6.1 Protection Measures

We implement a variety of measures to safeguard your personal information through
the third-party software services we use, which have the following security measures
in place:
• Encryption of sensitive data during storage and transmission.
• Secure storage systems with restricted access controls.
• Regular security assessments and audits to identify and mitigate risks.

6.2 Breach Response

In the event of a data breach, we have an incident response plan in place to
promptly address the issue, mitigate harm, and notify affected individuals and
relevant authorities as required by law.

7 Access and Correction

7.1 Access to Information

You have the right to request access to the personal information we hold about you.
To make a request, please contact us using the information provided below.

7.2 Correction of Information

If you believe that any information we hold about you is inaccurate or incomplete,
you may request that we correct it. We will respond to your request within a
reasonable timeframe.

8 Data Retention

8.1 Retention Period

We retain your personal information only for as long as necessary to fulfill the
purposes outlined in this policy or as required by law. Membership information,
including engagement history, will be deleted when you are no longer a member,
but may be retained for archival and historical purposes with appropriate
safeguards.

8.2 Secure Disposal

When personal information is no longer needed, we ensure its secure disposal
through methods such as shredding physical documents and permanently deleting
electronic files.

9 Your Rights

Under PIPEDA and applicable provincial laws, you have the following rights regarding
your personal information:
• The right to access your personal information.
• The right to request corrections to your personal information.
• The right to withdraw consent for the collection, use, or disclosure of your
information.
• The right to lodge a complaint with the Privacy Commissioner of Canada if you
believe your privacy rights have been violated.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our
practices or legal requirements. Any changes will be communicated to you through
our website or other appropriate channels. Your continued use of our services after
the changes have been made will require your acceptance of the updated policy.

11 Contact Information

If you have any questions or concerns about this Privacy Policy or our data
practices, please contact us at:
• Email: info@callassociation.ca
• Website: https://callassociation.ca/

12 Additional Information

12.1 Accessibility

We strive to make our Privacy Policy accessible to all members, including those
with disabilities. If you require the policy in an alternative format or have specific
accessibility needs, please contact us using the information provided above.

12.2 Third-Party Services

Our website and services may utilize third-party services (e.g., payment processors,
emailing tools). These third parties are required to comply with Canadian privacy
laws and are governed by their own privacy policies.

12.3 Record-Keeping

We maintain records of consent, data handling practices, and any data breaches as
required by PIPEDA and applicable provincial laws.

12.4 Legal Counsel

This Privacy Policy has been reviewed by legal counsel to ensure compliance with
Canadian privacy laws. However, we recommend consulting with a privacy lawyer or
legal expert for specific legal advice.