Privacy & Security
CBM recognizes
the importance of privacy to our donors and supporters. Our
relationship is founded on trust and we are committed to maintaining
that trust.
This Privacy Policy confirms our dedication to protecting
your privacy by clearly stating how we will maintain the confidentiality
and privacy of the personal information that you have entrusted
to us.
OVERVIEW
What This Policy Covers
This policy covers how we handle and protect the personal
information we collect from you.
Purposes for Collection of Personal Information
CBM collects personal information for the following limited
purposes:
a) To establish and maintain donation information
b) To keep track of donor preferences
c) To keep donors informed of CBM’s work and new opportunities
for support
d) To establish and maintain contact and mailing lists
e) To provide sound advice to those interested in our special
giving programs
f) To provide reliable service to our “Talking Book” lending
library clients
How We Use Your Personal Information
CBM is a registered not-for-profit Canadian Charity engaged
in providing Prevention, Care, and Curative services to blind
and other disabled people in developing countries. We advise
you of our projects, and encourage you to fund and otherwise
support our work. To do this, CBM maintains a mailing list
containing personal information needed to contact you, accurately
accounting for and designating your donations, and also to
provide you with charitable tax receipts.
In addition, for those donors who opt to participate in our
special giving programs, we rely on the personal information
provided to give effective and reliable advice, and to enter
into gifting arrangements.
CBM also operates a lending library of books on tape for
use by visually impaired clients. We collect contact information
on clients in order to provide a reliable service and periodically
solicit donations in support of the service.
How Personal Information is maintained
CBM does not exchange, sell, barter, trade, or give away
your personal information to any other organization.
CBM stores and maintains personal information in strict conformity
with the requirements of the Personal Information
Protection and Electronic Documents Act (“PIPEDA”),
and we demand the same of our contactors, suppliers and volunteers.
PRIVACY PRINCIPLES
CBM adopts the C.S.A. Model Code as its primary principles
for the Collection, Use, Storage and Disclosure of personal
information.
CBM applies the principles of the code as follows:
Accountability
CBM accepts full responsibility for the personal information
it collects, maintains, and keeps under its control. In order
to fulfill this responsibility, CBM has:
a) Designated an official(s) to be responsible for day-to-day
care and control of personal information;
b) Procedures in place to handle the receipt of, and response
to, complaints and inquiries;
c) A policy of training and keeping staff informed on our
policies and practices respecting personal information; and
d) Taken steps to ensure that our donors, supporters, and
the public at large have a clear understanding of our policies
and procedures respecting personal information.
Identifying Purposes
CBM is committed to openness and transparency regarding its
collection and use of personal information. We collect and
use personal information for the following purposes:
(i) To establish and maintain donation information
(ii) To keep track of donor preferences
(iii) To keep donors informed of CBM’s work and new
opportunities for support
(iv) To establish and maintain contact and mailing lists
(v) To provide sound advice to those interested in our special
giving programs
(vi) To provide reliable service to our “Talking Book” lending
library clients
Consent
CBM will ask our donors, supporters, or anyone on our mailing
list prior to using their personal information for any purpose
other than that for which it was originally collected.
The only exception to the foregoing is if we are required
to disclose personal information in order to conform to an
obligation imposed by law or statute.
Limiting Collection
CBM restricts the collection of personal information only
to that information which is necessary for the limited purposes
stated above.
We are committed to collecting personal information only by
fair and lawful means.
Limiting Use, Storage and Disclosure
CBM does not use personal information for purposes other
than those for which it was originally collected, unless consent
was first given by the person from whom the information was
received.
Personal information is retained for only as long as it is
needed and only for the fulfillment of the purposes for which
it was originally collected. We have guidelines on record retention
times, which are also guided by legislative requirements.
Accuracy
CBM is committed to maintaining accurate, complete and up-to-date
personal information as required for the purposes for which
we use it.
Safeguards
CBM has in place safeguards appropriate to the sensitivity
of the personal information in our possession. The safeguards
include but are not limited to:
- Security alarm systems.
- Physical security such as locked offices,
locked cabinet storage, restricted access to areas where
personal information is stored.
- Internal control systems such as restricted
computer access through password protection, firewalls etc.,
staff access on a need-to-know basis, confidentiality agreements,
and limited access to areas where personal information is
stored.
- Contractual agreements regarding protection
and security, equal to or exceeding that provided by CBM,
with third party services which we may use from time to time
to process personal information.
- Elimination of personal information no
longer needed to meet the purposes for which it was collected.
The information is eliminated by means intended to render
the material unrecoverable by others.
Openness
CBM makes information about its policies and practices respecting
the management of personal information available to all interested
parties.
Individual Access
On request we will share the existence, use, and disclosure,
if any, of the requesting individual’s personal information.
We reserve the right to confirm the identity of the individual
seeking access to the information before complying with any
access requests. All requests must be in writing.
Access may be denied for reasons stipulated in PIPEDA.
We will state the reason(s) for the request being denied, and
provide information on any available recourse.
You may challenge the completeness and accuracy of your personal
information in our records.
We commit to amending the information as appropriate. Where
a challenge is not resolved to the donor’s satisfaction,
we will destroy, erase, or make anonymous, that person’s
information under our care and control subject to statutory
records retention requirements.
Challenging Compliance
CBM has a Privacy Compliance Officer who is responsible for
the management of personal information and ensuring compliance
with privacy legislation.
The Privacy Compliance Officer will receive and respond to
information requests, challenges and complaints.
We will reply to all requests in writing in a timely manner,
usually within the 30 days time limit stipulated by PIPEDA.
If complaints are found to be justified we will endeavor to
take appropriate measures and resolve the matter to the satisfaction
of the complainant.
For more information regarding our Privacy & Security,
please write to CBM Canada
The Privacy Compliance Officer
CBM
3844 Stouffville Road,
PO Box 800,
Stouffville ON L4A 7Z9 |
