“collection” means gathering, acquiring, noting or obtaining by any other means.
“consent” means giving permission for the collection, use, disclosure and retention of personal information for certain purposes. Consent can be either express or implied and can be given orally, electronically or in writing. Implied consent is consent that can be reasonably inferred from an action or inaction.
“disclosure” means transferring, or otherwise making available, to someone else.
“donor” means an individual who donates money or securities to the Institute or has indicated to the Institute an intention to donate.
“participant” means an individual who is a current or former participant or volunteer in the Institute’s activities such as Taoist Tai Chi® practice.
“personal information” means any information, recorded in any form, about an identifiable individual.
“retention” means storage.
“use” means treatment, handling and management.
The Institute takes seriously its responsibility to protect the personal information in its possession. The Institute is accountable to participants and donors to adopt and regularly review its privacy practices to ensure they align with reasonable business practices appropriate to the level of sensitivity to safeguard personal information against loss or theft, unauthorized access, alteration or disclosure. Where the Institute chooses to have certain services, such as data or payment processing, provided by third party service providers, the Institute selects the service provider carefully. The Institute takes all reasonable precautions to ensure that the service providers protect personal information.
4. Identifying Purposes
The Institute collects, uses, discloses and retains personal information only for certain purposes that it identifies to you. The purposes for which personal information is collected will be identified to you at or before the time the personal information is collected. With your knowledge and consent, the Institute collects information about you for the following purposes:
● to establish your identity;
● to administer your involvement with the Institute, including your donations, event participation and volunteering and to contact you about your continued involvement;
● to respond to your information requests; and
● periodically to send you information on the Institute or invite you to events that are aligned with your interests.
6. Limiting Collection, Use, Disclosure, and Retention
Use: The Institute uses the personal information provided by participants and donors in accordance with the purposes identified in section 3 above. These purposes include: (a) managing the Institute’s relationships with participants through assisting participants in performing their volunteering roles and responsibilities, and keeping them informed about relevant Institute activities; and (b) managing the Institute’s relationship with donors through processing donations, issuing tax receipts, confirming renewal of giving, maintaining a donation history, keeping donors informed about giving opportunities, and complying with legal or regulatory requirements.
Disclosure: The Institute does not sell, trade or rent to third parties any personal information it collects. In certain rare circumstances, the Institute may be obliged to disclose personal information without consent where required by law or by order or requirement of a court, administrative agency or other governmental tribunal. Where the Institute is legally obliged to disclose personal information without consent, it will not disclose more personal information than is legally required in the circumstances.
Retention: The Institute retains personal information as long as necessary for the fulfillment of the identified purposes for its collection or as otherwise necessary to comply with applicable laws. When personal information is no longer necessary or relevant for the identified purposes, or is required to be retained by applicable laws, the Institute will take steps to have it deleted, destroyed, erased, aggregated or made anonymous. The Institute uses reasonable business practices to ensure it has adequate controls, schedules and practices for information and records retention and destruction which apply to personal information.
The Institute endeavours to ensure that any personal information provided to it by participants or donors is as accurate, current, and complete as necessary in order to meet the reason for which it was obtained.
The Institute protects the personal information it collects by security safeguards appropriate to the sensitivity of the information. The methods of protection include (a) physical measures such as locked filing cabinets and restricted access to offices, (b) organizational measures such as security clearances and limiting access on a need-to-know basis, and (c) technological measures such as the use of password and encryption. The Institute makes its employees aware of maintaining the confidentiality of personal information. The Institute also takes care in destroying personal information to prevent unauthorized parties from gaining access to it.
10. Individual Access
An individual may request access to and review of personal information about themselves that is in the possession of the Institute. Access will be provided within a reasonable business timeframe at no or minimal cost to the individual unless access is declined for one of the reasons described below. The Institute will need to confirm your identity prior to disclosing any personal information to you. The Institute reserves the right to decline access to personal information where:
- the identity of the person requesting access cannot be confirmed;
- the personal information is not readily retrievable and the burden or cost of providing it would be either prohibitive or unduly disproportionate to the nature or value of the information;
- the requested personal information does not exist, is not held, or cannot be found;
- disclosure of the personal information would compromise the confidentiality or commercial proprietary interests of another person or threaten the safety of another person;
- non-disclosure of the personal information is required by law; and
- the information is subject to solicitor-client or litigation privilege.
Requests to Correct or Delete Personal Information: An individual may request that the Institute correct or delete personal information about themselves that is in the Institute’s possession. Where an individual successfully demonstrates the inaccuracy or incompleteness of personal information, the Institute shall amend the information as required. Where appropriate, the amended information will be transmitted to the Institute’s authorized third party service providers having access to the information in question. The Institute will make reasonable business efforts to comply with a request to delete an individual’s personal information as long as technological restraints or legal constraints do not limit its ability to fulfill the deletion request. Where a request for access, alteration, or deletion of personal information is declined, the Institute will provide the individual making the request with the reasons for declining the request.
11. Contact for Questions or Complaints
Last Updated: March 29, 2017
Trade-Mark Notice: TAOIST TAI CHI is registered Canadian trade-mark of Certmark Holdings Co. Ltd. and is used by the Institute with permission/under license.