You Are Here: Home > About Us > Policies > Privacy Policy
Privacy Policy

Privacy Policy

The Arthritis Society is a member of Imagine Canada, an organization that supports and strengthens charities and not-for-profits to better serve their communities. As a member, we have signed on to Imagine Canada's Ethical Fundraising and Financial Accountability Code, which is leading the way in safeguarding donor rights through the highest degree of transparency and accountability in fundraising and financial practices.

Commitment to the Code is voluntary and complements existing regulation of charities that is shared among federal and provincial levels of government. We will continue to maintain the highest ethical standards in the protection of donor interests and in our fundraising and financial best practices.

  • How we use non-personal information

    Our site's operating system may automatically record some general information about your visit, such as:

    • The Internet domain for your Internet service provider, such as 'company.com' or 'service.ca' and the IP address of the computer accessing the Web site, such as 'ppp-55
    • The type of browser (such as 'Netscape version x' or 'Internet Explorer version x') you are using
    • The type of operating system you are using (such as Macintosh, Unix, or Windows)
    • The date and time you visit our site and the Web pages that you visit on our site, along with the address of the previous Web site you were visiting, if you linked to us from another Web site.

    We use this information for statistical analysis, to help us make our site more useful to visitors. We may disclose this non-personal information to third parties such as sponsors, clients or advertisers and/or use it for auditing purposes. This tracking system does not record personal information about individuals or link this information to any personal data collected.

    We may use 'cookies' that identify you as a return visitor. A cookie is a piece of data that a Web site can send to your browser, which may then store the cookie on your hard drive. So, when you come back to visit us again, we can tailor information to suit your individual preferences. The goal is to save you time and provide you with a more meaningful visit and to measure Web site activity. Cookies do not contain any personally identifying information. Browsers such as Netscape allow you to disable cookie collection if you wish, or inform you when a cookie is being stored on your hard drive.

    We occasionally use third party vendors (e.g.: Google, Facebook) to help deliver customized Arthritis Society advertising that we believe may be of interest to users. The process delivers targeted advertisements via these third-party channels using a combination of cookies (described above) and information explicitly provided by users for the purpose of communicating to them about Arthritis Society initiatives. The third-party vendors do not use the information provided for any other purpose, and do not collect any identifiable information about the user.

  • Protecting your personal information

    We will provide specific notice before collecting any of your personal information (details that can identify you as an individual, such as your name or address). We will explain what information is being collected and how it will be used. You have the right to decline to have this information collected or transferred for marketing purposes.

    We collect no personal information about you unless you choose to provide that information to us. We do not use techniques that collect personal information about you without your knowledge.

    We will not transfer your personal information to a third party for marketing purposes unless we have your consent. Any personally identifiable data about our customers or Web site visitors is stored securely.

    We collect no personal information about children (under 13 years of age) without the express, positive consent of their parent or guardian.

  • What about spam?

    You will not receive marketing e-mail from this organization unless you have consented to receive it.

    From time to time we may use e-mail as a way to keep in touch with our existing customers and other interested individuals. However, we do not send 'spam' (unsolicited marketing e-mail).

    If you agree to receive e-mail communications from us, every e-mail message we send to you will include an e-mail address to which you can respond. If at any time you decide you do not want to receive marketing e-mail from us, simply let us know and we will remove your name and e-mail address from our marketing lists. We will do the same with your mailing address and telephone number, on request.

  • When you leave this site

    This policy discloses the privacy practices for our Web site. However, our site contains links to other sites. Once you link to another site, you are subject to the privacy and security policies of the new site. We encourage you to read the privacy policies of all Web sites you visit, especially if you share any personal information.

    For a copy of The Arthritis Society's more complete Policy on Privacy of Personal Information, please contact privacy@arthritis.ca.

Policy Statement

Introduction

The Arthritis Society (The Society) operates under the Canada Corporations Act and is a registered charity.  The mission statement of The Society is to provide leadership and funding for research, advocacy and solutions to improve the quality of life for Canadians affected by arthritis.  The Society operates in a manner that is consistent with all relevant legislation.

The Society is responsible for safeguarding all personal information in its possession or custody, including personal information that has been transferred to a third party for processing (e.g. to a consulting firm or individual who is acting on behalf of The Society).  This includes situations where the actions undertaken on The Society's behalf are carried out voluntarily or without charge. 

The Society's policy and practices for the protection of personal information follow the guidelines established by the Canadian Standards Association, Imagine Canada and other accepted industry standards

  • Definition of Personal Information

    The Society defines personal information as any information that can be used to distinguish, identify or contact a specific individual. Exceptions include business contact information and publicly available information such as name, address, and telephone numbers as published in telephone directories. Where an individual uses his or her home contact information as business contact information, The Society considers such information not to be subject to protection as personal information.

    This policy does not cover aggregated data from which the identity of an individual cannot be determined.

  • Guiding Principles

    All personal information collected by The Society will be used only for purposes that are defined and explained in advance to the individual, and that use or disclosure for any other purposes will only be undertaken after obtaining the informed consent of the individual.

    Principle One - Accountability
    The Society's Chief Executive Officer is responsible for the personal information under its control or custody even though other individuals within the agency may be responsible for the day-to-day collection and processing of personal information. The head of each regional or provincial program and the national privacy officer have been delegated to act on behalf of the Chief Executive Officer:

    • to maintain adequate policies and practices;
    • to ensure relevant staff, volunteers and other agents of The Society are aware of The Society's privacy policy and practices;
    • to monitor compliance with the established policies and practices,
    • to respond to real or potential privacy breaches, and
    • to respond to questions and concerns, and to requests to access personal information.

    Principle 2 - Identifying the Purpose
    The Society will identify the purposes for which personal information is collected at or before the time the information is collected.

    Principle 3 - Consent and Notice
    The Society will obtain the informed consent of individuals before or when it collects, uses or discloses personal information, except where authorized by law.

    Individuals can give consent in many ways and the form of the consent sought by The Society may vary, depending upon the circumstances and the type of information. In determining the form of consent to use, The Society will take into account the sensitivity of the personal information.

    The Society will not, as a condition of the supply of a product or service, require an individual to consent to the collection, use or disclosure of personal information beyond that required to fulfill the explicitly specified and legitimate purposes of The Society.

    An individual may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. The Society will inform the individual of the implications of such withdrawal of consent.

    Principle 4 - Limiting Collection
    The Society will limit the collection of personal information necessary for the purposes identified by The Society. Information shall be collected by fair and lawful means.

    Principle 5 - Limiting Use, Disclosure, and Retention
    The Society will not use or disclose Personal Information for purposes other than those for which it was collected, except with the consent of the individual or as permitted by law. Personal Information will be retained only as long as necessary for the fulfillment of those purposes.

    Principle 6 - Accuracy
    The Society will keep Personal Information as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.

    Principle 7 - Safeguards
    The Society will protect personal information with safeguards appropriate to the sensitivity of the information. The methods of protection shall include:

    • physical measures, such as locked filing cabinets and restricted access to offices,
    • organizational measures, such as security clearances and limiting access to personal information on a "need-to-know" basis, and
    • technological measures, such as the use of passwords, encryption and protection of data-integrity.

    Principle 8 - Openness
    The Society will make readily available to individuals specific information about its policies and practices relating to the management of personal information in its custody and control.

    Principle 9 - Individual Access
    Upon written request, and subject to exemptions stipulated by law, The Society will inform an individual of the existence, use, and disclosure of his or her Personal Information and the person will be given access to that information. An individual may challenge the accuracy and completeness of the information and have it amended as appropriate.

    Exceptions to the access requirement will be limited and specific, and include:

    • prohibitive cost,
    • contains references to other individuals,
    • can not be disclosed for legal, security, or commercial proprietary reasons, and
    • subject to solicitor-client or litigation privilege.

    Principle 10 - Response to Concerns and Suggestions
    An individual shall be able to address a challenge concerning compliance with the above principles to a designated individual.

    The Society will investigate all complaints and take appropriate measures, including, if necessary amending its policies and practices.

Procedure - Responding to Inquiries or Complaints

All inquiries or concerns will be forwarded to privacy@arthritis.ca, which will be monitored regularly. The inquiry or concern will then be forwarded to the designated contact person responsible for the jurisdiction of the concern (provincial/territorial or national) for resolution.