- How we collect, use and disclose Personal Information;
- The choices you have regarding the use and disclosure of Personal Information; and
- How you may correct Personal Information.
The following topics will be covered in this Privacy Statement:
- What is Personal Information and what Personal Information do we collect?
- How and when do we collect Personal Information?
- Where do we store Personal Information?
- For what purposes do we collect your Personal Information?
- What safeguards have we implemented to protect the Personal Information that you provide?
- Who will have access to the Personal Information that you provide?
- To whom do we disclose Personal Information that you provide?
- When and how do we obtain your consent?
- How long will we use, disclose or retain Personal Information that you provide to us?
- How can you review your Personal Information that we have collected, used or disclosed?
- How do you know that the Personal Information we have on you is accurate? What happens if such Personal Information is inaccurate?
- How do you contact us regarding access to your Personal Information or our privacy practices?
- Other Information
1. What is Personal Information and what Personal Information do we collect?
“Personal Information” is any information that about an identifiable individual. The type of Personal Information that we may collect may include, for example:
- Contact information, such as email address and residential address;
- Phone numbers;
- Credit card information and bank account information (i.e. where provided to us in the course of paying membership dues);
- Social media identifiers (e.g. Twitter handle and Facebook profile, etc.);
- Internet protocol (IP) address; and
- Other information that falls within the definition of “Personal Information” that we did not request, but that you provide to us.
Personal Information does not include business contact information (such as information regarding where an individual practices their profession and/or the contact information for that practice) and certain publicly available information.
2. How and when do we collect Personal Information?
We will always collect Personal Information by fair and lawful means. We may collect Personal Information from you directly and/or from third parties, where we (and/or those third parties) have obtained your consent to do so, or as otherwise required or permitted by law. For example, we collect your Personal Information from the provincial chiropractic associations in Canada (e.g. Ontario Chiropractic Association, New Brunswick Chiropractors Association) and the Canadian Chiropractic Protective Association (“CCPA”).
Generally, however, we collect Personal Information directly from you when you voluntarily provide it in the course of using the Services. For example, Personal Information may be collected when:
- You register for an account through the Website;
- You submit a membership application through the Website;
- You pay your annual membership dues through the Website;
- You register to receive our newsletter or any other CCA publications; and
- You communicate with representatives of the CCA, via telephone, email or mail.
3. Where do we store Personal Information?
We store Personal Information that you provide on our servers (or those of our service providers) in Canada.
4. For what purposes do we collect your Personal Information?
Generally, we identify the purposes for which we use the Personal Information that you provide at the time we collect such information from you and obtain your consent, in any case, prior to such use. We generally use Personal Information for the following purposes (the “Purposes”):
- To register and administer your membership with the CCA, including the payment of membership dues;
- To offer and provide membership services to you, which include providing information to you regarding products and services for which the CCA has obtained a preferential benefit (for example, a discount) for its members;
- Providing information to you regarding products, services and events (including, for example, those of the Canadian Chiropractic Research Foundation (“CCRF”), the Journal of Canadian Chiropractic Association, the Canadian Chiropractic Guidelines Initiative, and the World Federation of Chiropractic), that the CCA believes may be of interest to you in your capacity as a chiropractic professional;
- To verify your identity and the accuracy of your Personal Information with our records, through using this information to contact you directly for that purpose, or for the purpose of collecting additional personal information;
- To send you information and updates regarding the activities of the CCA;
- To respond to your inquiries, questions, and/or other requests;
- To confirm with the CCPA your eligibility for membership in, and to verify your enrollment with, the CCPA;
- To reconcile member information/status (e.g. full-time, part-time) with the provincial chiropractic associations in Canada;
- In aggregated, non-identifiable form, to better understand how our users use the resources provided on the Website;
- For fundraising purposes, but only in respect of fundraising carried out by the CCRF (of which the CCA is a beneficiary);
- For such other uses of Personal Information for which you provide your consent from time to time; and
- As otherwise permitted or required by applicable law.
5. What safeguards have we implemented to protect the Personal Information that you provide?
We have implemented physical, organizational, contractual and technological security measures in an effort to protect your Personal Information from loss or theft, unauthorized access, disclosure, copying, use or modification. For example, we have implemented the following safeguards:
- Premises security;
- Security software and firewalls to protect hacking or other unauthorized computer access; and
- Password protected and encrypted computers.
The safeguards we implement to protect your Personal Information reflect industry standards. For example, if you provide credit card information to us, such information is: (i) encrypted (using socket layer (SSL)); and (ii) stored in Infusionsoft (which software completed a Payment Card Industry Data Security Standards (PCI-DSS) level-one onsite assessment and received validation from SecurityMetrics against the PCI-DSS.)
Moreover, as noted below, we will only permit our employees and third party service providers to access your Personal Information on a “need-to-know” basis and only after they have entered into an agreement under which they are bound to comply with applicable legislation (including privacy legislation), this Policy and related policy and procedures.
We take reasonable steps to verify your identity before granting you access to your account on the Website. However, you are solely responsible for maintaining the secrecy of your username, password and any other account information. Users should not disclose their username or password.
6. Who will have access to the Personal Information that you provide?
7. To whom do we disclose Personal Information that you provide?
We will only disclose your Personal Information where we are permitted by applicable law to do so. We identify to whom, and for what purposes, we may disclose your Personal Information, at the time we collect such information from you and obtain your consent to such disclosure. For example, we may disclose your Personal Information to:
- The CCPA, for the purpose of confirming your eligibility for membership in and verifying your enrollment (including your enrollment status) with CCPA;
- The CCRF, in connection with potential or actual donations made to the CCRF;
- Provincial chiropractic associations in Canada in order to reconcile membership information/status (e.g. full-time, part-time); and
- Such other persons for which you provide your consent.
In the event that we are required by applicable law to disclose your Personal Information without your consent, we will aim to disclose only the specific information that is required in the circumstances and, if possible, inform you about the disclosure.
8. When and how do we obtain your consent to collect, use and disclose Personal Information?
We generally obtain your consent prior to collecting, and in any case, prior to using or disclosing any Personal Information you provide to us for any purpose. The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the Personal Information and the reasonable expectations you might have in the circumstances. You may provide your consent to us either orally, electronically or in writing.
We also require users who are submitting Personal Information to the Website that is about another individual, to only do so if they have the consent of that individual (or their substitute decision-maker, if applicable).
(a) Cookies – Generally
The Website also uses “cookies” to help personalize and maximize your online experience. Cookies are text-only pieces of data that a website transfers to your hard drive or other website-browsing equipment for record-keeping purposes. Cookies often include unique, non-personal identifiers and permit the Website to recognize you and to keep track of your preferences. Three types of cookies may be employed during your visit to the Website:
- Third-party cookies: these are installed by third parties (including Google and Facebook, as described below in paragraphs (b) and (c) of this Section 9) with the aim of collecting certain information to carry out various research into behaviour, demographics, etc. An example of such a cookie is Facebook like button or sharing on social media options;
- “Session” cookies, which are not permanently stored on your hard drive and are permanently deleted from your computer after two hours of inactivity or when you end your session (i.e. leave the Website), and are used solely to help you to navigate the Website; and
- “Persistent” cookies, which remain on your computer so that the Website can recognize you when you return. Persistent cookies will remain on your computer after you have left our Website and will expire when you log out of the Website, or 60 days after your last visit for security cookies.
Cookies are also used for the following reasons:
- When you watch a video clip or listen to an audio clip on through the Website, a cookie may take note of which media player (such as Real Player or Windows Media Player) and which type of clip (high or low bandwidth) you prefer to use on your computer. Note, however, that you can change your video and audio preferences at any time or choose a player each time you view or listen to a clip.
Cookies are not used to run programs or to deliver viruses to your computer. Cookies are uniquely assigned to your computer and can only be read by a web server in the domain that issued the cookie to you.
Please note that while most browsers are initially set to accept cookies, you have the ability to disable cookies if you wish, generally through changing your internet browser settings. It may also be possible to change your browser settings to enable acceptance of specific cookies. For more information on enabling and disabling cookies, please refer to the help section on your browser. Disabling cookies may cause some of the Services or functions of the Website to become unavailable or inaccessible.
(b) Google Analytics
The Website uses web analysis services provided by Google Inc. (“Google”), specifically, “Google Analytics” and “Google Tag Manager”. Among other things, Google Analytics tracks traffic to, from and within the Website and provides CCA with information regarding use of the Website. Information collected by Google, including cookies and usage data, is processed in the United States of America and may be subject to the laws of that jurisdiction (including the federal Patriot Act.
Google Analytics may:
- Set or read cookies on browsers of users of the Website; and
- Otherwise receive information from users’ browsers.
However, prior to being stored on Google’s servers, your IP address is anonymized.
For more information on Google Analytics, please visit:
- For further information regarding how Google uses information from sites or applications that use Google’s services: www.google.com/policies/privacy/partners/
- To opt out of Google Analytics data collection and/or to obtain instructions on removing Google Analytics from your browser: https://tools.google.com/dlpage/gaoptout
(c) Facebook Pixel
The Website also uses Facebook Pixel to better understand the actions taken by users of the Website and to offer such users products and/or services in line with their interests, by providing measurement services and targeted ads. For more information on Facebook Pixel, please visit:
- For a copy of Facebook’s Data Policy: https://www.facebook.com/about/privacy/
- For further information on cookies and other storage technologies used by Facebook, including information on how to opt-out of same: https://www.facebook.com/policies/cookies/
10. How long will we use, disclose or retain Personal Information that you provide to us?
We will use, disclose or retain Personal Information that you provide to us for as long as necessary to fulfill the Purpose(s) for which that Personal Information was collected, and as permitted or required by applicable law.
11. How can you review your Personal Information that we have collected, used or disclosed?
If you make a written request to review any Personal Information about you that we have collected, used or disclosed, we will provide you with any such Personal Information to the extent required by applicable law. We will attempt to make such Personal Information available to you in a form that is generally understandable, and will explain any abbreviations or codes. We may request that you provide sufficient identification to permit access to the existence, use or disclosure of your Personal Information. Any such identifying information shall be used only for this purpose.
12. How do you know that the Personal Information we have on you is accurate? What happens if such Personal Information is inaccurate?
We will attempt to ensure that your Personal Information is kept as accurate, complete and up-to-date as possible. We will not routinely update your Personal Information, unless such a process is necessary. We expect you to supply us with updates to your Personal Information, as required, using the functionality of the Website (or by other means, where appropriate).
At any time, you can challenge the accuracy or completeness of your Personal Information in our records. If you successfully demonstrate that your Personal Information in our records is inaccurate or incomplete, we will amend the Personal Information as required. Where appropriate, we will transmit the amended information to third parties having access to your Personal Information.
13. How do you contact us regarding access to your Personal Information or our privacy practices?
By mail: Privacy Officer- Canadian Chiropractic Association 186 Spadina Ave., Suite 6, Toronto, ON, M5T 3B2
14. Other Information