Policy on the Collection, Use and Disclosure Of Personal Information
“Privacy Policy”
- Objective & Scope of Policy
- The Collection, Use & Disclosure of Personal Information
- Consent
- Accuracy
- Retention
- Security
- Access to Personal information
- Web Site
- Amendment of CRCS Practices and this Policy
1. Objective & Scope of Policy
The Canadian Red Cross Society (“CRCS”) is committed to respecting the privacy of Donors and Clients. Accordingly, we have prepared this Policy outlining our policy and practices concerning the collection, use and disclosure of Personal Information.
This Policy governs Personal Information collected from and about individuals who are or may become Donors or Clients of the CRCS and those other individuals outside of the CRCS with whom we work.
In the event of questions about: (i) access to Personal Information; (ii) the collection, use, management or disclosure of Personal Information by or on behalf of the CRCS; or (iii) this Policy, individuals should contact the General Manager of the CRCS Zone in which they are ordinarily resident, or the CRCS Privacy Officer at the National Office in Ottawa. A list of Zones and contact information is available at http://www.redcross.ca/.
2. The Collection, Use & Disclosure of Personal Information
For the purposes of this Policy:
“Client” means an individual who has requested or used the services of the CRCS or who has applied for or registered in a CRCS training program or course, but does not include employees, volunteers, students and contractors of the CRCS or any Donor in any such other capacity;
“CRCS” also referred to as “we” or “us” includes the Canadian Red Cross Community Health Services;
“Donor” means any person who makes, or who indicates to the CRCS an intention to make a donation to the CRCS;
"Personal Information" means any information, recorded in any form, about an identified individual, or an individual whose identity may be inferred or determined from such information, but not including any business contact information.
The CRCS uses the verbal or written Personal Information provided by Clients, Donors and others in order to conduct assistance and training, activities, and outreach with the goal of assisting those in need in Canada and abroad. Our initiatives include providing and assisting in the provision of:
- disaster relief and preparedness services and programs;
- violence, abuse, neglect and injury prevention services and programs;
- tracing and reunion services;
- first aid services and programs
- water safety services and programs;
- training and awareness courses or programs in connection with any of the above
As well as:
- conducting and facilitating fundraising and appeals;
- managing our relationship with Clients;
- managing our relationship with Donors;
- meeting any legal or regulatory requirement relating to the above or to the activities of the CRCS
- other purposes consistent with the above.
Our use of Personal Information is limited to those purposes.
Personal Information will be collected, to the extent possible, directly from the individual concerned.
Personal Information provided by Clients may be shared, as may be required to carry out the above purposes, between personnel of the CRCS and with the International Committee of the Red Cross and International Federation of Red Cross and Red Crescent Societies.
Personal Information may also be disclosed to third parties, from time to time, to assist the CRCS with the administration and management of services and donations, and to facilitate fundraising.
To help keep our costs as low as possible, we may exchange donor names and personal contact information with other reputable humanitarian, charitable and not-for-profit organizations for the purpose of fundraising. We will take reasonable measures to allow individuals to refuse consent or to limit their consent to sharing this information.
Where a Client or Donor does not wish to have his or her name and personal contact information disclosed to other organizations as provided in this Policy, or where a Client does not wish to receive information on other services, he or she may so inform the CRCS. Notice must be in writing to the CRCS, either to the program under which such Personal Information is being collected or to the General Manager of the CRCS Zone in which the person is ordinarily resident, or to the CRCS Privacy Officer at the National Office in Ottawa.
Where the Personal Information is health information the Client’s written consent will be obtained before the information is disclosed to third parties, except as otherwise specified in this Policy or by law.
The CRCS may disclose Personal Information of Clients and Donors to organizations or individuals that perform services on behalf of the CRCS. Using contractual or other arrangements, we will ensure that agents, contractors and other third parties who receive Personal Information in the course of providing services act in a manner consistent with this Policy, and also agree to use such information solely for the purpose of providing services to the CRCS or on its behalf, in a consistent manner with our instructions.
Please note that there are circumstances where the use and/or disclosure of Personal Information may be justified or permitted, or where we are obliged to disclose information without consent. Such circumstances may include:
- where required by law or by order or requirement of a court, administrative agency or other governmental tribunal;
- where we believe, upon reasonable grounds, that it is necessary to protect the rights, privacy, safety or property of an identifiable person or group;
- where it is necessary to permit us to pursue available remedies or limit any damages that we may sustain; or
- where the information being disclosed or used is in the public domain.
In situations where we are obliged or permitted to disclose information without consent, we will not disclose more information than is required in the applicable circumstances.
For both anonymous visitors and known visitors to our website, we collect information such as the server your computer is logged onto, the domain name of your internet service provider, your browser type and version (for example, Netscape or Internet Explorer) and your IP address. An IP address is a number that is assigned to your computer automatically and required for using the Internet. We may also derive the general geographic area associated with an IP address. We use “cookies”, sometimes in combination with “web beacons” or similar technology to collect information about how this website is used such as average time spent on this website, pages viewed, and information searched for, access times, response rates to online or e-mail advertising and other relevant information about your online experience. If you are an anonymous visitor, the information in this paragraph does not personally identify you but rather numerically identifies your computer’s browser. In addition, we place a cookie on your computer that identifies your visit to our site and we share this cookies’ information with a third party marketing provider that will use it to deliver marketing about us to you while you visit other sites on the internet. Our third party provider is located in the United States. If you do not want to receive cookies on your computer, you can select the appropriate settings in your browser’s options; however, doing so may limit some of the interactivity our site offers you.
3. Consent
The CRCS considers that where a person provides Personal Information to the CRCS the person consents to our collection, use and disclosure of that Personal Information in accordance with this Policy. We may seek additional specific authorizations or consents from time to time where required by law or in situations where we consider these to be necessary or appropriate, for example with respect to health information.
Subject to applicable legal or contractual restrictions to which an individual may be subject, an individual is free to refuse or withdraw his or her consent to the collection, use or disclosure of his or her Personal Information at any time upon reasonable notice in writing to the CRCS. It should be noted that in some circumstances the CRCS can only provide certain services if Personal Information is made available.
4. Accuracy
The CRCS endeavours to ensure that any Personal Information provided by Clients and Donors and in our possession is as accurate, current and complete as necessary for the purposes for which we use that data.
An individual who believes any Personal Information concerning that individual is not correct may request an update of the information. We reserve the right not to change any Personal Information but will append any alternative text the individual concerned believes appropriate. An individual may also request that we delete their Personal Information from our system and records. Note that due to technical constraints Personal Information may continue to reside in our systems, after reasonable efforts to delete it have been made.
5. Retention
We keep Personal Information for as long as it is required by law or for the reasons it was collected. We take reasonable steps to destroy, delete, or erase Personal Information which is no longer required.
6. Security
We endeavour to maintain adequate physical, procedural and technical security with respect to our offices and information storage facilities so as to prevent any loss, misuse, unauthorized access, disclosure, or modification of Personal Information.
We limit Personal Information access to the employees management has determined need to know the information in order to conduct CRCS activities and provide CRCS services and programs. Under CRCS policy any employee misuse of Personal Information is treated as a serious offence for which disciplinary action may be taken.
7. Access to Personal Information
The CRCS permits access to and review of Personal Information about an individual by the individual concerned. We require sufficient information to confirm the identity of the person making the request before granting access. We endeavor to provide the information within a reasonable time.
We reserve the right to decline access to Personal Information where disclosure of the information requested
- could harm or threaten the interests and/or safety of others
Or where the required information:
- is not readily retrievable and the burden or cost of providing it would be disproportionate to the nature or value of the information;
- does not exist, is not held, or cannot be found;
- is required not to be disclosed on any legal ground;
- is permitted by law not to be disclosed.
Where information is not or cannot be disclosed, the individual making the request will be provided with the reasons for non-disclosure.
8. Web Site
The Canadian Red Cross Society (CRCS) may collect information relating to individuals who access our Web site.
We do not share Personal Information obtained through our Web site with any third parties, except with persons who are contracted to administer our information technology requirements and who agree to comply with our policies and requirements relating to privacy and confidentiality of Personal Information.
For both anonymous visitors and known visitors to our website, we collect information such as the server your computer is logged onto, the domain name of your internet service provider, your browser type and version (for example, Netscape or Internet Explorer) and your IP address. An IP address is a number that is assigned to your computer automatically and required for using the Internet. We may also derive the general geographic area associated with an IP address. We use “cookies”, sometimes in combination with “web beacons” or similar technology to collect information about how this website is used such as average time spent on this website, pages viewed, and information searched for, access times, response rates to online or e-mail advertising and other relevant information about your online experience. If you are an anonymous visitor, the information in this paragraph does not personally identify you but rather numerically identifies your computer’s browser. In addition, we place a cookie on your computer that identifies your visit to our site and we share this cookies’ information with a third party marketing provider that will use it to deliver marketing about us to you while you visit other sites on the internet. Our third party provider is located in the United States. If you do not want to receive cookies on your computer, you can select the appropriate settings in your browser’s options; however, doing so may limit some of the interactivity our site offers you.
This Privacy Policy does not apply to any other websites that may be referenced or linked through the CRCS Web site. The CRCS is not responsible for, nor will it be liable for, collection, use or disclosure of Personal Information on any such other Web site referenced or linked through www.redcross.ca/. Individuals accessing any other Web sites are advised to carefully review and consider the privacy policy of each Web site they access prior to supplying any Personal Information to the owner or operator thereof.
9. Amendment of CRCS Practices and this Policy
This Policy is in effect as of March 1, 2004. We will review, and may revise our privacy practices and this Policy. Policy changes will apply to the information collected from the date of the revised Policy as well as to existing information held by us.
For more information please email us.
