Protecting your privacy is important to Make-A-Wish Canada (“Make-A-Wish”, “we”, “our”). We have implemented a privacy program to govern our management of personal information, including personal health information that may be provided to us (together, “Personal Information”). Personal Information is information about an identifiable individual. This Privacy Policy and Notice of Personal Information Practices (“Policy”) describes how we manage Personal Information, including the measures we employ to protect it and the limits to those measures. This Policy also provides contact information for the individual in our organization who can provide additional information about our privacy program, investigate any concerns that may arise about our management of Personal Information and process requests for access to and the correction of Personal Information.
Make-A-Wish is a national charity whose mission is to create life-changing wishes for children with critical illnesses. We are subject to laws, including any privacy law, applicable to the activities of charities in the Province(s) in which we are operating. To harmonize our privacy practices, we adhere to the privacy principles set out in this Policy, many if not all of which are encoded in Canadian privacy laws.
We may amend this policy from time to time for reasons that include changes in applicable law or changes in our privacy program. We will post the date on which the most recent version of this Policy was amended at the top. Please refer to this Policy to determine if we have amended it since you last reviewed it prior to providing us with Personal Information. By providing us with your Personal Information, you accept our management of your personal information in accordance with the most recent version of this Policy.
Accountability
Our Privacy Officer heads and oversees our compliance with our privacy program. Contact information for the Privacy Officer is in the “Openness” section below. Make-A-Wish is committed to complying with federal or provincial privacy legislation to the extent applicable to its operations in any particular Province.
PERSONAL Information WE COLLECT
In broad terms, Make-A-Wish collects two types of Personal Information: Wish Information and Supporter Information (Donors, Volunteers and Event Organizers).
1. Wish Information
“Wish Information” is Personal Information about wish children, their families and other participants in wishes granted by Make-A-Wish, which is provided to Make-A-Wish by wish children, their families, other wish participants, and members of the medical community, social workers, and others providing assistance to the wish children and their families. The information we require varies depending on the nature of the wish, so we are unable to provide an exhaustive list in this Policy.
2. Supporter Information
“Supporter Information” is Personal Information about current, past and potential future donors, volunteers and event organizers to Make-A-Wish.
our USE Of PERSONAL INFORMATION
PLEASE NOTE that unless you expressly limit or prohibit our use or disclosure of the Wish Information or Supporter Information you provide to us, you are agreeing to our use and disclosure of the information in accordance with this Policy. If you choose to limit or prohibit our use, we may be unable to provide you with certain services and/or opportunities. If you have any questions about what you are agreeing to by providing us with Personal Information, please speak to us. As noted below, our employees will review our use of Wish Information with the wish recipient’s parent or guardian, but additional information can be obtained on request to our Privacy Officer.
1. Wish Information
Make-A-Wish uses Wish Information to assess the feasibility of granting and where feasible, to grant wishes. Make-A-Wish employees will review our use of Wish Information for these purposes with the wish recipient’s custodial parent(s) or legal guardian at the time of collection.
We will obtain the express written consent of the wish child’s custodial parent(s) or legal guardian(s) for any other use of Wish Information (e.g., publicizing of a wish to further Make-A-Wish’s charitable objectives).
We retain historical information identifying the wish child, including personal contact identifiers such as the child’s full legal name, and a constituent ID number assigned by the Make-A-Wish chapter that granted the wish, by illness and by the amount spent on the wish solely for our internal use, specifically, to track and assess our wish granting activities and potentially, develop new means of advancing our mandate.
2. Supporter Information
Make-A-Wish uses Supporter Information for the following purposes:
a) to solicit donations;
b) to collect and process donations;
c) to acknowledge receipt of donations, provide tax receipts, to validate payment information and thank donors for their contributions based on recognition preferences (type, frequency etc.) the donor has agreed to;
c) to provide supporters with information about our activities and initiatives unless donors opt out of receiving such information; and
d) to build and cultivate our relationship with supporters through exchanges of information.
THIRD PARTY SERVICE PROVIDERS
We only provide or otherwise permit access to Personal Information to third parties to the extent that they need the information to facilitate the efficient and safe granting of wishes and other activities and opportunities we provide to wish children and their families. We include privacy provisions in our agreements with such third-party service providers that impose restrictions on their use of Personal Information and require them to use safeguards that provide an equivalent level of protection to the information to that we provide. We are responsible for what third party service providers do with Personal Information we provide or to which we provide access.
There are organizations providing services on our behalf that may process or store Personal Information outside of Canada. These organizations process or store personal information for the following purposes: to support our online fundraising tools, to support our direct marketing activities like email marketing, direct mail and telemarketing, customer relationship management, and processing of funds. Whenever we use third party service providers to process information outside Canada, we use reliable service providers that use adequate safeguards to protect the integrity of your information and to prevent it being lost, stolen, destroyed, or damaged.
Personal Information may also be stored by third parties, via cloud services or other technology, to support Make-A-Wish ‘s business operations. These third parties do not use or have access to your Personal Information other than for cloud storage, retrieval, and the services they are providing to us and Make-A-Wish requires such third parties to employ at least the same level of security that we use to protect your Personal Information.
Consent
1. Wish Information
We will obtain prior written consent from the providers of Wish Information to our use of the information in accordance with this Policy (for the purposes of assessing and granting wishes).
A wish recipient’s custodial parent(s) or legal guardian(s) may withdraw consent for the use of Wish Information at any time. The implications of such withdrawal going forward will be communicated by Make-A-Wish. The preceding should not be interpreted to say that we will be able to reverse a use that has been made of Wish Information.
2. SUPPORTER Information
The consent of donors to the use of Donor Information for the purposes noted above will be implied when such information, including the donor’s name, telephone number, address (email and residential) and donation amount is provided to Make-A-Wish.
Safeguards/SECURITY Procedures
Make-A-Wish takes reasonable measures to keep Personal Information safe from loss or theft, unauthorized access, use, copying, disclosure or modification. Safeguards include physical, organizational and technical measures, such as (but not limited to):
security card access to premises;
restriction of employee access to files on a “need to know” basis;
confidentiality undertakings by all employees;
locking up personal information and not leaving it unattended or in plain view;
firewalls, anti-virus, strong passwords and software solutions for technical security (including secure, 256-bit encrypted Secure Socket Layer sessions on our website); and
regular reviews of privacy compliance initiatives.
We only retain Personal Information for as long as necessary to fulfil the above noted purposes and comply with any applicable requirements under provincial or federal law. The retention period may extend beyond your relationship with us. When Personal Information is no longer required for Make-A-Wish’s purposes, the information is either physically destroyed or deleted.
WEBSITE AND ELECTRONIC COMMERCE
Make-A-Wish uses cookies (small pieces of data that store information on your browser) and technology features such as log-in registration and click through tracking software to collect certain information from visitors to our website, including IP addresses.
With the exception of the information collected electronically, any information collected or used through this medium requires a user to provide such information voluntarily. Upon receiving such information through the registration for receiving a newsletter or request for further assistance from the organization, this information is then treated the same as other Personal Information collected through other activities or methods and with the understanding that the individual has consented to its use and collection for the purposes for which it was collected.
We use password protocols to protect Personal Information and other information we receive when a product, service, or donation is made or requested or paid for online.
This site contains links to other sites. Make-A-Wish is not responsible for the privacy practices or the content of such websites. Please review their privacy policies for further information
Accuracy/CORRECTION OF PERSONAL INFORMATION
We will make every effort to keep Personal Information as accurate, complete and up to date as necessary for the purposes for which we use the information. If your Personal Information changes, please provide us with updated information. Any updates, changes or deletion requests will be processed within 60 days of receipt of such requests.
Openness/PRIVACY PROGRAM CONTACT
Make-A-Wish invites wish families and donors to contact our Privacy Officer at Make-A-Wish Canada National Office, 4211 Yonge Street, Suite 520, Toronto, Ontario, M2P 2A9 or via email at: privacy@makeawish.ca or telephone: 1(888)-822-9474 (WISH) to obtain further information about our privacy program, our management of their Personal Information, or to request access to or the correction of their Personal Information. Please note that we cannot guarantee the security of email communications over the internet. If you choose to send us Personal Information by email, you do so at your own risk. If we conclude that Personal Information subject to a request for correction is accurate, we will not make the requested change, but will attach a record of disagreement to the information.
Challenging Our Compliance
You may raise concerns regarding our compliance with this Policy by contacting our Privacy Officer in writing as indicated above. Concerns should be fully set out and will be responded to as soon as we are able; we may need time to retrieve files, interview staff or volunteers, and otherwise investigate the concerns.
