CBB CanadaPrivacy Policy

Legal

Privacy Policy

This page lays out what personal information CBB Canada collects, why we collect it, how we keep it safe, and the rights you have under Canadian privacy law.

Overview & scope

CBB Canada (“CBB Canada”, “we”, “us” or “our”) is a registered Canadian charitable organization. We are committed to protecting the privacy of our donors, supporters, volunteers and website visitors. This Privacy Policy describes how we collect, use, disclose and safeguard the personal information you provide when you interact with us — including through our website, online donations, newsletter and other communications.

We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. By using our website or providing us with your information, you consent to the practices described in this policy.

Please note: This document is provided as a thorough sample template and should be reviewed and approved by qualified legal counsel before CBB Canada relies on it publicly, to ensure it accurately reflects the organization’s actual data practices and current Canadian legal requirements.

Information we collect

We collect personal information that you give us voluntarily, plus some technical information gathered automatically when you visit our website. Depending on how you engage with us, this may include:

  • Donation information. When you give online, our payment partner Fundraise Up collects your name, email address, billing address, donation amount, gift frequency (one-time or monthly) and payment details to process your contribution and issue your official tax receipt.
  • Newsletter sign-ups. Your name and email address when you subscribe to receive updates, appeals and impact stories from us.
  • Contact and enquiry forms. Your name, email, phone number and the contents of any message you send us through our website or by email.
  • Volunteer, event and partnership interest. Information you submit when you express interest in volunteering, fundraising, attending an event or partnering with us.
  • Website usage data. Technical and analytics information such as your IP address, browser type, device information, pages visited, referring URLs and the dates and times of your visits — collected via cookies, Google Analytics and Google Tag Manager (GTM).

We do not knowingly collect sensitive personal information (such as health, religious or political details) unless you choose to share it with us — for example, in the message field of a contact form.

How and why we use your information

We use the personal information we collect only for the purposes for which it was provided, or for closely related purposes, including to:

  • Process your donations and issue official, tax-receipted acknowledgements that comply with Canada Revenue Agency (CRA) requirements;
  • Administer recurring (monthly) gifts and notify you of changes to your giving;
  • Send you newsletters, appeals, impact reports and other communications you have asked to receive;
  • Respond to your enquiries, requests, feedback and complaints;
  • Steward our relationship with you and acknowledge your support;
  • Understand how our website is used so we can improve its content, performance and accessibility;
  • Comply with our legal, regulatory, accounting and reporting obligations as a Canadian registered charity.

We rely on your consent and on our legitimate operational needs as a charity to process your information. You may withdraw your consent to non-essential uses (such as marketing emails) at any time — see your rights below.

Payment processing & third-party service providers

Online donations to CBB Canada are processed securely by Fundraise Up, our donation platform, together with its underlying payment processors. When you make a gift, your payment information is collected and handled directly by Fundraise Up under its own privacy and security standards. CBB Canada does not store complete payment card numbers on its own systems.

We work with trusted third-party service providers to help us run day to day. These may include providers of donation processing, email and newsletter delivery, website hosting, customer relationship management and analytics. These providers are authorized to use your personal information only as necessary to provide services to us, and are required to protect it.

We do not sell, rent or trade your personal information to any third party for their own marketing purposes.

Email & newsletter communications

If you subscribe to our newsletter or otherwise opt in to receive updates, we will send you emails about our programs, appeals, events and the impact of your support. We send these communications in accordance with Canada’s Anti-Spam Legislation (CASL).

Every marketing email we send includes a clear unsubscribe link. You can withdraw your consent to receive marketing communications at any time by clicking that link, or by emailing us at [email protected]. Please note that even if you opt out of marketing emails, we may still send you essential transactional messages, such as donation confirmations and tax receipts.

Cookies & analytics

Our website uses cookies and similar technologies to function correctly, remember your preferences and understand how visitors use the site. A cookie is a small text file stored on your device by your web browser.

  • Essential cookies are necessary for the website and donation flow to operate.
  • Analytics cookies — set via Google Analytics and Google Tag Manager — help us measure traffic and improve the experience. The data is generally aggregated and used to understand trends, not to identify you personally.

You can control or delete cookies through your browser settings, and you can disable analytics tracking. Blocking some cookies may affect how parts of the website work. Where required, we will seek your consent before setting non-essential cookies.

Data retention & security

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, to maintain our donor and financial records, and to meet our legal and regulatory obligations. In particular, donation and tax-receipt records are kept for the period required by the Canada Revenue Agency.

We take reasonable physical, technical and administrative safeguards to protect your personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. These measures include restricted access, encryption of data in transit, and the use of reputable, secure service providers such as Fundraise Up. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

Sharing & disclosure of information

We treat your personal information as confidential and share it only in limited circumstances:

  • With service providers who perform functions on our behalf (for example, payment processing, email delivery or hosting), under appropriate confidentiality obligations;
  • Where required by law — for example, to comply with a court order, the Canada Revenue Agency or other lawful request from a regulatory or government authority;
  • To protect rights and safety — where necessary to protect the rights, property or safety of CBB Canada, our supporters or others;
  • In a reorganization — in the unlikely event of a merger, amalgamation or transfer of our operations, subject to appropriate privacy protections.

We do not sell or rent your personal information, and we do not share it with third parties for their independent marketing purposes.

Your privacy rights (PIPEDA)

Under PIPEDA and applicable provincial privacy laws, you have rights regarding your personal information, including the right to:

  • Access the personal information we hold about you and request an explanation of how it is used;
  • Correct information that is inaccurate or incomplete;
  • Withdraw consent to certain uses of your information, such as marketing communications (subject to legal and contractual restrictions);
  • Request deletion of your information where we are not required to retain it by law;
  • Ask questions or make a complaint about how we handle your personal information.

To exercise any of these rights, please contact us using the details in the contact section below. We will respond within a reasonable timeframe. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Children's privacy

Our website and services are intended for a general adult audience and are not directed at children. We do not knowingly collect personal information from children without the consent of a parent or guardian. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

International data transfers

Some of our service providers — including our donation platform and analytics providers — may store or process your personal information on servers located outside Canada, including in the United States. Where information is transferred to or processed in another country, it may be subject to the laws of that jurisdiction and accessible to its courts, law enforcement and regulatory authorities. We take reasonable steps to ensure that any provider handling your information offers a comparable level of protection to that required under Canadian privacy law.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or the services we offer. When we make material changes, we will revise the “Last updated” date shown on this page and, where appropriate, notify you. We encourage you to review this policy periodically. Your continued use of our website after any update constitutes acceptance of the revised policy.

How to contact us

If you have any questions, requests or concerns about this Privacy Policy or how we handle your personal information, please contact our privacy team:

We will do our best to answer your enquiry promptly and with care.