Overview & scope
CBB Canada (“CBB Canada”, “we”, “us” or “our”) is a registered Canadian charitable organization. We are committed to protecting the privacy of our donors, supporters, volunteers and website visitors. This Privacy Policy describes how we collect, use, disclose and safeguard the personal information you provide when you interact with us — including through our website, online donations, newsletter and other communications.
We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. By using our website or providing us with your information, you consent to the practices described in this policy.
Please note: This document is provided as a thorough sample template and should be reviewed and approved by qualified legal counsel before CBB Canada relies on it publicly, to ensure it accurately reflects the organization’s actual data practices and current Canadian legal requirements.
Information we collect
We collect personal information that you give us voluntarily, plus some technical information gathered automatically when you visit our website. Depending on how you engage with us, this may include:
- Donation information. When you give online, our payment partner Fundraise Up collects your name, email address, billing address, donation amount, gift frequency (one-time or monthly) and payment details to process your contribution and issue your official tax receipt.
- Newsletter sign-ups. Your name and email address when you subscribe to receive updates, appeals and impact stories from us.
- Contact and enquiry forms. Your name, email, phone number and the contents of any message you send us through our website or by email.
- Volunteer, event and partnership interest. Information you submit when you express interest in volunteering, fundraising, attending an event or partnering with us.
- Website usage data. Technical and analytics information such as your IP address, browser type, device information, pages visited, referring URLs and the dates and times of your visits — collected via cookies, Google Analytics and Google Tag Manager (GTM).
We do not knowingly collect sensitive personal information (such as health, religious or political details) unless you choose to share it with us — for example, in the message field of a contact form.
How and why we use your information
We use the personal information we collect only for the purposes for which it was provided, or for closely related purposes, including to:
- Process your donations and issue official, tax-receipted acknowledgements that comply with Canada Revenue Agency (CRA) requirements;
- Administer recurring (monthly) gifts and notify you of changes to your giving;
- Send you newsletters, appeals, impact reports and other communications you have asked to receive;
- Respond to your enquiries, requests, feedback and complaints;
- Steward our relationship with you and acknowledge your support;
- Understand how our website is used so we can improve its content, performance and accessibility;
- Comply with our legal, regulatory, accounting and reporting obligations as a Canadian registered charity.
We rely on your consent and on our legitimate operational needs as a charity to process your information. You may withdraw your consent to non-essential uses (such as marketing emails) at any time — see your rights below.
Payment processing & third-party service providers
Online donations to CBB Canada are processed securely by Fundraise Up, our donation platform, together with its underlying payment processors. When you make a gift, your payment information is collected and handled directly by Fundraise Up under its own privacy and security standards. CBB Canada does not store complete payment card numbers on its own systems.
We work with trusted third-party service providers to help us run day to day. These may include providers of donation processing, email and newsletter delivery, website hosting, customer relationship management and analytics. These providers are authorized to use your personal information only as necessary to provide services to us, and are required to protect it.
- Fundraise Up — donation processing and receipting. See the Fundraise Up Privacy Policy.
- Google Analytics & Google Tag Manager — website analytics and tag management. See Google’s Privacy Policy.
We do not sell, rent or trade your personal information to any third party for their own marketing purposes.
Data retention & security
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, to maintain our donor and financial records, and to meet our legal and regulatory obligations. In particular, donation and tax-receipt records are kept for the period required by the Canada Revenue Agency.
We take reasonable physical, technical and administrative safeguards to protect your personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. These measures include restricted access, encryption of data in transit, and the use of reputable, secure service providers such as Fundraise Up. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
Your privacy rights (PIPEDA)
Under PIPEDA and applicable provincial privacy laws, you have rights regarding your personal information, including the right to:
- Access the personal information we hold about you and request an explanation of how it is used;
- Correct information that is inaccurate or incomplete;
- Withdraw consent to certain uses of your information, such as marketing communications (subject to legal and contractual restrictions);
- Request deletion of your information where we are not required to retain it by law;
- Ask questions or make a complaint about how we handle your personal information.
To exercise any of these rights, please contact us using the details in the contact section below. We will respond within a reasonable timeframe. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Children's privacy
Our website and services are intended for a general adult audience and are not directed at children. We do not knowingly collect personal information from children without the consent of a parent or guardian. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
International data transfers
Some of our service providers — including our donation platform and analytics providers — may store or process your personal information on servers located outside Canada, including in the United States. Where information is transferred to or processed in another country, it may be subject to the laws of that jurisdiction and accessible to its courts, law enforcement and regulatory authorities. We take reasonable steps to ensure that any provider handling your information offers a comparable level of protection to that required under Canadian privacy law.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or the services we offer. When we make material changes, we will revise the “Last updated” date shown on this page and, where appropriate, notify you. We encourage you to review this policy periodically. Your continued use of our website after any update constitutes acceptance of the revised policy.
How to contact us
If you have any questions, requests or concerns about this Privacy Policy or how we handle your personal information, please contact our privacy team:
- CBB Canada
- Email: [email protected]
- Phone: +1 (647) 980-9114
- Address: 547 Belmont Ave W, #803, Kitchener, ON N2M 5G9
We will do our best to answer your enquiry promptly and with care.