Privacy policy

From program applicants: applicant and participant name, contact email and phone, participant date of birth (only to verify age eligibility), family info (composition, emergency contact), voluntarily reported economic need (1-5 scale, no documentation), and electronically signed consents.

From volunteers: name, email, phone, Vulnerable Sector Check (only if working with minors), availability and skills.

From donors: name, email and phone (if you provide them), donation amount and date, and payment method (we do not store card numbers — Zeffy handles that).

From newsletter subscribers: email and preferred language.

Automatically: IP address and user agent (for audit and abuse prevention) and pages visited (aggregate analytics, no third-party cookies).

All information is stored in Supabase, in the ca-central-1 region (Montreal, Canada). Sensitive files (Vulnerable Sector Checks, signed waivers) are in private storage with encryption at rest, accessible only by authorized roles.

Public photos (gallery, events) are served from our Supabase storage and contain no sensitive identifying data.

To process your application, registration or donation; to send you related communications (confirmations, reminders); to send you the newsletter only if you explicitly opted in (CASL); and to report to grant officers or auditors in aggregate and anonymized form.

We never sell or share your data with third parties for marketing.

You can access your information (ask us for a copy and we send it), correct incorrect data, delete your information (with legal exceptions — e.g. signed waivers are kept 7 years), unsubscribe from the newsletter anytime, and file a complaint with the Office of the Privacy Commissioner of Canada if you believe we violated PIPEDA.

To exercise any right, email privacidad@caritasfelicescanada.org.

Program applications (personal data): 3 years after the last program. Signed waivers: 7 years (legal requirement). VSC: until expiry plus 1 year. Newsletter subscribers: until you unsubscribe. Donations: 7 years (fiscal requirement). Technical logs: 90 days.

We use cookies strictly necessary for the site to function (session, language preference, CSRF). We do not use third-party tracking cookies. If we ever add analytics, we will use a privacy-first solution without cookies and announce it here.

If we make significant changes, we'll email you (if we have your email) and post a visible notice on this site for 30 days.

For any privacy question, email privacidad@caritasfelicescanada.org.