The CHEO Foundation (the “Foundation”) raises, manages and disburses funds to support CHEO (the “Hospital”). The Foundation raises funds by soliciting donations, receiving planned gifts, bequests and grants, and by organizing special events and lotteries. Funds raised by the Foundation are used to: fund research, purchase new equipment, enhance the peadiatric nature of the hospital, train staff, and assist families in crisis.
The Foundation is committed to protecting the privacy of our donors and prospective donors. This Personal Information Protection Policy (the “Policy”) is designed to be compliant with applicable legislation, as well as established guidelines for charitable organizations, including the Foundation’s Donor Bill of Rights, Ethical and Financial Accountability Code which are available on the Foundation’s website or by contacting the CHEO Foundation’s Privacy Officer. This policy may be updated from time to time with updates approved by the Board of Directors of the Foundation to reflect developments in our practices, new technology or in the law. Updates will be made available in the same ways as the Policy.
Personal information is any information that can be used to distinguish, identify or contact a specific individual. This information can include an individual’s opinions or beliefs, as well as facts about or related to the individual. Business contact information and certain publicly available information, such as names, addresses and telethon numbers published in public telephone directories are not considered personal information.
The Foundation is responsible for all personal information under its custody or control, including information which it may transfer to a third party for processing. The Privacy Officer may delegate day-to-day responsibilities for administration of this Policy to other employees but the Privacy Officer remains accountable for the Foundation’s handlings of personal information. The Privacy Officer may be contacted at:
415 Smyth Road
Ottawa, ON K1H 8M8
Tel: (613) 737-2780 or 1 (800) 561-5638
The Foundation is responsible for personal information sent to third parties for processing on behalf of the Foundation or to service providers who provide services to the Foundation. The Foundation requires any such third parties to use the personal information only for the purposes for which it is provided to them and to protect the security of the personal information in accordance with privacy laws.
The Foundation collects and uses personal information of donors only for the following purposes:
When contacting donors, the Foundation respects their expressed preferences concerning matters such as method and frequency of solicitations and public recognition of donations. Individuals collecting personal information on behalf of the Foundation will be able to identify the purpose for which the information is being collected. If information is to be used for a purpose not previously identified, the Foundation will identify this purpose prior to use and provide individuals with an opportunity to opt out of this activity.
Except as otherwise permitted or required by law, the Foundation collects, uses and discloses personal information only with the consent of the individual. In obtaining consent, the Foundation will advise the individual orally or in writing of the purposes for the collection, use or the disclosure of personal information. When making a donation, individuals will be asked to consent to the use of their personal information for the purposes set out in this Policy. The Foundation will seek consent either at the time the information is collected or after the collection but before the information is used. An individual may withdraw consent to use his or her personal information for any purposes at any time by contacting the Foundation at the address set out above. The Foundation will explain the consequences of withdrawing consent. Please allow us a reasonable time to process any requests to withdraw consent.
The Foundation seeks to ensure that the personal information it uses is accurate and up-to-date. Please assist us by advising us of any inaccuracies you notice and we will make the appropriate corrections.
The Foundation limits the collection of personal information to that which is necessary for the purposes for which it is collected. The Foundation does not sell, barter, rent or lease donor lists. Only employees, authorizes volunteers and agents with a need to know for Foundation business purposes or whose duties reasonably so require are granted access to personal information. The Foundation retains personal information only as long as necessary for the specified purposes. Subject to other legal requirements to retain information, the Foundation retains a donor’s personal information only as long as the relationship between the individual is being maintained and cultivated.
The Foundation protects personal information against such risks as loss of theft, unauthorized access, disclosure, copying, modification and destruction by using appropriate security measures. The Foundation is committed to protecting the information regardless of the format in which it is held. The Foundation’s employees, authorized volunteers and agents with access to personal information are required to respect the confidentiality or that information by signing a Confidentiality Agreement, participating in privacy training and implementing methods of protection that include:
a) Physical measures such as locked filing cabinets and restricted access to offices;
b) Organizational measures such as limiting access to a “need to know” basis;
c) Technological measures such as passwords, encryption and audits.
Upon request, the Foundation will inform an individual of the existence, use and disclosure of his or her personal information. Requests may be made by contacting the Privacy Officer. On receiving a request, the Foundation may require sufficient information to confirm an individuals’ identity before releasing personal information. Upon receiving a request, the Foundation will disclose:
The Foundation will also allow the individual to view the information or receive copies of it. There may be some circumstances where the Foundation cannot provide access to all the information requested. This includes information about third parties and information that cannot be disclosed for legal or security reasons. The Foundation will explain its inability to provide access to the information in those circumstances. Subject to applicable legislation, the Foundation will endeavor to provide this information within 30 days of receipt of a request. The Foundation may seek to extend this time period as permitted by law. The Foundation will correct or amend any personal information that is shown to be inaccurate or incomplete.
For more information about the Foundation’s information handling practices, or to make a complaint, please contact the Privacy Officer at the CHEO Foundation. The Foundation will investigate all complaints and take appropriate action of the result of the investigation.