Privacy Policy

Background

At the Canadian Chiropractic Association, we are committed to safeguarding and protecting the privacy of Personal Information (defined below) that is provided to us in the course of the CCA’s operations. This privacy policy (the “Privacy Policy”) applies to: (i) the CCA’s website found at: www.chiropractic.ca, including all webpages forming part of that website (“Webpages”); and (ii) any other websites, digital properties, audio offerings, mobile applications and/or mobile enabled sites that are owned and/or operated by CCA and that do not have a separate privacy policy (collectively, the “Website”). Webpages may contain policies or terms that are specific to their content (e.g. payment terms), and, unless expressly stated otherwise, such policies and/or terms are in addition to and not a substitution for the Privacy Policy.

By using the Services, you acknowledge that you have read and understood this Privacy Policy, and you agree and consent to the collection, use, and disclosure of your Personal Information in accordance with the terms set out below. If you do not agree with this Privacy Policy, please do not use the Services or supply your Personal Information to us. By submitting Personal Information about another individual, you must only do so if you have the consent of that individual (or their substitute decision-maker, where applicable). Failure to obtain such consents is your responsibility, and not that of the CCA.

Purpose

The purpose of this Privacy Policy is to inform you about the types of Personal Information we collect, use, and disclose in providing you with the Services. It explains:

• how we collect, use and disclose Personal Information;
• the choices you have regarding the use and disclosure of Personal Information; and
• How you may correct Personal Information.

Amendments to Privacy Policy

From time to time, we may make changes to this Privacy Policy. The Privacy Policy is current as of the “last revised” date which appears at the top of this page. We will treat Personal Information in a manner consistent with the Privacy Policy under which it was collected, unless we have your consent to treat it differently.

The following topics will be covered in this Privacy Statement:

1. What is Personal Information and what Personal Information do we collect?
2. How and when do we collect Personal Information?
3. Where do we store Personal Information?
4. For what purposes do we collect your Personal Information?
5. What safeguards have we implemented to protect the Personal Information that you provide?
6. Who will have access to the Personal Information that you provide?
7. To whom do we disclose Personal Information that you provide?
8. When and how do we obtain your consent?
9. Cookies
10. How long will we use, disclose or retain Personal Information that you provide to us?
11. How can you review your Personal Information that we have collected, used or disclosed?
12. How do you know that the Personal Information we have on you is accurate? What happens if such Personal Information is inaccurate?
13. How do you contact us regarding access to your Personal Information or our privacy practices?
14. Other Information

1. What is Personal Information and what Personal Information do we collect?

“Personal Information” is any information that about an identifiable individual. The type of Personal Information that we may collect may include, for example:

• name;
• contact information, such as email address and residential address;
• phone numbers;
• credit card information and bank account information (i.e. where provided to us in the course of paying membership dues);
• social media identifiers (e.g. Twitter handle and Facebook profile, etc.);
• internet protocol (IP) address; and
• other information that falls within the definition of “Personal Information” that we did not request, but that you provide to us.

Personal Information does not include business contact information (such as information regarding where an individual practices their profession and/or the contact information for that practice) and certain publicly available information.

2. How and when do we collect Personal Information?

We will always collect Personal Information by fair and lawful means. We may collect Personal Information from you directly and/or from third parties, where we (and/or those third parties) have obtained your consent to do so, or as otherwise required or permitted by law. For example, we collect your Personal Information from the provincial chiropractic associations in Canada (e.g. Ontario Chiropractic Association, New Brunswick Chiropractors Association) and the Canadian Chiropractic Protective Association (“CCPA”).

Generally, however, we collect Personal Information directly from you when you voluntarily provide it in the course of using the Services. For example, Personal Information may be collected when:

• you register for an account through the Website;
• you submit a membership application through the Website;
• you pay your annual membership dues through the Website;
• you register to receive our newsletter or any other CCA publications; and
• you communicate with representatives of the CCA, via telephone, email or mail.

In any event, we limit our collection of Personal Information to that which is necessary to fulfill the purposes identified in this Privacy Policy. We collect, use and disclose your Personal Information only in accordance with this Privacy Policy.

3. Where do we store Personal Information?

We store Personal Information that you provide on our servers (or those of our service providers) in Canada.

4. For what purposes do we collect your Personal Information?

Generally, we identify the purposes for which we use the Personal Information that you provide at the time we collect such information from you and obtain your consent, in any case, prior to such use. We generally use Personal Information for the following purposes (the “Purposes”):

• to register and administer your membership with the CCA, including the payment of membership dues;
• to offer and provide membership services to you, which include providing information to you regarding products and services for which the CCA has obtained a preferential benefit (for example, a discount) for its members;
• providing information to you regarding products, services and events (including, for example, those of the Canadian Chiropractic Research Foundation (“CCRF”), the Journal of Canadian Chiropractic Association, the Canadian Chiropractic Guidelines Initiative, and the World Federation of Chiropractic), that the CCA believes may be of interest to you in your capacity as a chiropractic professional;
• to verify your identity and the accuracy of your Personal Information with our records, through using this information to contact you directly for that purpose, or for the purpose of collecting additional personal information;
• to send you information and updates regarding the activities of the CCA;
• to respond to your inquiries, questions, and/or other requests;
• to confirm with the CCPA your eligibility for membership in, and to verify your enrollment with, the CCPA;
• to reconcile member information/status (e.g. full-time, part-time) with the provincial chiropractic associations in Canada;
• in aggregated, non-identifiable form, to better understand how our users use the resources provided on the Website;
• for fundraising purposes, but only in respect of fundraising carried out by the CCRF (of which the CCA is a beneficiary);
• for such other uses of Personal Information for which you provide your consent from time to time; and
• as otherwise permitted or required by applicable law.

5. What safeguards have we implemented to protect the Personal Information that you provide?

We have implemented physical, organizational, contractual and technological security measures in an effort to protect your Personal Information from loss or theft, unauthorized access, disclosure, copying, use or modification. For example, we have implemented the following safeguards:

• premises security;
• security software and firewalls to protect hacking or other unauthorized computer access; and
• password protected and encrypted computers.

The safeguards we implement to protect your Personal Information reflect industry standards. For example, if you provide credit card information to us, such information is: (i) encrypted (using socket layer (SSL)); and (ii) stored in Infusionsoft (which software completed a Payment Card Industry Data Security Standards (PCI-DSS) level-one onsite assessment and received validation from SecurityMetrics against the PCI-DSS.)

Moreover, as noted below, we will only permit our employees and third party service providers to access your Personal Information on a “need-to-know” basis and only after they have entered into an agreement under which they are bound to comply with applicable legislation (including privacy legislation), this Policy and related policy and procedures.

We take reasonable steps to verify your identity before granting you access to your account on the Website. However, you are solely responsible for maintaining the secrecy of your username, password and any other account information. Users should not disclose their username or password.

6. Who will have access to the Personal Information that you provide?

Your Personal Information will also be accessible to our employees and third party service providers on a “need-to-know” basis (i.e. where the employee or service provider requires such information to assist us with a Purpose). Examples of our third party service providers that will have access to your Personal Information include Moneris (which company processes online payments) and companies that store our data for us or provide us with data processing services. However, prior to gaining access to your Personal Information, we require all of our employees and third party service providers to enter into agreements with us under which they are bound to abide by applicable law (including privacy laws), this Privacy Policy and our other related policies and procedures.

7. To whom do we disclose Personal Information that you provide?

We will only disclose your Personal Information where we are permitted by applicable law to do so. We identify to whom, and for what purposes, we may disclose your Personal Information, at the time we collect such information from you and obtain your consent to such disclosure. For example, we may disclose your Personal Information to:

• the CCPA, for the purpose of confirming your eligibility for membership in and verifying your enrollment (including your enrollment status) with CCPA;
• the CCRF, in connection with potential or actual donations made to the CCRF;
• provincial chiropractic associations in Canada in order to reconcile membership information/status (e.g. full-time, part-time); and
• such other persons for which you provide your consent.

In the event that we are required by applicable law to disclose your Personal Information without your consent, we will aim to disclose only the specific information that is required in the circumstances and, if possible, inform you about the disclosure.

8. When and how do we obtain your consent to collect, use and disclose Personal Information?

We generally obtain your consent prior to collecting, and in any case, prior to using or disclosing any Personal Information you provide to us for any purpose. The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the Personal Information and the reasonable expectations you might have in the circumstances. You may provide your consent to us either orally, electronically or in writing.
We also require users who are submitting Personal Information to the Website that is about another individual, to only do so if they have the consent of that individual (or their substitute decision-maker, if applicable).

9. Cookies

(a) Cookies – Generally

The Website also uses “cookies” to help personalize and maximize your online experience. Cookies are text-only pieces of data that a website transfers to your hard drive or other website-browsing equipment for record-keeping purposes. Cookies often include unique, non-personal identifiers and permit the Website to recognize you and to keep track of your preferences. Three types of cookies may be employed during your visit to the Website:

• third-party cookies: these are installed by third parties (including Google and Facebook, as described below in paragraphs (b) and (c) of this Section 9) with the aim of collecting certain information to carry out various research into behaviour, demographics, etc. An example of such a cookie is Facebook like button or sharing on social media options;
• “session” cookies, which are not permanently stored on your hard drive and are permanently deleted from your computer after two hours of inactivity or when you end your session (i.e. leave the Website), and are used solely to help you to navigate the Website; and
• “persistent” cookies, which remain on your computer so that the Website can recognize you when you return. Persistent cookies will remain on your computer after you have left our Website and will expire when you log out of the Website, or 60 days after your last visit for security cookies.

Cookies are also used for the following reasons:

• When you return to the Website, cookies enable us to retrieve the information you previously provided, to help you more easily use the features that you customized. Because of our use of cookies, we can deliver faster and more accurate results and a more personalized Website experience. For example, if you register for Services, a cookie helps us to recall your specific information (such as user name, password and preferences).
• When you watch a video clip or listen to an audio clip on through the Website, a cookie may take note of which media player (such as Real Player or Windows Media Player) and which type of clip (high or low bandwidth) you prefer to use on your computer. Note, however, that you can change your video and audio preferences at any time or choose a player each time you view or listen to a clip.
• Some parts of the Website use cookies to track your traffic patterns. We do this in order to determine the usefulness of the Website’s information to our users and to see how effective our navigational structure is in helping users reach that information. The CCA does not correlate this information with data about individual users, nor does it share this information or sell it to any third party.
• We also use cookies to identify users who have been banned from using the Website or any of our forums for behaviour that contradicts the Terms and to track click streams, for load balancing and to enable you to navigate through the Website using redirection pages.

Cookies are not used to run programs or to deliver viruses to your computer. Cookies are uniquely assigned to your computer and can only be read by a web server in the domain that issued the cookie to you.

Please note that while most browsers are initially set to accept cookies, you have the ability to disable cookies if you wish, generally through changing your internet browser settings. It may also be possible to change your browser settings to enable acceptance of specific cookies. For more information on enabling and disabling cookies, please refer to the help section on your browser. Disabling cookies may cause some of the Services or functions of the Website to become unavailable or inaccessible.

(b) Google Analytics

The Website uses web analysis services provided by Google Inc. (“Google”), specifically, “Google Analytics” and “Google Tag Manager”. Among other things, Google Analytics tracks traffic to, from and within the Website and provides CCA with information regarding use of the Website. Information collected by Google, including cookies and usage data, is processed in the United States of America and may be subject to the laws of that jurisdiction (including the federal Patriot Act).
Google Analytics may:

• set or read cookies on browsers of users of the Website; and
• otherwise receive information from users’ browsers.

However, prior to being stored on Google’s servers, your IP address is anonymized.
For more information on Google Analytics, please visit:

• For a copy of Google’s Privacy Policy: https://www.google.com/intl/en/policies/privacy/
• For further information regarding how Google uses information from sites or applications that use Google’s services: www.google.com/policies/privacy/partners/
• To opt out of Google Analytics data collection and/or to obtain instructions on removing Google Analytics from your browser: https://tools.google.com/dlpage/gaoptout

(c) Facebook Pixel

The Website also uses Facebook Pixel to better understand the actions taken by users of the Website and to offer such users products and/or services in line with their interests, by providing measurement services and targeted ads. For more information on Facebook Pixel, please visit:

• For a copy of Facebook’s Data Policy: https://www.facebook.com/about/privacy/
• For further information on cookies and other storage technologies used by Facebook, including information on how to opt-out of same: https://www.facebook.com/policies/cookies/

10. How long will we use, disclose or retain Personal Information that you provide to us?

We will use, disclose or retain Personal Information that you provide to us for as long as necessary to fulfill the Purpose(s) for which that Personal Information was collected, and as permitted or required by applicable law.

11. How can you review your Personal Information that we have collected, used or disclosed?

If you make a written request to review any Personal Information about you that we have collected, used or disclosed, we will provide you with any such Personal Information to the extent required by applicable law. We will attempt to make such Personal Information available to you in a form that is generally understandable, and will explain any abbreviations or codes. We may request that you provide sufficient identification to permit access to the existence, use or disclosure of your Personal Information. Any such identifying information shall be used only for this purpose.

12. How do you know that the Personal Information we have on you is accurate? What happens if such Personal Information is inaccurate?

We will attempt to ensure that your Personal Information is kept as accurate, complete and up-to-date as possible. We will not routinely update your Personal Information, unless such a process is necessary. We expect you to supply us with updates to your Personal Information, as required, using the functionality of the Website (or by other means, where appropriate).

At any time, you can challenge the accuracy or completeness of your Personal Information in our records. If you successfully demonstrate that your Personal Information in our records is inaccurate or incomplete, we will amend the Personal Information as required. Where appropriate, we will transmit the amended information to third parties having access to your Personal Information.

13. How do you contact us regarding access to your Personal Information or our privacy practices?

All comments, questions, concerns or complaints regarding your Personal Information, this Privacy Policy or our privacy practices, should be forwarded as follows:

By mail: Privacy Officer- Canadian Chiropractic Association
184 Front St. East, Suite 200
Toronto, ON M6A 4N3
By telephone: 1-877-222-9303/416-585-7902
E-mail: info@chiropractic.ca

14. Other Information

The Website contains links to third party websites (“Third Party Websites”). Please be aware that the CCA is not responsible for the privacy practices of the Third Party Websites. This Privacy Policy applies solely to information collected by the Website, such that this Privacy Policy does not extend to Third Party Websites. We encourage our users to be aware when they leave our site that they are doing so and to read the privacy statements of each Third Party Website that collects personal information.