The Canadian Cybersecurity Advocacy Society (CCAS) is, as our name suggests, a society focused on cybersecurity, and consisting of members well versed in the inherent dangers of collecting and retaining personal information. As such, we will always strive to follow a principle of minimizing data collection, to the extent that we will only do so to maintain compliance with Canadian law.

The CCAS is committed to protecting the privacy and security of personal information. Our purpose is to assure anyone who does business with us that the Society complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, and Canada's Anti-Spam Legislation (CASL). This policy explains how we collect, use, disclose and safeguard personal information.

---

Definition of Personal Information

Personal information is any information that is identifiable to you as an individual. This may include, but is not limited to, your name, gender, age, date of birth, language of correspondence, mailing address, telephone number, fax number, email address, and membership in an organization. Personal information does not include publicly available information about you in your capacity as an employee of an organization such as your name, job title, work mailing address, work email address, work fax number, or work telephone number.

Collection of Information

The CCAS only collects personal information from donors, members, volunteers, and individuals who have shown an interest in joining or contributing to the Society. Information is collected by a variety of methods: phone, fax, mail, email, social media, online, or in-person.

Use of Information

The CCAS is committed to using personal information in a respectful and useful way. The Society is also committed to making sure patrons do not receive more than a reasonable number of emails, letters, or phone calls. The CCAS only uses personal information to better serve our members and supporters and to expand our community of support, including:

• Providing information about events, membership, and donations
• Thanking supporters and issue tax receipts
• Inviting members and supporters to special events

Disclosure of Information

The CCAS treats its obligations with respect to the use and disclosure of personal information very seriously. We will only use or disclose personal information for the primary purpose that it was collected or for a purpose related to the primary purpose that you would reasonably expect it to be used. The Society will not sell, rent, or share your personal information.

Storage of Information

Personal information is stored on a secure server and in hard copy files in a secure location. Only authorized CCAS personnel have access to this information. The CCAS uses personal information to better serve our members and our mission.

Online Privacy

The CCAS is committed to protecting the privacy of those who use our website. We do not collect any personal information about individuals accessing our website, and we do not make use of website analytics.

Accountability

The CCAS does its best to ensure that all information is recorded accurately — if you notice any errors in our correspondence with you or if your personal information changes, please contact us at mail@ccas.foundation to update your information.

If you do not wish to be contacted by phone, mail, or email, please contact us and we will ensure that your request is honoured.

If you have any questions about this privacy policy or concerns about the way that your information is being used, please contact us.

Training

We provide privacy training to all society members, ensuring that everyone is aware of and understands their obligations under the privacy policy.