You have chosen to rally behind the CHU Sainte-Justine Foundation’s cause: this trust in us is very precious to us. That’s why we make it a point of honour to act at all times with integrity and transparency, including in the way we look after your personal information.
In accordance with applicable law, you will find in the policy below information relating to the different contexts in which the Foundation may collect, use, or disclose your personal information as well as the rights you may exercise in relation to them. Please know that in all cases, diligently protecting the information you entrust to us remains a top priority.
Please do not hesitate to contact us if, after reading our Privacy and Protection of ersonal Information Policy, any of your questions remain unanswered. We will be happy to answer them.
Privacy and Personal Information Protection Policy
The CHU Sainte-Justine Foundation (the “Foundation”) regularly collects, uses, discloses, and retains information about individuals who interact with it in connection with its mission and philanthropic activities.
The Foundation is aware of the importance of protecting personal information and is committed to complying with the applicable legislative framework, namely the Act respecting the protection of personal information in the private sector (the “Act”).
“Personal information” is any information about a natural person that directly or indirectly allows that person to be identified.
The purpose of this policy (the “Policy”) is to inform all individuals who interact with the Foundation about how the Foundation manages their personal information, notably the purposes for which it collects this information.
The Policy also contains important information about these individuals’ rights concerning their personal information and how they may be exercised.
The Policy should be read in conjunction with the Session Cookies and Web Beacons Policy .
In accordance with the Act, personal information that relates to an individual’s performance of their duties within an organization, such as their name, title, and position, as well as their work address, email address, and phone number, is not covered by the Policy.
The Policy does not apply to third-party websites (e.g., Facebook, LinkedIn), even if they can be accessed by clicking on links shared by the Foundation. In such cases, it is recommended to refer to the privacy and confidentiality policies of those websites.
The management of the personal information of Foundation employees is governed by a separate policy.
The Foundation’s Management Team is responsible for enforcing the Policy.
By providing personal information to the Foundation or its authorized representatives, you consent to the Foundation’s collection, use, and disclosure of such information in accordance with applicable law, including for the purposes of and in the manner necessary for carrying out its mission and philanthropic activities, as further elaborated in the Policy.
If you provide personal information to the Foundation or its authorized representatives about another individual, you declare that you have obtained all necessary consents from that individual to allow the Foundation to collect, use, and disclose such information in accordance with applicable law, including for the purposes of and in the manner necessary for carrying out its mission and philanthropic activities, as further elaborated in the Policy.
The Foundation collects your personal information primarily from you.
It may also collect your information from other people, if doing so is authorized by the Act or it has obtained your consent. For example, the Foundation may collect personal information about you from someone who organizes an event for the Foundation which you have chosen to participate in.
Except in the case of specific initiatives (and in this case, only with the consent of a person with parental authority or a tutor), it is the Foundation’s practice not to collect personal information from persons under the age of 14. If a person with parental authority or a tutor becomes aware that a child under the age of 14 has provided personal information to the Foundation without his or her consent, he or she must contact the Foundation as indicated in section “O. How to contact the Foundation regarding the management of your personal information.”
The Foundation may collect personal information about you directly (via direct interactions with you, such as through its platforms, employees, or volunteers) or indirectly (such as through platforms, employees, or volunteers of third parties, philanthropic partners, fundraising organizers, service providers, or agents). It may be collected in various ways, including the following:
- In person or by phone, mail, email, or text
- Via forms or surveys (paper or online)
- Via publicly accessible sources (e.g., public registers, search engines, media)
The Foundation only collects personal information that is necessary for carrying out its mission and philanthropic activities. Here are some examples:
Category Examples Identification information Full name, photos, signature Personal contact information Address, email address, phone number(s), emergency contact details (for activities or events) Financial and transaction information Payment card details (credit or debit), banking information, history of contributions and participation in activities or events
Note that the Foundation complies with the Payment Card Industry Data Security Standard (PCI DSS). The Foundation does not store any credit or debit card numbers or three- or four-digit security codes.
Biographical information Date of birth, age, gender, marital status or other economic/cultural/social identifiers, networks, social involvement, personal affiliations, family ties, photos, videos, history with the Foundation or CHU Sainte-Justine Information for managing bequests and life insurance donations Date of death, government identifiers, financial information Relationship marketing information Preferences, comments, survey responses Job application information Résumé, background and reference checks
The Foundation may also create or deduce information from the personal information it collects. For example, the Foundation could create a user profile or username for you. This information is considered personal information. It is managed and protected according to the same practices as the rest of your personal information.
In addition to doing so for legal and regulatory purposes, the Foundation collects personal information to carry out its mission and philanthropic activities. Its mission and activities are divided into three categories:
Category Purpose Know who you are
- To determine or verify your identity
- To create and update your profile, including contact information, expectations, and philanthropic interests
Developing and maintaining a relationship with you
- To answer your questions
- To provide you with personalized support based on your philanthropic interests
- To send you news or information about the Foundation or CHU Sainte-Justine
- To invite you to events organized by the Foundation
- To invite you to participate in or support fundraising activities organized by third parties for the benefit of the Foundation
- To ask if you would like to make a financial contribution to the Foundation
- To process your contributions and commitments to the Foundation, including to issue tax receipts
- To process your requests to organize an activity for the benefit of the Foundation
- To process your registration for an activity or event organized by or for the benefit of the Foundation
- To process your recruitment as a volunteer for the Foundation
- To take next steps if you’ve expressed an interest in sharing your story to help promote the Foundation
- To solicit your opinion on the Foundation’s services
- To thank you for your commitment to the Foundation
- To recognize you for your commitment to the Foundation, including by publishing your name and donation amount (in certain cases) in the Foundation’s public donor lists
- To respond to any complaints or dissatisfaction
- To allow you to receive job alerts
- To enable you to apply for open positions
- To process your job applications and review your candidacy
As part of its mission and philanthropic activities, the Foundation may disclose your personal information to third parties, including third parties outside Quebec.
For example, the Foundation may disclose personal information to the following third parties:
- Philanthropic partners, volunteers, or organizers of activities that contribute to or, in the case of CHU Sainte-Justine, are central to the Foundation’s mission and philanthropic activities. Among other things, these third parties may be called upon to solicit financial contributions and help recruit other volunteers. Personal information may also be shared with them for the purposes of event planning or recognition.
- IT service providers that, for example, host the Foundation’s website and enable it to offer online services.
- Communication and printing service providers that allow the Foundation to communicate with you (for administrative reasons and to send invitations, newsletters, surveys, direct mail, and receipts).
- Telemarketing service providers that help the Foundation carry out its philanthropic development initiatives.
- Government authorities and law enforcement agencies when required by applicable law, by court order, or by a fraud prevention and management organization.
In all cases, the Foundation limits the personal information it communicates to third parties to what is reasonably necessary. The Foundation also ensures that shared information is adequately protected, notably in terms of generally recognized privacy practices.
Personal information held by the Foundation is stored in various ways.
Some personal information is stored physically or electronically at the Foundation.
Other personal information is hosted by or disclosed to providers located both in and outside Quebec. Once again, the Foundation ensures that this information is adequately protected, notably in terms of generally recognized privacy practices.
The Foundation complies with generally accepted industry standards to protect the personal information it collects. It takes physical, administrative, and technological measures to safeguard the personal information it holds, including the following:
- Limiting access to and use of your personal information
- Protecting the Foundation’s facilities and IT systems
- Communicating with you securely
In the event of a breach of confidentiality affecting your personal information and presenting a risk of causing you serious harm, the Foundation will notify you as soon as possible, in accordance with the Act. In all cases, the Foundation will take reasonable steps to reduce the risk to you and to prevent similar incidents in the future.
The Foundation only retains your personal information for as long as required to fulfill the purposes for which it was collected, subject to its legal and regulatory obligations and the time required for the Foundation to protect its rights in the event of recourse.
The Foundation may choose to anonymize some personal information before destroying it and retain a copy. Once anonymized, the information no longer identifies you and is therefore no longer considered personal information. This information may be used to improve the Foundation’s services, identify trends, or set up performance indicators.
Subject to certain conditions stipulated in the Act, you have several rights concerning the personal information the Foundation holds about you.
1. The right to know whether the Foundation holds any personal information about you and to access it You can ask the Foundation whether it holds any personal information about you, and you can request access to and a copy of this information. You could be charged a small fee if your request is granted. 2. The right to correct your personal information You can ask the Foundation to correct any personal information about you that is inaccurate, incomplete, or ambiguous. 3. The right to de-index your personal information You can ask the Foundation to stop disseminating your personal information or to de-index any hyperlink attached to your name that provides access to your information if such dissemination causes you harm or contravenes the law or a court order. 4. The right to withdraw your consent to the use or disclosure of your personal information for certain purposes You can withdraw your consent to any of the following:
- Receiving news or information about the Foundation or CHU Sainte-Justine (e.g., stories about CHU Sainte-Justine families, scientific developments supported by philanthropy, testimonials from committed donors, the results of the Tree of Lights campaign, the Foundation’s annual report, information about planned giving)
- Receiving invitations to events organized by the Foundation (e.g., the Mois des câlins drawing contest, web conferences about CHU Sainte-Justine’s activities, visits of CHU Sainte-Justine)
- Receiving invitations to fundraising activities organized by third parties for the benefit of the Foundation (e.g., a bike rally organized by a family to support Sainte-Justine)
- Being solicited to make financial contributions to the Foundation (e.g., being invited to donate to the Tree of Lights campaign, to consider different ways of giving, such as through monthly donations, or to join, train, or financially support a team as part of an event)
- Being acknowledged for your commitment to the Foundation (e.g., receiving non-automated messages thanking you for your contribution)
Having your name and donation level (if applicable) published in the Foundation’s public donor lists.
5. The right to manage your communication preferences The Foundation prioritizes certain means of communication for certain purposes. However, you can ask the Foundation to stop communicating with you by any of the following methods:
- Targeted advertising campaigns on social media
The Foundation will endeavour to respect your choice, in accordance with your rights and its obligations.
1. Steps to follow
Any request to exercise your rights regarding your personal information must meet the following conditions:
a. It must made be in writing.
b. It must be submitted, with proof of identity, by
- someone authorized to represent you. Note that the Act limits the rights of a liquidator, life insurance or death benefit beneficiary, heir, or successor; or
- a person with parental authority or guardian.
c. It must be addressed to the Person in charge of the protection of personal information, whose contact information appears in Section O, “How to contact the Foundation regarding the management of your personal information.”
d. It must specify the right(s) you wish to exercise by referring to the table in Section M, “Your rights regarding your personal information.”
- The right to know whether the Foundation holds any personal information about you and to access it
- The right to correct your personal information
- The right to de-index your personal information
- The right to withdraw your consent to certain purposes*
- The right to manage your communication preferences**
*If you wish to withdraw your consent to certain purposes, you must specify which of the following you want to opt out of:
- Receiving news or information about the Foundation and CHU Sainte-Justine
- Receiving invitations to events organized by the Foundation
- Receiving invitations to participate in fundraising activities organized by third parties for the benefit of the Foundation
- Being solicited for financial contributions
- Receiving non-automated messages thanking you for your commitment to the Foundation
- Having your name and donation level (if applicable) published in the Foundation’s public donor lists
**If you wish to manage your communication preferences, you must specify which of the following communication methods you want to opt out of:
- Targeted advertising campaigns on social media
2. Proof of identity
For security reasons, the Foundation will ask you for specific information to help confirm your identity so you may exercise your rights.
The Foundation will respond in writing within 30 days of receiving a request.
If your request is refused, in whole or in part, the Foundation will provide you with details including why your request was refused, the laws and regulations that justify its decision, the remedies available to you, and the deadlines for exercising them.
Note that the Foundation may, in certain circumstances, request authorization from the Commission d’accès à l’information du Québec to disregard requests that are manifestly improper due to their number or their repetitive or systematic nature or that, in the opinion of the Commission, do not comply with the Act. It may also ask the Commission to limit a request or to extend the deadline by which it must respond.
You can use the contact information provided below to get in touch with the Foundation’s Privacy Officer for any of the following reasons:
- To request assistance, give feedback, or ask questions related to the protection of your personal information
- To exercise any of your rights concerning your personal information or modify your communication preferences
- To notify the Foundation if you have reason to believe that your personal information has been compromised
- To learn more about who has access to personal information at the Foundation or how long it will be retained
- To file a complaint related to the management of your personal information
By email: email@example.com
CHU Sainte-Justine Foundation
Attention: Person in charge of the protection of personal information
5757 Decelles Avenue, Suite 500
Montreal, Quebec H3S 2C3
Please provide all necessary information so that the Foundation can act appropriately on your request.
The Foundation reserves the right to update the Policy to reflect changes in privacy laws, regulations, and standards. Please consult the version on the Foundation’s website regularly to stay informed of any changes.
Version number Description Modification date Author 1 Updated 2019-09-19 Maud Cohen 2 Updated 2021-11-11 Laurence Langlois Parent 3 Updated 2023-09-25 Geneviève Provencher/Nathalie Gagnon
Version number Description Approval date Approver 1 Updated 2019-09-19 Board 2 Updated 2021-12-07 Board 3 Updated 2023-09-25 Board