1. any personal information of a factual or subjective nature about an identifiable individual collected through the Websites and/or Platforms on which this Policy is posted, or through any other interactions you may have with us;
2. WFH staff members (regular employees, temporary employees and contractual resources) and senior management who handle personal information held by WFH;
3. visitors to our Websites and/or Platforms, our volunteers and Board members, and any person or company acting for or on behalf of WFH.

1. Improve the content, offering, appearance and usefulness of our Websites and/or Platforms;
2. Send, subject to your right to withdraw your consent as set out in this Policy, periodic emails (in accordance with Canada's Anti-Spam Legislation, "CASL"; each communication includes the sender's identity and an unsubscribe mechanism);
3. Personalize your experience by responding to your needs;
4. Provide you with information or resources you have requested;
5. Process a donation and issue tax receipts;
6. Meet legal and regulatory requirements;
7. Prevent potentially prohibited or illegal activities for risk management, fraud detection and security purposes.

• The domain name of your internet service provider;
• Your computer's truncated IP address (your IP address is changed, making it impossible to link to you);
• The type of browser (Chrome, Edge, Firefox, Safari, etc.) and operating system (Windows, Mac OS, etc.) used;
• The date and time of your visit;
• The pages you consult and the duration of these consultations;
• The address of the referring site, if you access WFH Websites and Platforms from another site.

1. Information stored in a protected database;
2. Encrypted communications using the TLS protocol;
3. Access to your personal information is restricted to those employees who need it to perform their duties (authorized and/or concerned persons) — these employees will treat the information as strictly confidential and will not give access to this information to any unauthorized person;
4. Report any violation of this Policy or the Acts to the WFH Privacy Officer;
5. Network monitoring software;
6. Anti-virus and anti-malware;
7. End-user device encryptions;
8. Passwords and multi-factor authentication;
9. Firewall;
10. Secure Web site donation page; content encrypted or encoded to make information unreadable;
11. Paper files kept in locked filing cabinets wherever possible;
12. Access codes to WFH premises;
13. Security personnel.

1. the fact that the decision is based exclusively on automated processing;
2. the personal information used to render the decision;
3. the reasons and main factors leading to the decision;
4. the right of the person concerned to have the personal information used to render the decision rectified, and to submit observations to a member of WFH staff who is in a position to review the decision.

1. Consent: where you have given us your consent, you have given us permission to do so, or where processing is necessary for the performance of a service you have requested; or
2. Legitimate interests: for example, we may process your personal information to protect you, us, or others from threats (such as security threats or fraud), to comply with laws that apply to us.
3. Explicit consent for sensitive data: where the processing concerns special categories of personal data (e.g., health data), we rely on your explicit consent in accordance with Article 9 GDPR.

If you have any questions about the lawful bases upon which we collect and use your personal data, please contact:

1. The right to delete the information we have on you. Whenever made possible, you can request deletion of your personal information, in which case we will carry out this request unless certain exceptional reasons arise permitting us to keep certain information about you;
2. The right to object. You have the right to object to our processing of your personal information in certain circumstances, such as those described in the “Legitimate interests” section 1.1 b) above. We may however continue to process your personal Information unless your interests, rights and freedoms override our legitimate interests; and
3. The right of restriction. You have the right to request that we restrict or limit the ways in which we process your personal information for instance where you believe your data is inaccurate.
4. The right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority. You have the right to lodge a complaint with the supervisory authority of your country of residence (e.g., CNIL in France, ICO in the United Kingdom, FDPIC in Switzerland, etc…).