Privacy Policy

Creston Pet Adoption and Welfare Society ("PAWS," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website pawscreston.ca (the "Site").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Site.

Information You Provide to Us

We may collect personal information that you voluntarily provide when you:

• Submit adoption applications
• Fill out volunteer or foster applications
• Make donations through our website
• Contact us via email, phone, or contact forms
• Subscribe to our newsletter or updates
• Register for events

This information may include: name, email address, phone number, mailing address, and any other information you choose to provide.

Automatically Collected Information

When you visit our Site, we automatically collect certain information about your device and usage, including:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on pages
• Referring website addresses
• Date and time of visits

We use the information we collect to:

• Process adoption, volunteer, and foster applications
• Process donations and issue receipts
• Respond to inquiries and provide customer support
• Send newsletters and updates (with your consent)
• Improve our website and services
• Analyze website traffic and user behavior
• Comply with legal obligations
• Prevent fraud and enhance security

What Are Cookies?

Cookies are small text files placed on your device to collect standard internet log information and visitor behavior information. We use cookies to enhance your experience on our Site.

Types of Cookies We Use

Managing Cookies

You can control and manage cookies through our cookie consent banner or through your browser settings. Please note that disabling cookies may affect the functionality of our Site.

Third-Party Services

We use the following third-party services that may collect information:

Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Breach Notification

In the event of a data breach that poses a real risk of significant harm to individuals, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA. We will provide information about the breach, the risks, and steps being taken to mitigate harm.

Data Retention and Deletion

We retain personal information only as long as necessary to fulfill the purposes for which it was collected and to meet legal and regulatory requirements:

• Adoption Applications: Retained for 7 years for legal and accountability purposes
• Volunteer Records: Retained for the duration of volunteer service plus 2 years
• Donation Records: Retained for 7 years as required by Canadian tax law
• Newsletter Subscriptions: Retained until you unsubscribe
• Website Analytics: Automatically deleted after 26 months (Google Analytics retention setting)

When personal information is no longer needed, we securely delete or anonymize it to prevent unauthorized access.

Cross-Border Data Transfers

The following third-party services we use may process your data outside of Canada:

• Google Analytics (United States): Subject to U.S. laws including the CLOUD Act and PATRIOT Act
• Zeffy (Canada/United States): Donation processing may involve U.S. payment processors
• Shelterluv (United States): Pet management system hosted in the U.S.

When your information is processed outside Canada, it is subject to the laws of the country where it is held. We ensure our service providers implement appropriate safeguards and comply with applicable privacy laws.

Data Minimization and Purpose Limitation

We follow the principle of data minimization, collecting only the personal information that is necessary for the identified purposes. We do not collect information "just in case" we might need it later. Information is used only for the purposes for which it was collected, unless you consent to a new purpose or as required by law.

Accountability and Governance

Creston Pet Adoption and Welfare Society is responsible for all personal information under our control. We have designated a Privacy Officer responsible for ensuring compliance with PIPEDA and this Privacy Policy.

Your Privacy Rights Under PIPEDA

Under Canadian privacy law (PIPEDA), you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Right to Opt-Out: Unsubscribe from marketing communications at any time
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Withdraw Consent: Withdraw consent for data processing where consent was the basis
• Right to Challenge Compliance: File a complaint with the Office of the Privacy Commissioner of Canada

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in the "Contact Us" section below. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.

Withdrawing Consent

You may withdraw your consent for us to collect, use, or disclose your personal information at any time, subject to legal or contractual restrictions. To withdraw consent, contact us at pets@pawscreston.ca. Note that withdrawing consent may limit our ability to provide certain services.

Filing a Complaint

If you believe we have not complied with PIPEDA or have concerns about our privacy practices, you may file a complaint with the Office of the Privacy Commissioner of Canada:

Children's Privacy

Our Site is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

French Language Version

Under PIPEDA, you have the right to request a French version of this Privacy Policy. If you would like to receive this policy in French, please contact us at pets@pawscreston.ca with the subject line "French Privacy Policy Request" and we will provide it to you within 30 days.