CUSTOMIZATION CHECKLIST

Before publishing, update these placeholders:

[Insert Date] – Add today’s date

[Organization Name] – Your organization’s legal name

[Your Physical Address] – Required under PIPEDA

[Contact Email] – Create privacy@ottawaradio.ca if needed

[Contact Phone Number]

[Privacy Officer] – Optional but recommended

[Specify location] – Check where Hostinger stores your data

[Your email provider] – If using MailChimp, SendGrid, etc.

[Google Analytics or other tools] – List what you actually use

[2 years] – Decide your inactive account policy

[5-7 years] – Decide record retention period

Verify all third-party services mentioned are accurate

PRIVACY POLICY TEMPLATE FOR TRAINING PLATFORM

Customized for ottawaradio.ca Learning & Development Hub

Privacy Policy

Last Updated: [Insert Date]

Effective Date: [Insert Date]

1. Introduction

This Privacy Policy explains how [Organization Name] (“we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you use our Learning & Development Hub (the “Platform”) at ottawaradio.ca.

We are committed to protecting your privacy and handling your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

By using this Platform, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

Organization Name: [Your Organization Name]
Address: [Your Physical Address]
Email: [Contact Email]
Phone: [Contact Phone Number]
Privacy Officer: [Name and contact info if applicable]

3. What Information We Collect

We collect only the information necessary to provide and improve our training services.

3.1 Information You Provide to Us

When you register for or use the Platform, we may collect:

Account Information: Name, email address, username, password (encrypted)
Profile Information: Role/position, organization affiliation (if applicable), areas of interest
Learning Progress Data: Courses enrolled, completion status, quiz/assessment results, certificates earned, time spent on modules
Communications: Messages sent through contact forms, forum posts, questions submitted to facilitators
Event Registration: Name, email, phone number (if you register for events or sessions)

3.2 Information We Collect Automatically

When you use the Platform, we automatically collect:

Technical Information: IP address, browser type, device type, operating system
Usage Data: Pages visited, time spent on pages, links clicked, login/logout times, search queries
Cookies and Tracking: We use cookies to maintain your session and remember your preferences (see Section 8)

3.3 Information We Do NOT Collect

We do not collect:

Credit card or payment information (if applicable – adjust based on your situation)
Sensitive personal information (health data, financial data, etc.) unless explicitly required for specific programs
Information about children under 13 years of age

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Platform Operation

Create and manage your account
Provide access to learning content and resources
Track your learning progress and completion
Enable you to participate in discussions and forums
Send you course-related notifications and updates

4.2 Certificates and Credentials

Generate completion certificates
Verify your training history
Maintain records for accreditation purposes (if applicable)

4.3 Communication

Respond to your questions and support requests
Send important updates about the Platform
Notify you about new courses or learning opportunities (you can opt out)
Send event reminders and confirmations

4.4 Improvement and Analytics

Analyze how users interact with the Platform
Identify popular courses and areas for improvement
Improve user experience and content quality
Generate aggregate statistics (anonymized data)

4.5 Legal and Safety

Comply with legal obligations
Enforce our Terms of Service
Protect against fraud or misuse
Respond to legal requests

5. Legal Basis for Processing (PIPEDA Compliance)

Under PIPEDA, we collect and use your personal information based on:

Consent: You provide consent when you create an account and use the Platform
Contractual Necessity: To provide the training services you’ve requested
Legitimate Interests: To improve our services and ensure Platform security
Legal Obligations: To comply with applicable laws and regulations

6. How We Share Your Information

We do not sell, rent, or trade your personal information. We only share your information in these limited circumstances:

6.1 With Your Consent

When you explicitly agree to share information (e.g., displaying your name on a certificate, sharing achievements)

6.2 Service Providers

We may share information with trusted third-party service providers who help us operate the Platform:

Web Hosting: Hostinger.com (servers located in [specify location])
Email Services: [Your email provider, if applicable]
Analytics: [Google Analytics or other tools – be specific]
LMS Platform: Tutor LMS (if you’re using it for course management)

These providers are contractually required to protect your information and use it only for the purposes we specify.

6.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

6.4 Organizational Partners

If this Platform is used by multiple organizations (e.g., community radio stations), we may share your learning progress with your affiliated organization with your consent.

7. How Long We Keep Your Information

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

Active Accounts: Information is retained while your account is active
Inactive Accounts: Accounts inactive for [2 years] may be deleted after notification
Learning Records: Training completion records may be retained for [5-7 years] for accreditation and verification purposes
Legal Requirements: Some information may be retained longer if required by law

After retention periods expire, we securely delete or anonymize your information.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide a better user experience.

8.2 How We Use Cookies

Essential Cookies: Required for login and Platform functionality (cannot be disabled)
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Help us understand how you use the Platform (can be disabled)

8.3 Your Cookie Choices

You can control cookies through your browser settings. Note that disabling essential cookies may limit Platform functionality.

For more information: [Link to detailed cookie policy if you create one]

9. Your Privacy Rights

Under Canadian privacy law (PIPEDA), you have the following rights:

9.1 Access

You can request a copy of the personal information we hold about you.

9.2 Correction

You can update or correct your information through your account settings or by contacting us.

9.3 Deletion

You can request deletion of your account and personal information (subject to legal retention requirements).

9.4 Withdrawal of Consent

You can withdraw consent for certain uses of your information (e.g., marketing emails).

9.5 Portability

You can request your learning data in a portable format.

To exercise these rights, contact us at: [privacy@ottawaradio.ca or your contact email]

We will respond to your request within 30 days.

10. How We Protect Your Information

We implement appropriate technical and organizational security measures to protect your personal information:

10.1 Technical Measures

Encryption: SSL/TLS encryption for data transmission (HTTPS)
Secure Storage: Encrypted database storage
Access Controls: Password protection and two-factor authentication
Regular Updates: WordPress core, plugins, and themes kept up-to-date
Security Monitoring: Wordfence security scanning and firewall protection
Backups: Regular automated backups stored securely

10.2 Organizational Measures

Limited Access: Only authorized personnel can access personal information
Training: Staff trained on privacy and security practices
Policies: Written security and privacy policies
Vendor Management: Third-party providers vetted for security practices

10.3 Your Responsibilities

Use a strong, unique password
Keep your login credentials confidential
Log out after using shared computers
Report suspicious activity immediately

Note: No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Third-Party Links

The Platform may contain links to external websites or resources. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies before providing any information.

12. International Data Transfers

Your information is primarily stored on servers located in [specify: Canada, US, Europe – check with Hostinger where your data is hosted].

If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy law.

13. Children’s Privacy

This Platform is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at [contact email], and we will delete it.

For users aged 13-18, we recommend parental guidance when using the Platform.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

When we make changes:

We will update the “Last Updated” date at the top
For significant changes, we will notify you via email or Platform notification
Continued use of the Platform after changes constitutes acceptance

We encourage you to review this policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

Email: [privacy@ottawaradio.ca or your contact email]
Mail: [Physical address]
Phone: [Phone number]
Privacy Officer: [Name and contact if applicable]

Response Time: We aim to respond to all privacy inquiries within 30 days.

16. Complaints

If you believe we have not complied with Canadian privacy laws, you have the right to file a complaint with:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca

Your Consent

By creating an account and using this Platform, you acknowledge that you have read, understood, and agree to this Privacy Policy.

You can withdraw your consent at any time by contacting us or deleting your account, subject to legal and contractual restrictions.

END OF PRIVACY POLICY