One Change – Simple actions matter.

1. Protection of Personal Information at One Change
2. Statement of Policy
2.1 Requirements Met By
2.3 Privacy on the Internet
2.3 Use of Aggregate Data
3. Responsibility
4. Privacy Standards
______________________________________________________________________

1. Protection of Personal Information at One Change
One Change is committed to protecting the privacy of its volunteers, partners, employees and consumers. All personal information collected by One Change is done so in accordance with our privacy policy.

The One Change Privacy Officer is accountable for One Change and Project Porchlight’s policies and practices related to the management of personal information. All complaints and inquires related to privacy should be forwarded to the Privacy Officer.

Privacy Officer
One Change
68 Chamberlain Avenue, Suite 200
Ottawa ON K1S 1V9
Telephone: 1-866-585-6359
Fax: (613) 580-2869
Email: privacy(at)www.onechange.org

2. Statement of Policy
It is the policy of One Change to control the collection, use and disclosure of personal information in accordance with all requirements set out in the Personal Information Protection and Electronic Documents Act (PIPEDA, from here on called “the Act”).

2.1 Requirements met by One Change
The following requirements shall be met by One Change unless exempted by the Act.

1. Accountability
One Change is responsible for personal information under its control and shall designate a Privacy Officer to be accountable for the One Change’s compliance with the Act.

2. Identifying Purposes
The purposes for which personal information is collected shall be identified by One Change at or before the time the information is collected.

3. Consent
The knowledge and consent of the individual are required for the collection, use, or disclosure of personal information.

4. Limiting Collection
The collection of personal information shall be limited to that which is necessary for the purposes identified by One Change.

5. Limiting Use, Disclosure and Retention
Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as permitted by law.

Personal information shall be retained only as long as necessary for the fulfillment of those purposes.

6. Accuracy
Personal information shall be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.

7. Safeguards
Personal information shall be protected by security safeguards appropriate to the sensitivity of the information.

8. Openness
One Change shall make specific information about its policies and practices relating to the management of personal information readily available to individuals.

9. Individual Access
Upon request, an individual shall be informed of the existence, use and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.

10. Challenging Compliance
An individual shall be able to address a challenge concerning compliance with the above principles to the designated individual or individuals accountable for One Change’s compliance.

2.2 Privacy on the Internet
This privacy statement is applicable to all One Change web-sites. One Change respects the privacy of its Internet users and will protect that privacy as vigorously as is possible.

One Change does not collect information that personally identifies individuals except, when individuals provide such specific information on a voluntary basis. Any personally identifiable information is stored securely and used only for the purpose for which it is provided to us.

One Change reserves the right to perform statistical analyses of user behaviour and characteristics in order to measure interest in and use of the various sections of its sites, so as to improve design and navigation and to gather other information. Only aggregated data from these analyses, not individual data, will be used for this purpose. We may disclose this information, in aggregate only, to third parties such as sponsors or other partners and/or use it for auditing purposes.

As well, users should be aware that certain non-personal information and data may be collected automatically by One Change through the operation of what are called “cookies”.

Cookies are small text files that all web sites can send to your browser, which may then store the cookie on your hard drive, that identify an individual computer’s browser entering a web site. They allow the site to track that browser’s movement through the site over several sessions. The goal is to save users time, to provide individuals with a more meaningful visit and to measure web site activity. One Change uses cookies only for the above-mentioned purposes and will not use them to identify users or to track non-One Change usages.

If users do not want a cookie placed on your computer by One Change, it is possible to disable cookies from all web sites by modifying the Preferences section of Firefox, Netscape, or Internet Explorer browsers (under Edit/Preferences/Advanced).

Please note: it is possible that some aspects of One Change’s sites may not be available to users if this option is chosen.

If users have no problem accepting cookies, but wish to be informed of their appearance it is possible to turn on a warning prompt by modifying the cookie warning section in Edit/Preferences/Advanced.

Finally, our web sites contain links to other sites. When users link to another site, they are subject to the privacy and security policies of the new site.

2.3 Use of Contact Information
Any contact information provided to One Change (e.g., names, postal codes, email addresses) allows One Change to inform people about events, activities, news, or special offers which may be of interest. By becoming a volunteer, requesting information, or registering for events offered by One Change, individuals are providing One Change the permission required to contact them by way of the information they provide. At any time individuals may choose not to be contacted by One Change by contacting our offices by email to: privacy(at)www.onechange.org or by calling: 1-866-585-6359.

2.4 Use of Aggregate Data
One Change uses non-personalized aggregated information (that does not identify individual users) in order to improve the organization and the programs and services we provide. One Change may share aggregate information about its volunteers, partners, employees and consumers with sponsors, potential sponsors and other parties to help them better understand One Change programs and their results.

Personally identifiable information will not shared with sponsors, potential sponsors or other parties without consent.

3. Responsibility
All One Change employees who collect, maintain, or use personal information are responsible for insuring that the collection, use and disclosure of this information is carried out in accordance with this policy and relevant procedures.

The Executive Director is responsible for supervising compliance with the legislation and for initiating procedures, guidelines and schedules that will be developed to affect this policy.

The Privacy Officer is accountable for One Change’s policies and practices with respect to the management of personal information. All complaints and inquiries related to privacy should be forwarded to the Privacy Officer.

4. Privacy Standards
One Change’s privacy provisions are based on the Canadian Standards Association’s International Model Code for the Protection of Personal Information, recognized as a national standard in 1996. The standard addresses the ways in which, organizations collect, use and disclose personal information. It also addresses the rights of individuals to have access to their personal information and to have it corrected if necessary.

The Code’s 10 principles are:

1. Accountability
An organization is responsible for personal information under its control and shall designate an individual or individuals who are accountable for the organization’s compliance with these principles.

2. Identifying Purposes
The purposes for which personal information is collected shall be identified by the organization at or before the time the information is collected.

3. Consent
The knowledge and consent of the individual are required for the collection, use, or disclosure of personal information, except where inappropriate.

4. Limiting Collection
The collection of personal information shall be limited to that which is necessary for the purposes identified by the organization. Information shall be collected by fair and lawful means.

Personal information shall be retained only as long as necessary for the fulfillment of these purposes.

6. Accuracy
Personal information shall be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.

7. Safeguards
Personal information shall be protected by security safeguards appropriate to the sensitivity of the information.

8. Openness
An organization shall make readily available to individuals, specific information about its policies and practices relating to the management of personal information.

Privacy Policy