Brady's Foundation ("we," "us," or "our") is a registered Canadian charity (CRA No. 781558879 RR0001) committed to protecting the privacy of every individual whose personal information comes into our care. This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, and your rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles.

1.  Accountability

Brady's Foundation is responsible for personal information under its control. Our Privacy Officer is the designated individual accountable for compliance with this Policy and PIPEDA.

Email: info@bradysfoundation.ca

Website: www.bradysfoundation.ca

Third-party service providers who handle personal information on our behalf (e.g., payment processors, email platforms) are required by contract to provide comparable privacy protection.

2.  Identifying Purposes

We identify the purposes for which personal information is collected before or at the time of collection. We collect personal information for the following purposes:

  • Processing grant applications and distributing financial aid to eligible families.

  • Receiving and processing charitable donations, including issuing CRA tax receipts.

  • Registering participants for fundraising events and activities.

  • Communicating organizational news, impact updates, and event information to supporters who have consented.

  • Responding to inquiries submitted through our contact form or by email.

  • Maintaining records as required by the Canada Revenue Agency and applicable charity law.

  • Improving our website and digital communications.

We will not use or disclose personal information for any new purpose without first identifying that purpose and, where required, obtaining consent.

3.  Consent

We obtain meaningful consent — express or implied — before or at the time we collect personal information, and before we use or disclose it for any purpose. The form of consent we seek may vary depending on the sensitivity of the information and the reasonable expectations of the individual.

Express Consent

We obtain express written or electronic consent when collecting sensitive personal information, such as health-related information provided as part of a grant application. Consent forms clearly describe what information is collected and why.

Implied Consent

Implied consent may apply in low-sensitivity situations where the purpose would be obvious to a reasonable person — for example, using a donor's mailing address to send a tax receipt.

Withdrawing Consent

You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting our Privacy Officer. We will inform you of the implications of withdrawing consent. Withdrawal does not affect the lawfulness of collection or use prior to withdrawal.

4.  Limiting Collection

We collect only the personal information necessary to fulfill the identified purposes. We collect personal information by fair and lawful means. We do not collect information indiscriminately.

Information We May Collect

  • Contact information: name, mailing address, email address, phone number.

  • Financial information: payment details for donations (processed securely through a third-party payment processor; we do not store full card numbers).

  • Grant application information: child's diagnosis, care needs, and supporting documentation provided voluntarily by applicant families.

  • Event registration information: name, contact details, dietary or accessibility requirements where relevant.

  • Website usage data: IP address, browser type, pages visited, and time spent (collected via cookies and analytics tools — see Section 10).

5.  Limiting Use, Disclosure, and Retention

Personal information is used or disclosed only for the purpose for which it was collected, unless we have consent for another purpose or are required by law.

Disclosure

We may disclose personal information to:

  • Service providers acting on our behalf (e.g., payment processors, email delivery services, website hosting), bound by confidentiality obligations.

  • The Canada Revenue Agency or other government authorities as required by law.

  • Legal counsel, auditors, or regulators as required to fulfill our legal obligations.

We do not sell, trade, or rent personal information to any third party.

Retention

We retain personal information only as long as necessary to fulfill the identified purposes, or as required by law (e.g., CRA requires charity records to be kept for a minimum of six years). When personal information is no longer required, it is securely destroyed or anonymized.

6.  Accuracy

We take reasonable steps to ensure that personal information is accurate, complete, and up-to-date as necessary for the purposes for which it is used. If you believe information we hold about you is inaccurate or incomplete, please contact our Privacy Officer and we will correct it promptly.

7.  Safeguards

We protect personal information using security safeguards appropriate to the sensitivity of the information, including:

  • Secure, encrypted transmission of data over HTTPS.

  • Third-party payment processing with PCI-DSS compliant providers; we do not store credit card numbers.

  • Password-protected and access-controlled systems for storing personal records.

  • Limiting access to personal information to staff and volunteers who need it to perform their duties.

  • Regular review of our security practices as our organization evolves.

No transmission or storage method is 100% secure. If you have concerns about transmitting sensitive information online, please contact us directly.

8.  Openness

We make information about our privacy policies and practices readily available. This Privacy Policy is published at www.bradysfoundation.ca. Any updates will be posted on our website with a revised effective date. You may also request information about our privacy practices by contacting our Privacy Officer.

9.  Individual Access

Upon written request, you have the right to:

  • Be informed of the existence, use, and disclosure of your personal information.

  • Access your personal information held by us.

  • Challenge the accuracy and completeness of your personal information and request corrections.

To submit an access request, contact our Privacy Officer in writing at info@bradysfoundation.ca. We will respond within 30 days. In some cases, we may need to verify your identity before releasing information. We may charge a minimal fee for access requests; we will notify you of any fee in advance.

We may decline access requests in limited circumstances permitted by PIPEDA (e.g., if granting access would reveal confidential information about a third party, or would be subject to solicitor-client privilege).

10.  Website Cookies & Analytics

Our website (www.bradysfoundation.ca) is hosted on Squarespace, which uses cookies and similar tracking technologies to operate the site and collect usage statistics. Cookies used include:

  • Essential cookies: required for the website to function (e.g., session management).

  • Analytics cookies: collect anonymized data about how visitors use the site to help us improve content and navigation.

Most browsers allow you to refuse or delete cookies through browser settings. Disabling cookies may affect certain website features. By continuing to use our website, you consent to the use of cookies in accordance with this Policy.

11.  Challenging Compliance

You have the right to challenge Brady's Foundation's compliance with this Privacy Policy and PIPEDA. To file a privacy-related complaint or concern:

  • Contact our Privacy Officer at info@bradysfoundation.ca. We will investigate all complaints and respond in writing within 30 days.

  • If you are not satisfied with our response, you may escalate your complaint to the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada30 Victoria Street, Gatineau, Quebec  K1A 1H3Toll-free: 1-800-282-1376  |  www.priv.gc.ca

12.  Children's Personal Information

As an organization that serves families of children with life-limiting illnesses, we may receive information about children as part of grant applications. Such information is collected with the express consent of a parent or legal guardian, used solely to assess and administer financial aid, and protected with the highest level of care. We do not use children's information for any marketing or promotional purpose, and we never disclose it to unauthorized third parties.

13.  Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated Policy on our website with a revised effective date. We encourage you to review this Policy periodically. Continued use of our website or services after any changes constitutes acceptance of the updated Policy.

Contact Us

For any questions, concerns, or requests related to this Privacy Policy or our privacy practices, please contact:

Brady's Foundation — Privacy Officer

Email: info@bradysfoundation.ca

Website: www.bradysfoundation.ca

Charitable Registration: 781558879 RR0001

 

This policy addresses all ten fair information principles under Schedule 1 of PIPEDA: Accountability, Identifying Purposes, Consent, Limiting Collection, Limiting Use / Disclosure / Retention, Accuracy, Safeguards, Openness, Individual Access, and Challenging Compliance.