Updated March, 2007 (Download PDF here)

1. Protection of Personal Information at Project Porchlight.

2. Statement of Policy
2.1 Requirements met by
2.3 Privacy on the Internet
2.3 Use of Aggregate Data

3. Responsibility

4. Privacy Standards
______________________________________________________________________

1. Protection of Personal Information at Project Porchlight
Project Porchlight is committed to protecting the privacy of its volunteers, partners,
employees, and consumers. All personal information collected by Project Porchlight is done so in accordance with our privacy policy.

The Project Porchlight Privacy Officer is accountable for Project Porchlight’s policies and
practices related to the management of personal information. All complaints and inquires
related to privacy should be forwarded to the Privacy Officer.

Elizabeth Harvey
Privacy Officer
Project Porchlight
1883 Featherston Drive
Ottawa ON K1H 6P6

Telephone: 1-866-585-6359
Fax: (613) 580-2869
Email: privacy@onechange.org

2. Statement of Policy
It is the policy of Project Porchlight to control the collection, use, and disclosure of
personal information in accordance with all requirements set out in the Personal
Information Protection and Electronic Documents Act (PIPEDA, from here on called “the
Act”).

2.1 Requirements met by Project Porchlight

The following requirements shall be met by Project Porchlight unless exempted by the
Act.

1. Accountability
Project Porchlight is responsible for personal information under its control and shall
designate a Privacy Officer to be accountable for the Project Porchlight’s compliance
with the Act.
Project Porchlight Privacy Policy Page 2 of 5
Updated March, 2007
2. Identifying Purposes
The purposes for which personal information is collected shall be identified by Project
Porchlight at or before the time the information is collected.
3. Consent
The knowledge and consent of the individual are required for the collection, use, or
disclosure of personal information.
4. Limiting Collection
The collection of personal information shall be limited to that which is necessary for the
purposes identified by Project Porchlight.
5. Limiting Use, Disclosure, and Retention
Personal information shall not be used or disclosed for purposes other than those for
which it was collected, except with the consent of the individual or as permitted by law.
Personal information shall be retained only as long as necessary for the fulfillment of
those purposes.
6. Accuracy
Personal information shall be as accurate, complete, and up-to-date as is necessary for
the purposes for which it is to be used.
7. Safeguards
Personal information shall be protected by security safeguards appropriate to the
sensitivity of the information.
8. Openness
Project Porchlight shall make specific information about its policies and practices relating
to the management of personal information readily available to individuals.
9. Individual Access
Upon request, an individual shall be informed of the existence, use, and disclosure of his
or her personal information and shall be given access to that information. An individual
shall be able to challenge the accuracy and completeness of the information and have it
amended as appropriate.
10. Challenging Compliance
An individual shall be able to address a challenge concerning compliance with the above
principles to the designated individual or individuals accountable for Project Porchlight's
compliance.

2.2 Privacy on the Internet

This privacy statement is applicable to all Project Porchlight web-sites.

Project Porchlight respects the privacy of its Internet users and will protect that privacy
as vigorously as possible.

Project Porchlight does not collect information that personally identifies individuals
except when individuals provide such specific information on a voluntary basis. Any
Project Porchlight Privacy Policy Page 3 of 5
Updated March, 2007
personally identifiable information is stored securely and used only for the purpose for
which it is provided to us.

Project Porchlight reserves the right to perform statistical analyses of user behaviour and
characteristics, in order to measure interest in and use of the various sections of its sites
so as to improve design and navigation and to gather other information. Only aggregated
data from these analyses, not individual data, will be used for this purpose. We may
disclose this information, in aggregate only, to third parties such as sponsors or other
partners and/or use it for auditing purposes.

As well, users should be aware that certain non-personal information and data may be
automatically collected by Project Porchlight through the operation of what are called
"cookies". Cookies are small text files that all web sites can send to your browser, which
may then store the cookie on your hard drive, that identify an individual computer's
browser entering a web site. They allow the site to track that browser's movement
through the site over several sessions. The goal is to save users time, to provide
individuals with a more meaningful visit, and to measure web site activity. Project
Porchlight uses cookies only for the above-mentioned purposes and will not use them to
identify users or to track non-Project Porchlight usage.

If users do not want a cookie placed on your computer by the Project Porchlight, it is
possible to disable cookies from all web sites by modifying the Preferences section of
Firefox, Netscape, or Internet Explorer browsers (under Edit/Preferences/Advanced).
Note that it is possible that some aspects of Project Porchlight’s sites may be
unavailable to users if this option is chosen.

If users have no problem accepting cookies, but wish to be informed of their
appearance, it is possible to turn on a warning prompt by modifying the cookie warning
section in Edit/Preferences/Advanced.

Finally, our web sites contain links to other sites. When users link to another site, they
are subject to the privacy and security policies of the new site.

2.3 Use of Contact Information

Any contact information provided to Project Porchlight (e.g., names, postal codes, email
addresses) allows Project Porchlight to inform people about events, activities, news, or
special offers which may be of interest. By becoming a volunteer, requesting
information, or registering for events offered by Project Porchlight, individuals are giving
Project Porchlight permission to contact them by way of the information they provide. At
any time individuals may choose not to be contacted by Project Porchlight by contacting
our offices at privacy@onechange.org or 1-866-585-6359.

2.4 Use of Aggregate Data

Project Porchlight uses non-personalized aggregated information (that does not identify
individual users) in order to improve the organization and the programs and services we
provide. Project Porchlight may share aggregate information about its volunteers,
partners, employees, and consumers with sponsors, potential sponsors, and other
parties to help them better understand Project Porchlight programs and their results.
Personally identifiable information will not shared with sponsors, potential sponsors or
Project Porchlight Privacy Policy Page 4 of 5
Updated March, 2007
other parties without consent.

3. Responsibility

All Project Porchlight employees who collect, maintain, or use personal information are
responsible for insuring that the collection, use, and disclosure of this information is
carried out in accordance with this policy and relevant procedures.

The Executive Director is responsible for supervising compliance with the legislation and
for initiating procedures, guidelines, and schedules that will be developed to effect this
policy.

The Privacy Officer is accountable for Project Porchlight’s policies and practices with
respect to the management of personal information. All complaints and inquiries related
to privacy should be forwarded to the Privacy Officer.
4. Privacy Standards
Project Porchlight's privacy provisions are based on the Canadian Standards
Association’s International Model Code for the Protection of Personal Information,
recognized as a national standard in 1996. The standard addresses the ways in which
organizations collect, use, and disclose personal information. It also addresses the rights
of individuals to have access to their personal information and to have it corrected if
necessary.
The Code's 10 principles are:
1. Accountability
An organization is responsible for personal information under its control and shall
designate an individual or individuals who are accountable for the organization's
compliance with these principles.

2. Identifying Purposes
The purposes for which personal information is collected shall be identified by the
organization at or before the time the information is collected.

3. Consent
The knowledge and consent of the individual are required for the collection, use, or
disclosure of personal information, except where inappropriate.

4. Limiting Collection
The collection of personal information shall be limited to that which is necessary for
the purposes identified by the organization. Information shall be collected by fair and
lawful means.

5. Limiting Use, Disclosure, and Retention
Personal information shall not be used or disclosed for purposes other than those for
which it was collected, except with the consent of the individual or as required by
law. Personal information shall be retained only as long as necessary for the
fulfilment of these purposes.

Project Porchlight Privacy Policy Page 5 of 5
Updated March, 2007
6. Accuracy
Personal information shall be as accurate, complete, and up-to-date as is necessary
for the purposes for which it is to be used.

7. Safeguards
Personal information shall be protected by security safeguards appropriate to the
sensitivity of the information.

8. Openness
An organization shall make readily available to individuals specific information about
its policies and practices relating to the management of personal information.

9. Individual Access
Upon request, an individual shall be informed of the existence, use, and disclosure of
his or her personal information and shall be given access to that information. An
individual shall be able to challenge the accuracy and completeness of the
information and have it amended as appropriate.

10. Challenging Compliance
An individual shall be able to address a challenge concerning compliance with the
above principles to the designated individual or individuals accountable for the
organization's compliance.