PRIVACY POLICY

Last Updated: September 15 2022

The York University Student Centre (“YUSC”, “we”, “us”, “our”) ‎respects your privacy and is committed to protecting it by complying with this privacy policy. This policy describes:

  • how we collect, use, disclose, protect, and otherwise process the personal information of the users (“you”) of our websites (http://yusc.ca/; https://mybreakroom.ca/; https://cornerstoneyork.ca/; https://yuscportal.ca/‎) and application (together, our “Platform”);
  • the types of personal information we may collect from you or that you may provide when you access, use, browse, or visit our Platform; and
  • our practices for collecting, using, maintaining, protecting, disclosing, and transferring that personal information.

KEY ELEMENTS OF THIS PRIVACY POLICY:

For information about:

 

See:

·      the information that we collect

 

section 5

·      the analytics tools we use

 

section 6

·      the purposes for which we collect, use, and disclose information

 

section 7

·      our approach to consent

 

section 8

·      the limits on our collection, use, disclosure, and retention of personal information

 

section 9

·      how we disclose and share information

 

section 10

·      the jurisdictions in which information may be stored or processed

 

Section 11

·      how you can access and correct your personal information

 

section 12 and section 14

·      how we keep personal information secure

 

section 13

·      how to make inquiries or complaints regarding our privacy practices

 

section 15

 

  1. Scope of Policy

This policy applies to our collection, use and disclosure of “personal information”, which is any information about an identifiable individual. It includes information that can be used on its own or with other information to identify, contact, ‎or locate an individual person‎. The policy does not ‎‎impose any limits on the collection, use, or disclosure of business contact information or certain publicly-‎available information.‎

  1. Accountability

We have designated a Privacy Officer who is responsible for our compliance with this policy and the Personal Information Protection and Electronic Documents Act‎. The Privacy ‎‎Officer may be contacted as described below.‎

  1. Please Read this Policy Carefully

By using our Platform, or by otherwise choosing to provide your personal ‎information to us, you acknowledge and consent to the processing of your personal information ‎in accordance with this policy, and as may be further identified to you when the personal information is ‎collected. ‎

If you do not consent to the processing of your personal information in accordance with this policy, ‎please do not access or continue to use the Platform or otherwise provide ‎any personal information to us. ‎

  1. Policy May Change

We may update this policy from time to time to ensure ongoing compliance with applicable laws and ‎for any other purpose that we deem reasonably necessary, all without prior notice to you, and any changes will be effective immediately upon the posting of the revised policy on our Platform. We therefore recommend that you review this policy frequently. ‎You can tell if the policy has changed by ‎checking the revision date that appears at the top of this policy.

Where required by applicable ‎law, we may need to ask you to confirm your consent to the ‎processing of your personal information. ‎Otherwise, your continued access to or use of our Platform constitutes your acknowledgment and ‎acceptance of the ‎changes.‎

  1. INFORMATION COLLECTED

We may collect information that you provide directly on or through our Platform. We also use analytics tools, as described below.

  1. ANALYTICS TOOLS

We or our service providers that help us maintain and operate our Platform ‎may also automatically collect the following information relating to your access to and use of our ‎Platform through cookies, web beacons, and other technologies: your domain ‎name; your browser type and operating system; your type of computer or mobile device; pages you ‎view; links you click; your IP address; the length of time you visit or use our Platform; and ‎the referring URL, or the webpage, that led you to our Platform, as applicable. ‎

We may use various technological methods to track the patterns of users accessing and using our Platform, including the following methods:

  • Cookies: Cookies are small pieces of information that are stored by your browser on your computer ‎or mobile device. We use cookies to enhance your experience on our Platform. Cookies in ‎themselves do not identify the individual user, just the computer or device used. Users may have the ‎opportunity to set their computers or devices to accept all cookies, to notify them when a cookie is ‎issued, or not to receive cookies at any time. If you set your browser not to accept cookies, you may ‎not be able to take advantage of the full features of our Platform.‎
  • Web Beacons: Web beacons are small pieces of data that are embedded in images on the pages of ‎ We may use these technical methods to analyze the traffic patterns on our site, such as the ‎frequency with which our users visit various parts of our site. These technical methods may involve the ‎transmission of information either directly to us or to another party authorized by us to collect ‎information on our behalf. We may also use these technical methods in HTML e-mails that we send to ‎determine whether you have opened those e-mails or clicked on links in the e-mails. The information ‎from use of these technical methods may be collected in a form that is not personally identifying.‎
  • Third-Party Analytics: We may use automated devices and applications, such as Google Analytics, to ‎evaluate usage of our Platform. We also may use other analytic means to evaluate our ‎ We use these tools to help us improve our services, performance and user experiences. ‎These third parties may use cookies and other tracking technologies to perform their services. You may ‎opt-out of Google Analytics by downloading and installing the Google Analytics Opt-Out Add-on for ‎your web browser.‎ You can learn more about how Google uses the ‎‎‎information collected through ‎this service here: www.google.com/policies/privacy/partners/.‎ ‎
  • Click Stream Data: When you use, read, browse or download information from our Platform, ‎we or our service providers may also collect information such as the date, time and duration of a visit, ‎information about your location, the pages accessed, the IP address of your computer, and any ‎information downloaded.‎
  • Third-Party Content (e.g., social media links): Some of the content on our Platform may ‎include applications made available by third parties, which could include social media buttons or links ‎that allow you to share content or links to our Platform through the relevant third-party ‎ These third-party applications themselves may facilitate the collection of information by ‎those third parties, through your interaction with the applications and sometimes even if you do not ‎interact directly with them. We are not responsible for the technical operation of these applications or ‎the collection and use practices of the relevant third parties. Please visit the relevant third-party ‎websites to understand their privacy practices and options they may make available to you in relation ‎to their collection of your personal information. ‎
  1. Purposes; How we use your Information

When collecting personal information, we will state the purpose of collection and will provide, on ‎request, contact information for the Privacy Officer who can answer questions about the collection.‎

We collect, use, disclose, and process your personal information for the following purposes: ‎

  • to operate, maintain, administer, and provide to you the services, features, and functionality of the Platform;‎
  • ‎to provide you with information or services that you request from us‎;
  • to verify and authenticate your identity as needed when you use or interact with certain services or functions for which you have an account or login;‎
  • to ensure that the Platform is optimized for your use and benefit;‎
  • to analyze user experience and improve our Platform;‎
  • to communicate with you to provide you services, contacts, materials, and/or ‎recommendations for your needs as identified by you through phone, email, or our Platform;‎
  • to comply with internal policies and procedures and other legal, accounting, or security ‎requirements, including to respond to any ‎government or regulatory request, in accordance with applicable law;‎
  • to maintain accurate records;
  • to provide personal information to third party suppliers of products and services (as discussed ‎in more detail in Section 10 below);
  • to collect debts owed to us;
  • to protect us, yourself and others from fraud and error and to safeguard our business ‎interests;‎
  • to comply with legal and regulatory requirements; and
  • ‎for any other reasonable purpose that we may describe when you provide the information‎.

The collections, uses, and disclosures listed above are a reasonably necessary part of your relationship ‎with us. We may also use your information to contact you about our ‎services that may be of interest to you, as permitted by law. ‎You may opt out of any such communications at any time.

If your personal information is to be used for a purpose not previously identified, we will disclose ‎the new purpose to you before that use, and we will seek your consent unless the use is ‎authorized or required by law.‎

  1. CONSENT

We will obtain your consent to collect, use, or disclose personal information except where we are ‎authorized or required by law to do so without consent. ‎Your consent can be express, implied, or given through an authorized representative such as a lawyer or agent.

Consent may be provided orally, in writing, electronically, through inaction (such as when you receive notice that your information will be collected, used, or disclosed for various purposes, and you do not notify us that you do not want your information processed for those purposes), or otherwise.‎

Where you have provided your consent to the collection, use, and disclosure, or other processing of your personal ‎information, you may have the legal right to withdraw that consent under certain ‎circumstances, provided ‎that you give us reasonable notice. To withdraw your consent, contact us at marketing@yusc.ca. ‎If you withdraw ‎consent, we will inform you of the likely consequences, which may ‎include our inability to provide certain services for which that information is necessary.‎

  1. LIMITS ON COLLECTION, USE, DISCLOSURE, AND RETENTION

We will not collect personal information indiscriminately, but will limit collection of personal ‎information to that which is reasonable and necessary for the identified purposes. We will also collect personal information as ‎required or authorized by law.‎

We will only use or disclose your personal information for the purposes set out above and as ‎required or authorized by law.‎

We will keep personal information used to make a decision affecting you for at least one year after ‎using it to make the decision.‎

We will destroy, erase, or make anonymous records containing personal ‎information as soon as it is reasonable to assume that the original purpose is no longer being served ‎by retention of the information and retention is no longer necessary for a legal or business purpose.‎

Under some circumstances we may anonymize your personal information so that it can no ‎longer be associated with you. We reserve the right to use such anonymous and de-identified ‎data for any legitimate business purpose without further notice to you or your consent. ‎

  1. DISCLOSURE AND TRANSFER

We may disclose or transfer your personal information for the purposes set out above in the following ways:

  • to our employees and personnel;
  • to our affiliates and business partners;
  • to our contractors, agents, service providers, and other third parties we use to support our business, These service providers might include hosting providers. If we require a service provider to deal with your personal information, we will take reasonable steps ‎to ensure that the service provider adheres to appropriate privacy procedures and will keep your personal ‎information confidential. We will not provide more information than is necessary to the service ‎provider and will ensure that the information is returned or destroyed once the purpose for which it ‎was given is filled.‎
  • to law enforcement, government or regulatory bodies, or other lawful authorities‎; and
  • in accordance with applicable law.‎
  1. TRANSFER ACROSS BORDERS

YUSC is based in Ontario, Canada. Our affiliates, service providers, and other parties to whom we transfer personal information as described above may be located outside of your home jurisdiction within Canada, or outside Canada. You acknowledge that personal ‎information may be processed and stored in foreign jurisdictions with different ‎privacy laws, and that the governments, courts, or law enforcement or regulatory agencies in those ‎jurisdictions may be able to access that personal information through the laws of the ‎foreign jurisdiction.‎

  1. ACCURACY AND CORRECTION

We will make a reasonable effort to ensure that personal information we are using or disclosing is ‎accurate and complete. If you provide the information, we will rely on you to make sure it is correct.

If you demonstrate the inaccuracy or incompleteness of your personal information in our custody or control, we will update the ‎information as required. If appropriate, we will send the amended information to third parties to ‎whom the information has been disclosed. ‎

If we do not resolve a challenge regarding the accuracy of your personal information to your satisfaction, ‎we will annotate the personal information under our control to indicate that the correction was ‎requested but not made.‎

  1. SECURITY OF PERSONAL INFORMATION

We use reasonable physical, electronic, and organizational measures designed to secure your personal ‎information from accidental loss and from unauthorized access, collection, use, disclosure‎, copying, modification, disposal, or similar risks.

We will take reasonable measures, through contractual or other reasonable means, to ensure that a ‎comparable level of personal information protection is implemented by our service providers and agents who ‎assist in providing services.‎

The safety and security of your information may also depend on you -- for example, if you have a password for access to certain parts of Platform, you are ‎responsible for keeping this password confidential. We ask you not to share your password with ‎anyone. ‎

Unfortunately, no method of transmission over the Internet, or method of electronic storage, is completely ‎secure, and we cannot guarantee the security ‎of your personal information. You should always exercise caution when disclosing personal information ‎over the Internet‎.

  1. ACCESSING YOUR INFORMATION

You have a right to access your personal information that we hold.‎

Upon your written request and authentication of identity, we will provide you your personal information ‎under our control. We will also give you information about the ways in which that information is ‎being used and a description of the individuals and organizations to whom that information has been ‎transferred or disclosed. We may charge you a reasonable fee for doing so.‎

In some situations, we may not be able to provide access to personal information. If we cannot provide you with access to your personal information, we will inform you of the ‎reasons why, subject to any legal or regulatory restrictions.‎

  1. CONTACT US

Any inquiries, complaints or questions regarding this policy or our privacy practices should be directed in writing to our Privacy ‎Officer at internal@yusc.ca