Last Updated: September 15 2022
The York University Student Centre (“YUSC”, “we”, “us”, “our”) respects your privacy and is committed to protecting it by complying with this privacy policy. This policy describes:
KEY ELEMENTS OF THIS PRIVACY POLICY:
For information about: |
|
See: |
· the information that we collect |
|
section 5 |
· the analytics tools we use |
|
section 6 |
· the purposes for which we collect, use, and disclose information |
|
section 7 |
· our approach to consent |
|
section 8 |
· the limits on our collection, use, disclosure, and retention of personal information |
|
section 9 |
· how we disclose and share information |
|
section 10 |
· the jurisdictions in which information may be stored or processed |
|
Section 11 |
· how you can access and correct your personal information |
|
section 12 and section 14 |
· how we keep personal information secure |
|
section 13 |
· how to make inquiries or complaints regarding our privacy practices |
|
section 15 |
This policy applies to our collection, use and disclosure of “personal information”, which is any information about an identifiable individual. It includes information that can be used on its own or with other information to identify, contact, or locate an individual person. The policy does not impose any limits on the collection, use, or disclosure of business contact information or certain publicly-available information.
We have designated a Privacy Officer who is responsible for our compliance with this policy and the Personal Information Protection and Electronic Documents Act. The Privacy Officer may be contacted as described below.
By using our Platform, or by otherwise choosing to provide your personal information to us, you acknowledge and consent to the processing of your personal information in accordance with this policy, and as may be further identified to you when the personal information is collected.
If you do not consent to the processing of your personal information in accordance with this policy, please do not access or continue to use the Platform or otherwise provide any personal information to us.
We may update this policy from time to time to ensure ongoing compliance with applicable laws and for any other purpose that we deem reasonably necessary, all without prior notice to you, and any changes will be effective immediately upon the posting of the revised policy on our Platform. We therefore recommend that you review this policy frequently. You can tell if the policy has changed by checking the revision date that appears at the top of this policy.
Where required by applicable law, we may need to ask you to confirm your consent to the processing of your personal information. Otherwise, your continued access to or use of our Platform constitutes your acknowledgment and acceptance of the changes.
We may collect information that you provide directly on or through our Platform. We also use analytics tools, as described below.
We or our service providers that help us maintain and operate our Platform may also automatically collect the following information relating to your access to and use of our Platform through cookies, web beacons, and other technologies: your domain name; your browser type and operating system; your type of computer or mobile device; pages you view; links you click; your IP address; the length of time you visit or use our Platform; and the referring URL, or the webpage, that led you to our Platform, as applicable.
We may use various technological methods to track the patterns of users accessing and using our Platform, including the following methods:
When collecting personal information, we will state the purpose of collection and will provide, on request, contact information for the Privacy Officer who can answer questions about the collection.
We collect, use, disclose, and process your personal information for the following purposes:
The collections, uses, and disclosures listed above are a reasonably necessary part of your relationship with us. We may also use your information to contact you about our services that may be of interest to you, as permitted by law. You may opt out of any such communications at any time.
If your personal information is to be used for a purpose not previously identified, we will disclose the new purpose to you before that use, and we will seek your consent unless the use is authorized or required by law.
We will obtain your consent to collect, use, or disclose personal information except where we are authorized or required by law to do so without consent. Your consent can be express, implied, or given through an authorized representative such as a lawyer or agent.
Consent may be provided orally, in writing, electronically, through inaction (such as when you receive notice that your information will be collected, used, or disclosed for various purposes, and you do not notify us that you do not want your information processed for those purposes), or otherwise.
Where you have provided your consent to the collection, use, and disclosure, or other processing of your personal information, you may have the legal right to withdraw that consent under certain circumstances, provided that you give us reasonable notice. To withdraw your consent, contact us at marketing@yusc.ca. If you withdraw consent, we will inform you of the likely consequences, which may include our inability to provide certain services for which that information is necessary.
We will not collect personal information indiscriminately, but will limit collection of personal information to that which is reasonable and necessary for the identified purposes. We will also collect personal information as required or authorized by law.
We will only use or disclose your personal information for the purposes set out above and as required or authorized by law.
We will keep personal information used to make a decision affecting you for at least one year after using it to make the decision.
We will destroy, erase, or make anonymous records containing personal information as soon as it is reasonable to assume that the original purpose is no longer being served by retention of the information and retention is no longer necessary for a legal or business purpose.
Under some circumstances we may anonymize your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.
We may disclose or transfer your personal information for the purposes set out above in the following ways:
YUSC is based in Ontario, Canada. Our affiliates, service providers, and other parties to whom we transfer personal information as described above may be located outside of your home jurisdiction within Canada, or outside Canada. You acknowledge that personal information may be processed and stored in foreign jurisdictions with different privacy laws, and that the governments, courts, or law enforcement or regulatory agencies in those jurisdictions may be able to access that personal information through the laws of the foreign jurisdiction.
We will make a reasonable effort to ensure that personal information we are using or disclosing is accurate and complete. If you provide the information, we will rely on you to make sure it is correct.
If you demonstrate the inaccuracy or incompleteness of your personal information in our custody or control, we will update the information as required. If appropriate, we will send the amended information to third parties to whom the information has been disclosed.
If we do not resolve a challenge regarding the accuracy of your personal information to your satisfaction, we will annotate the personal information under our control to indicate that the correction was requested but not made.
We use reasonable physical, electronic, and organizational measures designed to secure your personal information from accidental loss and from unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks.
We will take reasonable measures, through contractual or other reasonable means, to ensure that a comparable level of personal information protection is implemented by our service providers and agents who assist in providing services.
The safety and security of your information may also depend on you -- for example, if you have a password for access to certain parts of Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, no method of transmission over the Internet, or method of electronic storage, is completely secure, and we cannot guarantee the security of your personal information. You should always exercise caution when disclosing personal information over the Internet.
You have a right to access your personal information that we hold.
Upon your written request and authentication of identity, we will provide you your personal information under our control. We will also give you information about the ways in which that information is being used and a description of the individuals and organizations to whom that information has been transferred or disclosed. We may charge you a reasonable fee for doing so.
In some situations, we may not be able to provide access to personal information. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.
Any inquiries, complaints or questions regarding this policy or our privacy practices should be directed in writing to our Privacy Officer at internal@yusc.ca