RileyCraig.ca

Quick Questions:

Q: What information do you collect from me?

A: I collect personal information that you may voluntarily provide, such as your name, email address, and messages through the contact form.

Q: Do you process sensitive personal information?

A: No, I do not process sensitive personal information.

Q: How is payment data handled?

A: Payment data is not collected or stored locally or online directly. All payment data is handled by Stripe for donations, and you can find their privacy notice here.

Q: What information is automatically collected when I visit the website?

A: Certain information is automatically collected, including generic device and usage details. However, IP addresses are not logged.

Q: How is my information processed?

A: Your information is processed for various reasons, including improving and administering services, communication, security, and fraud prevention. Other processing may occur with your consent.

Q: Do you use cookies?

A: I do not directly serve/host cookies. However, links to other domains and embedded content may use cookies according to their policies.



POLICY/NOTICE STARTS BELOW:

PRIVACY NOTICE

Last updated October 18th, 2024

This privacy notice for http(s)://WWW.RILEYCRAIG.CA/ S.P. ('we', 'us', or 'our'), describes how and why we might collect, store, use, and/or share ('process') your information when you use our services ('Services'), such as when you:

Visit our website at http://www.rileycraig.ca, or any website of ours that links to this privacy notice

Engage with us in other related ways, including any sales/donations, newsletters (online registration not currently offered), or events


Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@rileycraig.ca.



Do we process any sensitive personal information?


We do not process sensitive personal information.


Do we receive any information from third parties?


We do not receive any information from third parties.


How do we process your information?


We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.


In what situations and with which parties do we share personal information?

We may share information in specific situations and with specific third parties, such as sharing your email or phone number with Stripe when accepting a donation to comply with financial regulations.



How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.


What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights?


The easiest way to exercise your rights is by visiting https://rileycraig.ca/contact.html, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.



Want to learn more about what we do with any information we collect? Review the privacy notice in full.


1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us via the contact form.

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our information/content, or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us (press, legal, etc. have longer storage periods). The personal information we collect may include the following:

Name

Email Address(es)

Message/query (contact form)



Sensitive Information. We do not process sensitive information.


Payment Data. We do not collect or store payment information, locally, or online directly.  All payment data is stored by Stripe (Donations). You may find their privacy notice link(s) here: https://stripe.com/en-ca/privacy.

Payment information and customer details are processed by Stripe. By making a donation, you are agreeing to Stripe Payment and Privacy terms.


All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.



Information automatically collected

In Short: Some information is collected automatically when you visit our Services. Read below:


We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your browser and device characteristics, operating system, language preferences, referring URLs, country, location, information about how and when you use our Services, and other technical information. This information is strictly needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

We do not collect your IP address.


The information we collect includes:


Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when

you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your general device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your

usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system

activity, error reports (sometimes called 'crash dumps'), and hardware settings).


Anonymized Aggregate Location Stats. We do not collect your IP address:

Aggregate location data is derived from a hash of the IP address, which is stored in memory, along with a random number (“salt”) for an 8 hour period.  This information is then deleted/purged.

Privacy is important to us.



2. HOW DO WE PROCESS YOUR INFORMATION?


In Short: We process information provided by contact form or email, to improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.


We process your personal information for a variety of reasons, depending on how you interact with our Services, including:


To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can

improve them.


To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual's vital

interest, such as to prevent harm.



3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:


Consent. We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose.

You can withdraw your consent at any time by contacting us at support@rileycraig.ca.


Contractual Necessity. We may process your personal information to enter into a contract with you, or to perform our contractual obligations

to you under an existing contract. For example, we need to process your payment information when you make a donation.


Legal Obligation. We may process your personal information to comply with applicable laws and regulations, such as tax and other financial

regulations that require us to collect and process certain information about you.


Legitimate Interests. We may process your personal information for our legitimate business interests, such as to improve our Services, provide

customer support, and to protect the safety and security of our Services and our users. This includes our use of automated systems to analyze

your data in order to improve our Services.


4. WHO DO WE SHARE YOUR INFORMATION WITH?

In Short: We may share your information with the following third parties, depending on the Services you use, your choices, and the context of your interactions with us.

We may share your information with the following third parties:


Third-Party Vendors. We may share your information with third-party vendors who need to know your information in order to provide their

services to us, or to provide their services to you or your site. This group includes vendors that help us provide our Services to you (like

Stripe, GoatCounter, and other tools that help us with website performance and analysis), and those that help us understand and enhance

our Services (like Stripe). We may also share your information with third-party vendors we engage to assist us in the administration and

management of donor data if obligated to.



5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We do not directly serve/host cookies! Links to any other domains (Stripe, YouTube, Etc.) and embedded JS content (Apple Music) may serve cookies according to their policies.


We may use similar tracking technologies (like web beacons and pixels) to access or store information.



6. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.


We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We also urge you to be careful about giving out information in public areas of the Services like message boards. The information you share in public areas may be viewed by any user of the Services.



7. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on where you are located geographically, you may have certain rights regarding your personal information.

You may have the following privacy rights under applicable law:


Your Right to Withdraw Consent. You have the right to withdraw your consent at any time by contacting us. Withdrawing your consent will not affect the

lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in

reliance on lawful processing grounds other than consent.


Your Right to Object to Processing. You have the right to object to the processing of your personal information, including for direct marketing

purposes.


Your Right to Access. You have the right to obtain information about our processing of your personal information and a copy of your personal

information that we process.


Your Right to Rectify. You have the right to request the correction or rectification of inaccurate personal information we hold about you.


Your Right to Erase or Delete. You have the right to request the deletion of your personal information.


Your Right to Restrict Processing. You have the right to request the restriction of our processing of your personal information.


Your Right to Data Portability. You have the right to be provided with a copy of your personal information in a structured, machine-readable, and

commonly used format.


Your Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal

information violates applicable law.

You may have additional rights under your local laws. If you are located in the EU, UK, or EEA, and you wish to exercise any of these rights, please contact us. If you are not located in these regions, you can contact us for assistance.


HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

In Short: You can request access to, and rectification or deletion of your personal information.

You have the right to access your personal information that we hold about you and to request that we correct, amend, or delete it if it is inaccurate or processed in violation of applicable law. These access rights may not apply in some cases, including where providing access is unreasonably burdensome or expensive under the circumstances or where it would violate the rights of someone other than the individual requesting access. If you would like to request access to, correction, or deletion of your personal information, you can submit a request using our contact details provided below. We will consider and act upon any request in accordance with applicable data protection laws.


DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated 'Revised' date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.


HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us at support@rileycraig.ca