Privacy Policy.

Effective Date: December 22, 2025
Organization: Citizens Supportive of Crowsnest Coal (CSCC)

1. who this policy covers

This policy explains how we collect, use, disclose, and protect personal information about people in Canada who engage with us (e.g., sign our petitions, opt in for updates, donate, volunteer, attend events, or visit our website). It applies whether we collect information online or offline. We follow Canada’s private-sector privacy principles (including PIPEDA) and Alberta best practices for non-profits.

2. what we collect

We may collect:

- Contact & identity: name, postal code, address, email, phone.
- Civic engagement: petitions you sign, events attended, volunteer interests, policy topics you support (e.g., coal/coking coal, jobs, local impacts).
- Communications preferences: email/text opt-ins, unsubscribe choices.
- Donation & transaction data (if applicable): contribution amount/date, method, and required compliance info (we do not store full payment card numbers).
- Technical data: device/browser, IP address, pages viewed, and cookies or similar technologies on our sites.
- Public or provided sources: information you publish or share with us, and—only where permitted—data from publicly available sources or partners.

3. how we collect it

- Directly from you (web forms, petitions, event sign-ups, email/SMS opt-ins, in-person).
- Automatically via our website/app (analytics, cookies).
- From service providers (e.g., email or event platforms).

4. why we use it (our purposes)

We use personal information to:

- Communicate with you about coal-related information (including Crowsnest coal), natural resource policy, local impacts, events, petitions, volunteering, fundraising, and campaigns.
- Mobilize and organize supporters (e.g., canvassing, phone/text banks, GOTV-style engagement).
- Process donations and meet legal/financial reporting obligations.
- Improve our digital tools, content, and outreach effectiveness (analytics).
- Ensure compliance with applicable election, privacy, anti-spam, and fundraising rules.

5. Our legal basis & your consent

We rely on your consent (e.g., when you opt in on a form) to collect and use your information for the reasons above. You can withdraw consent at any time (see Your choices). In limited cases, we may use your information to comply with laws, prevent misuse, or for legitimate organizational interests consistent with privacy principles.

6. Email, SMS, and phone outreach (CASL & calling rules)

- Emails/SMS: Canada’s Anti-Spam Legislation (CASL) governs commercial electronic messages (CEMs). Political/advocacy messages that are not commercial may fall outside CASL, but we identify ourselves and include a working unsubscribe in every bulk email/SMS regardless. If a message is commercial (e.g., selling tickets/merch), we rely on appropriate consent under CASL.
- Calls: Many live political/advocacy calls are outside the National Do Not Call List regime, but we still identify ourselves, respect do-not-call requests, and maintain internal suppression lists.

We keep personal information only as long as needed for the purposes in this policy, or as required by law (e.g., contribution records). Then we delete, de-identify, or securely archive it.

7. cookies & analytics

We use cookies and similar technologies to operate our site, understand usage, and improve performance. You can control cookies via your browser settings; blocking some cookies may affect site features.

8. retention

We keep personal information only as long as needed for the purposes in this policy, or as required by law (e.g., contribution records). Then we delete, de-identify, or securely archive it.

9. security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data (role-based access, encryption in transit, secure credential practices, vendor due diligence, and training). No system is 100% secure, but we work to prevent and detect unauthorized access.

10. your choices & rights

- Unsubscribe / opt-out: Every bulk email/SMS includes an unsubscribe mechanism; you can also email us at [privacy@org]. We also honor do-not-call requests.
- Access & correction: You can request access to or correction of your personal information.
- Withdraw consent: You can withdraw consent for future uses (we’ll explain any implications, like pausing updates or event reminders).
- Cookie controls: Manage via your browser settings.

11. third party links & platforms

Our website, petitions, or fundraising tools may link to third-party services with their own privacy policies. Review those policies before providing personal information.

12. changes to this policy

We may update this policy from time to time. We will post the new version with the “Effective date” and, where appropriate, notify you of material changes.