Skip to main content

Privacy

Privacy Policy

Privacy by design: we collect only what is necessary, restrict who can see it, and give you control over communications.

This policy is drafted to align with Canadian nonprofit privacy expectations, including Alberta PIPA, PIPEDA and anti-spam/marketing consent requirements. GHR must confirm the final applicable legal requirements with legal counsel before production launch.

Information we collect

We collect the identity, contact and membership information needed to administer your membership: your name, date of birth, email, phone number, address, preferred language, community association and emergency contacts. We collect additional information only where GHR has determined it is operationally necessary.

Why we collect it

Your information is used to verify your identity, administer your membership and registration, coordinate with your community association, process contributions, and contact you about your membership. We do not sell your information.

Consent

Agreeing to these terms is required to hold an account. Consent to receive news and community updates is always separate and optional. You can withdraw marketing consent at any time from your communication preferences, and we never re-subscribe an address that has unsubscribed.

Who can see your information

Access is restricted by role. You can see your own record. Your association representative can see only authorized records belonging to their own association. Staff and volunteers see only what their assigned permissions allow. Administrators have administrative access, and sensitive actions are recorded in an audit log.

How we protect it

Information travels over encrypted connections and is stored with access controls, secure authentication, additional verification for privileged accounts, and monitoring of security-relevant events.

Retention

Records are retained according to configurable retention rules covering active and inactive member records, payment records, audit logs, contact requests and consent records. Financial and regulatory records are not deleted automatically without an approved policy.

Your rights

You may request access to the information we hold about you, ask for corrections, request an export, or request deletion of information that GHR is not required to retain. Contact GHR to make a request.

Payments

Contributions are processed by an approved payment provider. GHR does not store full payment card numbers in its own systems.

Questions about privacy? Contact GHR.