The Canadian Chinese Construction Association (“CCCA”, “we”, “us”) respects your privacy. This policy explains what personal information we collect through cccaonline.ca, why we collect it, how we use and protect it, when we may share it, and what rights you have.
We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).
By browsing this website, registering an account, applying for or renewing membership, submitting a business directory or job listing, purchasing a product or service, making a payment, or subscribing to our emails, you acknowledge the practices described here.
01Information we collect
Account and membership information
When you register, apply for membership, renew, or update your profile, we may collect your name, email address, phone number, username and an encrypted password, personal or company address, company name, job title and professional details, membership category and status, application and renewal records, any photos, logos, licences or certificates you choose to upload, and our correspondence with you.
You are responsible for keeping the information you submit accurate and up to date.
Orders and payment information
When you buy a membership, event ticket, advertising placement or other product through our WooCommerce store, we may collect the payer’s name, billing address, email and phone number, the items purchased, order number and amount, payment method and status, invoices, receipts, refund and cancellation records, and related correspondence.
Card payments are processed by Stripe, an independent payment processor. Your full card number and card security details are collected and handled directly by Stripe. CCCA does not store your full card number or online banking credentials.
Business directory, job postings and submitted content
When you submit a directory listing, job posting, event, advertisement, article, photo or video, we may collect your company name, contact person, company address, phone number, email, website and social media accounts, company description, service categories, business hours, job details and application instructions, logos, images and promotional material, and anything else you choose to include.
Information you submit for publication is displayed publicly on this website and may be indexed by search engines. Do not include government identification numbers, banking or card details, health information, or any other sensitive information that is not necessary for the purpose of the listing.
Email subscription information
When you subscribe to our newsletters, event notices or announcements through MailPoet, we may collect your name, email address, subscription date and source, a record of your consent, delivery status, whether emails were opened and which links were clicked, your subscription preferences, and any unsubscribe request.
Contact and inquiry information
When you contact us by form, email, phone or otherwise, we may collect your name and contact details, the content of your inquiry or complaint, any documents or images you send, and our correspondence with you.
Technical and usage information
When you visit this website, our servers and cookies may automatically collect your IP address, browser and device type, operating system, the pages you view and links you click, referring and exit pages, visit dates, times and duration, login and account activity, an approximate location inferred from your IP address, cookie identifiers, and error, security and system logs.
02How we use personal information
We use personal information only for purposes a reasonable person would consider appropriate, and only to the extent necessary. Those purposes are:
- Creating and managing user accounts;
- Reviewing, approving and administering membership applications and renewals;
- Providing membership services and benefits;
- Processing orders, event registrations and payments, and issuing invoices and receipts;
- Handling cancellations, refunds and payment disputes;
- Reviewing, publishing and managing directory listings, job postings, events, advertisements and other content;
- Responding to inquiries, complaints and support requests;
- Sending account, order, payment, security and service notices;
- Sending newsletters, event invitations, industry news and promotional messages, where you have consented;
- Managing subscriptions and unsubscribe requests;
- Analysing website traffic and improving the website and our services;
- Preventing fraud, spam, unauthorised access and other misuse;
- Enforcing our Terms of Service, membership terms and other policies;
- Meeting our accounting, tax, regulatory and other legal obligations, and establishing or defending legal claims.
If we ever want to use your information for a new purpose that is not listed here, we will identify that purpose and obtain your consent before doing so, unless the law permits otherwise.
03Consent
Where the law requires it, we obtain your consent before collecting, using or disclosing personal information. Consent may be given when you submit a registration or application form, tick a consent box, place an order, subscribe to our emails, send us information, or continue to use a service after its purpose has been explained to you.
Registering an account, joining as a member or making a purchase does not by itself mean you have agreed to receive marketing emails. Marketing consent is always requested separately.
You may withdraw your consent at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide certain services — for example, if you ask us to delete information that is necessary to administer your membership, we may not be able to keep your membership active.
04Email and commercial messages
Where we have your consent, or where the law permits, we may send you association news and announcements, member updates, event invitations and reminders, industry information, and promotional messages.
Every commercial email we send identifies CCCA by name, gives our mailing address and contact details, and includes a working unsubscribe link.
Unsubscribing. You can withdraw your consent to marketing emails at any time using the unsubscribe link at the bottom of any message, or by contacting us directly. In accordance with CASL, we will give effect to your request within 10 business days, and no further action is required from you.
Even after unsubscribing from marketing emails, you may still receive service messages directly related to a service you are using — for example account verification, password resets, order confirmations, payment receipts, membership approval or expiry notices, security alerts, and notices of changes to our services.
We keep a record of unsubscribe requests so that we do not send you marketing email to that address again.
05Cookies and similar technologies
This website uses cookies and similar technologies such as pixels and local storage. A cookie is a small file stored on your device that lets a website recognise your browser, remember your settings, and keep certain features working.
Strictly necessary cookies
Required for the website to function: logging in, verifying your account, the shopping cart and checkout, site security, fraud prevention, and remembering your privacy choices. If you block these, parts of the website will not work.
Functional cookies
Used to remember your language preference and other settings, keep you signed in, and make the site more convenient to use.
Analytics cookies
Used to understand how many people visit the site, which pages they view, where they come from, and how the site is performing. See section 06.
Third-party cookies
Services we rely on may set their own cookies — including our payment processor, our analytics provider, embedded videos and maps, social media features, our email service, and anti-spam and bot-protection services. Those services handle information under their own privacy policies.
You can delete or block cookies through your browser settings. Blocking some cookies will affect login, the cart, checkout and other features.
06Analytics
We use Google Analytics 4, a service provided by Google LLC, to understand how visitors use this website. Google Analytics sets cookies and collects information such as your IP address (which Google truncates or anonymises), the pages you view, how long you stay, your approximate location, and the type of device and browser you use.
We use this information in aggregate to improve our content and our website. We do not use Google Analytics to identify you personally, and we do not combine analytics data with your account information.
Google processes this data on servers that may be located outside Canada. You can prevent Google Analytics from collecting your data by installing Google’s browser opt-out add-on, or by blocking analytics cookies in your browser. Google’s handling of this data is governed by its own privacy policy.
07Who we share information with
We do not sell your personal information, and we do not rent or trade mailing lists.
Service providers
We share information with third parties who help us run the website and deliver our services, only to the extent they need it. These currently include:
- GoDaddy — website hosting and domain services;
- Stripe — payment processing;
- MailPoet — email delivery and subscription management;
- Google (Google Analytics 4) — website analytics;
- WooCommerce and the WordPress plugins that operate our membership, directory, job board, events and advertising systems;
- Website security, backup and technical support providers;
- Our accountants, lawyers and other professional advisors.
These providers may only process your information to provide the service we have engaged them for, and are required to protect it with appropriate safeguards.
Information you publish yourself
Anything you submit for a directory listing, job posting, event, advertisement or article may be seen by any visitor, search engine or other internet user. Make sure you have the right to submit that content, including permission from any individual identified in it.
Legal and safety reasons
We may disclose information where required by law, a court order, or a lawful request from a government or law enforcement authority; to investigate suspected fraud, cyberattack or unlawful activity; to protect the safety of CCCA, our members, our users or the public; to enforce our contracts and policies; or to establish or defend legal claims.
Organisational change
If CCCA merges, reorganises, transfers assets, or hands over a service to another organisation, personal information may be transferred as part of that change, subject to legal requirements and appropriate safeguards.
08Third-party websites
This website links to third-party websites, social media platforms, payment pages, maps and videos. Once you follow a link, you leave our website, and the third party’s own privacy policy and terms apply.
We do not control third-party websites and are not responsible for their content or privacy practices. Read their policies before giving them your information.
09Storage and cross-border processing
We and our service providers may store or process personal information on servers located in Canada, the United States or other countries.
Where information is processed outside Canada, it is subject to the laws of that country, and may be accessible to courts, governments and law enforcement authorities there under those laws. We select our service providers with care and take reasonable steps to ensure they protect your information appropriately.
10How long we keep information
We keep personal information only as long as we need it for the purpose it was collected, to deliver our services, and to meet our legal obligations. How long that is depends on whether your account or membership is still active, whether we still need to complete an order, our accounting and tax record requirements, any outstanding contract or payment dispute, fraud and security needs, and applicable limitation periods.
When information is no longer needed, we delete, destroy or anonymise it. Copies may remain in our backup systems for a limited period before those backups are overwritten.
11Security
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including password encryption, restricted staff access, secure (HTTPS) connections, security monitoring, system updates and backups, and careful selection of service providers.
No website, email system or internet transmission can be guaranteed to be completely secure. You also play a part: use a strong and unique password, do not share it, sign out when you finish, avoid saving your login on shared devices, and contact us immediately if you notice activity on your account that you did not authorise.
12Privacy breaches
If a breach of our security safeguards occurs, we will investigate and contain it, and assess whether it creates a real risk of significant harm to any individual. Where PIPEDA requires it, we will notify the affected individuals and report the breach to the Office of the Privacy Commissioner of Canada as soon as feasible.
As required by PIPEDA, we keep a record of every breach of security safeguards involving personal information for 24 months, whether or not it was reportable.
13Your rights
Subject to applicable law, you may contact us to ask whether we hold personal information about you, request access to it, ask us to correct information that is inaccurate or incomplete, update your account or membership details, withdraw your consent, unsubscribe from our emails, ask us to close your account, ask us to delete information we no longer need, or raise a question or complaint about how we handle your privacy.
Access requests. We will respond to a written access request within 30 days of receiving it, as required by PIPEDA. If we need more time, we will tell you within that 30-day period, explain why, and tell you when to expect our response. We may need to verify your identity before we act on a request.
In some cases the law requires or allows us to withhold information — for example where it would reveal personal information about someone else, where it is protected by solicitor-client privilege, where it relates to an ongoing investigation or a security incident, where we are legally required to keep it, or where deleting it would interfere with an unfinished order, contract or legal obligation. If we cannot fully grant your request, we will tell you why and explain how you can respond.
If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner of Canada, which oversees compliance with PIPEDA.
30 Victoria Street, Gatineau, Quebec K1A 1H3 · 1-800-282-1376 · www.priv.gc.ca
14Closing your account and removing public content
You can ask us to close your membership account or delete your personal profile. Some records must still be kept — completed orders and payment records, invoices and accounting records, membership approval and renewal records, refund and dispute records, anything the law requires us to retain, and records needed to prevent fraud and protect the site.
If you ask us to remove a directory listing, job posting or other published content, we will remove it or take it out of public view within a reasonable time. We cannot remove copies held by search engine caches, other websites that have republished the content, or individuals who have saved it.
15Children’s privacy
This website and our membership and commercial services are intended for adults, businesses and professionals. We do not knowingly collect personal information from a child without the consent of a parent or guardian where that consent is required by law.
If you are a parent or guardian and believe a child has given us personal information, contact us and we will take reasonable steps to remove it.
16Changes to this policy
We may update this policy when our website, membership or payment processes change, when we engage a new service provider, when the law changes, or when our handling of information changes.
The updated policy will be posted on this page with a new effective date. If a change materially affects your privacy, we will make reasonable efforts to notify you by website notice, email or other appropriate means. Please review this page from time to time.
17Privacy Officer and contact
CCCA has designated a Privacy Officer who is accountable for our compliance with this policy and with PIPEDA. To ask a question, request access to or correction of your information, withdraw consent, or make a complaint, contact:
Privacy Officer
c/o CCCA Secretariat
Canadian Chinese Construction Association
- Address
- 3445 Kennedy Road, Toronto, Ontario, Canada M1V 4Y3
- Phone
- 647-906-2638
- info2.ccca@gmail.com
- Subject line
- Please write “Privacy Inquiry” in the subject of your email.
We will acknowledge your inquiry and respond within the timeframes set out in section 13.
18Language
This policy is published in English and Chinese. The English version is the official version and governs. The Chinese version is provided for convenience only. If there is any difference or inconsistency between the two, the English version prevails.