Privacy Policy

1. Who We Are

ClarityPath Research Institute ("ClarityPath", "we", "us", or "our") is a registered Canadian nonprofit organization located at 272 Oxford St W, London, ON, Canada N6H 1S9. We operate the website at claritypath.ca. For privacy-related questions, contact us at info@claritypath.ca.

2. Information We Collect

We collect information you provide directly to us, including:

• Contact, volunteer, and partnership inquiries — name, email address, organization (where applicable), and the message or details you submit through our Contact, Volunteer, or Partnership forms.
• Newsletter signups — your email address, if you subscribe.
• Donor portal accounts — if you create an account, we collect your name, email address, a securely hashed password, and your monthly giving intention.
• Donation and payment records — when you donate via Stripe, we receive your name, email address, donation amount, and payment date from Stripe. We never receive or store your full card number or other payment credentials — that is handled entirely by Stripe.
• Security and abuse-prevention data — we log the IP address and timestamp of form submissions and login attempts to detect and block spam and abuse.
• Cookies and browser storage — see Section 6 below.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services.
• Process donations and operate your donor portal account, if you have one.
• Detect and prevent spam, fraud, and abuse of our forms and login systems.
• Comply with legal obligations.

We will never sell, rent, or share your personal information with third parties for their marketing purposes.

4. Legal Basis for Processing (PIPEDA)

We process your personal information based on: (a) your consent — for newsletter sign-ups and optional form submissions; (b) contractual necessity — to process donations and operate your donor portal account; (c) legitimate interests — to respond to inquiries, prevent spam and abuse, and maintain website security; and (d) legal obligation — where required under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

5. Data Retention

We retain contact, volunteer, partnership, and newsletter submissions for as long as reasonably necessary to respond to your inquiry, and no longer than 2 years after last contact. Donor portal accounts and payment records are retained for as long as your account remains active, and afterward only as long as necessary for accounting and fraud-prevention purposes. You may request deletion of your data — including your donor portal account — at any time by emailing info@claritypath.ca.

6. Cookies and Browser Storage

We use a small number of cookies and browser-storage items, all essential to operating the site — we do not use analytics, advertising, or tracking cookies of any kind.

You may configure your browser to refuse cookies, though this will prevent the donor portal, our forms, and the admin dashboard from working correctly.

7. Third-Party Services

We use the following third-party services to operate our website:

• Stripe — for secure payment processing. Subject to Stripe's Privacy Policy.
• Google Fonts — for typography. Subject to Google's Privacy Policy.

Contact, Volunteer, Partnership, and Newsletter form submissions are handled entirely by our own server — we do not use any third-party form-processing service.

8. Your Rights

Under PIPEDA and applicable privacy laws, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email us at info@claritypath.ca. We will respond within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data transmissions are encrypted via HTTPS. Donor portal and admin passwords are never stored in plain text — they are protected with industry-standard one-way hashing. Payment data is handled exclusively by PCI-DSS compliant processors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website and updating the "Last updated" date above. Your continued use of our website after changes constitutes acceptance of the updated policy.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us.