At the Jewish Public Library ("JPL"), we value you and respect your privacy. The JPL recognizes that it must maintain and use your personal information responsibly. We have created this privacy policy (the "Policy") to demonstrate our firm commitment to your privacy and security, and to advise you about the collection, use and disclosure of personal information provided by you by telephone, through the Site, by mail or other means (electronic or otherwise). Our Policy also provides you with the ability to "opt-out" of providing personal information that you do not wish to provide and to access, change or remove any of your personal information which has been collected by us. The JPL will not collect, use or disclose your personal information other than in compliance with this Policy.

By providing any of your personal information to the JPL, including information obtained by us during your visits to or use of the website, other the JPL sites or microsites, social networking websites and web pages such as Facebook, Twitter, Instagram, YouTube or any other online site on which the JPL maintains a presence in connection with the JPL's activities (collectively, the "Site"), you hereby agree to all of the terms and conditions of this Policy and consent to the collection, use and disclosure of your personal information as described in this Policy. Please note that except as is set forth in this Policy, we reserve the right to share anonymized and/or aggregated data acquired by us through your provision of your personal information with third parties.

The terms "we", "us", and "our" used in the Policy refer, collectively, to the JPL and its departments, divisions, and their respective employees, mandataries, agents and other representatives (collectively, "JPL Organization").

Contents

• WHAT IS "PERSONAL INFORMATION"?

• WHAT INFORMATION IS COLLECTED BY THE JPL?

• HOW IS MY PERSONAL INFORMATION COLLECTED?

• HOW IS MY PERSONAL INFORMATION USED?

• TO WHOM MAY MY PERSONAL INFORMATION BE DISCLOSED?

• PERSONAL INFORMATION OUTSIDE OF CANADA

• THIRD PARTIES & THIRD-PARTY WEBSITES

• HOW DOES JPL STORE AND SAFEGUARD MY INFORMATION?

• WHAT IS "PHISHING"?

• CHILDREN

• HOW DOES THE JPL MANAGE CONSENT, AND HOW DO I EXERCISE MY CHOICES?

• HOW CAN I ACCESS OR CHANGE MY PERSONAL INFORMATION?

• PRIVACY POLICY CHANGES

WHAT IS "PERSONAL INFORMATION"?

"Personal information" is any information that identifies, or could be reasonably associated with, an individual ("individual" or "you"). This may include, for example, your name, contact information, email-address, and information relating to your account with us (as the case may be). It may also include other types of more technical information, but only when this information can identify you as an individual. Information that is aggregated and/or de-identified and cannot be associated with an identifiable individual is not considered to be personal information.

WHAT INFORMATION IS COLLECTED BY THE JPL?

• Identifiers and contact information, such as your name, email and postal addresses, telephone number, photographs or videos or account information (for example, if you have downloaded one of our apps or created an account upon signing up for one of our services).

• Demographic information and interests, such as your age, gender, occupation, languages, annual household income, types of activities you participate in and other interests.

• Contacts and Connections, such as the names of contacts and their connection to you, and your affiliations with companies, institutions, foundations and other organizations.

• Transactional information, such as bank account information, payment card details, donation amounts and donation history.

• Images and video recordings, such as those collected by security cameras when you visit our premises or collected by JPL Organization representatives using cameras at meetings, festive celebrations, excursions, rallies and other events.

• Browsing activity on our Site, such as pages and events viewed, clickstream data, account login events, preferences, and IP addresses if it can identify you as an individual.

• Geolocation information collected when you use our Site.

• Any other information you provide to us.

HOW IS MY PERSONAL INFORMATION COLLECTED?

• Directly from you: We will also collect personal information from you when you provide information to us, such as by making a donation, signing up for an event, completing an entry form, ballot or survey, signing up for our newsletter (if any), by communicating with us by telephone, e-mail or otherwise, by setting up a user account and password, logging in as a registered user of the Site and providing information in your account(s), or by introducing or post any text, image, video, audio, or any information, content or other materials through any of the JPL social networking websites and web pages such as Facebook, Jlive, Mailchimp, CanadaHelps.org, Twitter, Instagram or YouTube. As a result of these actions, you might supply us with personal information, such as your name, date of birth, e-mail and postal addresses, telephone number(s), credit card information and financial information and in certain circumstances, your comments, suggestions, ideas, opinions and individual preferences. We may also maintain a record of your interests and acquire information about you from within the JPL Organization. We may also collect personal information through security cameras when you visit our premises, or through cameras used by Federation CJA (FCJA), the JPL Organization representatives at meetings, festive celebrations, excursions, rallies and other events.

• Through Online Technologies: Each time you visit the Site, the following information may automatically be obtained and compiled: your internet protocol (IP) address and the domain name registry information associated with that IP address; identification of your internet browser, operating system and hardware platform you are using; the date and time of your visit; the name and address (URL) of the web page you viewed immediately prior to accessing the Site; your entire query (if any) that was entered into a search engine which led you to the Site; and any other "click stream" data. This information may be stored in our log files. Additionally, the complete record of your actions at the Site, including all pages visited, the time spent on each page, the information sent or received, and the names of all files uploaded or downloaded is collected. This tracking information may be compiled by us in the aggregate and be made available to third parties to identify demographic data regarding our users.

• The technologies we use may include:

  • Cookies, which are small data files that are saved on your computer when you visit a website so that information can be saved between visits, such as your login credentials or language preferences.

  • Web beacons and pixels, which are techniques used to track who is visiting a web page or has opened an e-mail.

  • Other technologies, such as analytics engines, which pull usage data from multiple sources and help manage and collect this data to use for personalization or customization of content and other methods to gain insights into our customers' needs and preferences.

• Third Party Social Networks: The JPL has installed on the Site various social media plug-in protocols, such as Facebook's "Like" button, which allow you to share your likes and interests in JPL services, events, special programs and initiatives with your friends and contacts. When you use one of these social media plug-in protocols, the JPL will have access to this information as well. Facebook and other third-party social networks that provide interactive plug-ins to enable social network features on the Site may use cookies to gather information on your use of the Site. How this collected data is used by a third party is dependent on the privacy policy of the social network which is available on their website. We may also obtain analytical and statistical information from third-party social networks to measure performance and effectiveness of JPL content displayed there.

HOW IS MY PERSONAL INFORMATION USED?

• Providing Programs and Services: Determining eligibility for a program, verifying identity, enrolling in events, fundraising, processing transactions and receipts, managing accounts, fulfilling requests and responding to inquiries.

• Managing Our Operations: Managing IT systems, notifying you of changes, enabling participation in programs, maintaining security, protecting against fraud, processing employment applications, and meeting legal obligations.

• Marketing: Informing you about news, programs, services, events, donation opportunities, surveys or initiatives offered by the JPL Organization and affiliated or unaffiliated organizations. May use images or recordings of you collected during events for promotional materials. You may unsubscribe from commercial communications at any time.

• Conducting Research and Analytics: Improving or developing services, tailoring fundraising, measuring effectiveness, understanding visitor interactions with the Site, and combining data sources. Where possible, data is used in aggregated and/or de-identified format.

TO WHOM MAY MY PERSONAL INFORMATION BE DISCLOSED?

• Within JPL departments, so different groups may communicate with you about services, programs and events.

• To group activity participants, where reasonable to share limited contact details for coordination.

• To co-sponsor organizations for events/programs (subject to their privacy policies).

• To third-party service providers (fundraising support, fulfillment, technical support, delivery, financial institutions).

• When required by law or to protect the property, rights and safety of the JPL, its employees, donors, or others.

PERSONAL INFORMATION OUTSIDE OF CANADA

Your personal information may be transferred to jurisdictions outside Canada. It may then be subject to foreign laws and accessible to foreign authorities. Regardless, JPL will take steps to protect your information in line with Canadian law and this Policy.

THIRD PARTIES & THIRD-PARTY WEBSITES

Third parties connected via hyperlinks or platforms may collect and use your personal information subject to their privacy policies. JPL does not control such third-party practices and encourages you to review their privacy policies. In cases of partnerships or event platforms, data collected by those platforms is governed by their policies, not JPL’s, except where JPL itself uses the platform for its own events or initiatives.

HOW DOES JPL STORE AND SAFEGUARD MY INFORMATION?

• We have adopted physical, technological and organizational measures to protect the confidentiality and security of your personal information against loss, theft, unauthorized access, disclosure or modification.

• We define internal roles and responsibilities for information handling, from collection until destruction.

• We maintain internal processes for handling privacy complaints and incidents.

We store personal information only as long as necessary to fulfill the purposes for which it was collected, in accordance with JPL’s backup and document retention policies, except where otherwise required by law.

WHAT IS "PHISHING"?

"Phishing" is a scam designed to obtain personal information. If you receive an e-mail which appears to be from the JPL requesting any personal information, do not respond. JPL does not request personal information by email. Always verify links and addresses to avoid scams.

CHILDREN

The Site is not intended for children under 13 years old. JPL does not knowingly collect their personal data without parental consent. Parents or guardians may request access to or deletion of a child’s information by contacting JPL.

HOW DOES THE JPL MANAGE CONSENT, AND HOW DO I EXERCISE MY CHOICES?

By accessing the Site, donating funds, responding to surveys or emails, or otherwise providing information to us in connection with our programs, events, services or initiatives, you consent to the collection, use and disclosure of your personal information as described in this Policy. Consent may be implied or explicit, and you may withdraw it at any time (subject to law or contractual obligations). Withdrawal of consent may affect your ability to participate in JPL programs, services or events. You may also unsubscribe from promotional communications at any time. Technologies such as cookies may be disabled via browser settings, though this may limit functionality.

HOW CAN I ACCESS OR CHANGE MY PERSONAL INFORMATION?

You are entitled to request access to, correction of, or deletion of your personal information by contacting JPL’s privacy officer in writing. You may also contact them for questions, complaints or to exercise your privacy rights.

PRIVACY POLICY CHANGES

If we decide to change our Policy, we will post updates on the Site to inform you of what information we collect, how it is used, and whether it may be disclosed. Significant changes will be highlighted as required by law. Continued use of our services after updates means you accept the changes. The "Effective Date" indicates the last update of this Policy.

CONTACTING US

If you have any questions about how we handle your personal information, please contact us as indicated below. If you are participating in a program, event, service, initiative, competition or survey that is offered by us jointly with a third party, the third party may hold your personal information. If you have any questions or concerns, we will direct you to the appropriate party so that you may make enquiries as to that party's privacy policies and practices.