PrivacyPolicy

Last updated: October 1, 2026

Canadians for Sensible Climate Policy (“CSCP”, “we”, “us”) respects your privacy. This policy explains what personal information we collect through sensiblechange.ca, why we collect it, and what you can do about it. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector as amended by Law 25.

Who we are and who is accountable

CSCP [legal name and form of organization, e.g. not-for-profit corporation — to confirm] is responsible for the personal information under its control.

Our Privacy Officer, Conrad Brodeur, is responsible for our compliance with this policy. You can reach them with any privacy question, request or complaint:

• Email: [email protected] (subject line “Privacy”)
• Mail: Privacy Officer, Canadians for Sensible Climate Policy, 40 King Street West, Suite 2400, P. O. Box 215, Toronto ON M5H 3Y2

What we collect

We only collect what each feature needs. Here is what we collect, feature by feature.

Joining CSCP (registration)

• Your first name, email address and province; optionally your last name and phone number.
• Your reason for joining.
• Your answers to our registration survey, which asks about your views on climate science and policy, your familiarity with the debate, your generation, any climate science credentials, whether you speak out on these issues, and the political party you support. Political opinions are sensitive information, and we treat them that way.
• If you choose a password instead of email sign-in links, a one-way hash of it (we never store the password itself).
• A record that you agreed to receive communications from us, and when.

Quick survey

Our quick survey records only your three answers and the time you submitted them. It does not ask for your name or email, and we do not link answers to you.

Contact and donation pledge forms

• Contact form: your name, email address and/or phone number, and your message.
• Donation pledge form: your name, email address and the amount you plan to give.
• With each of these forms we also store technical details your browser sends with the request, such as your IP address, approximate location (country) as determined by our hosting provider, browser and device type, language, and the page you came from.

We do not process card payments on this site. Donations are made by Interac e-Transfer from your own bank. When you send one, we receive what your bank includes with the transfer, usually your name, email address, the amount and any message you add.

Event registrations and reminders

• Event sign-up: your first and last name, email address and city; optionally your phone number and organization; and whether you will attend in person or online.
• Event reminders: your email address and the event you asked to be reminded about.

Signing in

When you ask for a sign-in link, we email you a single-use link that expires after 15 minutes. If you sign in with a password, we count failed attempts for your email address for 15 minutes to block password guessing. When you are signed in, we keep a record of your session linked to your email address.

The member area

Signed-in members can take part in the member area. Depending on what you use, we store:

• Working groups: the alias you choose, your request to join and any note you include, your membership status, and the discussion threads and replies you post. Other members see your alias, not your email address. Administrators can see which member is behind an alias.
• Submissions: articles, videos, resources, sources and social media accounts you suggest, with a record that you submitted them.
• Events: events you create and events you RSVP to.
• Campaigns: campaigns you propose or support, outreach targets you add or claim, and the updates you post on them.
• Comments: comments and suggested corrections on resources and charts, including any image you attach.
• Preferences: items you save, filters you set and your display settings.
• AI questions: where the “Ask” feature is available to members, the questions you ask and the answers given, so you can return to your conversations.

Information about other people

Campaigns can list people members plan to contact, such as elected officials, business leaders, journalists and podcast hosts. We ask members to add only professional contact details that are already public. Anyone listed can ask us to correct or remove their information.

Administration and support

We keep a log of administrative actions, such as granting admin access or changing a group, including who did it and when. To help with support requests, an administrator can view the site as a specific member for up to 8 hours. Every such session is logged, and other administrators' accounts cannot be accessed this way.

Technical information

Like any website, our hosting provider, Cloudflare, processes technical information when you visit, such as your IP address, browser type and the pages you request. This is needed to deliver the site and protect it from attacks. We do not use analytics or advertising trackers, and we do not build profiles of visitors.

Why we use it

We use personal information only to:

• create and run your membership account and let you sign in securely;
• run working groups, campaigns, events and other member features;
• reply to your messages and follow up on donation pledges;
• register you for events and send the reminders you ask for;
• send you updates and news, if you agreed to receive them;
• understand our members' views in aggregate, to shape our research and advocacy;
• moderate the member area and keep the site secure; and
• meet our legal, accounting and record-keeping obligations.

We will ask for your consent before using your information for any new purpose. We do not make decisions about you based only on automated processing.

Consent

Express consent. We ask for your express consent when you register, when you agree to receive communications, and for sensitive information such as your political opinions. Filling in and submitting a form is your consent for us to use that information for the purpose the form describes.

Implied consent. For routine, expected uses, such as replying to a message you sent, we rely on implied consent.

Private by default. As Quebec law requires, anything not strictly needed to run the site is off until you turn it on. Optional cookies and embedded media from other platforms stay off unless you opt in.

Withdrawing consent. You can withdraw your consent at any time, subject to legal or contractual limits. Use the unsubscribe instructions in our emails, change your cookie choices from the “Cookie settings” link in the footer, or contact our Privacy Officer. If you withdraw consent, we may no longer be able to offer some features, such as your membership account.

Cookies and similar technologies

Cookies are small files a website stores in your browser. We use as few as possible. Essential cookies are needed for the site to work and are always on. Optional cookies are off until you choose to allow them.

Videos. Most of our videos are streamed by Cloudflare Stream, part of our hosting. Videos from other platforms, such as YouTube or Rumble, load only after you turn on “Embedded media”. Those platforms may then set their own cookies and collect information under their own privacy policies.

Fonts. We host our fonts ourselves, so loading a page does not send requests to font services.

Site editors. Our content editing tool (at /admin) is used only by our own editors, who sign in with GitHub. It may use browser storage for editors. It does not run for ordinary visitors.

You can change your choices at any time from the “Cookie settings” link in the footer of every page. You can also block or delete cookies in your browser settings, but if you block essential cookies, signing in will not work.

Service providers and where data is stored

We use a small number of service providers. They may only use your information to provide their service to us, under contract, and must protect it.

• Cloudflare, Inc. hosts the website and stores our data: our database, temporary sign-in codes, files and videos. Cloudflare also sends our emails, such as sign-in links, and provides security and bot protection.
• GitHub stores the website's public content and is used by our editors to sign in to the content editing tool. Visitor and member data is not stored there.
• Cloudflare Workers AI and xAI answer questions asked through the “Ask” feature, where it is available. The text of a question is sent to one of these providers to generate an answer.

Outside Quebec and Canada. Our providers operate global networks, so your information may be stored or processed outside Quebec and Canada, including in the United States. While it is there, it may be accessible to courts and authorities under local law. Before sending personal information outside Quebec, we assess whether it will be adequately protected, as Quebec law requires.

When we share information

We do not sell, rent or trade your personal information.

We share it only:

• with the service providers listed above, to run the site;
• with other members, to the extent you choose to take part in the member area, where they see your alias and what you post;
• with event partners, when an event registration form tells you so; and
• when the law requires or allows it, for example to respond to a valid court order.

Survey results we publish are always in aggregate, never linked to a named person.

How long we keep it

We keep personal information only as long as we need it for the purposes above, then delete it or make it anonymous. Our retention periods are:

• Sign-in links: 15 minutes. Failed password attempt counts: 15 minutes.
• Sign-in sessions: 30 days, renewed when you return.
• Membership account, registration survey and member-area content: while your account is active, and 5 years after your last sign-in, unless you ask us to close it sooner.
• Contact messages and donation pledges: 2 years.
• Donation records: 7 years, as required for accounting and tax purposes.
• Event registrations and reminders: 12 months after the event.
• Records of your consent to receive communications: 3 years after it ends.
• Administrative action logs: 2 years.
• Quick survey answers: kept, as they are not linked to anyone.

How we protect it

We protect personal information with safeguards suited to its sensitivity, including:

• encrypted connections (HTTPS) for the whole site;
• secure, httpOnly session cookies and signed session tokens;
• passwords stored only as salted one-way hashes, and limits on failed sign-in attempts;
• sign-in links that expire after 15 minutes and work only once;
• access to member data limited to administrators who need it, with their actions logged; and
• aliases in the member area, so members do not see each other's email addresses.

No system is perfectly secure. If you believe your account has been compromised, contact us right away.

Your rights

You have the right to:

• Access the personal information we hold about you and learn how we use and share it.
• Correct information that is inaccurate, incomplete or out of date.
• Withdraw your consent to how we use your information.
• Ask us to delete your information, or to stop disseminating it or de-index any link to it, where the law allows (Quebec).
• Receive your information in a structured, commonly used technological format, or have it sent to another organization (Quebec).
• Complain to us, and to a privacy regulator.

To make a request, contact our Privacy Officer at [email protected]. We may ask you to confirm your identity before acting. We will respond within 30 days and tell you if we need more time, as the law allows. Requests are free of charge. If we refuse a request, we will tell you why and how you can challenge the decision.

If you are not satisfied with our response, you can complain to:

• the Office of the Privacy Commissioner of Canada; or
• if you live in Quebec, the Commission d'accès à l'information du Québec.

Confidentiality incidents

If personal information is lost, accessed or disclosed without authorization, we act quickly to reduce the risk of harm and prevent it from happening again. We keep a record of every confidentiality incident.

If an incident creates a real risk of significant harm (PIPEDA) or a risk of serious injury (Quebec), we will notify the people affected as soon as possible and report it to the Office of the Privacy Commissioner of Canada and, where Quebec residents are involved, the Commission d'accès à l'information du Québec.

Children and minors

Our site is meant for adults and is not directed at children. We do not knowingly collect personal information from anyone under 14 without the consent of a parent or guardian. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as our site or the law changes. We will post the new version here with a new “Last updated” date. If a change significantly affects how we use your information, we will tell members by email or on the site, and ask for consent again where needed.

Questions? Contact our Privacy Officer at [email protected].