The Teasdale-Corti Foundation (the "Foundation") is committed to protecting the privacy of individuals who visit its website, subscribe to its newsletter, make a donation, volunteer their time or apply for an internship. The purpose of this Privacy Policy (the "Policy") is to inform you, in clear and simple terms of:

• how we collect and process your personal information;
• the nature of the personal information collected;
• your rights with respect to that information;
• the identity and contact information of the Privacy Officer;
• the persons or organizations to whom this information may be disclosed, if any;
• of our cookie policy.

The Teasdale-Corti Foundation is a registered charity with the Canada Revenue Agency, under number 890520745 RR 0001.

1. How do we obtain your consent?

We collect, use, disclose and retain your personal information only with your consent or as permitted by law. Depending on the circumstances and the sensitivity of the information involved, your consent may be express (for example, by checking a box) or implied (for example, by voluntarily providing us with your contact information through a form). If we wish to use your information for a purpose that was not disclosed to you at the time of collection, we will seek your consent first. You may withdraw your consent at any time, subject to the limitations set out by law or contract, by contacting the person in charge identified in Section 8.

2. Personal information collected

Depending on your interaction with us, we may collect the following personal information:

• Your first and last name;
• Your email address;
• Your mailing address;
• Your phone number;
• Information provided in connection with a donation (amount, frequency, information required for the issuance of an official tax receipt);
• Information provided as part of an internship application or volunteer offer (curriculum vitae, cover letter, availability);
• Any other information that you voluntarily provide to us through our online forms.

The nature of the retention of your information varies depending on the form used:

• Monetary Donation and Newsletter: Your information, including payment information, is collected and stored in a database through our web service provider, Yapla Inc.;

• Donation of goods or offer of time/services ("goods" and "my time or services" forms): your information is sent by email to the Foundation's team and is not stored in any database.

We do not collect any banking or credit card information directly; this information is processed by our web service provider as part of the processing of monetary donations.

The Foundation does not collect any sensitive personal information, including health, ethnic or racial origin, religious or philosophical beliefs, sexual orientation, political opinions, or biometric or genetic data.

3. Forms and collection methods

Your personal information is collected through the following forms, available on our website, through two distinct collection methods:

Forms processed and stored by our web service provider (Yapla)

• Newsletter subscription form (first name, last name, email) — the newsletter is distributed by Yapla Inc. under an agreement with its technology partner CakeMail;

• Monetary donation form (Donate button and "I give — money” menu).

Forms sent by email, without storage in a database

• Donation of Property Form ("I give — in kind”);

• Offer of Time or Services Form ("I give — my time or services”);

• "Contact Us" form;

• Application form — "Internships" section.

We use the information collected for the following purposes:

• Process your donation and issue an official tax receipt in accordance with Canada Revenue Agency requirements;
• Send you our newsletter and communications, if you have consented;
• Respond to your inquiries;
• Evaluate and follow up on applications for internships or volunteer involvement;
• Maintain our administrative, accounting, and governance records, including through our Microsoft 365 environment (SharePoint and OneDrive).

4. Logs and cookies

Our site does not currently use any traffic analysis tools or cookies for advertising purposes. The Foundation does not advertise online (including Google Ads or third-party advertising networks).

If the Foundation were to set up a traffic analysis tool (e.g. Google Analytics), this Policy will be updated beforehand to reflect this practice and to inform visitors to the site accordingly.

5. Disclosure of personal information

In accordance with our published management practices, the Foundation does not sell or trade your name and contact information and does not use any independent fundraising services (telemarketing, door-to-door solicitation or other solicitation contractors). Your information may nevertheless be disclosed to the following persons or entities, only to the extent necessary to achieve the purposes described above:

• Yapla Inc., our provider of a platform for management, web hosting and donation processing, as well as its technology partner CakeMail for the distribution of the newsletter;
• Microsoft Corporation, through our Microsoft 365 environment (volunteer and admin email, SharePoint, OneDrive), for the management of our internal records;
• HostPapa Inc., our email service provider for the Foundation;
• The Canada Revenue Agency, as part of our obligations as a registered charity;
• Any competent authority, where required by law.

To learn more about the Foundation's management of donations, visit our "Our management practices" page.

6. Retention period

Information kept in the database (monetary donations and newsletter): kept for the time necessary to fulfill the purposes for which it was collected, which is generally a minimum of five (5) years. At the end of this period, your information is destroyed or securely anonymized.

Information sent by email (donations of goods, offers of time/services, applications, inquiries): this information is not stored in a database. It is stored in our email system for a maximum of five (5) years, and then securely destroyed.

7. Hosting of personal information

Website, domain name and donation/newsletter database: our site is hosted, our domain name is managed and our donation management platform is operated by Yapla Inc., a Quebec company governed by the laws of Canada. The personal information of users located in North America is hosted in Canada.

Newsletter distribution: provided by CakeMail, Yapla Inc.'s technology partner for mass emails.

Foundation Email: Operated by HostPapa Inc., an Ontario-based provider. The information provided by the "Goods", "My Time or Services", "Contact Us" and "Internships" forms is sent by email and hosted by this provider, in Canada.

Internal records (documents, administrative records): The Foundation has a Microsoft 365 subscription and uses SharePoint and OneDrive to keep its records. Volunteers and administrators of the Foundation generally use their own personal Outlook subscriptions to check their emails; these are not managed or provided by the Foundation.

The Foundation does not currently do business with any provider located outside of Canada for the hosting of your personal information.

If your personal information were to be communicated or hosted outside of Canada, the Foundation would first ensure that it benefits from adequate protection, in particular by means of a privacy impact assessment proportionate to the sensitivity of the information concerned, in accordance with Bill 25.

The Foundation always remains responsible for the protection of your personal information, including when it is processed by one of its service providers. The Foundation undertakes to select only suppliers that adhere to confidentiality rules that are compatible with this Policy and with Bill 25.

8. Privacy officer

The title and contact information of the Foundation's Privacy Officer, as required by Bill 25, are as follows:

Name : Mr. Sylvain Dufour
Title : Secretary
Email : info@teasdalecorti.org

The person in charge determines the purposes and means relating to the processing of personal information and ensures compliance with this Policy.

9. Your rights

In accordance with Bill 25, you have the following rights with respect to your personal information:

• Right of access to your personal information;

• Right to rectification in case of inaccuracies;

• Right to withdraw your consent at any time (in particular for the newsletter);

• Right to the portability of your information, in a structured and commonly used technological format;

• The right to be informed, upon request, of the categories of persons or third parties who have access to your personal information within the Foundation or externally;

• The right to request that the dissemination of your personal information be stopped, or that any link to it be de-indexed, in the circumstances provided for by law;

• Right to request deletion of your information, subject to our legal and tax retention obligations (including with respect to donation receipts).

To exercise any of these rights, you may contact the person in charge identified in section 8 by email, or in writing to the Foundation's address located at 8880 Lacordaire Boulevard, Montreal, QC H1R 2B3.

You also have the right to file a complaint with the Commission d'accès à l'information du Québec if you feel that your rights have not been respected.

10. Security measures

We implement reasonable security measures appropriate to the sensitivity of the information held, including:

• Encrypting communications between your browser and our servers (SSL);
• Restricted access to personal information, restricted to authorized staff and volunteers;
• Commitment to confidentiality of staff and volunteers with access to personal information.

While we take these reasonable precautions, no transmission over the Internet is entirely free from risk.

11. Privacy incidents

A "privacy incident", as defined in Bill 25, includes the unauthorized access, unauthorized use or unauthorized disclosure of personal information, as well as the loss of such information. In the event of a privacy incident that poses a risk of serious harm to an individual concerned, the Foundation undertakes to:

• Take reasonable steps to reduce the risk of harm and prevent similar incidents from occurring in the future;
• Notify the Commission d'accès à l'information du Québec, in accordance with the law;
• Notify any affected individual whose personal information has been affected, as soon as possible;
• Record the incident in a confidentiality incident log, maintained in accordance with the law.

12. Changes to this Policy

The Foundation reserves the right to modify this Policy at any time, in particular to comply with changes in applicable legislation. Any material changes will be subject to a notice posted on our website.

13. Acceptance

By browsing our website or submitting your personal information to us, you acknowledge that you have read this Policy and agree to its terms.

14. Applicable laws

The Foundation undertakes to comply with the provisions set out in:

• The Act respecting the protection of personal information in the private sector, CQLR c P-39.1, as amended by Bill 25;

• The Personal Information Protection and Electronic Documents Act (PIPEDA), SC 2000, c 5;

• The Income Tax Act, with respect to the maintenance of registers of registered charities.

---

If you have any questions about this Policy, please contact us at info@teasdalecorti.org or by phone at +514-294-6150.