Understand our privacy practices

1. TERMS AND DEFINITIONS

1. Introduction
Kindraza Youth Network (“Kindraza,” “we,” “our,” or “us”) is a non-profit organization incorporated under the laws of Ontario, Canada. We are committed to protecting the privacy of all individuals who interact with our organization, including parents, guardians, program participants, website visitors, and donors.
This Privacy Policy describes how we collect, use, disclose, store, and protect personal information in connection with our website (www.kindraza.org), programs, camps, workshops, and related services. It applies to all personal information we collect, whether online or offline.
By using our website or registering for our programs, you consent to the practices described in this Privacy Policy. If you do not agree with this Policy, please do not use our services.
Given that our programs are designed for minors between the ages of 12 and 16, we take the privacy and safety of young people with the utmost seriousness. We collect personal information from parents and guardians on behalf of minor participants, and we do not knowingly collect personal information directly from children under the age of 13 without verifiable parental consent.

2. Applicable Law
Kindraza complies with the following privacy legislation:
• The Personal Information Protection and Electronic Documents Act (PIPEDA), which governs the collection, use, and disclosure of personal information in the course of commercial activities;
• Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA), where applicable;
• Canada’s Anti-Spam Legislation (CASL), which governs electronic commercial messages;
• Any other applicable federal or provincial privacy legislation.
Where our activities fall outside the scope of PIPEDA, we nonetheless apply its principles as a best practice standard.

3. Personal Information We Collect

3.1 Registration and Program Enrollment
When a parent or guardian registers a teen for a Kindraza program, camp, or workshop, we collect the following information:
• Full name and age of the participant
• Name, email address, phone number, and mailing address of the parent or guardian
• Emergency contact information (name, relationship, and phone number)
• Health and allergy information relevant to the participant’s safety during in-person programming
• Payment information (processed securely through Stripe or PayPal; see Section 6)
Health and allergy information is collected solely for the purpose of safeguarding participant wellbeing during in-person activities. This information is treated as sensitive personal data and handled with enhanced protections.

3.2 Website and Contact Form
When you visit www.kindraza.org or submit an inquiry through our contact form, we may collect:
• Your name and email address (as provided in the contact form)
• The content of your message or inquiry
• Technical data such as your IP address, browser type, device type, pages visited, and time of visit, collected automatically through Tilda’s built-in analytics tools and third-party analytics providers
Contact form submissions are transmitted to and stored in MailerLite, our email marketing and customer relationship management platform.

3.3 Marketing Communications
If you subscribe to our newsletter or opt in to receive updates, we collect your name and email address for the purpose of sending program information, news, and updates. All marketing emails are managed through MailerLite. You may withdraw your consent to receive marketing communications at any time by clicking the “Unsubscribe” link in any email or by contacting us at privacy@kindraza.org.
3.4 Photography and Videography
Kindraza may photograph or film participants during programs and events for use in marketing materials, social media, our website, and promotional content. Prior to participation in any program, we obtain written consent from the parent or guardian of each minor participant. No images or footage of minors will be used without prior consent. Consent may be withdrawn at any time by notifying us in writing at privacy@kindraza.org.

3.5 Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies. These may include:
• Essential cookies required for basic website functionality;
• Analytics cookies placed by Tilda’s platform and potentially by Google Analytics or similar services, which help us understand how visitors interact with our website;
• Social media pixels, including those from Facebook and Instagram, which may track visits to our website for the purpose of measuring the effectiveness of our advertising and enabling targeted advertising on those platforms.
You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies as described in this Policy.

4. How We Use Personal Information
We use the personal information we collect for the following purposes:
• To process registrations and enrollments for programs, camps, and workshops;
• To communicate with parents and guardians regarding program details, scheduling, updates, and safety information;
• To ensure the safety and wellbeing of participants during in-person activities, including management of health and allergy information;
• To process payments securely through our third-party payment providers;
• To send newsletters, updates, and promotional communications to individuals who have opted in;
• To improve our website, programs, and services through analytics data;
• To comply with applicable legal obligations;
• To promote our programs through marketing materials, including photographs and videos where consent has been obtained.
We will not use your personal information for any purpose that is incompatible with the purposes described above without first obtaining your consent.

5. Disclosure of Personal Information

5.1 Third-Party Service Providers
We may share personal information with trusted third-party service providers who assist us in delivering our programs and services. These providers are contractually obligated to handle personal information only as directed by Kindraza and in accordance with applicable privacy legislation. Our current service providers include:
• Stripe — payment processing (kindraza.org/privacy-policy and stripe.com/privacy)
• PayPal — payment processing (paypal.com/privacy)
• Luma — event registration and ticketing (lu.ma/privacy)
• Eventbrite — event registration and ticketing (eventbrite.ca/privacypolicy)
• MailerLite — email marketing and contact management (mailerlite.com/legal/privacy-policy)
• Tilda — website hosting and analytics (tilda.cc/privacy)
When you register through Luma, Eventbrite, or another third-party platform, that platform’s own privacy policy also applies to the information you provide directly to them. We encourage you to review those policies.

5.2 Legal Disclosure
We may disclose personal information without consent if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or enforce our legal rights.

5.3 No Sale of Personal Information
Kindraza does not sell, rent, or trade personal information to third parties for commercial purposes. We are a non-profit organization and do not engage in data brokerage activities.

6. Payment Information
Payments made through our website are processed by Stripe or PayPal, both of which are industry-standard, PCI-DSS compliant payment processors. Kindraza does not store complete credit card or banking information on its own servers. Payment data entered during transactions is handled directly by our payment processors in accordance with their respective privacy and security policies.
For payments processed through Luma or Eventbrite, those platforms’ payment terms and security practices apply.

7. Privacy of Minors
Kindraza’s programs are designed for participants between the ages of 12 and 16. We are deeply committed to protecting the privacy of young people.
• We collect personal information about minor participants exclusively from their parents or legal guardians.
• We require verifiable parental or guardian consent prior to collecting, using, or disclosing any personal information relating to a minor.
• We require written parental consent before using any photographs or footage of minor participants in marketing or promotional materials.
• We do not knowingly collect personal information directly from children under the age of 13 without parental consent.
• Health and allergy information relating to minors is disclosed only to program staff on a need-to-know basis for safety purposes.
If you believe that we have inadvertently collected personal information from a minor without proper consent, please contact us immediately at privacy@kindraza.org and we will promptly delete such information.

8. Retention of Personal Information
We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. In general:
• Registration and enrollment information is retained for the duration of the program and for a reasonable period thereafter to address any follow-up inquiries or legal matters;
• Health and allergy information is retained only for the duration of the relevant program and is securely deleted thereafter unless retention is required by law;
• Financial transaction records are retained in accordance with applicable tax and accounting requirements;
• Marketing communication preferences and contact information are retained until you withdraw consent or request deletion.
Upon request, we will securely delete or anonymize personal information that is no longer required, subject to any legal obligations to retain such records.

9. Security of Personal Information
Kindraza takes the security of personal information seriously and implements reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction.
These measures include:
• Use of reputable, industry-standard third-party platforms for payment processing, registration, and communication;
• Restricting access to personal information to authorized personnel who require it to perform their duties;
• Secure transmission of data via encrypted (HTTPS) connections on our website.
While we take all reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security. In the event of a data breach that poses a risk of significant harm, we will notify affected individuals and the relevant authorities in accordance with applicable law.

10. Your Rights
Subject to applicable law, you have the following rights with respect to your personal information:
• Right of Access: You may request confirmation of whether we hold personal information about you or your child, and request a copy of that information.
• Right of Correction: You may request that we correct any inaccurate or incomplete personal information we hold.
• Right of Withdrawal of Consent: You may withdraw your consent to our use of personal information at any time, subject to legal or contractual restrictions. Withdrawal of consent may affect our ability to provide certain services.
• Right of Deletion: You may request that we delete personal information we hold about you or your child, subject to our legal obligations to retain certain records.
• Right to Opt Out of Marketing: You may unsubscribe from our marketing emails at any time by clicking the unsubscribe link in any email or by contacting privacy@kindraza.org.
To exercise any of the above rights, please contact our Privacy Officer at privacy@kindraza.org. We will respond to requests within 30 days. We may require you to verify your identity before processing your request.

11. Electronic Communications (CASL Compliance)
In accordance with Canada’s Anti-Spam Legislation (CASL), Kindraza will only send commercial electronic messages to individuals who have provided express or implied consent to receive them. Each marketing communication will clearly identify Kindraza as the sender and include a prominent, functional unsubscribe mechanism.
You may withdraw consent to receive commercial electronic messages at any time by clicking “Unsubscribe” in any email or by contacting privacy@kindraza.org. Unsubscribe requests will be processed within 10 business days.

12. Third-Party Websites and Platforms
Our website and communications may contain links to third-party websites, including Luma, Eventbrite, Stripe, PayPal, and social media platforms. This Privacy Policy applies only to information collected by Kindraza. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party platforms before providing your personal information to them.

13. Social Media
Kindraza maintains a presence on social media platforms including Facebook, Instagram, X, Youtube and LinkedIn. If you interact with our social media accounts or pages, those platforms may collect information about your activity in accordance with their own privacy policies. We may use social media advertising pixels on our website, which enable those platforms to show our content to users who have visited our site. You may manage your advertising preferences through the settings of each respective social media platform.

14. Compliance with Rules
All attendees must comply with:

• Venue rules
• Local city regulations
• Provincial laws

Failure to comply may result in removal from the programs without refund.

14.1 Prohibited Behaviour
The following will not be tolerated:

• Illegal activity of any kind
• Violence or aggressive behavior
• Harassment of any kind

14.2 Removal from Program
We reserve the right to refuse entry or remove any attendee at any time for violating these terms or behaving in a manner deemed unsafe, inappropriate, or disruptive.
No refund will be issued.


15 Changes to This Privacy Policy
Kindraza reserves the right to update or amend this Privacy Policy at any time. Any material changes will be posted on our website at www.kindraza.org with a revised “Last Updated” date. Where required by law, we will provide direct notice of significant changes to individuals whose personal information is affected. Your continued use of our website or services following the posting of changes constitutes your acceptance of the revised Policy.

16 Contact Information and Privacy Officer
Kindraza has designated its founder and director as the Privacy Officer responsible for overseeing compliance with this Privacy Policy and applicable privacy legislation.

Privacy Officer: Natalia V.Petrova
Organization: Kindraza Youth Skills and Development Organization
Email: privacy@kindraza.org, natalie.v.petrova@gmail.com
Website: www.kindraza.org
Mailing Address: 18 King Street E, Suite 1400, Toronto, ON M5C 1C4

If you have a concern or complaint about our privacy practices, you may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1-800-282-1376.