PRIVACY POLICY

The McMichael Canadian Art Collection (the MCAC, “we” or “us”) is committed to safeguarding the personal information entrusted to us by our visitors, donors, sponsors, members, and volunteers (collectively, “Supporters”). As such, we comply with the requirements of the Freedom of Information and Protection of Privacy Act (Ontario) and the Personal Information Protection and Electronic Documents Act (Canada), and we uphold the principles of the Donor Bill of Rights developed by the Association of Fundraising Professionals. The MCAC employs reasonable administrative and technical measures to ensure the security of all the personal information that we collect and our credit card processing systems are industry compliant.

We value the trust of our Supporters and recognize that maintaining this trust requires that we be transparent and accountable in how we treat the information that is provided to us by our Supporters. This privacy policy describes how the MCAC collects, uses, and shares the personal information of its Supporters. When we use the term ‘personal information’ we are referring to information that is about an identifiable individual, however, ‘personal information’ does not include business contact information or certain publicly available information. This policy applies to the MCAC and to any other person providing services on our behalf. A copy of this policy will be provided upon request.

Personal information is collected when a Supporter supplies it to us voluntarily; for example, by purchasing tickets to an exhibition, registering for a program, making a donation, engaging with us on social media, entering a contest or subscribing to our e-newsletter.

The following are examples of the personal information that we collect with respect to our Supporters:

• Contact information (including salutation, name, professional title, home and business address, phone number and email address)
• The type of MCAC membership purchased and the contact information for the primary and secondary cardholder for the membership
• The number and type of tickets purchased, including whether tickets were purchased for any of our special exhibitions
• Payment information (such as credit card number, expiry date and 3-digit CVV)
• Visiting history and program participation
• Images of visitors to the MCAC, which are taken by our security cameras
• Detailed medical information about participants in our camps and children’s programs
• Value of any donation, sponsorship, grant, and volunteer dues
• Volunteer status (active or inactive)
• Age, gender, marital or family status

To better understand our visitors and to improve the visitor experience on our website, the MCAC’s website collects data using services (including Google Analytics); no personal information is collected through these tools that would allow the MCAC to identify individuals. For more information about Google Analytics, please visit: www.google.com/policies/privacy/partners. We also collect information about email open rates and click-through rates to determine whether the MCAC’s electronic communications are effective.

When you visit our site, we may store some data on your computer in the form of a ‘cookie.’ A ‘cookie’ is a small piece of text that a website places in a cookie file on your browser that allows our site to recognize your personal computer the next time you visit. Cookies by themselves do not tell us your email address or otherwise identify you personally. Cookies cannot be used to run programs or deliver viruses to your computer. Your Web browser can be set to accept or reject cookies. Please note that disabled or deactivating cookies may result in a reduced availability of the functionality of our site or parts of our site may no longer function correctly.

The MCAC may use third parties to collect data from our website anonymously for marketing purposes (for example, advertisements). Users of our website will not be personally identified through this data and the MCAC does not see any data or contact information on an individual level. These third parties may include, but are not limited to, Facebook and/or Twitter. You may tailor your privacy settings to limit the collection of personal information.

We use personal information to:

• Communicate with our Supporters about our exhibitions, programs, events, offers, fundraising projects and other special initiatives
• Communicate with visitors about their experience at the MCAC
• Contact Supporters to determine their interest in becoming members of the MCAC and processing memberships and membership renewals
• Contact Supporters in connection with the fundraising efforts for the MCAC and processing donations, sponsorships, or grants
• Contact Supporters to determine their interest in purchasing tickets to a fundraising event and completing any ticket purchases and related registrations
• Contact Supporters in connection with opportunities to become a volunteer with the MCAC and enrolling any interested individuals as volunteers
• Maintain a robust database of current and past members of the MCAC
• Deliver requested information about our programs and

A supporter may opt out of receiving communications from us by contacting our Privacy Officer, whose contact information may be found under the heading “Contact Us.”

As partners with a shared mission, the MCAC shares certain personal information about its Supporter (salutation, name, address, professional title, address, phone number, email address) with the McMichael Foundation Board (the “Foundation”) so that the Foundation may contact Supporters about whether they are interested in becoming members or donors to the Foundation. The Foundation is equally committed to keeping Supporters’ personal information confidential and to comply with the MCAC’s privacy policy and all applicable privacy laws.

In some circumstances, the MCAC may use third party vendors for services that would not be practical or cost-effective for us to perform ourselves. Some of the services that the MCAC might retain a third vendor to perform could include but are not limited to:

• Credit card processing
• Database analysis
• Tele-fundraising programs
• Updating our database

In all cases, the third-party vendor is contractually bound to comply with the MCAC’s privacy policy and all applicable privacy laws and to maintain the confidentiality of all personal information that the MCAC provides to it. The contracts with third party vendors also require them to take reasonable precautions to protect the personal information under its control and to destroy such personal information upon completion of their services to the MCAC. Personal information sent between the MCAC and third-party vendors is transferred using secured password-protected file transfer protocols.

Where a member has granted his or her consent to do so, we may share his or her contact information with other not for profit entities within Canada. In those circumstances, the MCAC shares a member’s contact information with a third-party mailing house. The third-party vendor communicates with the MCAC member on behalf of the other not for profit entity. The other not

for profit entity only receives the contact information if the MCAC member responds to the communication and engages directly with it. In all cases, the third-party mailing house is contractually bound to comply with the MCAC’s privacy policy and all applicable privacy laws and to maintain the confidentiality of all personal information that the MCAC provides to it.

We collect detailed medical information with respect to participants in our camps and children’s programs. We use this information solely to provide each camper with a high-quality experience, address any integration needs and manage any potential health issues. Except (i) as required by law, or (ii) in a medical emergency where disclosure is limited to medical personnel and law enforcement, we do not share this personal information with any third parties.

In order to provide a safe environment for visitors to the MCAC, as well as for the artifacts and objects that we are entrusted to house, the MCAC has installed security cameras throughout the gallery and grounds. We use the footage from these cameras for security and loss prevention purposes and in connection with incident investigations. In addition, we may share this footage with law enforcement in connection with a criminal investigation.

The MCAC does not sell or rent its lists of Supporters to any organization.

When a Supporter provides personal information to the MCAC, they are consenting to the MCAC’s collection, use and disclosure of their personal information in accordance with this privacy policy. A Supporter is able to refuse or withdraw their consent to the collection, use or disclosure of their personal information at any time by contacting our Privacy Officer, whose contact information may be found under the heading “Contact Us,” We will act on such requests promptly

The MCAC takes reasonable steps to ensure that personal information that it maintains about Supporters is accurate, complete, and up to date. If a Supporter becomes aware that any personal information under our control about them is not correct, please contact our Privacy Officer, whose contact information may be found under the heading “Contact Us.”

Supporters are entitled to a copy of the personal information that the MCAC has under our control about them; if they would like a copy of such information, please contact the MCAC. The MCAC will take reasonable steps to verify a Supporter’s identity before granting access or making corrections. In addition, the right to access or correct personal information is subject to certain legal restrictions.

Children should use the MCAC website only with the approval of a parent or guardian. In particular, a child under the age of 13 should not provide the MCAC with any personal information unless their parent or guardian has consented to such disclosure. The MCAC does not knowingly collect any personal information from children under the age of 13. If a parent or guardian learns that their child, under the age of 13 has provided the MCAC with personal information without their consent, the parent or guardian should immediately contact our Privacy Officer, whose contact information may be found under the heading “Contact Us”, and we will remove this personal information from our database.

The Privacy Officer for the MCAC works closely with all staff in order to comply with the principles and policies of the gallery, the Personal Information Protection and Electronic Documents Act (Canada), and the Freedom of Information and Protection of Privacy Act (Ontario).

If you have any questions about our privacy or security practices, or if you would like to request access or correction to your personal information, or if you would like to opt out of receiving communications from MCAC in the future, please contact our privacy officer by mail, telephone, or email:

McMichael Canadian Art Collection
Attention: Sheri Guevara-Mann
10365 Islington Avenue
Kleinburg, Ontario L0J 1C0
905-893-1121

We may revise our privacy policy from time to time. You should review our privacy policy periodically so that you keep up to date on our most current practices. We will note the effective date at the end of each version of our privacy policy.