Privacy Policy
Last updated: October 13, 2026
1. Who we are
Women and Girls Alberta (“the Society”, “we”) is a non-profit society registered in Alberta on August 31, 2026 under the Societies Act. Our purpose is to restore and protect the sex-based rights of women and girls. We are run entirely by volunteer Directors and Team Members.
In this policy, “women and girls” means female persons: adult women, and girls under 18.
2. What this policy covers
This policy explains how we handle personal information collected through our website, womenandgirlsalberta.ca, by email, at our events, through membership, donations and purchases, and through our Share Your Story intake when it is open. Personal information means information about an identifiable individual.
We are governed by Alberta’s Personal Information Protection Act (PIPA) for personal information connected with our commercial activity, such as merchandise sales and paid events. We apply the same standards to all personal information we hold, whether or not the law requires it. Where a child may be at risk, we also have duties under Alberta’s Child, Youth and Family Enhancement Act (section 7).
Social media platforms where we post have their own privacy policies. This policy does not cover them.
3. Our approach
We collect as little personal information as the activity needs, and we tell you why we are asking.
We do not sell, rent or trade personal information, and we do not use it for advertising.
We use it only for the purpose we collected it for, unless you agree to something else or the law requires it.
Every account that holds your information is registered to the Society, not to an individual, and access is limited to named Directors and Team Members.
4. What we collect and why
When you
We collect
So that we can
Visit the website
Nothing that identifies you. Our hosting provider records standard server logs (IP address, pages requested, time) to keep the site running
Serve the pages and detect faults or attacks
Write to us or use the contact form
Your name, email address and whatever you tell us
Reply to you and follow up on your matter
Subscribe to our newsletter
Your email address, and your name if you give it
Send you the newsletter until you unsubscribe
Apply to become a member
Your name, contact details and the information our bylaws require for the register of members
Decide on your application and keep the register the Societies Act requires
Donate
Your name, contact details and the amount. Payment card details go to the payment provider and are never seen or stored by us
Record the donation and thank you
Buy merchandise or register for an event
Your name, contact details, what you ordered and, for events, any accessibility needs you tell us
Fill your order, run the event and keep the financial records the law requires
Give us an account of your experience
What you choose to tell us. See section 5
Use it for the purpose you were told about when you gave it
We do not ask for, and ask you not to send, more than the activity needs. If you write to us about a matter that involves another person, we hold that information under the same rules.
5. Share Your Story
Our Share Your Story intake is paused and is not accepting submissions. It was built to gather first-hand accounts from women and girls in Alberta for our submission to the Minister of Justice, and that work is complete.
Accounts already received. Every account was used only for the purpose women were told about when they gave it. The platform did not record IP addresses, devices or locations, and the accounts contain no information that identifies the women who sent them. Before the platform was taken offline, the accounts were preserved by the Society and are held as the evidentiary record of that work, with access limited to named Directors.
When the intake reopens. It will run on a platform owned by the Society, hosted in Canada, with submissions encrypted, no tracking of any kind, and a route that does not reveal to anyone watching your connection that you visited the site. Every submission will be readable by at least two named Directors or Team Members, and never by the technical provider. We will publish a notice for the intake, with its own terms, before it accepts anything. If you need to reach us about an urgent matter in the meantime, use the contact address in section 14.
6. Where your information is stored
We use service providers to host our website and run our email. They store information on our behalf under their own security and confidentiality terms, and they may not use it for their own purposes.
Provider
What it does for us
Where the information is stored
Framer
Hosts the website and its forms
United States
Proton
Email and file storage
Switzerland
Share Your Story platform
Confidential intake (paused). See section 5
Canada, when it reopens
No merchandise or event platform is in use while the website is offline. We will add each one to this table before it takes an order or a registration.
Some of these providers are outside Canada, so personal information may be stored and accessed there and may be subject to that country’s laws. You may ask our Privacy Officer (section 14) for written information about our policies and practices on service providers outside Canada.
7. When we share information
We share personal information only in these situations:
Service providers. The providers in section 6 store information for us. They act on our instructions and may not use it for themselves.
With your permission. Where you have told us what we may do with an account you gave us, we stay within those limits.
When the law requires it. A court order, search warrant or other lawful authority may require us to produce information. We will produce only what the order requires, and we will tell you if the law allows us to.
To prevent serious harm. If information shows an imminent risk of serious harm to a person, we may take the steps needed to prevent it, which may include contacting emergency services.
A child at risk. Under Alberta’s Child, Youth and Family Enhancement Act, anyone who has reasonable and probable grounds to believe a child is in need of intervention must report it. If an account discloses that a girl is being abused or neglected, we may be required to report it to child intervention services.
We never share membership, donor or subscriber lists with anyone, for any purpose.
8. How long we keep information
We keep personal information only as long as the purpose needs, or as long as the law requires, and then delete it securely. Backups are deleted on the same schedule, with a delay of up to 30 days.
Information
Kept for
Correspondence and contact-form messages
2 years after our last exchange with you, unless the matter is still open
Newsletter subscriptions
Until you unsubscribe, then deleted within 30 days
Register of members
For as long as you are a member, then as the Societies Act and our bylaws require
Donation, purchase and event records
7 years after the end of the financial year, as required for financial records
Event registration details, including accessibility needs
1 year after the event
Accounts received through Share Your Story
As the evidentiary record of the work they were given for, under the control of the Board
9. Your rights
You may ask us:
whether we hold personal information about you, and to see it;
to correct information that is inaccurate or incomplete;
to withdraw your consent to a use of your information, subject to any legal or contractual limits, which we will explain;
to delete your information, where no legal or operational reason requires us to keep it;
to stop sending you the newsletter, which you can also do with the unsubscribe link in every issue.
Write to the Privacy Officer at the address in section 14. We may ask you to confirm your identity so we do not release your information to someone else. We will respond within 45 days, and sooner where we can. If a request takes longer, we will tell you why and when to expect an answer.
Accounts given through Share Your Story contain nothing that identifies the sender, so we have no way to find yours unless you gave us a receipt code or contact method at the time.
10. Girls under 18
Our website, newsletter and membership are for adults. We do not knowingly collect personal information from girls under 18 through them, and we delete it if we learn we have.
Much of our work concerns girls, and adults often write to us about a girl in their care. We hold that information under this policy and share it only as section 7 allows. Whether girls under 18 may give an account directly through Share Your Story will be decided by the Board before the intake reopens, and the intake notice will say so.
11. Cookies and tracking
Our website uses only the cookies needed to serve its pages and remember a choice you make on it, such as closing a notice. It does not use advertising cookies, behavioural tracking, social media pixels or analytics that follow you across websites. If we add visitor statistics in future, we will use a service that does not identify individual visitors, and we will update this section first.
12. How we protect information
Every account that holds personal information is registered to the Society, protected by two-step sign-in, and accessible only to the named Directors and Team Members who need it for their role. We keep a written register of who has access to what, and the Board reviews it at least every six months. Information is encrypted in transit and at rest, and access is removed within 24 hours when a person’s role ends.
No system is perfectly secure. If we learn of a breach that creates a real risk of significant harm to you, we will tell you directly and promptly, and we will report it to the Office of the Information and Privacy Commissioner of Alberta.
13. Changes to this policy
The version date is at the top of this page. When we make a material change, we will say so on the website and, for newsletter subscribers and members, by email. Earlier versions are available from the Privacy Officer on request.
14. Contact us
Our Privacy Officer is the Interim President of the Society. She is responsible for this policy and for answering requests and complaints about personal information.
Email: Privacy_WGA@proton.me
If you are not satisfied with our answer, you may complain to the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.