
Privacy Policy
The Canadian Alliance of Naturopathic Regulatory Authorities (“CANRA,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what personal information we collect through www.canra.ca (the “Website”), how we use and safeguard it, and the rights available to you under applicable Canadian privacy law.
This Policy is designed to be consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial privacy legislation.
1. Scope
This Policy applies to personal information collected through the Website, through email or telephone communications with CANRA, and through any forms, surveys, or registration processes we host. It does not apply to information collected by our member regulators, by third parties to whom we link, or by any website, product, or service operated by another organization.
2. What Personal Information We Collect
We collect only the personal information needed for the purposes described in this Policy. Depending on how you use the Website, this may include:
2.1 Information you provide to us
-
Contact information: your name, email address, organization or regulatory body, job title, and any message content you submit through contact forms, email, or telephone.
-
Correspondence: the content of messages you send to CANRA, including any attachments.
-
Subscription information: your name and email address if you subscribe to updates, bulletins, or mailing lists.
-
Professional information: information you voluntarily provide in connection with committee participation, volunteer activities, consultations, or other engagement with CANRA.
2.2 Information collected automatically
When you visit the Website, we and our service providers may automatically collect certain technical information, which may include:
-
IP address and approximate location derived from it;
-
Browser type, operating system, and device identifiers;
-
Pages visited, time and date of visit, time spent on pages, and referring website;
-
Information collected through cookies and similar technologies (see Section 6).
2.3 Information from third parties
We may occasionally receive information about you from our member regulators, consultants, or other partners in the context of collaborative projects. We only accept personal information from third parties where it is necessary for a specific, identified purpose consistent with this Policy.
3. How We Use Your Personal Information
We use personal information only for the purposes identified at the time of collection or for related purposes that would be reasonably expected in the circumstances. Typical purposes include:
-
Responding to inquiries and communicating with you;
-
Providing information about CANRA's activities, competencies, and examinations;
-
Administering subscriptions, committees, volunteer roles, and stakeholder consultations;
-
Operating, maintaining, and improving the Website;
-
Monitoring Website performance, analytics, and security;
-
Meeting legal, regulatory, and accountability obligations; and
-
Any other purpose for which you have provided consent.
We do not sell personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.
4. Legal Basis and Consent
We collect, use, and disclose personal information with your consent, except where collection, use, or disclosure without consent is permitted or required by law. Consent may be express (for example, when you submit a form) or implied (for example, when you voluntarily provide your email address in the course of correspondence).
You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our Privacy Officer using the details in Section 14. Withdrawing consent may affect our ability to provide certain information or services.
5. Disclosure to Third Parties
We disclose personal information only as necessary and only to parties with appropriate confidentiality and security protections in place. Categories of recipients may include:
-
Service providers: organizations that host our website, send emails on our behalf, provide analytics, or otherwise support our operations. Our current website platform provider is Wix, and additional providers may be used for email, survey, or file-storage services.
-
Member regulators and partners: where disclosure is necessary for collaborative regulatory work and consistent with the purpose for which the information was collected.
-
Professional advisors: lawyers, auditors, insurers, and similar advisors bound by professional duties of confidentiality.
-
Legal and regulatory authorities: where disclosure is required by law, court order, or lawful request, or where necessary to protect the rights, property, or safety of CANRA, our members, or others.
6. Cookies and Similar Technologies
The Website uses cookies and similar technologies to function properly, remember your preferences, and understand how visitors use the site. Cookies are small text files stored on your device. We use cookies for purposes such as:
-
Essential functions, including security and accessibility;
-
Remembering language and display preferences; and
-
Analytics, to understand aggregate usage and improve the Website.
You can control cookies through your browser settings and, where offered, through the cookie banner on the Website. Disabling cookies may affect the functionality of certain features.
7. International Transfers of Personal Information
Our website is hosted by Wix, and certain service providers may process or store personal information on servers located outside of Canada, including in the United States and other jurisdictions. When personal information is transferred outside Canada, it may be accessible to foreign courts, law enforcement, and regulatory authorities in accordance with the laws of those jurisdictions.
We take reasonable steps to ensure that any personal information transferred outside Canada is protected by comparable levels of safeguarding, including through contractual protections with our service providers.
8. Retention
We retain personal information only as long as is reasonably necessary for the purposes identified at collection, or as required by law. When information is no longer needed, we take reasonable steps to destroy, erase, or anonymize it in a secure manner.
Correspondence, subscription records, and committee or volunteer records are generally retained for the duration of the relationship and for a reasonable period thereafter for accountability and archival purposes.
9. Security
We maintain reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. These safeguards include access controls, encryption in transit, written agreements with service providers, and limited staff access on a need-to-know basis.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a privacy breach involving a real risk of significant harm, we will take the steps required by applicable law, including notifying affected individuals and the relevant regulatory authorities.
10. Your Rights
Subject to applicable law and certain exceptions, you have the right to:
-
Ask whether we hold personal information about you and, if so, request access to that information;
-
Request correction of personal information that is inaccurate or incomplete;
-
Withdraw your consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions;
-
Request information about how your personal information has been used and to whom it has been disclosed; and
-
Make a complaint about our handling of your personal information.
To exercise any of these rights, please contact our Privacy Officer using the details in Section 14. We may need to verify your identity before responding. We will respond within the timelines required by applicable law.
11. Children’s Privacy
The Website is intended for a general professional and public audience. We do not knowingly collect personal information from children under the age of 13 without appropriate parental or guardian consent. If you believe we have collected information from a child in a manner inconsistent with applicable law, please contact us using the details in Section 14 and we will take appropriate steps to address it.
12. Third-Party Links
The Website may contain links to websites maintained by member regulators, government bodies, educational institutions, and other third parties. This Privacy Policy does not apply to those websites. We encourage you to review the privacy practices of any third-party website you visit before providing personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated “Last Updated” date. Where changes are significant, we will take reasonable steps to draw the update to your attention, such as by posting a notice on the Website or sending an email to subscribers. Your continued use of the Website after changes are posted constitutes acceptance of the revised Policy.
14. Contact Us and Privacy Officer
CANRA has designated a Privacy Officer responsible for our compliance with this Policy and with applicable Canadian privacy law. Questions, requests, or complaints regarding this Policy or your personal information should be directed to:
Privacy Officer
Canadian Alliance of Naturopathic Regulatory Authorities
Box 12083
Sylvan Lake, AB T4S 2K9
Email: info@canra.ca
Phone: 877-334-6668
Website: www.canra.ca
15. Complaints to the Privacy Commissioner
If you are not satisfied with our response to a privacy concern, you have the right to make a complaint to the Office of the Privacy Commissioner of Canada at www.priv.gc.ca, or to the privacy commissioner of your province or territory, as applicable.