Privacy notice

Who is responsible

The Canadian Swim School Alliance is responsible for personal information collected through this site. Questions, requests and complaints go to the CSSA Privacy Officer at privacy@canadianswimschools.ca. Email the CSSA Privacy Officer.

What we collect and why

• To send your letter to your MP (required for that purpose only): your name, email address, postal code, city or town, province or territory, federal riding, and the letter text. Your email address is used as the reply address so your MP can answer you.
• Optional supporter list: if you opt in, your name, email, postal code and riding so we can count you as a confirmed supporter after you confirm by email.
• Optional campaign updates: if you opt in and confirm by email, your email address and language.
• Consent records: which consents you gave, the wording version, language, time and form. For fraud prevention only, we keep a one-way hash of your IP address for 30 days and a shortened browser/operating-system label.
• Swim-school partner applications: school name, contact name, email, phone, website, location and the logo file you upload.
• Optional measurement: if you accept it, anonymous page and step events (for example “letter started”) with campaign tags such as utm_source and the referring website. Measurement never includes your email, postal code or letter text.

Sending a letter never requires joining a petition, supporter list or newsletter. We do not sell personal information or use advertising trackers.

Service providers and cross-border processing

• Lovable (website hosting, application database and file storage, operated with Supabase).
• Resend (email delivery of letters and confirmation messages).
• Open North Represent (receives only a postal code to identify your federal riding).
• Cloudflare (network delivery and Turnstile bot protection on our forms).

These providers act on the campaign's instructions and may store or process information outside Canada, including in the United States, where it may be accessible to courts, law enforcement and national security authorities under the laws of that country.

Open North receives only the postal code you enter. Read the Open North privacy policy.

How long we keep it

• Unconfirmed supporter sign-ups: deleted after 30 days.
• IP address hashes: deleted after 30 days.
• MP letter submissions: kept 24 months, then anonymized (name, email, postal code and letter text removed; riding and dates kept for aggregate reporting).
• Email delivery event logs and operational logs: 24 months.
• Partner applications: 24 months after last activity.
• Measurement: aggregated, kept up to 26 months.
• Bounce, complaint and unsubscribe suppression records: a minimal one-way hash kept as long as needed to honour your choice.

Your choices and rights

You can withdraw optional consent at any time with the one-click unsubscribe link in any optional email, or by contacting the Privacy Officer. You can ask to access, correct or delete your information using the request form below or by email. We respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada. Office of the Privacy Commissioner of Canada.

Safeguards and breaches

Supporter and applicant records are not readable from the public website. Only a small number of authorized CSSA staff can view campaign data, and staff access is logged. If a breach creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner as required by law.