Privacy Policy

Purpose of this Policy

CYA has developed this policy for implementation beginning June 15, 2005. This policy describes the way in which CYA collects, uses, retains, safeguards, discloses, and disposes of the personal information of prospective members, members, and others including athletes, coaches, referees, and volunteers. This policy describes the way in which CYA will, subject to applicable legal requirements, adhere to all relevant federal and provincial legislative privacy requirements. The Policy follows the 10 Canadian Standards Association (CSA) principles identified in the federal Personal Information Protection and Electronic Documents Act (PIPEDA). The policy describes each principle and procedure. CYA will strive to meet or exceed all legislative requirements and will ensure that it remains current with changing technologies and laws. Any and all changes will immediately be posted to the CYA website. Nothing in the CYA Privacy policy shall be construed so as to prevent the CYA from collecting and maintaining information for the purpose of maintaining the historical records of the organization. Such information shall include but not be limited to names and achievements of Canadian Sailing Team Members, Paralympic and Olympic Team Members, names and positions held by volunteers, Board Members, and Executive Members, etc. In addition to historically significant information, nothing in this privacy policy shall be construed so as to prevent the CYA from collecting and maintaining personal information for the purpose of collecting and maintaining statistical data in order to satisfy government requests for sport participation information connected with decisions related to government funding levels. Such information to include but not be limited to Learn to Sail participant data collected by the Provinces or otherwise, etc. This last clarification acknowledges the need of CYA to collect and maintain certain information in order to maintain and increase its government funding.


    a) Act - Personal Information Protection and Electronic Documents Act
    b) Commercial Activity - Any particular transaction, act, or conduct that is of a commercial character
    c) Organization - Includes an association, a partnership, a person, an unincorporated association, a trust, a not-for-profit organisation, a trade union, and a corporation
    d) Personal Information - Any information about an identifiable individual, but does not include an employee's name, title, business address, or business telephone number
    e) Personal Health Information - Any health information about an identifiable individual
    f) Representatives - Directors, officers, employees, committees, members, volunteers, coaches, contractors, and other decision-makers with CYA

Statutory Obligations

CYA is governed by the PIPEDA in matters involving the collection, use, and disclosure of personal information.

Additional Obligations

In addition to fulfilling all requirements of the Act, CYA and its representatives will also fulfill the additional requirements of this Policy. Representatives of CYA will not:

    a) Disclose personal information to a third party during any business or commercial transaction unless it is properly consented to in accordance with this policy;
    b) Knowingly place themselves in a position where they are under obligation to any person to disclose personal information;
    c) Disclose personal information to anyone without a valid reason;
    d) Derive personal benefit from personal information that they have acquired from the CYA; and
    e) Accept any gift or favour that could be construed as being given in anticipation of, or in recognition for, the disclosure of personal information.

Ruling on Policy

Except as provided in the Act, the Board of Directors of CYA shall have the authority to interpret any provision of this Policy that is contradictory, ambiguous, or unclear.

  1. Accountability
      1.1 CYA will appoint a staff person (the "Privacy Officer") whose responsibilities will include those of the implementation and monitoring of the CYA Privacy Policy. This person will also be responsible for responding to access requests in accordance with this Policy. The Privacy Officer will report to the President and the ultimate responsibility for Privacy issues will rest with the CYA Board of Directors. The Privacy Officer may enlist assistance from others within the organization. This will not mitigate his/her responsibility for Privacy issues.
      1.2 CYA's Privacy Officer is the Executive Director as designated by the Board of Directors. In the event that there is no Executive Director the President shall appoint an interim Privacy Officer.
      1.3 A contract made with a third party having access to personal information held by CYA shall include a clause that ensures the third party does not breach CYA's privacy policies.
  2. Identifying the Purpose for the Collection of Personal Information
      2.1 CYA shall only collect the information reasonably necessary to conduct programming.
      2.2 CYA collects personal information from prospective members, members, coaches, officials, judges, athletes, managers, and volunteers for the purposes of conducting programming.
      2.3C YA will specify the purposes for collecting data at or before the time of collection to the individual. The purposes may be given orally or in writing.
      2.4 CYA will endeavour to ensure that all collectors of personal information are familiar with the potential use of the personal data. All data collected shall be maintained in its office, or under control of its representatives.
      2.5 CYA will request individual permission for the use of any personal data collected which is extraneous to that which has been identified above unless authorized by law.
      2.6 Information collected during the use of our website may include information listed in 2.2. All information will be treated within the same parameters as other information collected by CYA. It is always optional to provide information in certain fields, although that may inhibit full access to the website. Our website also collects non-identifiable information about users such as IP address, the sections of the website visited, and information downloaded. CYA may use this non-identifiable information and disclose it to service providers, for system administration purposes and to improve the website.
  3. Consent
      3.1 CYA will use the personal information for the uses specified above in Section 2 and in Sections 3.2 and 3.3 below and more generally for the purposes set out in the Purpose section above. By consenting to provide your information to CYA, you are deemed to consent to our use of the information.
      3.2 If at any time you wish to withdraw your consent to the use of your information, you may do so by contacting the CYA. We will do our best to accommodate your request in a timely manner. We will explain to you the impact of your withdrawal on any services we provide to you.
      3.4 Consent shall not be obtained from individuals who are minors, seriously ill, or mentally incapacitated and therefore will be obtained from a parent, legal guardian, or persons having power of attorney.
  4. Limiting Collection
      4.1 All information shall be collected fairly and lawfully within the criteria as set forth in our Privacy Policy.
      4.2 CYA shall not indiscriminately collect information. The amount and type of information collected shall be limited to that which is required to fulfill our identified purposes.
      4.3 CYA will not use any form of deception in gaining personal information from its members.
  5. Limiting Use, Disclosure and Retention
      5.1 Subject to applicable legislation, CYA shall limit use of personal information it collects to purposes that we have disclosed in Sections 2 and 3.2 and more generally for the purposes set out in the Purpose section above.
      5.2 CYA shall maintain documents and information for certain periods of time dependant upon necessity.
      5.3 Certain documents may be subject to legislated retention periods either federally or provincially and these will be respected at all times by CYA.
  6. Accuracy
      6.1 CYA shall strive to ensure that information entrusted to us is maintained in an accurate manner. We shall try to ensure that decisions are not made for or about an individual based on inaccurate information.
      6.2 CYA shall update information in the event of a renewal or registration and/or an update request.
      6.3 CYA shall strive to ensure that personal information that is used on an ongoing basis is accurate and up-to-date, unless limits to the requirement for accuracy are clearly stated.
  7. Safeguards
      7.1 Security safeguards have been implemented to ensure personal information is protected from theft as well as unauthorized access, disclosure, copying, use, or modification thereof.
      7.2 The level of safeguards shall be directly related to the level of sensitivity of the information collected. The more sensitive the information, the higher the level of security.
      7.3 Methods of protection and safeguards shall include but not limited to locked files, offices, and storage areas, need-to-know access, as well as technological measures such as passwords and encryption.
  8. Openness
      8.1 CYA publicly discloses the methods by which we handle your personal information through our Privacy Policy, on our website, or upon request by contacting CYA.
  9. Individual Access
      9.1 Subject to legislation, upon request by the individual, CYA shall disclose whether or not it holds personal information on an individual. We shall disclose the source of this information when requested and provide an account of third parties to whom the information may have been disclosed.
      9.2 CYA may request information to confirm your identity before releasing your personal information to you.
      9.3 An individual may be denied access to his or her personal information and upon refusal; CYA will inform the individual the reasons and the associated provisions of PIPEDA.
  10. Challenging Compliance
      10.1 An individual may challenge CYA's compliance with this policy and with PIPEDA by submitting a challenge in writing.
      10.2 CYA has in place procedures for the resolution of grievances in the administration of its Privacy Policy.
      10.3 Upon receipt of a complaint CYA shall make available the complaint procedures, which will be simple and easy to access.
      10.4 CYA shall investigate all complaints. If the complaint is deemed justified CYA shall take the appropriate steps to ensure that compliance is achieved and will make changes to its policies to allow for compliance in the future.
      10.5 All complaints shall be addressed to the CYA Privacy Officer
  11. Internal Privacy Policy

  12. The CYA shall maintain a more detailed internal privacy policy for the purpose of providing staff with specific guidelines relating to internal procedures for management of any information protected by statute.


This web site is a product of CYA. All logos and marks of CYA as well as all other proprietary materials depicted herein are the property of CYA and may not be reproduced without prior written consent. © CYA. All Rights Reserved.

Policies for Individuals

With the permission of a user, information submitted may be used for marketing and promotional purposes and may be shared with pre-screened affiliates, companies or new corporate partners. If a guest wishes to withdraw such use, he/she may withdraw that use by e-mail request.

IP Address

CYA collects IP addresses for the purposes of system administration and to report aggregate information to our advertisers. An IP address is a number that is automatically assigned to your computer when you connect to the Internet. Web servers automatically identify your computer by its IP address. When guests request pages from CYA web sites, our Internet Service Provider will log the guests' IP addresses. We do not link IP addresses to anything personally identifiable. This means that a user's session will be logged, but the user remains anonymous.

Links to Other Sites

Users should be aware that when you are on CYA web site, you could be directed to other sites. These include links from advertisers, sponsors, and partners. Their policies may not be the same as ours. While CYA strives to protect our users' personal information and privacy, we cannot guarantee the security of any information you disclose online and you do so at your own risk.

Security Policy

Any employee who violates our privacy and/or security policy is subject to disciplinary action, including possible termination or civil and/or criminal prosecution.



Applicable Law

This site is created by CYA in the province of Ontario, Canada. As such, the law of the province of Ontario will govern these disclaimers, terms, and conditions, without giving effect to any principles of conflicts of laws. We reserve the right to make changes to our site and to these disclaimers, terms, and conditions at any time.