Who we are
Overcoming Together
Located within the Halifax Regional Municipality (HRM), Nova Scotia, Canada
Our website address is: https://overcomingtogether.ca.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Forms
We use a membership plugin, which provides us with forms for user registration, login and profiles. Via these forms we are collecting personal data from our users. Personal data such as Name, Email Address, are captured when someone submits/fills in one of our membership forms. We collect this information to establish login capability top our website and be able to communicate electronically with you as a user who consumes the information we provide on our website.
We do use a contact form plugin, which provides many ways for our website users to contact us for specific tasks or provision of services. The personal data is captured when someone submits our contact form, and it is kept long enough to send an email to one of our domain email addresses with submission information. No data from these contact forms is retained once submitted. We keep contact form submissions (mail messages) for a certain period for customer service purposes, but we do not use the information submitted through them for marketing purposes.
e-Learning or Online Learning
We use an e-learning plugin, which enables us to provide e-learning content, process and store personal data about your interactions using xAPI. We use the data to learn about how well the interactions are designed and how it could be adapted to improve the usability and your learning outcomes. The data is processed and stored in our platform until further notice.
We may store the results of your interactions on our platform until further notice. The results may contain your score, the maximum score possible, when you started, when you finished, and how much time you used. We use the results to learn about how well you performed and to help us give you feedback.
We may store interactive content that you create on our platform. We also may send anonymized reports about content creation without any personal data to the plugin creators. Please consult the H5P tracking information page for details.
If you use interactive content that contains a video that is hosted on YouTube, YouTube will set cookies on your computer. YouTube uses these cookies to help them and their partners to analyze the traffic to their websites. Please consult Google’s Privacy policy for details. It is our legitimate interest to use YouTube, because we we need their services for our interactive content and would not be able to provide you with their video content features otherwise.
If you use interactive content that contains a Twitter feed, Twitter will set a cookie on your computer. Twitter uses these cookies to help them and their partners to make their advertising more relevant to you. Please consult Twitter’s Privacy policy for details. It is our legitimate interest to use Twitter, because we need their services for our interactive content and would not be able to provide you with it otherwise.
If you use interactive content that contains speech recognition, Google Cloud will process your voice for converting it to text. Please consult Google’s Privacy policy for details. It is our legitimate interest to use Google Cloud, because we we need their services for our interactive content and would not be able to provide you with speech recognition features otherwise.
Cookies
Some forms on this site require the use of Google’s reCAPTCHA service before they can be submitted. If you consent to use Google’s reCAPTCHA service, a cookie is created that stores your consent. This cookie deletes itself after thirty days.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Security Logs
Our security plugin logs the IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 61 days.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
Our hosting provider has an analytics package we use. All analytics tracking on our domain is done internally and is for our own particular use to track site usage data.
Who we share your data with
We do not share any personal data with anyone.
Our security plugin performs the following activities to secure our site properly:
- Some forms on this site require the use of Google’s reCAPTCHA service before they can be submitted. Use of the reCAPTCHA service is subject to the Google Privacy Policy and Terms of Use.
- This site is scanned for potential malware and vulnerabilities by Sucuri’s SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in comments) during their scan. For more details, please see Sucuri’s privacy policy.
- In order to ensure file integrity, iThemes Security pulls data from wordpress.org, ithemes.com, and amazonaws.com. No personal data is sent to these sites. Requests to wordpress.org include the WordPress version, the site’s locale, a list of installed plugins, and a list of each plugin’s version. Requests to ithemes.com and amazonaws.com include the installed iThemes products and their versions. For wordpress.org privacy policy details, please see the WordPress Privacy Policy. For ithemes.com privacy policy details, please see the iThemes Privacy Policy. Requests to amazonaws.com are to content added and managed by iThemes which is covered by the Amazon Web Services Data Privacy policy.
- When running Security Check, ithemes.com will be contacted as part of a process to determine if the site supports TLS/SSL requests. No personal data is sent to ithemes.com as part of this process. Requests to ithemes.com include the site’s URL. For ithemes.com privacy policy details, please see the iThemes Privacy Policy.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
Membership registered user information is retained in our website’s database indefinitely, whether your account remains active or is deactivated. Data can be exported or removed upon users request via the existing WordPress data exporter or eraser. If syncing data to a 3rd party service (e.g Mailchimp via our MailChimp extension), data is retained there until unsubscribed or deleted.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their own personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Our security plugin performs backups of security log details are retained for 3 days. Note there may be a requirement by some regulations to ensure that past personal data erasure requests are respected even in the event of restoring a backup of the site. There is currently no internal policy to ensure that previous personal data erasure requests are respected after restoring a database backup. Additionally, security logs are retained for 61 days.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Our membership plugin does not send any user data outside of our site by default.
We have a subscription plugin that extend our subscribed services functionality (e.g sending registered user data to MailChimp via our MailChimp extension). This user information (first and last name, email address, and subscription groups) provided through our website may be passed to these external services. These services may be located abroad and outwith the EU.
Our security plugin registers this site as part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.
Your contact information
For privacy-specific concerns, please contact our site administrator at admin@overcomingtogether.ca
Additional information
None.
How we protect your data
We make every effort to protect our users’ data. We have incorporated SSL Site encryption as a technical measure; and security measures such as two factor authentication, using CAPTCHA, to establish an encrypted link between our web servers and any internet browser. This link ensures that all data passed between the web server and browsers remain private and integral. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers or clients.
When downloading digital content from this site, we collect information about you during the checkout process on our online store. This information may include, but is not limited to, your name, billing address, shipping address, email address, phone number, credit card/payment details and any other details that might be requested from you for the purpose of processing your orders.
Handling this data also allows us to:
- Send you important account/order/service information.
- Respond to your queries, refund requests, or complaints.
- Process payments and to prevent fraudulent transactions. We do this on the basis of our legitimate business interests.
- Set up and administer your account, provide technical and/or customer support, and to verify your identity.
Additionally we may also collect the following information:
- Location and traffic data (including IP address and browser type) if you place an order, or if we need to estimate taxes and shipping costs based on your location.
- Product pages visited and content viewed while your session is active.
- Your comments and product reviews if you choose to leave them on our website.
- Account email/password to allow you to access your account, if you have one.
- If you choose to create an account with us, your name, address, and email address, which will be used to populate the checkout for future orders.
What data breach procedures we have in place
In the event of a user data breach, we will make every effort to further protect our users’ data, and will inform the affected user.
What third parties we receive data from
None.
What automated decision making and/or profiling we do with user data
None.
Industry regulatory disclosure requirements
None.
