Canadian Safer Online Spaces Privacy Notice

Canadian Safer Online Spaces and Six Clicks are a joint campaign founded by Reset Tech and the Waltons Trust, in collaboration with other organizations, which are listed on the website.

In this notice, we’ll refer to the Campaign.

This website is operated by Reset Tech, a global philanthropic network. We operate in the US, UK, Germany, Australia and, of course, Canada.

For more information about Reset Tech and how Reset Tech handles personal data outside this campaign, please see our website and our privacy notice.

Cookies and Analytics on the Website

We do not place cookies. We use Cloudflare Web Analytics to count visits to our pages. It does not use cookies and does not identify individual visitors.

Take Action / Contact Your MP

When you use our Take Action / Contact your MP feature, we ask for your postcode to identify your elected officials. Your postcode is sent to Represent (operated by Open North), a third-party service that matches postcodes to elected representatives; we do not store or log your postcode ourselves. This processing is subject to Open North’s privacy notice. To write your draft letter, we send your story (if you share one), your name, your riding and the name of the elected official you're contacting to an AI model provided through OpenRouter. We only use OpenRouter's zero data retention endpoints, so neither OpenRouter nor the model provider stores this text or uses it for training. We do not send your email address or postcode to the AI service. You review and edit the letter before it is sent. When you send it, we deliver it to your elected official by email through Cloudflare, from letters@saferonlinespaces.ca, with a copy to you, and replies go to your email address. We do not keep a copy of your letter, your story or your email address. We record only which elected official received a letter and when, for 40 days, so we can count the letters sent. If direct sending is not available, you can open the letter in your own email application instead.

Stay Informed on the Bill and Pledge

If you'd like updates as this bill progresses, you can optionally provide your first and last name, and your email address. You need to click "I pledge my support and would like to stay informed" to opt in to us updating you. This is separate from the message-drafting tool above. Providing a story or contacting your MP does not automatically sign you up for updates from us about the Bill.

Six Clicks Campaign Updates

Separately from the pledge above, you can choose to sign up for news about the Six Clicks campaign, part of our broader Online Safer Spaces campaign. If you opt in, we collect your email address so we can send you further communications about the campaign's progress and related actions.

How We Use Mailchimp

Where you've consented to receive email updates (through the pledge or campaign sign-up above), we share your name and email address with Mailchimp, our email service provider, who sends these communications on our behalf and stores your contact details for that purpose. Mailchimp acts as our data processor for this activity, and this processing is subject to Mailchimp's privacy notice. You can unsubscribe at any time via the link in any email we send.

Records

We will also keep records of our interactions with you (for example, our email correspondence and notes of meetings).

Some personal information is more sensitive than other information (for example, information about your health, your sexual orientation or sex life, your political affiliation, or your race and ethnicity). We try to minimise our collection of sensitive personal information, but sometimes it’s necessary (for example, if you’re a politician, we will naturally keep a record of your political party). We will always make sure we collect and use such information lawfully.

For example, if you share sensitive health information as part of your story, we will need to process it in order to facilitate sending the message to your MP, but we do not retain a copy.

We try as hard as we can to keep your information safe. For example, we limit access to your personal information to only those staff and vendors who need to see it for the purposes outlined above, we encrypt information where we can, we have strict contracts with our vendors handling personal information, and we train our staff.

Yes. We share your personal information with the following parties:

• The Waltons Trust (our partner for this Campaign);
• Different entities within Reset Tech (as we have shared systems and staff);
• Organizations part of the Campaign (listed on the website);
• Contractors who provide services to us (for example, Cloudflare for website hosting, analytics and email delivery, OpenRouter for letter drafting, PR and marketing companies for the Campaign, or IT service providers);
• Regulators for the purposes of our legal compliance;
• Advisors (for example, tax advisors and lawyers) who advise Reset Tech.

Yes. Reset Tech is a global network, and our entities share systems. We also use vendors in different countries. For example, MailChimp, which we use for electronic communications, is based in the United States. We try as hard as we can to keep your personal information secure when shared internationally, including carefully vetting our vendors, entering into agreements guaranteeing the security of personal information and your rights, and - of course - only transferring personal data which is necessary.

You acknowledge and agree that, as a result, your personal information may be processed, used, stored, or accessed in other jurisdictions and may be subject to the laws of those jurisdictions. For example, information may be disclosed in response to valid demands or requests from government authorities.

We limit the personal information we collect and use

As mentioned above, we take care to ensure that the information you provide to us is only accessed and used by those who need to. This includes both internal staff and external third parties. For staff, we have access restrictions, policies limiting the onward use of personal information for new purposes and training on the importance of protecting personal information. For external third parties, we have contracts which limit their use of personal information to exclusively the purpose of providing the services.

We try to make sure your personal information is accurate

We take reasonable steps to make sure your personal information is accurate, complete, and up to date. For example, if we receive a bounce-back from an email sent to you, we will remove that email from our lists. If you have concerns, you can always contact us to verify your information (see the contact details set out below).

Despite our best efforts, errors sometimes happen. If you see anything incorrect with your information, please let us know, and we will remedy it.

We only keep your information for as long as we reasonably need it

We will only keep your personal information for as long as is reasonably necessary to fulfill the purposes set out above. When we determine retention periods, we consider the amount, nature, and sensitivity of the personal information and the potential risk of harm from authorised use of such information.

You can request access to your personal information

Subject to certain limitations, you can request access to your personal information. We may need to check to make sure that it’s really you - for example, by asking for an ID. This is just to make sure we don’t disclose your personal information to those who have no right to see it.

You can request the deletion or removal of your personal information

In some circumstances, you have the right to request that we delete or remove your personal information. For example, you can withdraw your consent if you no longer wish to receive communications about the Campaign. We may not always be able to comply with your request if there are specific legal reasons for us needing to use your information, but we will let you know if that’s the case.

If you have any questions or wish to exercise any of your rights, you can email our Data Protection Officer, at dpo@reset.tech. If you feel like we haven’t addressed your concerns, you can always contact the Privacy Commissioner.