Rozi Roti delivers food directly to families in need across Durham Region. People trust us with personal and sometimes sensitive information, and we take that trust seriously. This policy explains what information we collect, why we collect it, how we protect it, and the choices and rights you have.
Rozi Roti Impact is a federally incorporated not-for-profit corporation. We follow the ten fair information principles set out in Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) as our standard for handling personal information, and we comply with Canada’s Anti-Spam Legislation (CASL) for electronic messages.
Your information is never sold, rented or traded, and families are never identified to donors.
Application documents are deleted 12 months after a decision is made.
Online donations are processed securely by Stripe. We never see your full card number.
Questions about your information? We can help in English, Urdu or Punjabi.
Rozi Roti is responsible for the personal information under its control. We have named a Privacy Officer who is accountable for our compliance with this policy.
Privacy Officer, Rozi Roti Impact
Email: info@roziroti.org (subject line: “Privacy”)
Phone: 647-774-0404
Oshawa, Ontario, Canada
We collect only the information we need for the purpose it is given. What we collect depends on how you interact with us.
We do not currently use advertising trackers or website analytics tools on roziroti.org.
We will not use your information for a new purpose without first telling you and, where required, asking for your consent.
We collect, use and share your information with your knowledge and consent, except where the law allows or requires otherwise. You give consent when you submit a form, apply for support, donate or contact us. For sensitive information, such as financial documents and identification, we ask for your express consent on the application form.
You may withdraw your consent at any time by contacting our Privacy Officer, subject to legal or contractual limits. If you withdraw consent to the information we need to assess an application or deliver food, we may no longer be able to provide that service. We will explain what that means before acting on your request.
If you apply on behalf of your household, you confirm that you have the authority to share information about your dependents, including children, and we will use it only to assess and deliver support to your household.
Some of our service providers, including Google, Stripe and our website host, may store or process information on servers outside Canada, such as in the United States. While it is there, it is subject to the laws of that country and may be accessed by its courts, law enforcement or national security authorities. We choose reputable providers that use strong security protections.
We keep personal information only as long as we need it for the purpose it was collected, or as long as the law requires:
| Information | How long we keep it |
|---|---|
| Application documents (photo ID, proof of address, bank statements and Notice of Assessment) | 12 months from the date a decision is made on your application, then permanently deleted |
| A basic record of the application and our decision | 7 years |
| Donation and financial records | At least 6 years from the end of the tax year they relate to, as required by the Canada Revenue Agency |
| Volunteer, contact and food donation information | While we are in contact with you, reviewed at least once a year. Information we no longer need is deleted. |
| Email list | Until you unsubscribe |
Cookies are small files stored in your browser. Our website uses only cookies and tools needed to run and protect the site:
You can block or delete cookies in your browser settings. Some features, such as online donations and forms, may not work without them.
We use safeguards appropriate to how sensitive the information is, including:
No system is completely secure. If a privacy breach creates a real risk of significant harm to you, we will notify you as soon as possible and tell you what we are doing about it and what you can do to protect yourself.
We send updates, newsletters and fundraising messages only to people who have agreed to receive them. Every such message identifies Rozi Roti, includes our contact information and has an easy way to unsubscribe. We will act on unsubscribe requests within 10 business days. We will still send messages you need, such as a donation confirmation or a reply about your application.
To make a request, contact our Privacy Officer. For your protection, we may ask you to confirm your identity. We will respond within 30 days and there is no charge. We can help in English, Urdu or Punjabi.
If you have a concern about how we handle your information, please contact our Privacy Officer first. We will look into it, respond to you, and fix any problem we find. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Our website and services are intended for adults. We do not knowingly collect information directly from children under 18. Information about children is provided only by a parent or guardian as part of a household application.
Our website links to other sites, such as our social media pages. We are not responsible for their privacy practices, so please review their privacy policies.
We may update this policy as our services or the law change. The “Last updated” date at the top shows when it was last revised. If we make a significant change to how we use your information, we will post a notice on our website.
Contact our Privacy Officer at info@roziroti.org or 647-774-0404.
We respond within 30 days, in English, Urdu or Punjabi.
