Privacy Policy

1. Introduction & Scope

The Canada-Nepal Friendship & Cultural Society ("CANFACS", "we", "us", or "our", Society Registration #S-0066228) is committed to protecting your privacy and ensuring the confidentiality of the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit canfacs.org, apply for society membership, contribute donations, or interact with our community platform.

2. Information We Collect

We may collect personal information that you voluntarily provide to us, including:

• Membership Applications: Full name, email address, telephone number, city, province, profession, and brief bio.
• Donations & Relief Contributions: Donor name, email address, payment method (processed securely through Square or Interac e-Transfer), contribution amount, solidarity messages, and whether you choose to remain anonymous on public donor rolls.
• Third-Party Authentication (Google Sign-In): When you choose to sign in via Google OAuth, we receive your verified email address, full name, and avatar solely to create or authenticate your CANFACS member account. We do not access your contacts, files, or any other Google account data.
• Community Interaction: Posts, comments, likes, and images you publish on the CANFACS Member Feed.

3. How We Use Your Information

Your information is used strictly to fulfill our non-profit mission and community services:

• To administer, approve, and verify society memberships.
• To process donations, issue automated confirmation receipts, and maintain financial accountability logs.
• To facilitate communication, community discussions, and event announcements across provinces.
• To protect the security of our platform and prevent unauthorized access or fraud.

4. Payment Processing Security

We do not store or process raw credit card numbers on our servers. All credit and debit card donations are tokenized and processed securely through Square Payments (Square, Inc.) in compliance with PCI-DSS Tier 1 standards. Direct Interac e-Transfers are handled directly through Canadian financial institutions.

5. Disclosure of Information

CANFACS does not sell, rent, trade, or monetize your personal information to third parties. We only share information with trusted service providers necessary to operate our website and services (e.g., Cloudflare for hosting, Square for payments, Google for authentication, and Resend for transactional receipts), each bound by strict data confidentiality agreements.

6. Cookies & Analytics

We use essential HTTP-only cookies (`canfacs_session`, `oauth_state`) to maintain secure member sessions and prevent CSRF attacks. We may also use Google Analytics to collect aggregated, non-personally identifiable site traffic metrics to understand visitor engagement.

7. Data Retention & Your Rights

In accordance with Canadian privacy laws (including PIPEDA), you have the right to access, update, or request the deletion of your personal membership profile. If you wish to update your details or remove your account, contact our administrative team at info@canfacs.org.