Privacy Policy

Effective date: July 13, 2026

Ontarians Against Corruption (“ONAC,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information may be collected through ontariocorruption.org, why it is collected, how it may be used and shared, and the choices available to you.

1. Information We Collect

The information we collect depends on how you use the website.

Information You Provide

You may provide personal information when you:

• contact us;
• subscribe to email updates;
• participate in a petition, letter-writing campaign or other action;
• submit a story, comment, tip, photograph or document;
• register for an event;
• volunteer or otherwise communicate with ONAC; or
• make a donation.

This information may include your:

• name;
• email address;
• telephone number;
• postal code or mailing address;
• campaign message or petition response;
• communication preferences;
• submitted story, comment or other content; and
• any other information you choose to provide.

Please do not submit sensitive personal information or confidential material unless it is necessary and you understand how it may be used.

Information Collected Automatically

When you visit the website, our website, hosting provider and security services may automatically receive technical information such as:

• your Internet Protocol address;
• browser and device type;
• operating system;
• referring website;
• pages viewed;
• approximate location derived from your IP address;
• date and time of access; and
• information used to detect spam, abuse or security threats.

We may use cookies and similar technologies to operate the website, remember preferences, understand website usage and protect the website from misuse.

2. How We Use Information

We may use personal information to:

• provide and operate the website;
• respond to questions and requests;
• administer campaigns, petitions and civic actions;
• send a message to the elected official, government office or other recipient identified in a campaign;
• determine which elected representatives or government offices correspond to a postal code or address;
• send email updates when you have subscribed or otherwise consented;
• review, verify and publish submitted stories or other content;
• organize events and volunteer activities;
• process donations;
• maintain records of campaign participation or submissions;
• prevent spam, fraud, abuse and security incidents;
• understand and improve the website; and
• meet legal, regulatory or administrative requirements.

We will not use personal information for a materially different purpose without obtaining consent when required.

3. Campaigns, Petitions and Letters

When you participate in a campaign, petition or letter-writing action, information you provide may be transmitted to the campaign’s intended recipient.

Recipients may include:

• elected officials;
• candidates;
• government offices;
• government agencies;
• political parties;
• public institutions; or
• other organizations identified on the campaign page.

The recipient may receive information such as your name, email address, postal code, address and message, depending on the campaign.

Campaigns may be operated using an external campaign platform. Information entered into an embedded campaign form may be collected and processed directly by that provider under its own privacy policy and terms.

Before submitting a campaign form, review the form and any privacy notice supplied with it.

4. Email Communications

When you subscribe to email updates, we may collect your name, email address, subscription preferences and information about your interaction with our emails.

We may use an external email provider to store subscriber information and deliver messages.

You may unsubscribe from promotional or advocacy emails at any time by using the unsubscribe link included in the message. We may still send administrative messages necessary to respond to a request or manage an existing interaction.

We do not sell or rent our mailing list.

5. Stories and Other Submissions

If you submit a story, comment, photograph, video, document or other material, we may review and retain both the submission and the contact information associated with it.

We will not intentionally publish your private contact information unless you have given us permission.

Material intended for public publication may be visible to anyone and may be copied, shared or indexed by search engines. Please do not include personal information that you do not want made public.

We may contact you to verify a submission, request clarification or ask for permission before publication.

6. Comments

If comments are enabled, we may collect the information entered into the comment form, along with the commenter’s IP address and browser information, to assist with moderation and spam detection.

An anonymized version of your email address may be sent to the Gravatar service to determine whether you use that service. If your comment is approved, a profile image associated with your Gravatar account may appear publicly beside your comment.

Comments and related technical information may be retained to maintain discussion history, recognize follow-up comments and moderate abuse.

7. Donations and Payment Information

Donations may be processed by an external payment provider.

ONAC generally does not receive or store complete credit-card or banking information when a payment is processed entirely by that provider. We may receive transaction details such as your name, email address, donation amount, date, payment status and transaction identifier.

The payment provider processes payment information under its own privacy policy and security practices.

ONAC is not currently a registered charity and does not issue charitable tax receipts.

8. Cookies

Cookies are small files stored by your browser.

The website may use cookies that are necessary to:

• operate WordPress;
• maintain website security;
• remember form or comment preferences;
• keep authorized administrators logged in;
• remember display settings; and
• prevent spam or repeated abuse.

Third-party embeds, analytics tools and campaign forms may set their own cookies.

You can restrict or delete cookies through your browser settings. Blocking necessary cookies may prevent some website features from working correctly.

9. Analytics

We may use website analytics to understand general traffic and usage patterns, such as which pages are visited and how visitors arrive at the website.

Analytics information may include technical identifiers, approximate location, device information and browsing activity.

Where practical, we limit analytics collection and use aggregated or de-identified information. Analytics providers may process information on servers located outside Canada.

10. Embedded Content and External Links

Pages may include embedded videos, social-media posts, campaign tools, maps, images or other content supplied by third parties.

Embedded content may behave as though you visited the third party’s website directly. That provider may collect information, set cookies and track your interaction with the content, particularly if you have an account with that provider and are logged in.

The website may also link to government websites, news organizations, social networks and other external services. ONAC does not control the privacy practices of those websites.

Review the privacy policy of any external service before providing personal information.

11. Service Providers and Disclosure

We may provide information to service providers that help us operate ONAC and the website, including providers of:

• website hosting;
• email delivery;
• campaign and petition tools;
• website security and spam prevention;
• analytics;
• form processing;
• payment processing; and
• technical support.

These providers may access information only as required to perform their services, subject to their agreements and privacy practices.

We may also disclose information:

• with your consent;
• to the recipient of a campaign you choose to participate in;
• when required by law, court order or lawful governmental demand;
• when reasonably necessary to investigate fraud, abuse or a security incident;
• to protect the rights, safety or property of ONAC or another person; or
• as part of an organizational restructuring, provided the information remains subject to appropriate protections.

We do not sell personal information.

12. Information Processed Outside Canada

Some service providers may store or process personal information outside Ontario or outside Canada.

Information processed in another country may be subject to that country’s laws and may be accessible to courts, law-enforcement agencies or government authorities in that jurisdiction.

13. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, security, accounting and administrative requirements.

Retention periods vary according to the type of information. For example:

• correspondence may be retained while a matter remains active and for a reasonable period afterward;
• campaign records may be retained to administer and document the campaign;
• subscriber information is generally retained until you unsubscribe or request deletion;
• public submissions may remain published unless removed;
• transaction records may be retained for accounting and legal purposes; and
• security logs may be retained for a limited period to investigate abuse or security incidents.

Information that is no longer required may be deleted, anonymized or securely destroyed.

14. Security

We use reasonable administrative, technical and organizational safeguards intended to protect personal information against loss, theft, misuse, unauthorized access, disclosure or alteration.

However, no website, email system or internet transmission is completely secure. We cannot guarantee absolute security.

Do not send highly sensitive or confidential information through ordinary email or public website forms.

15. Your Choices and Privacy Rights

You may contact us to:

• ask what personal information we hold about you;
• request access to that information;
• request correction of inaccurate information;
• withdraw consent where consent is the basis for our use;
• unsubscribe from email communications;
• request deletion of information that is no longer required; or
• ask a question or make a complaint about our privacy practices.

Some information may need to be retained for legal, security, record-keeping or administrative purposes. We may also need to verify your identity before responding to a request.

16. Children’s Privacy

The website is intended for a general audience and is not specifically directed toward children.

We do not knowingly request personal information from children without appropriate consent. A parent or guardian who believes that a child has submitted personal information may contact us to request its review or deletion.

17. Changes to This Policy

We may update this Privacy Policy when our website, services or privacy practices change.

The current version will be posted on this page with its effective date. Material changes may also be communicated through the website or other appropriate means.

18. Contact Us

Questions, requests or complaints concerning privacy may be sent to:

Ontarians Against Corruption
Website: ontariocorruption.org
Use the contact page for inquiries.

Turnstile Privacy Addendum

Last updated: JUNE 18, 2025

---

1. INTRODUCTION

Turnstile, developed by Cloudflare, Inc. (Cloudflare), is a pro-privacy website security tool that processes minimal Signals (as defined below) solely to protect web properties against malicious activity by distinguishing human users from bots and blocking bot traffic.

Cloudflare does not control whether a website chooses to use Turnstile; instead, we make Turnstile available to any website that is looking for a way to detect and block bot traffic.

2. SCOPE OF THIS ADDENDUM

This Turnstile Addendum is supplemental to Cloudflare’s main Privacy Policy. It provides additional information specific to your use and interaction with Turnstile. This Addendum also applies to the personal data processed using Cloudflare’s Challenge Platform, and any reference to “Turnstile” in this addendum applies equally to the Challenge Platform.

The Cloudflare Privacy Policy continues to apply to your use and interaction with Turnstile, except where this Turnstile Addendum provides more specific information. In those cases, the more specific information will apply instead.

3. INFORMATION WE COLLECT

Cloudflare Turnstile processes a variety of client-side signals (“Signals”) such as client IP address, TLS Fingerprint, User-Agent Header and Sitekey and associated origin. Cloudflare does not have the ability to directly identify any individuals from any of the Signals Turnstile collects, including IP addresses.

4. HOW WE USE INFORMATION WE COLLECT

(i) Bot detection and blocking

Turnstile is a tool to protect web properties by distinguishing human users from bots and blocking any detected bot traffic that could otherwise harm the safety and security of that property.

It does so by evaluating the Signals listed above specific to both the website visitor and the website visited. The purpose of collecting these Signals is not to identify, profile or target any individuals but solely to detect and block bots. The Signals collected by Turnstile are strictly necessary for this purpose (i.e. detecting and blocking bots to enable visitors to enjoy a safe and secure experience when visiting websites that have implemented Turnstile).

Cloudflare is a data processor of Signals that we process to provide the Turnstile service to our customers, that is, securing our customers’ websites. This means that we process Signals for this purpose on behalf of, and pursuant to instructions issued by, our website operator customers (who are the data controllers of any data processed for this purpose). If you have questions, or wish to exercise any data protection rights, regarding Cloudflare’s processing of Turnstile data to provide our service, please contact the relevant website operator.

(ii) Improving Turnstile’s bot detection capabilities

Cloudflare also processes the Signals described in this Privacy Notice to improve Turnstile. This is necessary to refine and improve our bot detection algorithms in order to respond to evolving bot threats, and to maintain the security of the web properties that website visitors choose to visit.

Cloudflare is a data controller of Signals that we process to improve Turnstile’s bot detection capabilities. This Turnstile Privacy Notice (in conjunction with Cloudflare’s main Privacy Policy) governs our processing of Signals for this purpose.

5. NOTICE TO EU AND UK RESIDENTS

To the extent that the data described in the Turnstile Privacy Notice qualifies as personal data, then:

• When processing this personal data as a processor to protect our customers’ websites, our customers, as controllers, determine the lawful basis of this processing, and we process this data under their instruction and on their behalf; and
• When processing this personal data as a controller, we rely on our legitimate interests in improving the effectiveness of Turnstile’s bot detection capabilities to process this Turnstile data.

6. COOKIES

The Signals collected by Turnstile are strictly necessary for the purpose of detecting and blocking bots to enable visitors to enjoy a safe and secure experience when visiting websites that have implemented Turnstile.

For more information about the cookies used by Cloudflare, please check our Cookie Policy and our Turnstile Developer Docs.

CONTACT FOR PRIVACY CONCERNS

If you have questions or concerns about this Turnstile Privacy Notice or your personal data processed through Turnstile, please contact Cloudflare’s Data Protection Officer at dpo@cloudflare.com.