Last Updated: September 14, 2026

The Craft Club (the “Craft Club,” “we,” “us”) respects the privacy of parents/guardians, participating children, website users, instructors and other individuals whose personal information it handles. This Policy describes how the Craft Club collects, uses, discloses, protects, safeguards, retains and provides access to personal information in the course of its commercial operations.

​

1. Accountability & Privacy Contact

The Craft Club is responsible for personal information under its control and will designate a person to oversee privacy compliance. Privacy questions, access/correction requests or complaints may be directed to info@thecraftclub.ca or to the designated Privacy Contact identified internally.

 

2. Personal Information We May Collect

• parent/guardian and participant names, contact details, dates of birth and registration information;

• emergency contacts, authorized pickup information and attendance/release records;

• health, allergy, disability, accommodation, emergency medication and safety information reasonably necessary for participation;

• payment and transaction information (noting that payment-card information may be processed directly by a third-party payment processor);

• communications, complaints, incident information and records reasonably necessary to administer or protect the program;

• optional photographs, video, voice or other media where the applicable consent has been provided;

• website/device information such as IP address, browser/device information and cookies or analytics information where used; and

• information about instructors, applicants or personnel reasonably necessary for contracting, screening, safety, administration and legal compliance.

 

3. Purposes

The Craft Club may use personal information to process registrations and payments, deliver and administer programs, communicate with families, verify authorized pickup, respond to emergencies, address allergies, accessibility and accommodation, protect participants and personnel, manage complaints and incidents, maintain business and legal records, comply with law, improve operations, and where separately consented to, use approved media or send marketing communications.

​

4. Children’s Information & Consent

The Craft Club’s services involve children. Parent/guardian information and consent will ordinarily be required for the collection, use and disclosure of a child’s personal information where the child cannot provide meaningful consent and for children under the age of 13. Promotional photography, video and similar media consent is separate, optional and is not a condition of participation. The Craft Club will not knowingly invite young children to submit sensitive registration, health, or payment information independently.

​

5. Limiting Collection, Use & Disclosure

The Craft Club will collect only personal information reasonably necessary for identified purposes and will not use or disclose it for a materially new purpose without consent unless permitted or required by law. Sensitive information, including children’s health and emergency information, will be handled with heightened care. We do not sell children’s personal information.

 

6. Service Providers & Third Parties

The Craft Club may use service providers for website hosting, registration, payment processing, communications, cloud storage, professional advice or other operational functions. Personal information may be disclosed to those providers only as reasonably necessary for the service and subject to appropriate contractual, technical or organizational safeguards where appropriate. Information may also be disclosed to emergency responders, insurers, legal advisers, law enforcement, children’s aid societies or governmental authorities where authorized or required by law.

 

7. Processing Outside Canada

Some service providers or online platforms may process or store personal information outside Ontario or Canada. In those circumstances, information may be subject to the laws and lawful access regimes of the jurisdiction where it is processed.

 

8. Safeguards

The Craft Club will use safeguards appropriate to the sensitivity of the information, which may include access restrictions, secure accounts and passwords, limited sharing, device and storage controls, confidentiality requirements, secure disposal and staff/contractor training. Personnel must not store participant information on personal accounts or devices except where expressly authorized.

 

9. Retention & Disposal

Personal information will be retained only as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, insurance, tax, dispute-resolution and record-keeping requirements. Retention periods may differ by record type. When information is no longer required, it will be securely destroyed, deleted or anonymized where reasonably practicable.

 

10. Access & Correction

Subject to legal exceptions, an individual may request access to personal information about them under the Craft Club’s control and may request correction of inaccurate or incomplete information. A parent/guardian may make an appropriate request concerning a child’s information where legally authorized. Identity or authority may be verified before information is released.

​

11. Consent & Withdrawal

Consent may be withdrawn subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect the Craft Club’s ability to provide a service where the information is reasonably necessary for that service. Optional promotional media consent may be withdrawn prospectively as described in the Photography/Video/Media Consent form.

​

12. Privacy Breaches

Suspected loss, unauthorized access, disclosure or other privacy incidents must be reported promptly to the Privacy Contact. The Craft Club will investigate and contain the incident, assess the sensitivity of the information and probability of misuse, and determine whether the breach creates a real risk of significant harm. Where the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5 (“PIPEDA”) applies, the Craft Club will report qualifying breaches to the Office of the Privacy Commissioner of Canada, notify affected individuals as required, notify other organizations or government institutions where legally required, and maintain the required record of every breach of security safeguards, including breaches that do not meet the reporting threshold.

 

13. Cookies & Analytics

If the Website uses cookies, analytics, advertising or similar technologies, the Craft Club will configure and describe them consistently with actual practice and applicable consent requirements.

 

14. Marketing Communications

The Craft Club will send commercial electronic messages only in accordance with applicable laws. Operational messages reasonably necessary to administer a registration or program are distinct from optional marketing communications.

 

15. Complaints & Changes

Privacy concerns may be submitted to the Privacy Contact. The Craft Club will investigate and respond reasonably. This Policy may be updated as practices or legal requirements change. Material changes to the purposes for which personal information is handled will be addressed in accordance with applicable consent requirements.

 

Privacy Contact: Marissa MacKinnon | E-mail: info@thecraftclub.ca | Telephone: 416-832-0617