Privacy Notice

Back to Access to Information and Privacy

Ingenium is committed to respecting your privacy and recognizes that the protection of the personal information under our control is essential to fostering and maintaining public and employee trust.

When you visit Ingenium’s website or enter personal information into our online forms, you are providing your implicit consent for Ingenium to use that information for the purpose for which it was submitted.

All personal information under our control is protected under Canada’s Privacy Act. This Privacy Notice explains why and how we collect, use, retain, disclose, and dispose of personal information. Here you will learn how you can control your personal information shared through our website and make informed choices about certain preferences and settings for your online interactions with third-party platforms Ingenium uses.

Questions concerning this Privacy Notice should be directed to: atip-aiprp@ingeniumcanada.org

For more general information about how to protect your privacy online, please visit the website of the Office of the Privacy Commissioner of Canada.

What is personal information?

Information is considered to be personal information when it directly or indirectly identifies an individual.

Examples of personal information Ingenium may collect from you include:

Name
Address (post and electronic)
Telephone number
Internet Protocol (IP) address
Credit card number
Account number (e.g. membership number)
Views or opinions

We may also assign you a symbol or number to administer and provide you with certain services, such as a membership number. This is also considered to be your personal information.

Ingenium may collect demographic information, but not limited to, gender identity, language preference, and level of education for marketing and fundraising purposes; however, this information is generally only used in an aggregate form.

Why does Ingenium collect personal information?

The Museums Act is the general authority for the conduct of Ingenium’s operations, including the collection of personal information.
Ingenium collects your personal information to fulfill legitimate business purposes only, such as ticket and membership purchases, program registration, answering inquiries (i.e. general inquiries, venue rentals, etc.), marketing, fundraising, website security and maintenance.

Ingenium does not knowingly solicit personal information, via our website, from children under the age of thirteen (13). If you are under 13, please do not send any information about yourself to us, including your name, address, telephone number or email address.

What are Web analytics and how does Ingenium use them?

Ingenium uses Google Analytics, a web analytics service provided by Google Inc. to help measure traffic patterns to, from, and within its website.

Web analytics is the collection, analysis, measurement and reporting of data about how many users are visiting our websites and which pages are generating the most interest. Ingenium uses these analytics to monitor usage of its website and improve the user experience.

For instance, when your computer requests a page on our websites, Google Analytics collects the following types of information to understand your interaction:

The originating Internet Protocol (IP) address assigned by an internet service provider to the visitor’s computer (no longer in effect as of July 1, 2023)
The date and time of the request
The type of browser used
The page(s) visited.

This analytics measurement tool uses "session" and "persistent" first-party cookies to collect standard Internet log information and to track information in an aggregate form like which pages are being visited, how long visits typically last, and which content is attracting the most attention. Aggregate form means that individual data is replaced with summary statistics. An example would be using the overall number of visitors to a page so that individuals visiting are not identified.

A cookie is a snippet of data stored by a web browser that enables your browsing activity to be collected and used to personalize your online experience.

Session cookies are used on some portions of Ingenium’s website to store information during a visit to facilitate the exchange of information between your browser with our Web server. They track how you interact with our site, and allow us to monitor aggregate usage and web traffic. Session cookies facilitate this exchange by reminding the server which computer is making the request. Session cookies are stored only in your browser's temporary (i.e., cache) memory. When you leave Ingenium’s site of your session, the cookie is no longer valid; it is discarded when you close your browser.

Persistent cookies can be reread when you return to the site to help remember your preferences and make your user experience more consistent. The information in them is written onto your hard drive and remains there until the expiry date of the cookie (two years after your last visit to the website) or until you delete the file.

To delete, block or manage the cookies stored on your browser, consult your browser settings. To navigate Ingenium’s website without tracking, activate private navigation on your browser (private mode).

The information generated by the cookies about your use of the website is transmitted to Google. No personally identifying information is recorded or provided to Google. As of July 1, 2023, IP addresses are no longer logged or stored by Google for analytics purposes.

The aggregate information is then used to evaluate visitors' use of the website and compile statistical reports on website activity to help us make our site more useful. This information is made available to designated staff, and/or contracted third parties who require this information to perform their duties or make business decisions. Our third-party service providers are subject to contractual obligations designed to safeguard the information they access.

Information collected for Web analytics purposes may leave Canada for processing and become subject to the governing legislation of other countries.

To learn how to opt out of being tracked by Google Analytics, please visit the following resources: Google Analytics Opt-Out Browser Add-on

For further information, consult Google Analytics and its privacy policy.

How does Ingenium use third parties to advertise and connect with you?

Ingenium uses external services and suppliers (including, but not limited to ActiveCampaign, Events.com, Google Ads, Jotform, Native Touch, Meta, Qualtrics, and YouTube) to assist with various functions such as emailing newsletters, event registration, tickets sales, market research, advertising campaigns and conducting online surveys.

Please note that this Privacy Notice does not apply when you interact with products, websites, or services offered by our third-party service providers or other partners, even when those links are included on Ingenium’s website. Hyperlinks to other websites are provided for convenience only and do not constitute our endorsement of such websites or the accuracy or reliability of material, content or services provided therein. Such websites are independent from, and not within the control of, Ingenium. Before using such websites, you should review their terms of use and privacy policies which may be different from ours.

Online advertising

Ingenium collects and uses information about your web browsing behaviour, such as the pages you visited, the searches you made, and your online boutique shopping cart activity for the purposes of online advertising. This information is used to select which advertisement about our products and services should be targeted and displayed to you on websites other than the ingeniumcanada.org site.

Our goal is to ensure that our ads are relevant to you. The ads we display become more relevant when they are shown to users who are likely to be interested in the product or service we advertise.

Ingenium uses digital advertising across multiple platforms including, but not limited to Google and Meta. Advertisements are targeted using geolocation as well as interests and demographics tracked by various digital platforms. These campaigns also retarget those who have previously engaged with Ingenium’s ads or websites.

To opt out of these targeted digital advertisements, please consult:

The AdChoices tool for interest-based advertising
Google’s opt-out process for targeted advertisements
Facebook’s opt-out process for targeted advertisements
Instagram’s opt-out process for targeted advertisements

Third-Party Social Media

Social media accounts (e.g. Facebook, Twitter, Instagram, LinkedIn) are public and are not hosted on our servers. If you choose to interact with us via social media, please read their terms of service and privacy policies and those of any applications used to access them.

Personal information that you provide to us via social media accounts is collected to capture conversations (e.g. questions and answers, comments, "likes", retweets) between you and Ingenium. We may use it to respond to inquiries, or for statistical, evaluation and reporting purposes.

Comments posted that violate Canadian laws are deleted and disclosed to law enforcement authorities. Ingenium also has the right to delete any posts that it deems to be inappropriate or offensive.

Ingenium’s privacy practices related to social media use and other public communications activities are described in Personal Information Banks PSU 938 (Outreach Activities) and PSU 914 (Public Communications).

How does Ingenium use personal information?

Ingenium may use your personal information to provide you with services, special offers and other advantages. For example, we may use:

Your contact information to respond to your inquiries, send you newsletters, provide you with general, program-specific, and event-specific information, send you tickets, administer contests, promotions, and surveys, and provide updates
Your membership number to confirm your membership status
Your method of payment information to process transactions

In some cases, Ingenium will seek your consent before using or disclosing your personal information. Ingenium will seek your consent to use personal information for reasons unrelated or inconsistent with initial collection. These uses are referred to as “secondary uses.” For instance, if you make a purchase from the online Ingenium boutique, we do not use your shipping information for purposes such as marketing, unless you explicitly consent.

Ingenium uses data collected from our operations and programs to improve our services and experiences. When your data is used for this purpose, it is combined with similar information from other individuals and reported as an aggregate overview. This reporting does not include identifiable personal information. Personal information may also be used for audit and evaluation purposes as described in the following Personal Information Banks: PSU 941 (Internal Audit) and PSU 942 (Evaluation).

For information on how Ingenium uses your personal information to address security risks and threats, please see the section “How does Ingenium keep personal information secure?”

Email Newsletters

When you provide your personal information to receive Ingenium newsletters, you are explicitly providing Ingenium consent to send you marketing emails regarding exhibitions, events, contests, exclusive offers, and news and updates concerning Ingenium and our three museums.

If you wish to be removed from the newsletter lists, you must either unsubscribe yourself, or send a reply email stating your wish to be removed from the list at which point Ingenium will no longer contact you via newsletters.

In addition, Ingenium complies with Bill C-28 Canada’s Anti-Spam Legislation and therefore does not spam your email with unnecessary information.

How does Ingenium keep personal information secure?

Ingenium uses a range of physical and cyber security measures to protect personal information. This includes undertaking threat and risk assessments, only using third-party platforms that conform with privacy legislation, and aligning with Government of Canada security requirements. Ingenium’s cybersecurity program also meets the Communications Security Establishment of Canada’s Baseline cyber security controls for small and medium organizations.

Ingenium uses software programs to monitor network traffic and identify unauthorized attempts to upload or change information, or otherwise cause damage to our website or network. When you visit our website, these software programs automatically receive and temporarily store, in our Web server, information that is supplied by your browser (e.g., Microsoft Edge, Safari, Chrome, and Mozilla Firefox).

Information automatically collected by our server when you browse our website includes:

the network location and the Internet Protocol (IP) address of the computer you are using to contact our website;
the name of the domain you are using to access the Internet (e.g., ".com," ".org," ".net," and ".ca");
the type of browser you are using;
the type of operating system you are using (e.g., Windows and Mac OS);
the type of device you are using (e.g., smartphone, tablet, or desktop computer);
the date and time you accessed the site;
the pages you have accessed and the documents you have downloaded; and
the Internet address of the website from which you linked directly to our site, if applicable.

Internet Protocol (IPs) addresses, captured through our standard web logs, are not retained for more than 18 months.
Unless an attempt to damage Ingenium’s site has been detected or data is required by law, we only collect aggregate statistical data, and we make no attempt to link this data, or the IP addresses of the computers that have contacted our website, with the identity of individuals visiting our site. We never use the software programs to gather specific personal information such as your name, telephone number or email address.

Your information may be shared with law enforcement authorities if there is suspicion of criminal activity. This information may be used for network security related statistical purposes, audit, evaluation, research, planning and reporting. Related practices are described in Personal Information Bank PSU 939 Security Incidents and Privacy Breaches.

Sometimes we need services or help provided by third party companies. This can include technical support, maintenance, or payment processing. We may need to allow them to access your information so they can provide these necessary services. Our third-party service providers are subject to contractual obligations designed to safeguard the information they access.

Please note that emails and other electronic methods (e.g., texts) used to communicate with our website are only secure if we state so. Therefore, we recommend that you do not send sensitive personal information, such as your payment information, through non-secure electronic means.

When does Ingenium disclose your personal information?

Your personal information is only accessed by employees or representatives of Ingenium who need to use or disclose the information for the purposes for which it was initially provided, or uses consistent with those purposes. Your personal information is not used, or shared with any third party, without your knowledge and/or consent, unless required or permitted by law. Ingenium does not share, sell, rent or trade your personal information to others. Ingenium may compile and provide aggregate statistics about online visitors within public documents, but these statistics do not identify individuals.

Refer to “How does Ingenium keep personal information secure?” for more information about website security practices and disclosure to law enforcement authorities.

How does Ingenium use and disclose your personal information for online purchases, payments, and shipments?

When you place an order on our website, you are required to pay by credit card. Ingenium requests the necessary information to process your order which may include your name, billing and shipping address, telephone number, e-mail address, and credit card information. Credit card information that we send and receive is done using the most up-to-date Secure Socket Layer (SSL) protocol, which encrypts any information you enter. This way, it is fully encrypted until it is received by the recipient. For your added protection, we do not store credit card numbers. Your credit card information is only used for the purpose of processing your purchase and is immediately deleted once the sale is complete.

Related practices are described in Personal Information Bank PSU 932 Accounts Receivable.

Ingenium uses a variety of contracted third parties to process payments for goods and services, and to ship orders made through the online boutique, as listed below. Some information may leave Canada for processing and become subject to the governing legislation of other countries. Refer to the linked privacy notices of our trusted third parties below, for more information:

Memberships: Shopify
Admission tickets: ACME Ticketing
Program registration: Events.com
The online Boutique (including purchase processing) is operated through Lightspeed.

We may share your shipping information with a third-party shipper. In such a case, we only share your name, phone number, and shipping address with the shipper to ensure the accurate delivery of your order. We select our service providers very carefully and insist that they have privacy and security standards that meet our requirements. The online Boutique uses the following third-party shippers: Purolator, Canada Post, Fedex, and DHL.

How long does Ingenium retain your personal information?

We ensure that all personal information under our control is managed within a set lifecycle. To comply with the Privacy Regulations, the personal information we use to make a decision about an individual is generally retained for at least two years after that decision was made.

As is the case with our other information holdings, we retain and securely dispose of personal information for such periods of time as required for legitimate business purposes and in accordance with the terms outlined in our agreement with Library and Archives Canada.

Consult Ingenium’s Info Source for additional details.

How can you exercise your Right of Access to, and Right to Request Correction of, your personal information?

In accordance with the Privacy Act, you have the right to request access to the personal information that Ingenium keeps about you, as well as the right to request the correction of that personal information if it contains errors or is outdated.

Formal requests are not always required. Ingenium will make efforts to fulfill informal requests for access to, or correction of, personal information as appropriate. For instance, should you simply wish to update your Ingenium Membership information, please visit the Membership page.

To learn more about requests under the Access to Information Act or personal information requests under the Privacy Act, please visit the Access to Information page.

Have questions or comments?

Please contact us with any questions or comments about this Privacy Notice or our access to information or privacy program:

Access to Information and Privacy Coordinator
Ingenium
P.O. Box 9724, Station T
Ottawa, Ontario K1G 5A3
CANADA

Telephone: 613-462-1943
Fax: 613-998-7759
e-mail: atip-aiprp@IngeniumCanada.org

If you think your personal information has been mishandled by Ingenium or that we have not lived up to our legal obligations under the Privacy Act, and we have not resolved your concern to your satisfaction, you may contact the Office of the Privacy Commissioner of Canada to file a formal complaint.

This can be done online or by filling out a form found here and mailing it to:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3

Changes in this Privacy Statement

We reserve the right to modify this Privacy Notice at any time. Please visit this page periodically to check our current policy.

Effective Date: April 3, 2023

Activity-specific Privacy Notices

Activity-specific privacy notices describe how Ingenium protects, handles and uses your personal information for specific programs and activities you take part in. This includes third-party services we use to process your information.

Learn more

Langue

Table of Contents