PRIVACY POLICY

The Canadian Medical Manufacturers Association ("CMMA", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at www.cmma-canada.org (the "Website") or interact with us through other means.

This Privacy Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. By using our Website or providing personal information to us, you consent to the collection, use, and disclosure of your personal information in accordance with this Privacy Policy.

We collect personal information that you voluntarily provide to us when you:

(a) Complete a membership application;
(b) Submit a contact or inquiry form;
(c) Subscribe to our newsletter;
(d) Register for events or programs;
(e) Access the Member Login portal;
(f) Participate in surveys or provide feedback.

Information You Provide Directly
‍
The types of personal information we may collect include:
• Contact Information: Name, email address, telephone number, mailing address
• Professional Information: Job title, organization name, role/position, professional affiliations
• Membership Information: Membership tier selection, manufacturing focus area, company details
• Account Information: Login credentials for the Member portal
• Communication Preferences: Newsletter subscription preferences, inquiry types
• Correspondence: Messages, feedback, and other communications you send to us

Information Collected Automatically

When you visit our Website, we may automatically collect certain technical information, including:
• Device Information: IP address, browser type, operating system, device identifiers
• Usage Information: Pages visited, time spent on pages, links clicked, referring website
• Location Information: General geographic location based on IP address

This information is collected through cookies and similar technologies as described in our Cookie Policy.

We use your personal information for the following purposes:

‍Membership Services
‍• Processing and managing membership applications
• Administering membership accounts and benefits
• Communicating about membership status, renewals, and opportunities
• Providing access to member-only resources and programs

‍Certification Programs
‍• Processing certification applications
• Verifying eligibility for Canada First certification
• Maintaining certification records and directories

‍Communications
‍• Responding to your inquiries and requests
• Sending newsletters and industry updates (with your consent)
• Providing information about events, programs, and resources
• Conducting surveys and gathering feedback
‍
Website Operations
‍• Operating, maintaining, and improving the Website
• Analyzing Website usage and trends
• Ensuring Website security and preventing fraud
• Complying with legal obligations

Under PIPEDA, we process your personal information based on the following legal grounds:

• Consent: Where you have given us consent to process your personal information for specific purposes, such as receiving our newsletter.
• Contractual Necessity: Where processing is necessary to fulfill our membership or certification agreements with you.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services, provided these interests are not overridden by your privacy rights.
• Legal Obligations: Where processing is necessary to comply with applicable laws and regulations.

We may share your personal information in the following circumstances:

‍Service Providers
‍We may share your information with third-party service providers who perform services on our behalf, such as website hosting (Webflow), email services, payment processing, and event management. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
‍
Member Directory
‍With your consent, limited organizational information may be included in the CMMA member directory accessible to other Members and healthcare procurement professionals.
‍
‍Legal Requirements
‍We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
‍
‍ Business TransfersIn the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and purpose:

• Membership records: Duration of membership plus seven (7) years
• Contact inquiries: Two (2) years from last communication
• Newsletter subscriptions: Until you unsubscribe• Event registrations: Three (3) years from the event date
• Website analytics: Aggregated data retained indefinitely; individual session data retained for twenty-six (26) months

Under PIPEDA and applicable provincial privacy legislation, you have the following rights:

• Right of Access: You may request access to the personal information we hold about you.
• Right of Correction: You may request correction of inaccurate or incomplete personal information.
• Right to Withdraw Consent: You may withdraw your consent to certain processing activities at any time.
• Right to Complaint: You have the right to lodge a complaint with the Office of the Privacy
Commissioner of Canada.

To exercise these rights, please contact our Privacy Officer using the contact information provided below. We will respond to your request within thirty (30) days or as otherwise required by applicable law.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure Socket Layer (SSL) encryption for data transmission
• Access controls limiting access to personal information to authorized personnel
• Regular security assessments and updates• Staff training on privacy and security practices

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Your personal information may be stored and processed in Canada or transferred to and processed in other countries where our service providers are located, including the United States. When we transfer personal information outside of Canada, we ensure that adequate safeguards are in place to protect your information in accordance with PIPEDA requirements.

The Website may contain links to third-party websites or resources. These links are provided for your convenience only. CMMA has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party websites. Your use of third-party websites is at your own risk.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated Privacy Policy on this page with a revised "Effective Date." We encourage you to review this Privacy Policy periodically for any changes.

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact our Privacy Officer:

‍Privacy Officer
‍Canadian Medical Manufacturers AssociationToronto,
Ontario, Canada
Email: privacy@cmma-canada.org
Telephone: +1 (416) 555-0100
You may also contact the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca