Who we are
Healing Rooms of Halifax Ministries, a member of the International Association of Healing Rooms (IAHR)
Located within the Halifax Regional Municipality (HRM), Nova Scotia, Canada
Our website address is: https://healingroomsofhalifax.ca.
What personal data we collect and why we collect it
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
We use a membership plugin, which provides us with forms for user registration, login and profiles. Via these forms we are collecting personal data from our users. Personal data such as Name, Email Address, are captured when someone submits/fills in one of our membership forms. We collect this information to establish login capability top our website and be able to communicate electronically with you as a user who consumes the information we provide on our website.
We do use a contact form plugin, which provides many ways for our website users to contact us for specific tasks or provision of services. The personal data is captured when someone submits our contact form, and it is kept long enough to send an email to one of our domain email addresses with submission information. No data from these contact forms is retained once submitted. We keep contact form submissions (mail messages) for a certain period for customer service purposes, but we do not use the information submitted through them for marketing purposes.
e-Learning or Online Learning
We use an e-learning plugin, which enables us to provide e-learning content, process and store personal data about your interactions using xAPI. We use the data to learn about how well the interactions are designed and how it could be adapted to improve the usability and your learning outcomes. The data is processed and stored in our platform until further notice.
We may store the results of your interactions on our platform until further notice. The results may contain your score, the maximum score possible, when you started, when you finished, and how much time you used. We use the results to learn about how well you performed and to help us give you feedback.
We may store interactive content that you create on our platform. We also may send anonymized reports about content creation without any personal data to the plugin creators. Please consult the H5P tracking information page for details.
Some forms on this site require the use of Google’s reCAPTCHA service before they can be submitted. If you consent to use Google’s reCAPTCHA service, a cookie is created that stores your consent. This cookie deletes itself after thirty days.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Our security plugin logs the IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 61 days.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Our hosting provider has an analytics package we use. All analytics tracking on our domain is done internally and is for our own particular use to track site usage data.
Who we share your data with
We do not share any personal data with anyone.
Our security plugin performs the following activities to secure our site properly:
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
Membership registered user information is retained in our website’s database indefinitely, whether your account remains active or is deactivated. Data can be exported or removed upon users request via the existing WordPress data exporter or eraser. If syncing data to a 3rd party service (e.g Mailchimp via our MailChimp extension), data is retained there until unsubscribed or deleted.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their own personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Our security plugin performs backups of security log details are retained for 3 days. Note there may be a requirement by some regulations to ensure that past personal data erasure requests are respected even in the event of restoring a backup of the site. There is currently no internal policy to ensure that previous personal data erasure requests are respected after restoring a database backup. Additionally, security logs are retained for 61 days.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Our membership plugin does not send any user data outside of our site by default.
We have a subscription plugin that extend our subscribed services functionality (e.g sending registered user data to MailChimp via our MailChimp extension). This user information (first and last name, email address, and subscription groups) provided through our website may be passed to these external services. These services may be located abroad and outwith the EU.
Your contact information
For privacy-specific concerns, please contact our site administrator at firstname.lastname@example.org
How we protect your data
We make every effort to protect our users’ data. We have incorporated SSL Site encryption as a technical measure; and security measures such as two factor authentication, using CAPTCHA, to establish an encrypted link between our web servers and any internet browser. This link ensures that all data passed between the web server and browsers remain private and integral. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers or clients.
When downloading digital content from this site, we collect information about you during the checkout process on our online store. This information may include, but is not limited to, your name, billing address, shipping address, email address, phone number, credit card/payment details and any other details that might be requested from you for the purpose of processing your orders.
Handling this data also allows us to:
- Send you important account/order/service information.
- Respond to your queries, refund requests, or complaints.
- Process payments and to prevent fraudulent transactions. We do this on the basis of our legitimate business interests.
- Set up and administer your account, provide technical and/or customer support, and to verify your identity.
Additionally we may also collect the following information:
- Location and traffic data (including IP address and browser type) if you place an order, or if we need to estimate taxes and shipping costs based on your location.
- Product pages visited and content viewed while your session is active.
- Your comments and product reviews if you choose to leave them on our website.
- Account email/password to allow you to access your account, if you have one.
- If you choose to create an account with us, your name, address, and email address, which will be used to populate the checkout for future orders.
What data breach procedures we have in place
In the event of a user data breach, we will make every effort to further protect our users’ data, and will inform the affected user.
What third parties we receive data from
What automated decision making and/or profiling we do with user data
Industry regulatory disclosure requirements