Effective Date: Janaury 1st, 2020
Last Updated: October 1st, 2020
This Privacy Policy will change periodically to comply with privacy law requirements. If the changes are significant, we will provide notice.
We at iWave Information Systems Inc. (“iWave”, “us,” “our”, or “we”) are committed to protecting the privacy of individuals who visit our websites, individuals who subscribe to use our services (“clients”) and individuals whose personal data are provided to us by clients and other sources. This Privacy Policy describes how we protect that personal data.
We recommend that you read this Privacy Policy to ensure you are fully informed about the types of personal data we collect, why and how we collect and protect it, where it is stored, and to ensure you are fully informed about your rights relating to any of this data that applies to you. If you wish to access a particular section of this Privacy Policy, please click on the links below:
Other topic headings in this Privacy Policy include:
Click here to contact us.
All the personal data we collect directly, whether on our website or through our services, is through consent of the individual. All the personal data that we collect indirectly, either through open sources or through data providers, is with the assurance that the individuals have provided consent for that sharing of their personal data.
What We Collect
iWave automatically collects personal data through its websites (https://www.iwave.com; https://pro.iwave.com; https://verigift.iwave.com); and through its mobile applications (https://api.iwave.com). The type and manner of data that we collect automatically includes the following:
The processing of your personal data through the use of cookies and other related technology and your device and usage information, is based on consent. You have the right to withdraw your consent to these processing activities at any time by choosing any of the following options:
With Whom We Share the Information
We share personal data only with service providers that support our services. These companies provide services such as the systems we use to run our sales cycle. We have contracts with our service providers that address the safeguarding and proper use of your personal data. With your consent we allow third party cookies to send you advertisements that may be relevant to you.
Click here for the list of companies with whom we share personal data when you use our websites.
Other Websites
This Privacy Policy does not apply to any third-party websites and apps that you may use, including any linked to our services and websites. You should review the terms and policies for third-party websites and apps before clicking on any links.
How Long We Keep the Information
The personal data collected through iWave’s website that is listed above is retained for 30 days to allow you to return to our websites and be recognized. This means that choices you made less than 30 days before still apply.
What We Collect
When expressing an interest in obtaining additional information about our services or registering to use the services, iWave collects information directly from you by requiring you to provide personal contact information, such as name, company name, address, phone number, and email address. When purchasing the services, iWave may require you to provide billing information, such as billing name and address, and the number of employees or users and name of employees or users within your organization that will be using the services. Please note that iWave does not collect credit card or other financial information – payment transactions are processed directly through Moneris (https://www.moneris.com/).
In addition, we collect personal data directly when you:
For choices you may have regarding the provision of usage information, please see Section 6 of this Privacy Policy.
We Use the Personal Data to:
We Do Not Share Personal Data Except in the Following Circumstances:
Click here for the list of companies with whom we share personal data when you use our services.
How Long We Keep Information
We retain personal data for as long as the account is open, unless a longer retention period is required, for example under tax law. All prospect or potential donor names provided to us by clients are deleted 30 days after a client subscription ends.
Your Options
The processing of your personal data for the purposes listed in this Section 2 is based on your consent. You have the right to withdraw your consent to these processing activities at any time by notifying us here.
At any time, you may also change or limit the collection or use of your information for the purposes listed in this Section 2 by clicking here.
In addition, all marketing messages we send contain an “unsubscribe” link in the email message, or you may unsubscribe here: https://go.iwave.com/hs/manage-preferences/unsubscribe. Please note that we may send one message to confirm your opt out request. Transactional or business relationship messages may continue after you opt out of marketing messages.
Through its proprietary databases and search tools, iWave allows our clients to conduct prospect research by searching wealth and philanthropic data to determine which prospective donors to ask, how much to ask for, and when to ask. As part of our services, users need to be assured that the information provided to our clients by iWave complies with the privacy rights of these individuals.
To constitute our databases, we collect information, including personal data, from third-party sources that include data providers, marketers, business alliances, researchers, service providers, and others, including open sources, where consent has been obtained to share personal data. This means that the source of personal data, whether open source or a third party data provider, has obtained consent from individuals to have their data shared to be sold for charitable fundraising. This also means that those individuals have been given the opportunity to opt out of that sharing.
To facilitate the search and opt out process as it relates to your information in our databases, see the following three choices:
In addition to our opt-out process, to provide assurance that we never share information except where the donor has expressly consented, we commit to never include and make available in our database, personal data that the individual has not consented to be collected and disclosed.
To keep your personal data safe, we use appropriate security safeguards to provide necessary protection. These include physical measures (e.g., restricting access to offices, and alarm systems), up-to-date technological tools (e.g., passwords, encryption, firewalls and security patches), and organizational controls (e.g., security clearances, limiting access, staff training and agreements). We apply these measures, tools and controls based on the sensitivity of the information we collect, use, and store, and the current state of technology.
We use AWS cloud services, certified under ISO/IEC 27018:2019 [ISO/IEC 27018: — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors]
As part of iWave’s security policy, we also follow best practices from the ISO 27001 Security Standards (https://www.iso.org/iso/home/standards/management-standards/iso27001.htm) and we review security safeguards regularly to ensure they are up to date, and that we have addressed any known vulnerabilities through regular security audits and/or testing.
Personal data is stored on AWS cloud services, which means data will primarily be stored in Canada but may at times also be stored on servers in the United States. Personal data becomes subject to the laws of the country where it is stored.
Whether you are a visitor on our website, or a client, or a donor who believes we may have your personal data, you have the following rights:
If you still have concerns, you may file a complaint with the privacy authority of your country.
We do not share personal data with third parties for their own direct marketing purposes without your consent. Under California Law, you provide consent when you accept Cookies. We only share personal data when there is evidence of that consent. California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal data by iWave to a third party for the third party’s direct marketing purposes. This right only applies to activities within California. To make any request to exercise your California privacy rights please contact dataprotection@districtm.net.
California residents under 18 years old, in certain circumstances, may request and obtain removal of personal data or content about you that you posted on our website or services. Please be mindful that this would not ensure complete removal of the content posted on our website or services by you. To make any request to exercise your California privacy rights please contact dataprotection@districtm.net.
In addition to the rights described above in Section 6, California residents have the right to not receive discriminatory treatment for exercising their privacy rights. To make any request to exercise your privacy rights described in this Section or Section 6, or to designate an authorizing agent to make a request, please complete this form.
Our website may include links to and from our business alliances if you follow a link to any of their websites. Please note that these websites have their own privacy policies that are different from ours and you should review their privacy policies to understand the privacy practices of their services.
Our services are not designed for and are not marketed to people under the age of 16 (“minors”). We do not knowingly collect or ask for information from minors. We do not knowingly allow minors to use our services. If you are a minor, please do not use our services or send us your information. We delete information that we learn is collected from a minor without verified parental consent. Please contact us at 1-800-655-7729 if you believe we might have information from or about a minor.
For questions or complaints regarding our use of your information or Privacy Policy, please contact us at 1-800-655-7729 or:
iWave, Attention: Privacy Team
2nd Level, Confederation Court Mall
134 Kent Street
Charlottetown, PE C1A 8R8
If you still have concerns, you may file a complaint with the privacy authority of your country.