Project Metropolis Privacy Policy


Last Update: 2/1/2022

Introduction & Definitions

Project Metropolis provides an online website (the “Site”), mobile application (the “App”), and other internet related services (collectively, the “Service(s)”) for William Lyon Mackenzie Collegiate Institute (the “School”) as utilities and communication of important information for educational purposes. The Service is operated by Project Metropolis (the “we” or “us”) for staff, students, and related persons of the School exclusively - the users of the Services (“you”). This privacy policy sets forth our policy concerning information that is collected from visitors to the Site and users of the App and/or the Services. Under applicable law, Project Metropolis is the “data controller” of personal information collected through the Services.

In using our Services, you consent to the data practices outlined in this document. Please read carefully.

Information We Collect

When you interact with us through the Services, we may collect information about you, as further described below:

Information You Provide: We collect information from you when you voluntarily provide such information, such as when you register for access to the Services or use certain Services. Information we collect may include but is not be limited to: username, email address, name, posts, student timetables, and other information generated from interaction with the Services.

Data We Collect Automatically: When you interact with us through the Services, we receive and store certain information such as an IP address, device ID, and your activities within the Services. We may store such information or it may be included in databases owned and maintained by affiliates, agents, or service providers. The Services may use such information and pool it with other information to track (for example, the total number of visitors to our Site).

Info through other Services: You may authorize us permission to collect your information in other services. For example, you may register with an email that is associated with Gravatar. When you do this, you allow us to obtain information from those accounts (for example, your avatar image).

Cookies: We employ cookies and similar technologies to keep track of your local computer’s settings, such as which account you have logged into, as well as for security purposes. Cookies are pieces of data that sites and services can set on your browser or device that can be read on future visits. As new features are added to the Service, we may expand our use of cookies to save additional data.

Location Data: When using the map functionality on the App or Site, you may grant us permission to access your location. This data is used for the purpose of providing accurate representation of your location with respect to the school. This data is only used locally and will not be transmitted to us.

Where Information is Processed

We are based in Canada. No matter where you are located, you consent to the processing and transferring of your information to and within Canada and other countries. The laws of Canada and other countries governing data collection and use may not be as comprehensive or protective as those of the country where you live.

Our Use of Your Information

We use the information you provide in a manner that is consistent with this Privacy Policy. If you provide information for a certain reason, we may use the information in connection with that reason. For instance, if you contact us by email, we will use the information you provide to answer your question or resolve your problem. Likewise, if you provide information in order to obtain access to the Services, we will utilize it to provide you with access to the desired Services, as well as monitor your use of the applied Services. We may also use your information collected through the Services to help us improve the content and functionality of the Services, by better understanding our users.

Our Disclosure of Your Information

We are not in the business of selling your information. We consider this information to be a vital and valuable part of our relationship with you. There are, however, certain circumstances in which we reserve the right to share your information with third parties, as set forth below:

Consent: We may transfer your information with your consent.
Developers: Developers using our API will have access to their end users’ information, including your posts and public information. Developers may only use such information to provide the API functionality within their applications and/or services.
Agents, Consultants and Related Third Parties: Like many websites, we sometimes hire other companies or individuals to perform certain functions. Examples of such functions include, but are not limited to, mailing information and maintaining databases.
Legal Requirements: We may disclose your information if required to do so by law or in the good faith that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend our rights or properties, (iii) protect the personal safety and rights of users of the Services or the general public, or (iv) protect against legal liability.

Children

Our Services are for the related persons of the School only, all of whom should be of age 13 or up, and we do not knowingly collect personal information from children under the age of 13. In the event that a student of the School is under 13 years of age, they are prohibited from accessing the Service. If you are the parent or guardian of a child under the age of 13 and believe that they have disclosed personal information to us, please contact us through the methods provided on the Site so we may dispose of the information immediately.

Links To Other Websites

This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by us (the “Third-Party Sites”). The policies and procedures we have described here do not apply to the Third-Party Sites. The links from the Services do not imply that we endorse or have reviewed the Third-Party Sites.For information on their privacy policies, we suggest contacting those sites directly.

Data Retention

We generally retain personal data for so long as it may be relevant to the purposes identified herein. To dispose of personal data, we may anonymize it, delete it, or take other appropriate steps. Data may persist in copies made for backup and our continuity purposes for additional time.

Security

We take reasonable steps to protect the information provided via the Services from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from the Services may not be secure. Therefore, you should take special care in deciding what information you send to us via email. Please keep this in mind when disclosing any information via the Internet.

Your Data Rights and Choices

Individuals in Canada have certain legal rights to obtain confirmation of whether or not we hold personal data regarding them, to access personal data we hold regarding them (including, in some cases, in portable form), and to obtain its correction, amendment, update, or deletion in appropriate circumstances. They may also object to our use or disclosure of personal data, request a restriction on its processing, or withdraw any consent, though such actions typically will not have retroactive effect. They also will not affect our ability to continue processing data in lawful ways.

To exercise your data rights, you must contact us through the information provided on the Site with an explanation of what data subject right you are seeking to exercise. For your protection, we may take steps to verify your identity before responding to your request. We will process your request within 30 days of receiving it.

The rights and options described above are subject to limitations and exceptions under applicable law. In addition to those rights, you have the right to lodge a complaint with the relevant supervisory authority. However, we encourage you to contact us first, and we will do our very best to resolve your concern.

European General Data Protection and California Consumer Privacy Act

The Service does not operate within California or the EEA. To protect your privacy rights, users from California or the EEA are prohibited from using the Services.

Changes to this Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this policy periodically, and especially before you provide any information. This Privacy Policy was last updated on the date indicated above. Your continued use of the Services after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.