Privacy Policy — Chrysalis Bottle Donations Web App

Last updated: May 17, 2026

Privacy Policy

Chrysalis operates the Chrysalis Bottle Donations web application at https://chrysalisbottles.com (the "App"). This page informs you of our policies regarding the collection, use, and disclosure of Personal Information we receive from users of the App, including donors, drivers, and management portal users. We use your Personal Information only for providing, operating, and improving the App. By creating an account or using the App, you agree to the collection and use of information in accordance with this policy.

About Chrysalis

Chrysalis — An Alberta Society for Citizens with Disabilities — is a registered Canadian charity (Charitable Registration #140847781RR0001) that has been supporting Albertans with disabilities since 1968. We offer personalized services designed to meet the needs of individuals with disabilities while providing meaningful opportunities for growth and community inclusion, with services in Edmonton and Calgary. Chrysalis uses Human Centered Design as a service delivery model to create opportunities for people by designing programs and services based on individual needs and goals. Proceeds from the bottle donation program directly support these programs.

Information Collection and Use

While using our App, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

Data Type	Description and Purpose
Full name	Used to identify your account and to confirm donation pickups, driver assignments, or portal access.
Email address	Used as your account login, for account-related notifications, pickup confirmations, tax receipts, and to respond to your inquiries.
Password	Stored only as a salted hash; used to authenticate your account. We never store your password in readable form.
Phone number	Used to coordinate bottle pickups between donors and drivers, and to contact you regarding scheduled donations.
Pickup address	Used by drivers to locate and complete donation pickups you have requested.
Donation records	Pickup dates, bottle counts, donation values, and history shown in your account and used to issue charitable tax receipts where applicable.
Driver records	For drivers and staff: route assignments, pickup completions, vehicle/route notes, and shift information used to operate the program.
Role and permissions	Whether your account is a donor, driver, or management user, used to control access to the appropriate areas of the App.

We use this information to operate the bottle donation program, schedule and complete pickups, manage donor and driver accounts, issue receipts, and respond to questions or requests you submit through the App.

Account Registration and Authentication

To use the App, you must create an account with your email and a password. You are responsible for keeping your login credentials confidential and for all activity that occurs under your account. If you suspect unauthorized access, please contact us immediately at info@chrysalis.ca.

You can update your account information, change your password, or close your account at any time from within the App.

Log Data

Like many web app operators, we collect information that your browser or device sends whenever you use the App ("Log Data"). This Log Data may include:

• Your device's Internet Protocol ("IP") address
• Browser type and version
• Operating system and device type
• The pages and features of the App that you use
• The time and date of your visit and session activity
• The time spent on each page
• Diagnostic information used to investigate errors
• Other statistics

We use Log Data to operate the App, troubleshoot issues, prevent abuse, and improve performance.

Communications

We may use your Personal Information to contact you with:

• Account and security notifications (for example, password resets, login alerts, account changes)
• Pickup confirmations, reminders, and status updates
• Tax receipts and donation summaries
• Newsletters
• Marketing or promotional materials about Chrysalis programs and events
• Other information about the App or the donation program

You can opt out of newsletters and marketing communications at any time by using the unsubscribe link in the email or by contacting us at info@chrysalis.ca. We will still send you essential account, donation, and service messages, as these are required to operate the App.

Cookies and Local Storage

Cookies are small files of data, which may include an anonymous unique identifier, sent to your browser from a website and stored on your device. The App also uses local storage on your device to keep you signed in and to remember your preferences. Like many sites, we use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences and settings
• Maintain the security of your session
• Understand how the App is used so we can improve it

You can instruct your browser to refuse cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to sign in to or use parts of the App.

Third-Party Service Providers

To operate the App, we rely on a small number of trusted third-party service providers ("service providers"). Each provider is permitted to use your Personal Information only to perform services on our behalf and is bound by confidentiality and data protection obligations. These service providers help us with:

• Cloud hosting and infrastructure — to run the App and store its data securely.
• Database and file storage — to hold donor, driver, and donation records.
• Email delivery — to send transactional emails such as confirmations, receipts, and password resets.
• Payment processing (if and when payment features are enabled) — to securely process any electronic payments. Full payment card details are handled directly by the payment processor and are never stored on our servers.
• Analytics and error monitoring — to understand usage patterns and diagnose problems.

Some of these providers may process data outside of Alberta or Canada, including in the United States. Where this occurs, we rely on appropriate safeguards, including contractual data protection commitments, to protect your information.

A current list of service providers is available on request by emailing info@chrysalis.ca.

How We Share Information

We do not sell your Personal Information. We share Personal Information only:

• With the service providers described above, as needed to operate the App.
• Between donors and drivers as necessary to complete a scheduled pickup (for example, sharing a pickup address with the assigned driver).
• With Chrysalis staff and authorized management users for the purpose of operating the donation program.
• When required by law, court order, or to comply with a legal obligation in Canada.
• To protect the rights, safety, or property of Chrysalis, our users, or the public.
• With your consent, for any other purpose disclosed at the time of collection.

Data Retention

We retain your Personal Information for as long as your account is active and as needed to operate the donation program. After your account is closed or your data is deleted, we may retain certain records as required by law or for legitimate business reasons, including:

• Charitable donation records and tax receipt history, retained as required by the Canada Revenue Agency.
• Financial and accounting records, retained for the period required under Canadian tax law.
• Limited records needed to prevent fraud, resolve disputes, or enforce our agreements.

Backups containing your data are purged on our standard rotation cycle, no longer than 90 days after deletion from active systems.

Your Rights and Choices

You have the right to:

• Access the Personal Information we hold about you.
• Correct information that is inaccurate or out of date.
• Delete your account and associated Personal Information, subject to the retention exceptions described above.
• Withdraw consent for non-essential uses of your information, such as marketing communications.
• Request a copy of your account data in a readable format.

How to Request Account or Data Deletion

You can request deletion of your account and Personal Information by:

1. Signing in to the App and using the account deletion option in your account settings, or
2. Emailing info@chrysalis.ca from your registered email address with the subject line "Delete My Account."

We will acknowledge your request within 5 business days, verify your identity, and complete deletion within 30 days, except for records we are required to retain by law (for example, charitable receipts and tax records). We will let you know if any data must be retained and why. Encrypted backups containing your data will be purged on their normal rotation cycle, no longer than 90 days after the deletion request.

Security

The security of your Personal Information is important to us. We use commercially reasonable measures to protect the App and its data, including:

• Encryption of data in transit using TLS.
• Encryption of stored data and backups.
• Passwords stored only as salted hashes.
• Role-based access controls so that donors, drivers, and management users see only the information appropriate to their role.
• Logging of sensitive actions (such as account changes and data exports) for security review.
• Restricted access to production systems on a need-to-know basis.

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. We encourage you to use a strong, unique password.

Children's Privacy

The App is not directed to children under the age of 13, and we do not knowingly collect Personal Information from children. If you believe a child has provided us with Personal Information, please contact us at info@chrysalis.ca and we will take reasonable steps to delete it.

Canadian Privacy Law

We handle your Personal Information in accordance with Canadian privacy law, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). If you have a concern about how we handle your Personal Information, please contact us first at info@chrysalis.ca so we can try to resolve it. You also have the right to contact:

• The Office of the Information and Privacy Commissioner of Alberta — https://www.oipc.ab.ca
• The Office of the Privacy Commissioner of Canada — https://www.priv.gc.ca

Changes to This Privacy Policy

This Privacy Policy is effective as of May 17, 2026, and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the App after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice within the App.

Consent (Account Registration)

By creating an account in the Chrysalis Bottle Donations App, you confirm that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your Personal Information as described.

Contact Us

If you have any questions about this Privacy Policy or how your Personal Information is handled, please contact us:

Chrysalis — An Alberta Society for Citizens with Disabilities 13325 St. Albert Trail NW Edmonton, Alberta T5L 4R3 Canada

Email: info@chrysalis.ca Phone: (780) 454-9656

Charitable Registration #140847781RR0001