It depends. The Personal Information Protection and Electronic Documents Act (PIPEDA) applies to non-profits. It excludes contact information from the definition of personal information. However, the privacy policy should ensure that members, clients or others are aware of this practice and provide the reasons.   Best practice is to exercise caution before sharing.

Consent means giving permission to the collection of personal information. This usually happens in one of two ways.
●    Implicit consent means that the individual has consented based on their purchase of a ticket.  In order to buy the ticket they have to pay for it and provide a credit card number.  Purchasing the ticket is their implicit consent to the collection of their credit card number which is personal information.
●    Explicit consent is where a consent form is provided to the person.  For example, consent forms are routinely used for the sharing of personal information between medical practitioners. 

Yes. A non-profit may collect personal information to help fulfill its purposes. Non-profits should have  valid reasons and consent for its collection and use.

A privacy policy is a document that describes how a non-profit deals with personal information. Personal information is unique to an individual. Some examples include name, address, email address, birth date, SIN, gender, medical information, educational history, employment status, IP address, family status, and income. policy should cover how this information is collected, used, disclosed, and retained.

A privacy policy is a document that describes how a non-profit deals with personal information. The policy should cover how this information is collected, used, disclosed, and retained.