Privacy notice · review version 2026-11-02.1

Your information.
A defined purpose.

Who is responsible?

Find Dank is organising the initiative. Responsible party: Pending legal confirmation. Information Officer details must be confirmed before collection. Privacy contact: Not yet appointed for collection; forms remain closed.

Why we ask

Professional registration coordinates specialist contributions and, with permission, checks public credentials; the public survey records views; patient responses document access barriers; business responses describe economic effects; legal responses identify procedural issues; expert submissions inform policy proposals; and volunteer details support coordination. Expert, professional and volunteer forms require contact information. A petition and optional email updates use separate agreement.

What is collected

Responses, form version, consent time, province and limited review metadata are retained. The general questionnaires do not request identity numbers, exact addresses, diagnoses or medical records. A short-lived keyed hash of the connecting IP supports rate limiting; the campaign does not retain the raw IP in its database. Hosting providers may process connection logs under their own arrangements, which must be reviewed.

Optional patient evidence has a separate purpose notice, consent, shorter retention period and clinical-only access. Full records are never requested through general forms.

Access and disclosure

Authorised reviewers access only data permitted by their role. Volunteers have no access to private responses. Public reports contain reviewed aggregates, not raw narratives or contact details. Expert attribution is permission to discuss final attribution, not automatic publication. Formal disclosure of private petition records requires a separately authorised purpose and procedure.

Storage and retention

Answers are application-encrypted in the existing hosted database. Drafts expire after seven days. Submitted records expire after 180 days. Expired records are excluded from access and reporting; administrators run documented deletion and backup procedures. Backup expiry, hosting location, operator contracts and international transfers must be reviewed before opening collection.

Your choices and rights

Participation is voluntary. Skip optional questions or stop before submitting. Keep your private receipt to access a copy or request withdrawal/deletion. Withdrawal excludes your response from future reports while a privacy administrator handles retained copies. Previously published, genuinely anonymous aggregates may not be retractable. A lost anonymous receipt may prevent safe identification of a response.

You may raise concerns with the designated privacy contact or the Information Regulator. No marketing consent is bundled with research participation. No third-party analytics are added to campaign pages.

Manage a submitted response

Petition withdrawal and email unsubscribe use their own petition and updates pages.