Canada Global 1000

Privacy Policy

Effective Date: October 2026

1. Introduction

Canada Global 1000 (“we”, “us”, “our”) brings together CEOs leading midsize to large companies across Canada and across industries to advance trade, strengthen business-to-business relationships and expand global opportunities for Canadian companies. We are committed to protecting the privacy and personal information of all individuals who interact with us.

This Privacy Policy explains how we collect, use, disclose and safeguard personal information relating to:

• Visitors to our website at cg1000.org
• Individuals who contact us with enquiries
• Members of Canada Global 1000 and their representatives
• Attendees of our dialogues, forums, events and programmes

This policy complies with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector for individuals in Quebec, and, to the extent applicable, the European Union General Data Protection Regulation (GDPR) for individuals located in the European Economic Area or the United Kingdom.

Please read this policy carefully. By using our website or providing us with your personal information, you acknowledge that you have read and understood this policy.

2. Information We Collect

We collect personal information only to the extent necessary for the purposes described in this policy. The categories of information we may collect include:

Information You Provide Directly

• Contact details: name, email address, telephone number and organisation — collected when you contact us via our website contact form, by email, or by post.
• Enquiry content: the subject and message you send us through the contact form or by email.
• Event registration information: name, organisation affiliation, dietary requirements or accessibility needs — collected when you register for a Canada Global 1000 event or programme.
• Membership information: name, contact details, company and professional background — collected when your organisation applies for or renews membership.

Information Collected Automatically

• Website usage data: IP address (anonymised where possible), browser type, operating system, pages visited, time spent on pages, referring URLs — collected via cookies and analytics technologies only with your prior consent.
• Security checks: when you use our contact form, Cloudflare Turnstile checks that the submission comes from a person rather than an automated program. This uses technical information about your browser and connection and does not set advertising cookies.
• Cookie data: see Section 5 (Cookies & Tracking Technologies) for full details.

We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can delete it.

3. Legal Basis for Processing

We process personal information on the following legal bases:

Under GDPR (for individuals in the EEA/UK)

• Consent (Article 6(1)(a)): where you have given us clear consent, for example to place analytics or marketing cookies, or to send you newsletters or updates.
• Legitimate interests (Article 6(1)(f)): where processing is necessary for our legitimate interests, such as responding to enquiries, maintaining the security of our website, and communicating with members and supporters, provided these interests are not overridden by your rights.
• Contractual necessity (Article 6(1)(b)): where processing is necessary to fulfil a contract or pre-contractual steps, such as administering membership or event registrations.
• Legal obligation (Article 6(1)(c)): where we are required to process personal information to comply with a legal obligation.

Under PIPEDA (for individuals in Canada)

We collect, use and disclose personal information in accordance with PIPEDA’s knowledge and consent principle. We obtain meaningful consent — express or implied depending on the sensitivity of the information and the circumstances — before or at the time of collection, and we use the information only for the purposes for which consent was obtained or that are reasonably consistent with those purposes.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

• Responding to enquiries: to reply to questions, requests or correspondence submitted to us.
• Membership administration: to process membership applications, renewals and related communications.
• Event management: to register participants, communicate event logistics and manage attendance at executive dialogues, leadership forums and other programmes.
• Website improvement: to understand how visitors use our website and to improve content, navigation and performance (only with your consent for analytics).
• Communications: to send you information about our activities, events and initiatives where you have opted in or where we have a legitimate interest to do so.
• Legal compliance: to comply with applicable laws, regulations and legal processes.
• Security: to protect the security and integrity of our website and systems, including preventing spam and automated abuse of our contact form.

We will not use your personal information for purposes that are incompatible with the purposes for which it was originally collected without obtaining your consent or unless required by law.

5. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device. We use the following categories of cookies:

Strictly Necessary Cookies

These cookies and similar technologies are essential for the website to function and cannot be switched off. They include the setting that remembers your cookie consent preference and the Cloudflare Turnstile security check on our contact form. No consent is required for these.

Analytics Cookies

We use Google Analytics 4 (GA4), deployed through Google Tag Manager (GTM), to collect anonymised information about how visitors use our website (pages viewed, session duration, traffic sources). These cookies are only activated if you click “Accept All” on the cookie consent banner. If you decline, analytics cookies are not set.

Advertising Cookies

We do not place advertising or targeting cookies on your device without your explicit prior consent. At present, we do not operate advertising campaigns that use such cookies.

Managing Your Cookie Preferences

You can change your choice at any time by selecting “Cookie Settings” at the bottom of any page, or by adjusting your browser settings to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the website.

For more information about Google’s data practices, see Google’s Privacy Policy.

6. Data Sharing & Third Parties

We do not sell, rent or trade your personal information to any third party. We may share personal information in the following limited circumstances:

• Google LLC: we use Google Analytics and Google Tag Manager as described in Section 5. Google processes anonymised usage data on our behalf under a data processing agreement. Google may transfer data to servers in the United States; this transfer is subject to Standard Contractual Clauses and Google’s compliance with applicable data transfer frameworks.
• Cloudflare, Inc.: our website is hosted on Cloudflare, and Cloudflare Turnstile protects our contact form from automated abuse. See Cloudflare’s Privacy Policy.
• Email delivery: messages sent through our contact form are delivered to our inbox by an email delivery service acting on our behalf.
• Trusted service providers: we may share information with other third-party service providers who assist us in operating our website or administering our activities (for example, email or event management platforms), provided they are bound by confidentiality obligations and data processing agreements and process data only on our instructions.
• Legal requirements: we may disclose personal information if required to do so by law, court order or lawful request from a governmental authority, or to protect the rights, property or safety of Canada Global 1000, our members or the public.

7. International Data Transfers

Canada Global 1000 is based in Canada. Canada has been recognised by the European Commission as providing an adequate level of data protection for commercial organisations subject to PIPEDA. This means that transfers of personal data from the EEA or UK to us in Canada generally do not require additional transfer safeguards under GDPR.

Where we engage third-party processors who are located outside Canada or the EEA (for example, Google or Cloudflare in the United States), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or equivalent mechanisms, to protect your personal information during any such transfer.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are:

• Enquiries and general correspondence: 2 years from the date of last contact.
• Member records: for the duration of membership plus 2 years after membership ends.
• Event registration records: 2 years from the date of the event.
• Website analytics data: up to 13 months, in line with Google Analytics default retention settings.
• Legal and financial records: as required by applicable law, which may extend retention beyond the above periods.

When personal information is no longer required, we securely delete or anonymise it.

9. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information. To exercise any of these rights, please contact us at info@cg1000.org. We will respond within the timeframes required by applicable law (generally 30 days under GDPR; 30 days under PIPEDA).

10. Privacy Officer

Canada Global 1000 has designated a Privacy Officer who is responsible for overseeing compliance with this policy and applicable privacy laws. For individuals in Quebec, the Privacy Officer is the person in charge of the protection of personal information. If you have any questions, concerns or requests relating to this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:

Joseph Dwyer, Privacy Officer
Canada Global 1000
Email: info@cg1000.org

We will acknowledge receipt of your request and endeavour to respond substantively within 30 days. If we require additional time to fulfil a complex request, we will notify you of the extension and the reason for it.

11. Supervisory Authorities

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with a data protection supervisory authority.

Canada

Office of the Privacy Commissioner of Canada (OPC)
Website: www.priv.gc.ca
Toll-free: 1-800-282-1376

Quebec

Commission d’accès à l’information du Québec (CAI)
Website: www.cai.gouv.qc.ca

European Union and United Kingdom

If you are located in the EEA, you may contact your national data protection authority. A full list is available at edpb.europa.eu. In the United Kingdom, the supervisory authority is the Information Commissioner’s Office (ico.org.uk).

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws or other operational requirements. When we make changes, we will post the updated policy on this page and revise the effective date at the top of the policy.

We encourage you to review this policy periodically. Where changes are material, we will take reasonable steps to bring them to your attention, such as by posting a notice on our website. Your continued use of our website or services after the effective date of any revised policy constitutes your acknowledgement of the changes.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Canada Global 1000
Email: info@cg1000.org
Website: cg1000.org