EDGE Calgary Community Makerspace Society — Privacy Policy

1. What is personal information?

Information about an identifiable individual — e.g. your name, email, phone number, emergency contact, membership and training records, equipment-access and booking history, dues/payment records, and skills you choose to share in the member directory.

2. What we collect and why (reasonable purposes)

We collect only what we need to: operate your membership and log you in; control safe access to equipment (certifications and tool grants); schedule equipment; administer membership dues; keep an accountability record of who accessed what (security and safety); communicate with you; and meet our legal, grant-reporting, and insurance obligations. We do not collect more than we need, and we use it only for the purposes for which it was collected.

3. Consent

We collect, use, and disclose your personal information with your consent. You give consent when you create a membership account and when you sign our waiver. You may withdraw consent at any time by contacting our Privacy Contact (below), subject to legal or contractual limits (for example, we must retain certain financial records).

4. How we protect it

EDGE is built privacy-first. We use database row-level security so a member's records are isolated at the database layer (access fails closed, not open), an immutable audit log, encrypted connections (HTTPS/TLS), single-sign-on authentication, and least-privilege access controls. Administrative, technical, and physical safeguards protect against unauthorized access, use, or disclosure.

5. Service providers and storage outside Canada

To run EDGE we rely on trusted service providers, and some of them store or process information outside Canada — primarily in the United States. We want to be fully transparent about who they are:

• Oracle Cloud Infrastructure — hosts EDGE's servers and database (United States / Phoenix region). Your account, membership, access, and audit records are stored here.
• Google — powers "Continue with Google" sign-in; if you use it, Google provides your name and email to authenticate you (United States).
• Anthropic — powers EDGE's in-app assistant ("Gizmo"); information you share with the assistant may be processed by Anthropic to generate responses (United States).

Because of this, your personal information may be subject to the laws of those jurisdictions, including lawful access by foreign authorities. You may contact our Privacy Contact for information about our policies and practices regarding any of these providers.

6. Your rights

You have the right to access the personal information we hold about you and to request corrections. Contact our Privacy Contact to make a request; we will respond within the timelines required by PIPA and will tell you in advance of any fee that may apply.

7. Breach

If a privacy breach occurs that poses a real risk of significant harm, we will notify the Office of the Information and Privacy Commissioner of Alberta and affected individuals as required by law.

8. Privacy Contact

Victor Snell, Executive Director — privacy@edgecalgary.org.

9. Concerns

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta: Suite 2460, 801 – 6 Avenue SW, Calgary, AB T2P 3W2 · 1-888-878-4044 · generalinfo@oipc.ab.ca · oipc.ab.ca.