Privacy policy.

The I4PL Conference has its own privacy policy, part of the Conference 2026 policies. This policy covers our website and membership. The Conference is governed by its own policy.

The Institute for Performance and Learning collects, uses and discloses personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law. This policy covers membership, certification, events and the public website at thei4pl.ca. It replaces the privacy statement dated 8 April 2019.

Who is accountable

The I4PL Board of Directors is accountable for the personal information under our control, including information handled on our behalf by service providers. Questions, access requests and complaints go to inquiries@thei4pl.ca and are directed to the person designated as accountable for privacy compliance.

What we collect

We collect only what you choose to give us. For membership and certification that means your name, contact details, organization and role, language preference, credentials, assessment records and payment history. For events it means registration details, session choices and, where you tell us, dietary requirements and accessibility needs, which we treat as sensitive. Through the public website we collect what you submit on a form, such as your name, email address, organization and role, and, where a form asks for them, your phone number, extension, number type and preferred time to call, plus limited technical information needed for security and spam prevention. Browsing alone does not identify you. The website records page views through Cloudflare Web Analytics, which uses no cookies and does not identify individuals.

Why we collect it

To establish and maintain your membership or certification, to deliver the programs, events and services you ask for, to meet accessibility obligations, to communicate with you, and to keep the financial, certification and governance records the organization is required to keep. We do not collect personal information for a purpose we have not identified to you, and we collect no more than those purposes require.

Consent, and how to withdraw it

Joining, certifying, registering or submitting a form is your consent to the uses described here. You may withdraw consent at any time, subject to legal and contractual limits, by writing to inquiries@thei4pl.ca. Withdrawing consent for essential processing may mean we cannot maintain your membership or certification. Marketing consent is separate: newsletters use double opt-in, every email carries an unsubscribe link, and unsubscribing never affects the messages you need in order to hold your membership.

The member directory

Your listing in the member directory is yours to control through your profile preferences, and you can change or remove it at any time. Directory information is visible to other members to support professional networking. It is not sold, and it is not shared with third parties or non-members.

The public register of certified members

Holding a CTDP or CTP designation is a public professional credential, so the Institute publishes a register on thei4pl.ca that lists each holder in good standing by name, designation, year of certification, city, province, chapter, employer and title, as recorded in the membership register. It exists so that employers and clients can confirm that a specific person holds a designation. You can remove yourself from the register at any time in your profile at my.thei4pl.ca, and your designation stays valid.

Payment information

Payment card details are entered directly with our payment processor and are not stored by the I4PL. We retain only the transaction record required for accounting, audit and refunds.

Who we share it with

We share personal information only with the service providers who need it to run the organization: Cloudflare (website, database and email routing), Resend (email delivery), Stripe (payments), Whova (conference registration) and Google Workspace (staff email), together with our professional advisers. Each is bound to protect it and to use it only for the purpose we specify. Sponsors and partners receive aggregate, non-identifying information only, except where you consent individually, such as by having your badge scanned at an event. We do not sell personal information, and we disclose it otherwise only where the law requires.

Storage outside Canada

Some of our service providers store and process information on servers outside Canada, primarily in the United States. While it is there it is subject to the laws of that country, and may be accessible to courts and law enforcement under those laws. We require contractual protections comparable to our own standards.

How long we keep it

Membership and financial records are kept for seven years to meet audit and tax obligations. Certification records are kept for as long as the credential is claimed, plus the period our certification standards require. Dietary and accessibility information is deleted within thirty days of an event. Marketing contact details are kept until you unsubscribe. Two years after a membership ends we stop all contact and reduce the record to what the financial and certification history requires. Records of the emails we sent you, and whether they were delivered, are kept while your membership is active and for two years after. Financial records are kept for seven years even after a deletion request, as the Income Tax Act requires, and the fact that a designation was awarded is kept as part of the Institute's certification record. Information no longer needed for an identified purpose is securely destroyed or anonymized.

Accuracy, access and correction

You may ask what personal information we hold about you, how it has been used and to whom it has been disclosed, and you may ask us to correct it. Write to inquiries@thei4pl.ca. We respond within thirty days, and if we need longer or must refuse in part we will tell you why and what you can do about it. We may ask you to confirm your identity before we release information.

How we protect it

We apply physical, organizational and technical safeguards proportionate to the sensitivity of the information, including encryption in transit, access limited to those who need it for a stated purpose, and contractual obligations on our providers. No system is perfectly secure. If a breach creates a real risk of significant harm we will notify affected individuals and the Office of the Privacy Commissioner of Canada as the law requires.

Other websites

Our site links to websites we do not control. Their privacy practices are their own, and we encourage you to read them. The I4PL is not responsible for the content or privacy practices of sites outside thei4pl.ca. When you follow a link to a member benefit partner from the member portal, we record that the link was used, and by which member, so we can report on how members use their benefits. Partners receive totals only, never who clicked.

Concerns and complaints

If you are not satisfied with how we have handled your personal information, write to inquiries@thei4pl.ca and we will investigate and respond. You also have the right to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes to this policy

This policy is reviewed periodically. Material changes will be posted here with a revised date. We will not apply a change retroactively to information already collected without your consent.

Last updated: 29 September 2026. Replaces the statement of 8 April 2019.