1. Who is responsible
Kerbona Research Foundation, a British Columbia non-profit society, is responsible for the information described in this notice.
Registered address: 90-20498 82 Avenue, Langley, BC V2Y 0V1, Canada Privacy Officer: info@kerbona.org (please write “Privacy” in the subject line)
2. What this notice covers
This notice covers visitors to the public pages of kerbona.org.
Kerbona Portal, Kerbona’s signed-in service for accounts, registrations, consultations, payments, and consent, is not yet open to the public. When it opens, information in Portal accounts will be covered by a separate Kerbona Portal Privacy Notice, and this notice will be updated to explain how the two fit together.
3. What the website itself collects
The public website pages have no forms and no accounts, and they ask you for nothing. The website does not run advertising, does not sell information, and does not use optional visit statistics or marketing tracking. Cloudflare’s optional Web Analytics feature is switched off for kerbona.org, and no third-party tag manager or tracking pixel is set up.
Like every website it delivers, Cloudflare shows Kerbona’s account administrators summary traffic figures for kerbona.org, such as numbers of requests and visitors by country. These summaries are produced by Cloudflare from the information in section 4.
4. Information processed when you visit
Like any website, kerbona.org cannot send you a page without receiving some technical information from your browser. When you visit, the following is processed:
- your IP address;
- the page address you asked for and the time of the request;
- information your browser sends automatically, such as browser type, operating system, and language;
- the address of the page that linked you to the website (the referrer), if your browser sends it;
- an approximate location, such as country, that can be worked out from your IP address.
An IP address can identify a device or household. Kerbona does not treat it as anonymous information.
Kerbona uses this information only to deliver website pages to you, to keep the website secure and working, to detect and stop abuse or attacks, and to investigate problems.
5. Who processes it: Cloudflare
The website is delivered by Cloudflare, Inc. through Cloudflare Pages and Cloudflare’s global network. Cloudflare receives the technical information in section 4 when it delivers pages. It processes that information to operate its network and protect it, and may keep request logs for those purposes under its own terms and privacy policy.
Cloudflare’s Network Error Logging is switched on for kerbona.org. With each page, Cloudflare asks your browser to remember, for up to 7 days, to send Cloudflare a short report if a later connection to kerbona.org fails. Successful visits are never reported. A report describes the failure: the page address, the referring page, the type of error, the server address contacted, and timing. Cloudflare uses your IP address while it processes the report to work out an approximate network and location, and states that it does not keep the IP address. Cloudflare turns these reports into summary reliability figures, which only Kerbona’s authorised technical administrators can see in the Cloudflare dashboard. Browsers that support this reporting mechanism may send these reports.
Cloudflare operates in many countries, so this information may be processed outside Canada, including in the United States, and may be subject to the laws of those countries. Kerbona does not promise that website visit information stays in Canada.
6. Who at Kerbona can see it
Only Kerbona’s authorised technical administrators can see the request information that Cloudflare makes available to account holders, such as the traffic summaries in section 3.
7. How long it is kept
Records kept by Cloudflare are kept for the periods Cloudflare sets for its services. Kerbona does not export or keep its own copy of website visit records: no log export is set up for kerbona.org.
8. If you email Kerbona
If you write to info@kerbona.org or to another Kerbona address shown on the website, Kerbona receives your email address, your message, and anything you attach. Kerbona uses them to reply to you and to deal with your request. Kerbona’s email is provided by Google Workspace, so these messages are stored by Google. They may be stored outside Canada.
Kerbona does not yet delete correspondence on a fixed schedule. It is preparing a regular review of its mailboxes, and this notice will be updated to describe the review and the retention period before that review starts. Until then, information that Kerbona no longer needs for these purposes must still be handled as the applicable privacy requirements require, which includes destroying it or making it anonymous; this is done case by case rather than on a fixed timetable.
You can ask what correspondence Kerbona holds about you, ask for a correction, or ask Kerbona to delete correspondence it no longer needs. Write to the Privacy Officer at info@kerbona.org, with “Privacy” in the subject line. Kerbona may need to keep some messages, for example where the law requires it or where they concern an unresolved matter, and will tell you if it cannot delete them.
9. Cookies
The public website pages do not set cookies. Cloudflare’s security features may set cookies in the situations described in the Cookie Notice, which also explains your choices.
10. Future visit statistics
Kerbona may later want to count website visits for internal planning, for example how many people visit each page. This is not in use today. It will not be switched on until:
- this notice and the Cookie Notice describe exactly what is collected, why, by whom, and for how long;
- any optional statistics cookie or similar identifier is used only after you choose to allow it, and never as a condition of using the website or any Kerbona service;
- you can refuse or later withdraw that choice, and the website still works fully.
11. Young people
The website is intended to be readable by Students, including Students under 19, and by their families. Because the public pages collect nothing from visitors beyond the technical information in section 4, no additional information is collected about young people who browse the website.
12. Your choices and rights
You can ask Kerbona what personal information it holds about you, and ask for a correction. Write to the Privacy Officer at info@kerbona.org. Kerbona may need to confirm your identity before answering. Website visit records are kept by Cloudflare for the periods described in section 7 and are not linked to a name or account, so Kerbona usually has no website visit information that it can link to you.
If you are not satisfied with Kerbona’s response, you may contact the Office of the Information and Privacy Commissioner for British Columbia.
13. Changes to this notice
Kerbona will update this notice before changing how the website handles visitor information. The version and effective date at the top of this page show which version applies.