About Us
The Pacific Coastal Computing Association (PCCA) incorporated in 2020 as a non-profit based in Victoria, B.C., Canada. PCCA works with partners to promote innovation, diversity & inclusivity in capacity building and positive change in education, the arts, environment, health & wellness and technology.
Our approach to digital transformation advisory and impact project interweaves strategic thinking of IT infrastructure, tools and technologies alongside the advanced diverse skills needed.
Our society purpose: An interdisciplinary organization devoted to applied research, education and capacity building associated with computational, and computing-for-good, approaches to contemporary applications in health, environment and the Arts & digital media. Goals include establishing sustainable practices for technical topics (e.g. architectures, scalability, algorithmic correctness, data sharing), evolving cross-sector and or cross-cultural frameworks for collaboration and storytelling, and innovating new models for learning.
As a non-profit, PCCA's mandate is to ensure the maximum possible value of the financial contributions made go directly to supporting the students and communities we serve, and or the education and applied research projects/programs we participate in or support. As such, our policy is to uphold a zero administrative overhead on outgoing financial contributions.
Our HEART Focus
H. Healthcare: health & wellbeing, esp. mental health.
E. Environment: sustainability and conservation.
A. The Arts: performing arts, interactive media and A&E.
R. Reconciliation: fostering harmony, diversity & inclusivity.
T. Technology: innovation, applied research, computing 4 good.
Privacy, Information & Data Protection Policy
Organization: Pacific Coastal Computing Association (PCCA)
Policy Statement: PCCA maintains an established and published policy to protect small and medium-sized enterprises' (SMEs') privacy, information, and data. This page constitutes that policy.
1) Scope & Purpose
This policy explains how PCCA collects, uses, discloses, safeguards, and retains information when working with SMEs, their representatives, and partners. It applies to personal information and business information we handle in connection with program delivery, research collaborations, membership, events, support, and contracting.
2) Our Legal Framework
PCCA complies with the British Columbia Personal Information Protection Act (PIPA) and, where applicable, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Where both apply, requirements are substantially similar; PCCA adopts practices that satisfy each.
3) Our Privacy & Data Protection Principles
- Meaningful Consent: We obtain informed consent for the collection, use, and disclosure of personal information for stated purposes.
- Purpose Limitation & Minimization: We collect only what a reasonable person would consider appropriate and use it solely for legitimate, identified purposes.
- Security Safeguards: We use administrative, technical, and physical safeguards to protect against unauthorized access, disclosure, or misuse.
- Access & Correction: Individuals can request access to, or correction of, their personal information held by PCCA.
- Accountability: We maintain policies, procedures, and governance to ensure compliance, including oversight of service providers handling information on our behalf.
- Cross-Border Transfers: When information is processed outside Canada, we require comparable protection and implement appropriate contractual and organizational measures.
4) Information We Handle
Depending on the engagement, we may handle: business contact details, organizational roles, communications, project materials, workshop or event records, billing or contracting details, and usage logs of PCCA-managed services. We do not collect more than necessary to deliver our programs and services.
5) How We Use Information
- To deliver programs, services, research, training, and support requested by SMEs.
- To administer membership, events, outreach, and stakeholder communications.
- To meet legal, audit, and reporting obligations.
- To improve our services through de-identified or aggregated analysis where appropriate.
6) Retention & Secure Disposal
We retain information only as long as necessary for the purposes identified and applicable requirements. When no longer needed, we securely destroy or de-identify records according to our retention schedules.
7) Security Measures
- Role-based access controls, least-privilege permissions, and multi-factor authentication for administrative access.
- Encryption in transit and at rest (where feasible) and protected network environments.
- Vendor due diligence and contractual clauses addressing confidentiality, security, and incident handling.
- Staff training, acceptable-use rules, and periodic policy reviews.
8) Service Providers & Cross-Border Processing
PCCA may engage trusted service providers (e.g., hosting, communications, analytics) which may operate inside or outside Canada. We require them to protect information to standards comparable to those that apply to PCCA and limit use to the purposes we specify. Upon request, we will identify relevant service providers and processing locations, subject to security considerations.
9) Access, Correction & Choices
Individuals may request access to their personal information or ask us to correct inaccuracies. We may need to verify identity and, where permitted by law, may refuse requests (with reasons). To exercise these rights or to withdraw consent (where applicable), contact our Privacy Officer.
10) Incidents & Breach Response
We maintain processes to identify, assess, and respond to privacy or security incidents. Where required by law and, where appropriate, we notify affected individuals and regulators, and take steps to mitigate risk and prevent recurrence.
11) Governance & Accountability
- Privacy Officer: Accountable for our privacy management program, training, and oversight.
- Policies & Reviews: We review and update policies and safeguards to reflect current legal and operational needs.
- Documentation: We maintain records supporting compliance (e.g., agreements, assessments, retention logs).
12) Contact PCCA's Privacy Officer
Email: privacy@coastalcomputing.ca
13) Updates to This Policy
We may update this policy to reflect legal, technical, or operational changes. Material changes will be posted here with an updated effective date.