Privacy Policy
This page explains exactly what we collect, why, who can see it, and how to get it back or have it deleted. The short version: we collect what the chamber needs to run a membership organisation, we show your listing only to other signed-in members, and we never sell your information to anyone.
01Who is responsible
The BC Muslim Chamber of Commerce — a federally incorporated corporation, Corporations Canada corporate number 17033893, of 6638 Stoney Crescent, Delta, British Columbia V4E 1K9, Canada — is responsible for the personal information described here.
This policy applies to bcmcc.net, the member portal, the member directory, chamber events, and our volunteer records. Our privacy contact is furquangehlen@gmail.com.
We handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).
02What we collect
We only collect what a person gives us, plus the basic technical records any website generates. We do not buy personal information, and we do not build profiles from outside sources.
If you sign up for the newsletter
- Your email address, and which part of the site you signed up from.
If you send us a message
- Your name, your email address, and the contents of your message.
If you create a member account
- Sign-in details — your email address and password, or your Google account if you sign in that way. Passwords are handled by Google Firebase Authentication; the chamber never sees or stores them.
- Your profile — name, business name, sector, city, a short bio, and any contact details you choose to add: email, phone, website, Instagram.
- Your membership record — which plan you are on, the plan you have requested, the date you joined, and your directory verification status.
- Your visibility settings — whether you appear in the member directory.
If your business is reviewed for a directory listing
- The chamber's internal review notes on whether the business is legitimate and operating, and whether it meets the chamber's ethical standards, along with who reviewed it and when.
If you register for an event
- Which event, and when you registered.
If you volunteer with the chamber
- Your name, email, phone number, any notes staff record about your involvement, and a log of the hours you contribute — the date, the number of hours, and the activity.
- Volunteers do not currently have accounts on this site. These records are entered by chamber staff, normally from information you have given them directly.
When you pay dues
- Payments are processed by Stripe. Your card number goes to Stripe, never to us. We receive a confirmation of what was paid, when, and by whom, plus the last four digits and card type on the receipt.
Technical records
- Our host, Google Firebase Hosting, keeps standard server logs — IP address, browser type, pages requested, timestamps — which we use for security and troubleshooting.
- Our fonts load from Google Fonts, which means your browser's IP address is visible to Google when a page loads.
03Why we collect it
- To create and run your account, and to show your listing in the member directory.
- To take payment for dues and keep the financial records the chamber is required to keep.
- To verify that businesses in the directory are real and meet the chamber's standards — which is what makes the directory worth something to other members.
- To run events, manage registrations, and know who is coming.
- To answer your messages.
- To send chamber news and event invitations, if you have asked for them.
- To recognise volunteer contributions and report on them for chamber governance and grant purposes.
- To keep the site secure and investigate misuse.
We collect on the basis of your consent, given when you submit a form, create an account, or join. We will not use your information for a new purpose unrelated to the ones above without asking you first.
04Who can see what
| Information | Who can see it |
|---|---|
| Your directory listing | Signed-in BCMCC members only — never the public, and never search engines. Turn off directory visibility in your profile and other members stop seeing you entirely. |
| Your email, phone, website, Instagram | Only the ones you choose to put on your listing, and only to other signed-in members. |
| Your membership plan and join date | Your plan badge is visible to other members. Chamber admins see the full record. |
| Business review notes | Chamber admins only. These are never shown to other members, and are not visible in the directory. |
| Newsletter signups and contact messages | Chamber admins only. These cannot be read by anyone else, including other members. |
| Event registrations | You and chamber admins. |
| Volunteer records and hours | Chamber admins only. |
| Chamber events | Public — event listings appear on the homepage. Who registered does not. |
05Service providers
We keep the list short on purpose:
| Provider | What it does, and what it sees |
|---|---|
| Google Firebase | Hosting, sign-in, and the database. Holds essentially everything described in section 2. |
| Stripe | Processes membership payments. Receives your name, email, and payment details directly. Stripe is a payment processor and handles that information under its own privacy policy. |
| Google Fonts | Serves the site's typefaces. Sees your IP address when a page loads. |
These providers may only use the information to provide their service to us.
06Where your data lives
The chamber's database is hosted in Google's Montréal, Canada region, so member profiles, messages, event registrations, and volunteer records are stored in Canada.
Two things sit outside that: sign-in credentials, which Google Firebase Authentication operates on its own global infrastructure, and payment records, held by Stripe. Both may be stored or processed outside Canada, including in the United States.
Where information is held in another country, it is subject to that country's laws, and courts, law enforcement, and regulators there may be able to compel access to it. Creating an account means you understand this.
08How long we keep it
| Record | Kept for |
|---|---|
| Member account and profile | As long as your account is open, then 24 months after it closes, then deleted. |
| Payment and dues records | Seven years, as Canadian tax and non-profit record-keeping rules require. |
| Contact form messages | Until the matter is resolved and no longer needed, normally within two years. |
| Newsletter subscription | Until you unsubscribe. |
| Business review notes | As long as the membership is active, plus the account retention period above. |
| Volunteer records and hours | Seven years, for chamber governance and grant reporting. |
| Server logs | As set by Google Firebase Hosting, typically a matter of weeks. |
You can ask us to delete your information sooner — see section 9. We may need to keep financial records for the full seven years even after an account is deleted, because the law requires it.
09Your rights
Under PIPEDA and BC PIPA you may:
- Ask what we hold about you — including your member record and, on request, the chamber's business review notes about you.
- Correct anything that is wrong. Most of your profile you can edit yourself in the member portal at any time.
- Withdraw your consent — including hiding yourself from the directory, unsubscribing from email, or closing your account. Some withdrawals end your membership, and we will tell you if that is the case before acting.
- Ask us to delete your information, subject to records we are legally required to keep.
- Ask for a copy of the information you have given us.
Write to furquangehlen@gmail.com. We will confirm your identity before releasing anything, and will respond within 30 days. If we cannot give you something — for example where releasing it would reveal personal information about someone else — we will tell you why.
There is no charge for a reasonable request.
10Newsletters and email
We send chamber email only to people who have asked for it, or to members about their own membership. Every promotional email carries an unsubscribe link that works, and we act on unsubscribes promptly, as Canada's Anti-Spam Legislation (CASL) requires.
Messages about your account, your dues, or an event you registered for are transactional and will still reach you while your membership is active.
11How we protect it
- Everything travels over an encrypted connection (HTTPS), and is encrypted at rest by Google.
- Database access is enforced by server-side security rules, not just by what the app shows you. The directory requires a signed-in account; admin-only records reject any other request outright.
- Administrator access is limited to a named roster, and admin invitations are single-use and expire within fifteen minutes.
- Passwords are managed by Google Firebase Authentication and are never visible to the chamber.
No system is perfectly secure. If a breach occurs that creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner as the law requires.
12Children
This site is for adults in business. We do not knowingly collect personal information from anyone under 19. If you believe a minor has given us information, tell us and we will delete it.
13Changes, questions, complaints
If we change this policy we will update the date at the top, and give notice of any material change by email or in the member portal.
Questions or a request about your information:
- Email: furquangehlen@gmail.com
- Mail: 6638 Stoney Crescent, Delta, British Columbia V4E 1K9, Canada
- Or use the contact form on our homepage.
If you are not satisfied with how we have handled your information, you may complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca). We would appreciate the chance to put it right first.