TDSRC Privacy Statement

The TD Summer Reading Club (TDSRC) is developed by the Toronto Public Library in partnership with Library and Archives Canada and over 2,200 participating public libraries across Canada.

The Toronto Public Library (TPL) oversees the TDSRC website and provides services to kids across the country on behalf of participating libraries. TPL is committed to :

  • Keeping kids’ and parents’ information private and confidential
  • Keeping the TDSRC system safe and secure
  • Helping participating libraries comply with their local privacy laws and requirements

The TDSRC program and website only collect and use the minimum amount of information needed to make the program run smoothly and to make it fun for kids.

TPL works with Library and Archives Canada (LAC) to run the TDSRC program. Some information is passed to and from LAC for this purpose.

TPL works with participating libraries to ensure that the libraries have all the information they need to engage kids and parents and to evaluate the success of their local programs.

This Privacy Statement outlines the roles and responsibilities of different parties involved in the TDSRC program.

Roles and Responsibilities

Kids

Kids will

  • Choose a username that does not include their real name or other identifiers
  • Choose their library branch
  • Be able to track and view their reading progress and activities within their account

Kids may

  • Be contacted by the moderators through system notifications if their postings are not appropriate
  • Choose to link their account with their parents’ accounts so parents can track their reading progress and activities

Parents

Parents will

  • Provide their email address as part of account set-up
  • Track and view their kids’ reading progress and activities
  • Remind kids to keep their information safe (by taking steps such as not using their real name online)

Parents may

  • Choose to link to one or more kids’ accounts to help track their reading progress

Toronto Public Library (TPL)

To support kids and parents, TPL will

  • Be responsible for the information collected from or about kids and parents in the context of running the program
  • Give kids and parents access to the TDSRC website on behalf of their local participating libraries
  • Collect and store (host) information about kids and parents on behalf of the participating library that they choose as their home library for the TDSRC program
  • Provide notice through the TDSRC website when data is collected and maintain this notice on behalf of participating libraries
  • Respond to questions about how information is handled in the TDSRC program on behalf of the participating libraries
  • Respond, on behalf of libraries, to requests from LAC or participating libraries to access and correct kids’ or parents’ information
  • Respond to questions and requests from kids and parents or direct them to LAC or a participating library for response as appropriate

To support participating libraries, TPL will

  • Produce reports and data extracts for each participating library containing identifiable or anonymous information, as needed and directed by the participating library for their own purposes, about the kids and parents who chose that library as their home library for the TDSRC program
  • Collect anonymous information from kids and parents and de-identify identifiable information about kids and parents to share with TD, other stakeholders and the public in an annual report
  • Follow the NIST Cybersecurity Framework to secure the platform, and apply other industry security standards including, but not limited to
  • Storing data on Canadian servers hosted within our cloud storage network, which may be subject to international laws including those of the United States of America
  • Limiting the collection of personal information where possible to avoid storing sensitive information
  • Only engaging third parties that are certified to be in compliance with SOC 2 Type II requirements to host or maintain the system
  • Delete kids’ and parents’ profiles and identifiable information at the end of the next year’s summer program

TPL may

  • Conduct audits on the TDSRC platform to ensure it is secure and information is private
  • De-identify any information provided by kids or parents to enhance privacy
  • Change privacy or security protections to enhance them
  • Limit the use of kids’ or parents’ information, upon their request, on behalf of participating libraries in Quebec (Quebec only)

Library and Archives Canada

Library and Archives Canada will

  • Respond to questions about the TDSRC program on behalf of TPL and the participating libraries
  • Respond to requests from kids, parents and participating libraries or direct them to TPL or a participating library for response as appropriate
  • Moderate and approve requests from participating library staff to create a direct access account
  • Give staff from each participating library direct access to the TDSRC website to extract identifiable and anonymous information about the kids and parents who chose the participating library as their home library for the TDSRC program, on behalf of the library who has approved their access
  • Access the system and information about kids and parents to support TPL and participating libraries with any of the activities listed in this Statement

Libraries

Each participating library will

  • Be accountable for privacy and security throughout the TDSRC program
  • Authorize TPL to collect and store (host) information about kids and parents who chose the participating library as their home library for the TDSRC program
  • Authorize TPL to collect and store (host) information on the participating library’s behalf about kids and parents according to their internal policies
  • Direct questions about how personal information is handled, as well as access or correction requests and other questions about the platform, to TPL for response as required
  • Support parents and kids to keep their information safe and secure when using the TDSRC website
  • Authorize staff requests to create staff user accounts if deemed necessary by the library

Each participating library may

  • Collect and/or store usernames, closest library branches, progress, awards and email addresses obtained through the TDSRC website and from TPL
  • Request direct access to the TDSRC platform to extract identifiable and anonymous information, for their own purposes, about the kids and parents who chose the participating library as their home library for the TDSRC program from the system
  • Request identifiable or anonymous information from TPL or LAC about the kids and parents who chose the participating library as their home library for the TDSRC program
  • Request that TPL de-identify any sensitive information provided by the kids and parents who chose the participating library as their home library for the TDSRC program

Questions

Questions about your privacy?

Contact tdsrc-cletd@tpl.ca if you have questions about how the privacy of kids’ and parents’ information is maintained.