EfficiencyOne will obtain clients’ understanding and informed consent before collecting, using, or disclosing any Personal Information as and when required by PIPEDA. In addition, a customer may withdraw his or her consent at any time upon notifying EfficiencyOne, subject to any legal or contractual obligations of the customer and as provided for in PIPEDA.
2.1 EfficiencyOne will identify the purposes for collecting Personal Information at the time or before the information is collected. EfficiencyOne collects personal information from its clients for the following purposes:
2.2 EfficiencyOne will only use clients’ Personal Information for the above-stated purposes unless the client consents to another purpose or as is required by law. The types of Personal Information that EfficiencyOne may collect, retain, and disclose may include, but are not limited to, the following:
EfficiencyOne has a Personal Information and Privacy Program in place that lays out physical and technological security safeguards and procedures in place to protect clients’ Personal Information from unauthorized access, disclosure, use, or modification. These safeguards include, for example: privacy training for employees, physical access controls to our premises, and standards and procedures for storing and safeguarding paper and electronic Personal Information. Additionally, EfficiencyOne has Information Technology policies, procedures and logical controls in place to ensure the EfficiencyOne information technology environment maintains Personal Information in safe and secure manner. EfficiencyOne audits its procedures and security measures regularly to ensure that they are appropriate and that all Personal Information is protected.
EfficiencyOne acknowledges that it is responsible for Personal Information in its possession or custody, including information that has been transferred to a third party for processing. The organization shall use contractual or other means to provide a comparable level of protection while the information is being processed by a third party.
EfficiencyOne will ensure that client Personal Information is accurate and updated, when necessary. EfficiencyOne relies on its clients to inform of any changes to Personal Information.
Clients may access their Personal Information, subject to the exceptions listed in PIPEDA, or request a correction of Personal Information. The request must be made in writing and contain sufficient detail to enable EfficiencyOne to identify the client’s Personal Information to either provide the information or to make the correction(s). A minimal fee may be charged for providing access to Personal Information; however, the client will be informed of any applicable fee(s) when the request is received. In most cases, a response will be provided within 30 business days, however, if a longer time is needed, EfficiencyOne will provide the client with written notice stating the reasons for the extension.
EfficiencyOne will retain Personal Information provided by clients no longer than is necessary for legal or business purposes. When this Personal Information is no longer required, it shall be destroyed, erased, or made anonymous pursuant to the requirements of PIPEDA.
In the event a breach of EfficiencyOne’s security safeguards involving Personal Information creates a real risk of significant harm to an individual, EfficiencyOne will provide a report to the Privacy Commissioner and will notify the individual(s) involved (unless otherwise prohibited by law) as soon as feasible after EfficiencyOne determines that the breach has occurred. EfficiencyOne will also maintain internal records of every breach of its security safeguards involving Personal Information.
Questions about the Personal Information in EfficiencyOne’s custody or requests to withdraw consent for the collection of Personal Information should be directed to EfficiencyOne’s Privacy Officer by email to firstname.lastname@example.org, or by mail to: 230 Brownlow Avenue, Suite 300, Dartmouth, Nova Scotia, B3B 0G5.
This policy will be amended from time to time as EfficiencyOne regularly reviews and updates its policies and procedures.