Uplift Technologies Inc. has a reputation for - and a commitment to - excellent services to its customers and to integrity in everything we do. As part of this commitment, Uplift Technologies Inc. respects the privacy of our customers by meeting or exceeding the standards set by law. Our privacy commitment is based on the ten principles of the Canadian Standards Association Model Code for the Protection of Personal Information, all of which are enshrined in law in the Personal Protection and Electronic Documents Act ("PIPEDA").
The privacy commitment adopts the definition of personal information from PIPEDA: "Personal information means information about an identifiable individual, but does not include the name, title or business address or telephone number of an employee of an organization."
Uplift Technologies Inc. is responsible for personal information under its control. As part of this accountability, Uplift Technologies Inc. has designated an individual who is responsible for compliance with this policy and applicable legislation. Any inquiry related to our privacy practices may be directed to:
Uplift Technologies Inc.
19-10 Morris Drive Dartmouth, NS B3B 1K8 Attn: Privacy Officer
Tel: 902-422-0804 Fax: 902-422-0798
Uplift Technologies Inc. is responsible for personal information in its possession or custody, including information that has been transferred to a third party for processing. We seldom transfer personal information to third parties for processing, but when we do we obtain assurances from the company that the personal information will be protected in the same manner as if the information was being processed by Uplift Technologies Inc. directly and we also require that the company abide by this policy in every respect.
At the time that any personal information is collected, Uplift Technologies Inc. will inform the individual concerned of the purposes for which the information is being collected. Individuals will be informed of the purposes in a manner that is clear, concise and comprehensible. Our customer service personnel are well-trained and knowledgeable in our privacy practices and are able to provide any further information on the purposes of collection, if such information is required. Depending upon the circumstances of the collection, this information may be provided orally or in writing.
At any time when it is proposed to use any personal information for a purpose that was not originally identified, the new purpose shall be identified prior to use and the consent of the individual will be obtained, unless such new consent is not required under law.
Uplift Technologies Inc. shall maintain a record of the uses to which particular personal information has been put and to whom it may have been disclosed.
Uplift Technologies Inc. will obtain the informed consent of an individual concerned for the collection, use, or disclosure of that individual's personal information, except as may be allowed by law. Uplift Technologies Inc. will try to obtain consent for all anticipated purposes at the time of the collection of the personal information. In some circumstances this may not be possible, so Uplift Technologies Inc. will obtain the informed consent of the individual before using the personal information. Also, if Uplift Technologies Inc. proposes to use an individual's personal information for a purpose for which consent was not initially obtained.
For all purposes, consent means informed consent. At the time that consent is sought, Uplift Technologies Inc. will make reasonable efforts to advise the individual of all the purposes for which the personal information is being sought. As required under Principle 2 (Identifying Purposes) individuals will be informed of the purposes in a manner that is clear, concise and comprehensible.
Uplift Technologies Inc. shall not, as a condition of the supply of a product or service, require an individual to consent to the collection, use or disclosure of information beyond that required to fulfill the explicitly specified purposes. This means that where consent is being sought for information it is not essential to the provision of the service, the provision of that information will be voluntary. It is Uplift Technologies Inc.'s policy to obtain affirmative or 'opt-in' consent for any collateral use of personal information. If certain personal information is necessary for the provision of a service, this will be communicated to the individual along with information related to why the personal information is necessary in such circumstances.
There may be circumstances where the consent of an individual may be implied by the circumstances. In such cases, the purposes for the collection and use of personal information must be clearly apparent and Uplift Technologies Inc. may only use the personal information for the obvious purpose. For example, if an individual asks to be sent a particular item, Uplift Technologies Inc. will need the individual's name and address so that we can fulfill the request. In such a case, we will not use that information for any reason other than fulfilling the request.
Where practical, consent for the collection, use and disclosure of personal information will be in writing. Whether consent in writing is required may vary with the circumstances, the sensitivity of the information in question and the proposed use of the information. The form of the consent sought by Uplift Technologies Inc. may vary, depending upon the circumstances and the type of information. As a general rule, if the information is 'sensitive', written consent will be obtained. If Uplift Technologies Inc. is seeking consent to acquire personal information from a third party (seeking a credit reference, for example), consent in writing will be required so that we can prove the consent of the individual when asked by the third-party information provider.
Uplift Technologies Inc. will also take reasonable steps to determine whether an individual has the capacity to consent. For example, children are not necessarily able to consent to the collection, use and disclosure. Disabled individuals may also be unable to consent, in which case the consent of a guardian or holder of a power of attorney may be necessary.
The law provides certain exceptions to the usual requirement to obtain an individual's consent. For example, an organization may collect and use personal information in circumstances where the collection and/or use of such information is clearly in the interests of the individual and consent cannot be obtained in a timely way. Similarly, personal information may be collected and used without the consent of the individual if the information is reasonably required to investigate a breach of an agreement or a violation of the law and there is reason to believe that obtaining consent may compromise the availability or accuracy of such information. Frontline employees of Uplift Technologies Inc. will not be given discretion to dispense with consent.
Uplift Technologies Inc. will not collect any personal information that is not reasonably necessary for the legitimate purposes identified and for which consent has been obtained. In addition, personal information shall be collected by fair and lawful means.
Limiting Use, Disclosure, and Retention
Uplift Technologies Inc. will only use, disclose or retain personal information for the legitimate purposes identified to the individual concerned and for which consent has been obtained. Personal information shall be retained only as long as necessary for the fulfillment of those purposes, except where a longer retention period is required by law. Personal information that has been used to make a decision about an individual shall be retained long enough to allow the individual access to the information after the decision has been made. Some personal information may be retained incidentally as a result of routine computer backup operations. When this is the case, the personal information is not available for use by Uplift Technologies Inc.
Personal information that is no longer required to fulfill the identified purposes shall be destroyed, erased, or made anonymous.
Personal information collected, used and disclosed by Uplift Technologies Inc. shall be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used. Information that will be used to make a decision about an individual should be as accurate as reasonably possible. If Uplift Technologies Inc. does not have confidence in the accuracy of particular information, it shall not be used to make any decisions about the individual.
Nevertheless, Uplift Technologies Inc. shall not routinely update personal information, unless the information needs updating to fulfill the purposes for which it was initially collected. Updating or confirming the reliability of personal information shall be done by communicating with the individual concerned, unless it is inappropriate in the circumstances.
Personal information shall be protected by security safeguards appropriate to the sensitivity of the information. All personal information shall be maintained on a 'need to know' basis. All information shall be secured by physical, technical and policy measures as is prudent given the sensitivity of the personal information concerned. Any information related to the health and finances of an individuals shall be afforded a very high level of security.
Uplift Technologies Inc. shall educate its employees about the importance of security in relation to personal information.
Uplift Technologies Inc. shall also carefully scrutinize its waste stream to make sure that all media that contains personal information is appropriately disposed of in a manner that does not compromise the security of such personal information.
Uplift Technologies Inc. shall provide specific information about its personal information handling policies and practices to any individual upon request. This information will be availalbe from the Web site of Uplift Technologies Inc., from the company's physical location and upon request by mail or electronic mail.
Uplift Technologies Inc.'s personal information handling policies made available shall include:
* The name, title and the address of the person who is accountable for Uplift Technologies Inc.'s policies and practices and to whom complaints or inquiries can be forwarded; * The means of gaining access to personal information held by Uplift Technologies Inc.; * A description of the type of personal information held by Uplift Technologies Inc., including a general account of its use.
Upon request, an individual shall be informed of the existence, use, and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate. If, in Uplift Technologies Inc. view, the information is accurate, the individual will be able to have the personal information annotated with his or her comments related to the alleged in accuracy.
An individual requesting access to his or her personal information, or who is inquiring whether Uplift Technologies Inc. holds any personal information related to him or her, shall be required to provide sufficient identifying information to allow Uplift Technologies Inc. to search for his or her personal information. Such personal information provided to facilitate a search shall only be used for the purposes of a search and shall be destroyed as soon as practicable after conducting the search.
If possible and upon request, Uplift Technologies Inc. will inform an individual of the source of any personal information, the uses to which it has been put and to whom it may have been disclosed.
Uplift Technologies Inc. shall respond to an individual's request within a reasonable time and at no cost. The requested information shall be provided or made available in a form that is generally understandable.
When an individual successfully demonstrates the inaccuracy or incompleteness of personal information, Uplift Technologies Inc. shall amend the information as required. Depending upon the nature of the information challenged, amendment involves the correction, deletion, or addition of information. Where appropriate, the amended information shall be transmitted to third parties having access to the information in question. When a challenge is not resolved to the satisfaction of the individual, the substance of the unresolved challenge shall be transmitted to third parties having access to the information in question.
Any individual with concerns related to Uplift Technologies Inc.'s personal information handling practices or the manner in which his or her personal information has been collected, used or disclosed, shall be able to address those concerns to a customer service representative. If the concerns are not immediately resolved to the satisfaction of the individual, it will be immediately referred to the designated privacy officer for Uplift Technologies Inc.'s business. The privacy officer shall investigate the individual's concerns and shall attempt to resolve any complaint as expeditiously and as fairly as possible. If a complaint is found to be justified, Uplift Technologies Inc. shall take appropriate measures, including, if necessary, amending its policies and practices.
If a complaint is not found to be justified, the individual will be informed of this conclusion and of his or her right to seek redress with the Office of the Privacy Commissioner.
The complaint procedure shall be made known to any individual expressing concerns and shall be personally explained to the individual if circumstances warrant.