Privacy Policy
Your security and compliance come first. Our connected financial solutions are built to exceed industry standards — protecting your business and your customers with the highest level of trust, privacy, and fraud prevention.
Data Privacy
We comply with Canada common laws and specifically the Canada Personal Information Protection and Electronic Documents Act ("PIPEDA"). This governs the topic of data privacy, and how private-sector companies can collect, use and disclose personal information. The Act also contains various provisions to facilitate the use of electronic documents.
We also comply with the Canadian Digital Privacy Act, which introduced numerous amendments to the PIPEDA. One of these changed the definition of "personal information" to "information about an identifiable individual" as now found in Section 2(1) of the PIPEDA.
Another change was specifying what constituted a "valid consent". Section 6.1 of the PIPEDA now states that consent is valid only if an individual is reasonably expected to understand why their personal details are being collected. This includes an understanding of the consequences for any breach or violation.
Personal Information
The PIPEDA, as amended by the Canadian Digital Privacy Act, now has a large scope when defining "personal information". Since it now means all information "about an identifiable individual", it may include a person's:
- ID numbers
- Financial information (e.g., salaries, wages, credit or banking records)
- Employment history
- Ethnic or Indigenous origin
- Medical records (e.g., blood type, medical history)
- Personal views and opinions
- Digital footprints (e.g., sites you visited, information given to websites)
- Usual information such as name, age, address, sex, and gender
Protection of Personal Information
As a rule, the collection, use, and disclosure of personal data cannot be done without the express consent of the person whose information is being collected.
The collection, use, and disclosure of personal data by private companies must also be for the appropriate purpose(s) of that company and those which an individual may assume to be appropriate in each circumstance.
Private companies must exert all efforts to inform individuals what information will be collected, how it will be stored and used, whether it will be passed on to third parties, and for what purpose.
Europe and GDPR
Canadian organizations in the EU must comply with the General Data Protection Regulation (GDPR). Under this law, those not previously covered by European data protection legislation are now included under the GDPR.
GDPR now governs organizations that control or process data or information, including those that collect, use, disclose, and store personal data for the purchase of goods or services in the EU. The GDPR also covers entities that monitor the behaviour of individuals in the EU in connection to these purchases.
Questions About This Policy
If you have questions about how we handle personal information, please contact us. Our head office is located at 1822 Whites Road, Suite 121, Pickering, Ontario, Canada.