ROSENBERG & PARKER OF CANADA, INC.
Current as of June 6, 2012
I. Identifying the purposes and Use of Personal Information
Before collecting any Personal Information, RPC will identify why the Personal Information is required and how it will be used. This Personal Information is documented and stored at RPC’s offices at 4100 Yonge Street, Suite 513, Toronto, Ontario and/or on the secure computer servers of Rosenberg & Parker, Inc., a U.S. corporation affiliated with RPC and/or on the secure computer servers of a third party provider of data storage services. RPC will obtain the Customer’s or Employee’s consent before using or disclosing Personal Information for purposes other than the original reasons given.
RPC collects and uses an Employee’s Personal Information for the following purposes:
- Accurately identify the Customer;
- Help us identify your bonding needs and enable us to provide and support the bonding program required by the Customer;
- Save the Customer time when applying for new bonding products and services;
- Communicating with a Customer generally;
- Complying with all applicable laws; and;
- Such other specific purposes which are communicated to a Customer by RPC and its representatives before collection of the Personal Information
- RPC collects and uses an Employee’s Personal Information for the following purposes:
- To support decisions that are made regarding an Employee’s hiring, duties, transfer, training, discipline, promotion and retention;
- Recording and determining an Employee’s eligibility for participation in various RPC employee benefit plans;
- Compliance with all municipal, provincial, federal and other applicable laws regarding an Employee;
- Recording and maintaining an Employee’s attendance record, service award and bonuses record, performance evaluations, performance improvement plans, remuneration details, or maintaining any other necessary information for establishing, managing or terminating the employment relationship (including its related benefits), as well as the determination of the applicable income and benefits; and;
- Such other specific purposes which are communicated to the Employee by RPC and its representatives before collection.
We may use, share and disclose a Customer’s or Employee’s Personal Information to our affiliates, associates, agents, suppliers and such other third parties as RPC, acting reasonably, may deem necessary for the fulfillment of the purposes noted above or where otherwise permitted by law.
Specifically, RPC shares and discloses Personal Information about Customers and Employees with Rosenberg & Parker, Inc., a U.S. corporation affiliated with RPC and stores Personal Information about Customers and Employees on Rosenberg & Parker, Inc.’s secure computer servers and/or on the secure computer servers of a third party provider of data storage services. RPC and Rosenberg & Parker, Inc. have entered into an agreement pursuant to which Rosenberg & Parker, Inc. has agreed to protect the privacy and the confidentiality of any Personal Information received from RPC in accordance with all applicable laws and in the same manner that it treats all of its own confidential and personal information of its customers and employees.
In the unlikely event that RPC or substantially all of its assets are acquired by a third party, a Customer’s and Employee’s Personal Information may be one of the assets transferred to such third party and RPC may reasonably disclose such Personal Information to a prospective third party purchaser.
Except in certain extraordinary circumstances, RPC does not collect, use or disclose a Customer’s or Employee’s Personal Information without their knowledge and consent. Such extraordinary circumstances may include, without limitation, when legal, medical or security reasons make it impossible or impractical to obtain consent.
III. Limiting collection
IV. Limiting use, disclosure and retention
Personal Information is not used or disclosed for purposes other than those for which it was originally collected, except with the consent of the Customer or Employee, or as permitted by law. Personal Information is only retained as long as may be necessary for the fulfillment of these purposes, or to meet government requirements, whichever is longer, following which it is destroyed, erased, or rendered anonymous.
RPC strives to ensure that Customer’s or Employee’s Personal Information is as accurate, complete and up to date as necessary for the purposes for which it is used. Information is updated only when necessary to fulfill specified purposes. Employees are required to notify RPC of a change of Personal Information as soon as possible for payroll and tax purposes.
RPC has security safeguards in place designed to protect against loss, theft, unauthorized access, disclosure, copying, use or modification of Personal Information under the care of RPC. The nature of the safeguards depends on the sensitivity, format, location and storage of the Personal Information. These security measures may from time to time include, but are not limited to, locked cabinets, computer passwords, software firewalls to stop hackers, encryption software, restricting access to Personal Information to only those employees or representatives who have a need to know and, if deemed necessary by RPC in its sole discretion, confidentiality covenants from third parties to whom Personal Information has been disclosed.
E-mail is not a 100% secure medium, and Customer and Employees should be aware of this when contacting us to send Personal Information.
VII. Accountability and Openness
VIII. Individual access
Upon written request of a Customer or Employee, RPC will provide such Customer or Employee with access to his or her Personal Information. RPC will correct or amend any inaccuracies in the Customer’s or Employee’s Personal Information, and such amended information will be forwarded to any third parties who require access to the information. RPC has the right to refuse a request for access to Personal Information:
- If the information is protected by legal privilege;
- If granting access would reveal confidential commercial or financial information;
- If doing so would reasonably be expected to threaten the life or security of another individual;
- If the information was collected for purposes related to the detection and prevention of fraud;
- If the information was generated in the course of a formal dispute resolution process;
- If the information would likely reveal Personal Information about another Customer or Employee, as the case may be;
- If the request is vexatious or frivolous; or
- To protect RPC’s rights and property.
If the request of a Customer or Employee for such individual’s Personal Information is denied, the individual will be informed in writing of the reasons for the denial, as well as any recourse available to such individual
Access to Customer’s or Employee’s Personal Information will be at no cost to such Customer or Employee. Minimal charges may apply, however, for the transcription, reproduction or transmission of documents containing Personal Information
IX. Challenging compliance
If a complaint (“Complaint”) regarding RPC’s handling of Personal Information is received, an individual (the “Investigator”) with the skills necessary to conduct an investigation fairly and impartially will be assigned by RPC. The Investigator will have access to all relevant records and will be permitted to speak with Employees who handled the Personal Information access request. The complainant will receive notification of the outcome of the investigation clearly and promptly. Any inaccurate Personal Information or policy/procedure changes will be modified, if necessary, based on the outcome of the Complaint..