Privacy Policy The Prusik Innovations Privacy Code incorporates the provisions of Part 1 of the Personal Information Protection and Electronic Documents Act (Statutes of Canada 2000, Chapter 5) and includes the ten principles of the Canadian Standards Association (CSA) Model Code for the Protection of Personal Information (CAN/CSA-Q830-96), which was published in March 1996 as a National Standard of Canada. Introduction Prusik Innovations Ltd. is a Canadian company headquartered in the Province of Alberta that provides general consulting services to customers in Canada and the United States. One of our tenants of operational excellence is the methods and standards we provide around the protection of personal information both collected and disclosed to our customers in all of our business operations. The Prusik Innovations Privacy Code is a formal statement of principles and guidelines concerning the minimum requirements for the protection of personal information provided by Prusik Innovations Ltd. to its customers and employees. The objective of the Prusik Innovations Privacy Code is to promote responsible and transparent practices in the management of personal information, in accordance with the provisions of the Personal Information Protection and Electronic Documents Act. Prusik Innovations will continue to review its Privacy Code to ensure it is relevant and remains current with changing technologies and laws. Most importantly, Prusik Innovations wants to ensure it continues to meet the evolving needs of our customers and employees. Summary of Principles Principle 1 - Accountability Prusik Innovations is responsible for personal information under its control and shall designate one or more persons who are accountable for the company?s compliance with the following principles. Principle 2 - Identifying Purposes for Collection of Personal Information Prusik Innovations shall identify the purposes for which personal information is collected at or before the time the information is collected. Principle 3 - Obtaining Consent for Collection, Use or Disclosure of Personal Information The knowledge and consent of a customer or employee are required for the collection, use, or disclosure of personal information, except where inappropriate. Principle 4 - Limiting Collection of Personal Information Prusik Innovations shall limit the collection of personal information to that which is necessary for the purposes identified by the company. Prusik Innovations shall collect personal information by fair and lawful means. Principle 5 - Limiting Use, Disclosure, and Retention of Personal Information Prusik Innovations shall not use or disclose personal information for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Prusik Innovations shall retain personal information only as long as necessary for the fulfillment of those purposes. Principle 6 - Accuracy of Personal Information Personal information shall be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used. Principle 7 - Security Safeguards Prusik Innovations shall protect personal information by security safeguards appropriate to the sensitivity of the information. Principle 8 - Openness Concerning Policies and Practices Prusik Innovations shall make readily available to customers and employees specific information about its policies and practices relating to the management of personal information. Principle 9 - Customer and Employee Access to Personal Information Prusik Innovations shall inform a customer or employee of the existence, use, and disclosure of his or her personal information upon request and shall give the individual access to that information. A customer or employee shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate. Principle 10 - Challenging Compliance A customer or employee shall be able to address a challenge concerning compliance with the above principles to the designated person or persons accountable for Prusik Innovations compliance with the Prusik Innovations Privacy Code. Scope and Application The ten principles, which form the basis of the Prusik Innovations Privacy Code, are interrelated and Prusik Innovations shall adhere to the ten principles as a whole. Each principle must be read in conjunction with the accompanying commentary. As permitted by the Personal Information Protection and Electronic Documents Act, the commentary in the Prusik Innovations Privacy Code has been tailored to reflect personal information issues specific to Prusik Innovations. The scope and application of the Prusik Innovations Privacy Code are as follows: The Code applies to personal information about Prusik Innovations customers and employees that is collected, used, or disclosed by Prusik Innovations. The Code applies to the management of personal information in any form whether oral, electronic or written. The Code does not impose any limits on the collection, use or disclosure of the following information by Prusik Innovations: Definitions collection - the act of gathering, acquiring, recording, or obtaining personal information from any source, including third parties, by any means. consent - voluntary agreement with the collection, use and disclosure of personal information for defined purposes. Consent can be either express or implied and can be provided directly by the individual or by an authorized representative. Express consent can be given orally, electronically or in writing, but is always unequivocal and does not require any inference on the part of Prusik Innovations. Implied consent is consent that can reasonably be inferred from an individual?s action or inaction. customer - an individual who uses, or applies to use, Prusik Innovations products or services, where such individual is a residential customer or an individual carrying on business alone as a sole proprietorship or in partnership with other individuals. disclosure - making personal information available to a third party. employee - an employee of Prusik Innovations. personal information - information about an identifiable customer or employee, but does not include aggregated information that cannot be associated with a specific individual. For a customer, such information includes a customer's credit information, dependant information, medical information, and any personal preferences. For an employee, such information includes information found in personal employment files, performance appraisals, and medical and benefits information, but does not include the employee?s name, title, business address (including e-mail address) or business telephone or fax numbers. Prusik Innovations - Prusik Innovations Ltd. and its subsidiary companies, as they may exist from time to time. third party - an individual or organization outside Prusik Innovations. use - the treatment, handling, and management of personal information by and within Prusik Innovations.
|