EfficiencyOne respects the privacy of its clients and is committed to protecting its clients’ privacy through responsible Personal Information management practices. This Privacy Policy is a formal statement of the principles and guidelines for the collection, use, and disclosure of Personal Information as set out in the Personal Information Protection and Electronic Documents Act (PIPEDA). Personal Information means information about an identifiable individual, such as a name, address, telephone number, or credit card information. EfficiencyOne will safeguard Personal Information under its control and has appointed a Privacy Officer in order to ensure this Privacy Policy is complied with. Inquiries related to the controls and practices in place for the protection of Personal Information and privacy should be directed to EfficiencyOne’s Privacy Officer via email at privacy@efficiencyone.com. EfficiencyOne adheres to the following principles to ensure that its clients’ privacy is respected and protected.
EfficiencyOne will obtain clients’ understanding and informed consent before collecting, using, or disclosing any Personal Information as and when required by PIPEDA. In addition, a customer may withdraw his or her consent at any time upon notifying EfficiencyOne, subject to any legal or contractual obligations of the customer and as provided for in PIPEDA.
2.1 EfficiencyOne will identify the purposes for collecting Personal Information at the time or before the information is collected. EfficiencyOne collects personal information from its clients for the following purposes:
2.2 EfficiencyOne will only use clients’ Personal Information for the above-stated purposes unless the client consents to another purpose or as is required by law. The types of Personal Information that EfficiencyOne may collect, retain, and disclose may include, but are not limited to, the following:
EfficiencyOne has a Personal Information and Privacy Program in place that lays out physical and technological security safeguards and procedures in place to protect clients’ Personal Information from unauthorized access, disclosure, use, or modification. These safeguards include, for example: privacy training for employees, physical access controls to our premises, and standards and procedures for storing and safeguarding paper and electronic Personal Information. Additionally, EfficiencyOne has Information Technology policies, procedures and logical controls in place to ensure the EfficiencyOne information technology environment maintains Personal Information in safe and secure manner. EfficiencyOne audits its procedures and security measures regularly to ensure that they are appropriate and that all Personal Information is protected.
EfficiencyOne acknowledges that it is responsible for Personal Information in its possession or custody, including information that has been transferred to a third party for processing. The organization shall use contractual or other means to provide a comparable level of protection while the information is being processed by a third party.
EfficiencyOne will ensure that client Personal Information is accurate and updated, when necessary. EfficiencyOne relies on its clients to inform of any changes to Personal Information.
Clients may access their Personal Information, subject to the exceptions listed in PIPEDA, or request a correction of Personal Information. The request must be made in writing and contain sufficient detail to enable EfficiencyOne to identify the client’s Personal Information to either provide the information or to make the correction(s). A minimal fee may be charged for providing access to Personal Information; however, the client will be informed of any applicable fee(s) when the request is received. In most cases, a response will be provided within 30 business days, however, if a longer time is needed, EfficiencyOne will provide the client with written notice stating the reasons for the extension.
EfficiencyOne will retain Personal Information provided by clients no longer than is necessary for legal or business purposes. When this Personal Information is no longer required, it shall be destroyed, erased, or made anonymous pursuant to the requirements of PIPEDA.
In the event a breach of EfficiencyOne’s security safeguards involving Personal Information creates a real risk of significant harm to an individual, EfficiencyOne will provide a report to the Privacy Commissioner and will notify the individual(s) involved (unless otherwise prohibited by law) as soon as feasible after EfficiencyOne determines that the breach has occurred. EfficiencyOne will also maintain internal records of every breach of its security safeguards involving Personal Information.
Questions about the Personal Information in EfficiencyOne’s custody or requests to withdraw consent for the collection of Personal Information should be directed to EfficiencyOne’s Privacy Officer by email to privacy@efficiencyone.com, or by mail to: 230 Brownlow Avenue, Suite 300, Dartmouth, Nova Scotia, B3B 0G5.
This policy will be amended from time to time as EfficiencyOne regularly reviews and updates its policies and procedures.