Privacy Policy
Kidney
Cancer Canada Privacy Statement:
·
-
Individuals
who are registered with Kidney Cancer Canada are entitled to expect that their
information will be held in strictest confidence.
-
No information
about specific individuals is ever shared with, sold to, rented to, or made
available in any way to any outside party.
-
Internal
access to such information is handled on a strict need-to-know basis
under a signed confidentiality agreement with the KCC Board of Directors.
Privacy Principles
Kidney Cancer Canada ("KCC") is committed to maintaining the accuracy,
confidentiality, and security of your personally identifiable information
("Personal Information"). As part of this commitment, the following ten
Privacy Principles govern our actions as they relate to the collection, use
and disclosure of Personal Information. The principles have been built upon
the values set by the Canadian Standards Association's Model Code for the
Protection of Personal Information and Canada's Personal Information
Protection and Electronic Documents Act.
Principle 1 - Accountability
Principle 2 - Identifying Purposes
Principle 3 - Consent
Principle 4 - Limiting Collection
Principle 5 - Limiting Use, Disclosure and Retention
Principle 6 - Accuracy
Principle 7 - Safeguarding Customer Information
Principle 8 - Openness
Principle 9 - Customer Access
Principle 10 - Handling Customer Complaints and Suggestions
Principle 1 - Accountability
KCC is responsible for maintaining and
protecting the Personal Information under its control. KCC has designated an
individual or individuals who is/are accountable for compliance with the ten
Privacy Principles.
Principle 2 - Identifying Purposes
The purposes for which Personal Information is collected will be
identified before or at the time the information is collected.
Principle 3 - Consent
Knowledge and consent are required for the collection, use or
disclosure of Personal Information except where required or permitted by law.
Principle 4 - Limiting Collection
The Personal Information collected will be limited to those
details necessary for the purposes identified by KCC.
Principle 5 - Limiting Use, Disclosure and Retention
Personal Information may only be used or disclosed for the
purpose for which it was collected unless you have otherwise consented, or
when it is required or permitted by law. Personal information will only be
retained for the period of time required to fulfill the purpose for which it
was collected or as required by law.
Principle 6 - Accuracy
Personal Information will be maintained in as accurate, complete
and up-to-date form as is necessary to fulfill the purposes for which it is to
be used.
Principle 7 - Safeguarding Customer Information
Personal Information will be protected by security safeguards
that are appropriate to the sensitivity level of the information.
Principle 8 - Openness
KCC will make information available to
our customers concerning the policies and practices that apply to the
management of their Personal Information.
Principle 9 - Customer Access
Upon request, a customer shall be informed of the existence, use
and disclosure of their Personal Information, and shall be given access to it.
Customers may verify the accuracy and completeness of their Personal
Information, and may request that it be amended, if appropriate.
Principle 10 - Handling Customer Complaints and Suggestions
Customers may direct any questions or enquiries with respect to
the privacy principles outlined above or about our practices by contacting:
KCC Privacy Officer
P.O. Box 23026, Westgate PO
Cambridge, ON N1S 4Z6
Email: info@kidneycancercanada.org
Before KCC is able to provide you with any information or correct any
inaccuracies, however, we may ask you to verify your identity and to provide
other details to help us to respond to your request. We will endeavour to
respond within an appropriate timeframe.
If you have questions or concerns regarding our organization's privacy policy
and practices, you should first contact KCC directly.
If you do not receive acknowledgment of your inquiry or your inquiry has not
been satisfactorily addressed, you should then contact the Privacy
Commissioner's Office at www.privcom.gc.ca (or
112 Kent Street, Ottawa, Ontario, K1A 1H3), who will then serve as a liaison
with KCC to resolve your concerns.
What Information is Collected?
At KCC, we collect, use and disclose Personal Information to
provide you with the services you have requested and to offer you additional
products and services we believe you might be interested in. Providing us with
your Personal Information is always your choice.
The types of Personal Information we may ask for depends on the nature of the
services we provide you and typically includes your name, address, telephone
number and e-mail address.
When you visit the KCC websites, Personal Information is not collected unless
you choose to provide it voluntarily. You are welcome to browse the websites
at any time anonymously and privately without revealing any personal
information about yourself.
Types of Information We Collect
Personal Information
Most of the Personal Information we collect comes to us directly
from you, and only with your consent. With your consent, we may collect
Personal Information from you in person, over the telephone or by
corresponding with you via mail, facsimile, the Internet, or from referrals by
third parties such as your financial institution.
As noted, the choice to provide us with Personal Information is always yours.
However, your decision to withhold particular details may limit our ability to
provide you with any of our services.
If we are unable to accommodate your request based on the information that has
been provided to us, we may ask for additional details in order to identify
other ways to be of assistance. KCC also maintains a file containing contact
history that is used for customer inquiry purposes.
Anonymous/Non-Personal Information
At KCC, we also collect anonymous/non-personal information.
Anonymous/non-personal information is information that we do not associate
with or trace back to a specific individual or business entity. For example,
our web servers collect some anonymous/non-personal information automatically
when you visit one of our websites. Gathered electronically, this information
may include the pages you visited, the type of web browser you are using, the
level of encryption your browser supports and your Internet Protocol address.
The anonymous/non-personal information collected may be used for research and
analytical purposes and occasionally for security investigations.
To help us better understand our markets, we may also gather information for
analytical purposes by conducting customer surveys, and by extracting
demographic information from existing files.
Consent
Your provision of Personal Information to us means that: (a) you
agree and consent that we may collect, use and disclose your Personal
Information in accordance with this policy; and (b) you or your
representatives are authorized to provide us with your Personal Information.
If you do not agree with these terms, you and your representatives are
requested not to provide any Personal Information to KCC. Certain services can
only be offered if you provide Personal Information to KCC. Consequently, if
you and your representatives choose not to provide us with any required
Personal Information, we may not be able to offer you certain products or
services.
How Your Information is Used
Personal Information
We use your Personal Information to communicate with you,
effectively provide the services you have requested and safeguard your
interests. We may also send you information about other products and services
in which we believe you may be interested. Additionally, if you are an KCC
dealer, we will keep you informed about your dealer account activities, send
you important notices, and respond to any special needs or enquiries you may
have.
We only use Personal Information for the purposes that we have disclosed to
you. If for any reason your information is required to fulfill a different
purpose, we will obtain your consent before we proceed.
Anonymous/Non-Personal Information
The anonymous/non-personal information gathered from the KCC
websites is used primarily for technical, research and analytical purposes
like evaluating the various sections of the websites. This information does
not include any personal information and it is only retained until its
intended purpose is fulfilled.
It is our goal to continuously improve our service offerings to you.
Therefore, we use anonymous/non-personal information collected from surveys,
from public archives and by extracting information from existing files to
better understand our customers' interests, priorities, and satisfaction
levels.
When Information May be Disclosed to Outside Parties
We are obliged to keep your Personal Information confidential except when
authorized by you, when required by law and when permitted by law.
At KCC, we sometimes contract outside organizations to perform specialized
services such as terminal delivery and repair, and shipping and fulfillment
services. Our trusted service suppliers may at times be responsible for
processing and handling some of the information we receive from you.
When we contract our suppliers to provide specialized services, they are given
only the information necessary to perform those services. Additionally, they
are prohibited from storing, analyzing or using that information for purposes
other than to carry out the service they have been contracted to provide.
Furthermore, as part of our agreements, our suppliers and their employees and
representatives are required to protect your information in a manner that is
consistent with the privacy policies and practices that we have established.
When Required by Law
The type of information we are legally required to disclose may
relate to criminal investigations or government tax reporting requirements. In
some instances such as a legal proceeding or court order, we may also be
required to disclose certain information to authorities. Only the information
specifically requested is disclosed and we take precautions to satisfy
ourselves that the authorities that are making the request have legitimate
grounds to do so.
When Permitted by Law
There are some situations where we are legally permitted to
disclose personal information such as employing reasonable and legal methods
to enforce our rights under our agreements, to collect a delinquent account or
investigate suspicion of illegal activities.
With Whom We May Share Your Information
Our Employees and Contractors
In the course of daily operations, access to private, sensitive
and confidential information is restricted to authorized employees who have a
legitimate business purpose and reason for accessing it. For example, when you
call us, our designated employees will access your information to verify who
you are and to assist you in fulfilling your requests.
As a condition of their employment and their independent contractor agreement
respectively, all employees and independent contractors of KCC are informed
about the importance of privacy and are required to abide by the privacy
standards we have established. They are also required to work within the
principles of ethical behaviour as set out in the relevant Code of Conduct and
must follow all applicable laws and regulations.
Unauthorized access to and/or disclosure of customer information by an
employee of KCC is strictly prohibited. All employees and independent
contractors are expected to maintain the confidentiality of customer
information at all times and failing to do so will result in appropriate
disciplinary measures, which may include dismissal.
How We Safeguard Your Information
We use state-of-the-art technologies and maintain current security standards
to ensure that your Personal Information is protected against unauthorized
access, disclosure, inappropriate alteration or misuse. All safety and
security measures are also appropriate to the sensitivity level of your
information.
Customer Files
Electronic customer files are kept in a highly secured
environment with restricted access. Paper-based files are stored in locked
filing cabinets. Access is also restricted.
Online Security
We manage our server environment appropriately and our firewall
infrastructure is strictly adhered to. Our security practices are reviewed on
a regular basis and we routinely employ current technologies to ensure that
the confidentiality and privacy of your information is not compromised.
The KCC websites use Secure Socket Layer (SSL) and 128 bit encryption
technologies to enhance security when you visit the secured areas of these
sites. SSL is the industry standard tool for protecting and maintaining the
security of message transmissions over the Internet. When you access your
accounts or send information from secured sites, encryption will scramble your
data into an unreadable format to inhibit unauthorized access by others.
To safeguard against unauthorized access to your accounts, you may be required
to "sign-on" using a user id and a password to certain secured areas of the
KCC websites. Both user id and password are encrypted when sent over the
Internet. If you are unable to provide the correct password, you will not be
able to access these sections.
When you call our customer service centre you will be required to verify your
identity by providing some personally identifying information.
How You Can Protect Your Information
We do our utmost to protect and safeguard your Personal Information. We
believe there are measures you should take as well. The following is a list of
things you can do to protect yourself against fraud and uninvited intrusion.
Passwords
Passwords are necessary to identify you and authenticate your
permission to access your online accounts. The passwords you use are
encrypted. Encryption is presently the most effective way to achieve data
security. Just as it is important for us to employ strict procedures to
safeguard your information, you also should take precautions in handling your
passwords. When selecting a password, we suggest that you use a combination of
letters and numbers and do not use words that can be easily associated with
you such as the name of a family member, a pet or the street on which you
live. We also suggest that you change your password regularly.
Personal Information
You should not share personal information with others unless you
clearly understand the purpose of their request and you know who you are
dealing with.
Your Online Security
To make sure your connection to the protected areas of the KCC
websites is secure, look for either a 'closed lock' or an 'unbroken key' icon
located at the bottom right hand side of your browser's task bar. You may also
check the Address bar to determine if SSL (Secure Socket Layer) is active by
looking at the beginning of the address. If it starts with "https" rather than
the standard "http", then SSL is operating.
Accessing and Amending Your Information
At KCC, decisions are made based on the information we have. Therefore, it is
important that your Personal Information is accurate and complete. As a
customer, you have the right to access, verify and amend the information held
in your personal and financial files.
Accessing Your Information
For privacy-related matters, you may access and verify any of
your information by emailing our customer contact centre at info@kidneycancercanada.org.
Amending Your Information
To help us keep your Personal Information up-to-date, we
encourage you to amend inaccuracies and make corrections as often as
necessary. Despite our efforts, errors sometimes do occur. Should you identify
any incorrect or out-of-date information in your file(s), we will make the
proper changes. Where appropriate, we will communicate these changes to other
parties who may have unintentionally received incorrect information from us.
To Make a Change
To make a change to the personal contact information contained in
your file, you may do one of the following:
In each case, you will be required to verify your identity by providing some
personally identifying information.
About Cookies
What is a Cookie?
A cookie is a small computer file or piece of information that
may be stored in your computer's hard drive when you visit our websites. On
the KCC websites, cookies are used to increase robustness and to provide more
efficient navigation. Cookies cannot view or retrieve data from other cookies,
nor can they capture files and data stored on your computer.
Cookies may be used by the KCC websites to improve functionality and in some
cases, to provide visitors with a customized online experience. Although
cookies have the capability of accomplishing a variety of undertakings, KCC
only uses cookies when they provide an obvious benefit to you.
If you would like to browse the KCC websites, you may do so without accepting
cookies. However, you should understand that if you choose not to accept
cookies, some areas of the KCC websites may not function properly or optimally.
Cookies are widely used and most web browsers are configured initially to
accept cookies automatically. If you prefer not to accept cookies, you may
adjust your browser settings to alert you when a cookie is about to be sent,
or you may configure your browser to refuse cookies automatically. If you
would like to learn more about how to set your cookie options, please refer to
your browser's documentation or online help for instructions.
Questions, Concerns and Complaints
If you have a question about the privacy policies stated on this site, please
email us at info@kidneycancercanada.org.
If you have a concern or complaint about privacy, confidentiality or the
personal information handling practices of KCC, our employees or service
suppliers, please contact:
KCC Privacy Officer
P.O. Box 23026, Westgate PO
Cambridge, ON N1S 4Z6
Email: info@kidneycancercanada.org
Before KCC is able to provide you with any information or correct any
inaccuracies, however, we may ask you to verify your identity and to provide
other details to help us to respond to your request. We will endeavour to
respond within an appropriate timeframe.
If you have questions or concerns regarding our organization's privacy policy
and practices, you should first contact KCC directly.
If you do not receive acknowledgment of your inquiry or your inquiry has not
been satisfactorily addressed, you should then contact the Privacy
Commissioner's Office at www.privcom.gc.ca
(or 112 Kent Street, Ottawa, Ontario, K1A 1H3), who will then serve as a
liaison with KCC to resolve your concerns.
Updating this Privacy Policy
Any changes to our privacy policy and information handling practices will be
acknowledged in this policy in a timely manner. We may add, modify or remove
portions of this policy when we feel it is appropriate to do so. You may
determine when this policy was last updated by referring to the modification
date found at the bottom of this privacy policy.
Websites Governed by this Privacy Policy
The websites that are governed by the provisions and practices stated in this
privacy policy are: www.kidneycancercanada.org.
Other Websites
The foregoing websites may contain links to other third party sites that are
not governed by this privacy policy. Although we endeavor to only link to
sites with high privacy standards, our privacy policy will no longer apply
once you leave these websites. Additionally, we are not responsible for the
privacy practices employed by other third party websites. Therefore, we
suggest that you examine the privacy statements of those sites to learn how
your information may be collected, used, shared and disclosed.
Last modified: August 16, 2010
|
