Protecting Customer Information
Encore Canada Decorating Ltd., Encore Canada, Party Time Rentals, Kerry Technical and their affiliated companies (”Collectively known as Encore Canada”) considers protection of its customers’ information an important part of its business. Encore Canada has long-standing security measures in place to preserve the confidentiality of sensitive information, including personal information received on behalf of its customers.
The federal government has passed legislation dealing with the collection, use and disclosure of information about any identifiable individual. This legislation is called the Personal Information Protection and Electronic Documents Act or PIPEDA, and applies to commercial activities across Canada that collect, use and/or disclose personal information, except in those provinces that have passed substantially similar legislation. In those jurisdictions, the substantially similar provincial legislation will apply.
Scope of this Policy
This policy sets out ten principles that will be observed by Encore Canada in the collection, use and disclosure of information of customers. If personal information is made anonymous by removing details so that an individual is not identifiable to the user or recipient of that information, it is not governed by this Policy but still will be treated with appropriate safeguards.
Encore Canada’s customer base is such that it collects personal information from customers only in very rare circumstances. Encore Canada collects business information from its customers to enable Encore Canada to perform contracted exhibitor services. Only very infrequently will any identifiable personal information be collected. If any personal information is collected, Encore Canada will obtain consent at the time of the collection, disclosure and /or use.
The Privacy Principles
Principle 1 – Accountability
Encore Canada is responsible for maintaining and protecting the personal information under its control and has designated a privacy officer (”Privacy Officer”) to be accountable for compliance with the principles described in this policy.
The Privacy Officer may be contacted at:
Privacy Officer – Canadian Webmaster
1421 W. Mockingbird Lane
Dallas, TX 75247 USA
Under this principle, Encore Canada is responsible not only for personal information in its physical possession or custody, but also for personal information that is transferred by Encore Canada to a third party for processing. Encore Canada will use contracts with such third parties to require them to give an appropriate level of protection to the personal information while it is being processed.
Encore Canada has established and implemented:
(a) procedures to protect personal information;
(b) procedures to receive and respond to complaints and inquiries;
(c) staff training and information programs to explain this policy and related personal information protection procedures and practices; and
(d) practices to ensure that customers and other individuals who contact Encore Canada have access to this policy and to any available materials that explain Encore Canada’s policies and procedures.
Upon request, Encore Canada will disclose the name of the current Privacy Officer.
Principle 2 – Identifying Purposes for Collection of Personal Information
Encore Canada will identify the purposes for which personal information is collected at or before the time the information is collected.
Depending on the specific circumstances, Encore Canada may collect personal information for one or more of the following purposes:
(a) to provide exhibition and related services;
(b) to keep materials related to any activities carried on by Encore Canada, or in determining whether to accept any person as a customer, or keeping records of purchases, sales or other transactions; and
(c) to comply with legal and regulatory requirements.
When a new customer account is opened, Encore Canada will ensure that the purposes for which the personal information is collected, used and disclosed is identified by Encore Canada and documented on the relevant documents. Thereafter, Encore Canada will collect only the personal information that is necessary for the purposes that have been identified to the customer.
Circumstances may arise where Encore Canada wishes to use or disclose personal information for a new purpose. Encore Canada will ensure that personal information is not used or disclosed for that new purpose unless the individual is informed of the new purpose and gives his or her consent.
The methods used by Encore Canada to notify individuals of the proposed purposes for which personal information is collected, used or disclosed may be by telephone, in person, in writing, by e-mail or by any other means of communication which is likely to reach the concerned individual.
Principle 3 – Consent
The knowledge and consent of the customer are required for the collection, use, or disclosure of personal information by Encore Canada, except where inappropriate (e.g., in emergency situations).
Except when the under-noted exceptions apply or except as permitted by law, Encore Canada will make a reasonable effort to ensure that the individual is advised in advance of the purposes for which his or her personal information will be collected, used or disclosed:
. Information collected in the past: For personal information collected before this policy came into effect, Encore Canada will ensure that personal information about each individual is used and disclosed for the purposes described in Principle 2 of this policy.
. Withdrawal of Consent: An individual may withdraw his or her consent to collection, use or disclosure at any time, subject to legal or contractual restrictions and reasonable notice. Encore Canada will inform the individual of the implications of such withdrawal of consent, which generally would limit Encore Canada’s ability to provide the individual with the requested product or service.
. Disclosure for Business Transfers: Encore Canada may be involved in the sale, transfer or reorganization of some or all of its business from time to time. As part of that sale, transfer or reorganization, Encore Canada may disclose personal information to the acquiring organization, but will require the acquiring organization to agree to protect the privacy of that personal information that is consistent with this policy, and in accordance with relevant federal or provincial law.
. Outsourcing: Encore Canada may transfer personal information to a third party for processing. In that regard, Encore Canada will use contractual or other means to provide comparable level of protection while the information is being processed by a third party.
To make the individual’s consent meaningful, Encore Canada will state the purposes in such a manner that the individual can reasonably understand how the information will be used or disclosed.
Encore Canada will not, as a condition of the supply of products or services, require an individual to consent to the collection, use or disclosure of personal information beyond that required to fulfill Encore Canada’s explicitly specified, and legitimate purposes.
When a new account is opened for an individual, Encore Canada will obtain explicit, signed consent for the proposed collection, use and disclosure of personal information concerning that individual. [In the case of a corporate account, Encore Canada will require the corporation to represent and warrant that it has the consent of each individual of the corporation, as the case may be, to their personal information being disclosed to, and used by Encore Canada, for specified purposes.]
Encore Canada will never obtain consent by deception. Depending on the specific circumstances, Encore Canada may obtain consent in the following ways:
(a) an application form to seek consent, collect information and inform the individual of the use that will be made of the information;
(b) a checkoff box to request that their names and addresses not be given to the other organizations;
(c) orally in person or over the phone;
(d) at the time the individual uses a product of service; or
(e) deeming consent unless the individual expressly informs Encore Canada to the contrary.
Principle 4 – Limiting Collection of Personal Information
Encore Canada will limit the collection of personal information to that which is necessary for the purposes identified by it. Encore Canada will collect personal information by fair and lawful means.
Although Encore Canada will collect personal information primarily from the individuals concerned, with the individual’s consent, Encore Canada may also collection information from external sources identified to Encore Canada by the individual for this purpose. If personal information is collected from a third party, Encore Canada will note their identity unless there is a lawful reason for not doing so.
Principle 5 – Limiting Use, Disclosure and Retention of Personal Information
Encore Canada will not use or disclose personal information for purposes other than those for which it was collected, except with the consent of the individual or as required by law. The Company will retain personal information only as long as necessary for the fulfillment of those purposes.
Encore Canada generally retains personal information for 3 to 7 years after an account is closed, which is necessary for the identified purposes and for legal or business purposes.
Encore Canada will destroy, or make anonymous, any personal information no longer needed for its identified purposes or for legal or business requirements.
Principle 6 – Accuracy of Personal Information
Encore Canada will keep personal information as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.
Encore Canada will generally rely on individuals to provide up-dated information, such as changes to addresses, phone numbers and other contact information.
If an individual successfully demonstrates to Encore Canada that personal information is inaccurate, incomplete, out of date, or irrelevant, Encore Canada will revise the personal information. If necessary, Encore Canada will disclose the revised personal information to third parties that were provided with the wrong information to permit them to revise their records as well.
Principle 7 – Safeguarding Personal Information
Encore Canada will protect personal information using security safeguards that are appropriate to the sensitivity level of the personal information received.
Security arrangements are employed to protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, modification, or disposal. Encore Canada will protect personal information regardless of the format in which it is held.
The nature of Encore Canada’s safeguards will vary depending on the sensitivity of the personal information that has been collected, the amount, distribution, and format of the information, and the method of storage. The more sensitive personal information will be safeguarded at a higher level of protection.
Currently, Encore Canada employs physical measures including locked premises and locked filing cabinets (for sensitive information). Access to computerized information is protected by passwords.
Encore Canada will inform employees about its practices and procedures for protecting personal information and will emphasize the importance of complying with them. As a condition of employment, employees will be required to conform to Encore Canada’s policies and procedures concerning the security of personal information.
When Encore Canada discloses personal information to third parties, it will require these third parties to safeguard all personal information in a way that is consistent with Encore Canada’s measures and which complies with these principles.
Encore Canada will use care in the disposal or destruction of personal information to prevent unauthorized parties from gaining access to the information.
Principle 8 – Openness Concerning Policies and Practices
Encore Canada will make readily available to individuals specific information about its policies and practices relating to the management of personal information.
Individuals whose personal information is in the custody and control of Encore Canada will be able to acquire information about Encore Canada’s privacy policies and practices without unreasonable effort. This information will be made available in a form that is generally understandable.
The information made available by Encore Canada will include:
(a) the contact information of the Privacy Officer;
(b) the means of gaining access to personal information held by Encore Canada;
(c) a description of the type of personal information that is held by Encore Canada, including a general account of its use;
(d) a copy of any brochures or other information that explain Encore Canada’s policies, standards, or codes; and
(e) a description of the type of personal information that is made available to related subsidiaries or affiliates of Encore Canada.
Encore Canada will also employ its website to make publicly information concerning its privacy policies and procedures.
Principle 9 – Individual Access to Personal Information
Upon written request, Encore Canada will (i) inform an individual of the existence, use and disclosure of his or her personal information and (ii) give the individual access to that information, except where the law requires or permits Encore Canada to deny access. Individuals are entitled to challenge the accuracy and completeness of that personal information and request that it be amended, if appropriate.
In providing an account of third parties to whom Encore Canada has disclosed personal information about an individual, Encore Canada will attempt to be as specific as possible. When it is not possible to provide a list of the organizations to which Encore Canada has actually disclosed personal information about an individual, Encore Canada will provide a list of organizations to which it may have disclosed personal information about the individual.
Encore Canada may require the individual to provide sufficient information to permit Encore Canada to provide an account of the existence, use and disclosure of personal information. The information provided by the individual in response to Encore Canada’s request will be used only for this purpose.
Encore Canada will respond to an individual’s request within a reasonable time. Encore Canada may respond to the request at a cost to the individual if it informs the individual of the estimate of the fee in advance, and it may require the individual to pay a deposit for all or part of the fee.
Where Encore Canada is entitled to withhold access to personal information, and that information is severable form other information for which access is requested, Encore Canada will provide access to an edited copy of the personal information after severing such information.
Where Encore Canada is satisfied on reasonable grounds that an individual successfully demonstrates that personal information is inaccurate or incomplete, Encore Canada will correct the information as required. Encore Canada will send the corrected personal information to third parties having access to the information in question.
Where Encore Canada disagrees with the requested correction, Encore Canada will annotate the personal information with the correction that was requested but not made.
Principle 10 – Challenging Compliance
An individual will be able to direct a challenge concerning compliance with the above principles to the Privacy Officer.
Encore Canada will establish procedures to receive and respond to complaints or inquiries about Encore Canada’s policies and practices relating to the handling of personal information. The complaint procedure will be easily accessible and simple to use.
Encore Canada will inform individuals who make inquiries or lodge complaints of the use of the existence of relevant complaint procedures.
Encore Canada will investigate all complaints. If Encore Canada finds that a complaint is justified, Encore Canada will take appropriate measures, including, if necessary, amending its policies and practices.
Last Updated March 26,2020