Privacy policy
PIPEDA
Effective January 1, 2004 personal information used in Canadian commercial activities will be protected under the federal Personal Information Protection and Electronic Documents Act (PIPEDA). This act applies to traditional paper-based and online commercial activities. The following web site describes the objectives of the new act:
The following items are quoted from this site:
Under PIPEDA, personal information must be:
- collected with consent and for a reasonable purpose
- used and disclosed for the limited purpose for which it was collected
- accurate
- accessible for inspection and correction
- stored securely
Under PIPEDA personal information does not include the name, business title, business address, or business telephone of any employee, i.e. information on a business card.
The PIPEDA establishes a set of ten principles that organizations must follow when collecting, using and disclosing personal information in the course of commercial activity. The Principles are as follows:
Accountability: An organization is responsible for personal information under its control and shall designate an individual or individuals who are accountable for the organization's compliance with the following principles.
Identifying Purposes: The purposes for which personal information is collected shall be identified by the organization at or before the time the information is collected.
Consent: The knowledge and consent of the individual are required for the collection, use or disclosure of personal information, except where inappropriate.
Limiting Collection: The collection of personal information shall be limited to that which is necessary for the purposes identified by the organization. Information shall be collected by fair and lawful means.
Limiting Use, Disclosure, and Retention: Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information shall be retained only as long as necessary for the fulfillment of those purposes.
Accuracy: Personal information shall be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.
Safeguards: Personal information shall be protected by security safeguards appropriate to the sensitivity of the information.
Openness: An organization shall make readily available to individuals specific information about its policies and practices relating to the management of personal information.
Individual Access: Upon request, an individual shall be informed of the existence, use and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.
Challenging Compliance: An individual shall be able to address a challenge concerning compliance with the above principles to the designated individual or individuals accountable for the organization's compliance.
Dreamspin Fibres conformance
Any personal information collected and used by Dreamspin Fibres that falls under PIPEDA will be controlled according to the following policy:
Accountability
The following person is responsible for compliance with the privacy principles:
Maureen Harding
Owner
Dreamspin Fibres
Contact information
Identifying Purposes
The information that is collected and stored at Dreamspin Fibres is only what is necessary for us to provide a service to our customers and to perform routine operations such as invoicing, technical support, and any function that is required by law.
Consent
We will seek the consent of any individual whose information we have on file should it become necessary for us to pass on that information to a third party.
Limiting Collection
Our web site does not make use of cookies or perform any function that spies on the computers that access the site.
We collect and store only the personal employee information that is required by law, such as social insurance number and other payroll related information.
We collect and store the following customer and vendor information:
- individual or company name
- address
- phone and fax numbers
- email address
- web site address
- contact names and positions
- sales and purchasing history
Credit card information:
- No credit card information is stored in our computer files
- Credit card sales drafts are kept in secure storage.
- These, and related documents, are kept on file to fulfill various legal requirements
We do not collect or store the following information:
- debit card numbers
- bank account numbers
Limiting Use, Disclosure, and Retention
Personal information that is collected and stored at Dreamspin Fibres is used only for our business operations and any function that is required by law. We do not release any of this information to third parties.
Accuracy
We will ensure that personal information stored at Dreamspin Fibres is as accurate as possible.
Safeguards
At Dreamspin Fibres, personal information is stored in password protected computer files or in secure storage.
Openness
Our privacy policy is available on request and by means of this web site.
Individual Access
Upon request we will make available to an individual all of the individual's information that we have on file and will make the appropriate corrections as necessary.
Challenging Compliance
Any issues relating to the conformance of this privacy policy should be addressed to the individual noted above.