Ten Privacy Principles

Envoy's Privacy Policy is based on Ten Privacy Principles developed by the Canadian Standards Association and set out by PIPEDA (The Personal Information Protection and Electronic Documents Act).

Principle 1 – Accountability

Envoy is responsible for personal information under its control. Envoy has designated a Privacy Officer to be accountable for Envoy's compliance with the Act.

Principle 2 – Identifying Purposes for the Collection of Personal Information

Envoy shall identify the purposes for which personal information is collected at or before the time of collection. Envoy collects personal information from its customers to facilitate delivery of its services.

Principle 3 – Consent for the Collection, Use and Disclosure of Personal Information

The knowledge and consent of the individual are required for the collection, use or disclosure of personal information, except where required or permitted by law.

Principle 4 – Limiting Collection

The customer information collected will be limited to those details that Envoy has identified as necessary to deliver services. Information will be collected by fair and lawful means.

Principle 5 – Limiting Use, Disclosure and Retention of Personal Information

Customer personal information will not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information will be retained only as long as necessary for the fulfillment of those purposes.

Principle 6 – Ensuring Accuracy of Personal Information

Customer information will be maintained in an accurate, complete and up-to-date form as is necessary to fulfill the purposes for which it is to be used.

Principle 7 – Ensuring Safeguards for Personal Information

Envoy shall ensure personal information is protected by security safeguards appropriate to the sensitivity of the information under its control.

Principle 8 - Openness about Personal Information Practices

Envoy will make readily available to individuals, specific information about its policies and practices relating to the management of personal information.

Principle 9 - Customer Access to Their Personal File

Upon request, a customer shall be informed of the existence, use and disclosure of their information, and shall be given access to it. Customers may verify the accuracy and completeness of their information, and may request that it be amended, if appropriate.

Principle 10 – Challenging Compliance with Envoy's Privacy Policies and Practices

An individual will be able to address a challenge concerning the compliance with Envoy's Privacy Officer.