Ten Privacy Principles
Principle 1 – Accountability
Envoy is responsible for personal information under its control. Envoy has designated a Privacy Officer to be accountable for Envoy's compliance with the Act.
Principle 2 – Identifying Purposes for the Collection of Personal Information
Envoy shall identify the purposes for which personal information is collected at or before the time of collection. Envoy collects personal information from its customers to facilitate delivery of its services.
Principle 3 – Consent for the Collection, Use and Disclosure of Personal Information
The knowledge and consent of the individual are required for the collection, use or disclosure of personal information, except where required or permitted by law.
Principle 4 – Limiting Collection
The customer information collected will be limited to those details that Envoy has identified as necessary to deliver services. Information will be collected by fair and lawful means.
Principle 5 – Limiting Use, Disclosure and Retention of Personal Information
Customer personal information will not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information will be retained only as long as necessary for the fulfillment of those purposes.
Principle 6 – Ensuring Accuracy of Personal Information
Customer information will be maintained in an accurate, complete and up-to-date form as is necessary to fulfill the purposes for which it is to be used.
Principle 7 – Ensuring Safeguards for Personal Information
Envoy shall ensure personal information is protected by security safeguards appropriate to the sensitivity of the information under its control.
Principle 8 - Openness about Personal Information Practices
Envoy will make readily available to individuals, specific information about its policies and practices relating to the management of personal information.
Principle 9 - Customer Access to Their Personal File
Upon request, a customer shall be informed of the existence, use and disclosure of their information, and shall be given access to it. Customers may verify the accuracy and completeness of their information, and may request that it be amended, if appropriate.
Principle 10 – Challenging Compliance with Envoy's Privacy Policies and Practices
An individual will be able to address a challenge concerning the compliance with Envoy's Privacy Officer.