1.1. Policy Objective
The objective of this policy is to outline K-Line’s information handling practices and is based on the 10 Fair Information Principles that form the foundation for the Personal Information Protection and Electronic Documents Act (PIPEDA).
This policy applies to the employees of K-Line Maintenance & Construction Ltd., K-Line Equipment Leasing (Toronto) Ltd., K-Tek Electro-Services Ltd., and K-Line International (Canada) Ltd., hereinto referred to as “K-Line” or the “Company”.
- how and why we collect, use and disclose your personal information
- how and when your informed consent will be requested
- how you can access your personal information
- how we protect your personal information
1.2. Purposes Of Collecting Personal Information
We collect personal information for the purposes of:
- Paying and receiving payments from vendors/customers.
- Determining how K-Line is performing from the perspective of customers and ensuring they have relevant contact information for the customer.
- Selling merchandise and services.
Our company collects the following information:
- Phone Number
- Email Addresses
- Bank Information
- GST/HST Number
- Credit References
- Accounts Receivable Contact Name
- Accounts Payable Contact Name
- Opinions from customer surveys
- Credit Card Information
We will seek valid and meaningful consent before or at the time of collection of personal information. Consent will be obtained through email, phone calls, Customer Information Forms, or in-person. Consent will be obtained again if a new purpose for collection of information is identified. You may refuse or withdraw your consent at anytime.
1.4. Limiting Collection
1.5. Limiting Use, Disclosure And Retention
We will limit the use of information to the purposes stated in this policy.
Our company will not share your information with any third parties without prior consent. In instances where law enforcement requires the disclosure of customer information, written consent will be obtained from the customer before releasing the information.
Information that does not have a specific purpose or for which its purposes are no longer required will be destroyed. Information will not be retained for longer than its intended purpose or the retention period required by law. Once information has passed its retention period, it will be destroyed in a secure manner.
Our company will keep your information as accurate and complete as possible in order to fulfill the purposes for which it was collected. Requests to update information can be made to email@example.com.
Your information is safeguarded with administrative, technical and physical controls. The following controls have been implemented to protect your information:
- Organizational controls:
- Access management
- Staff training
- Technical controls:
- Access controls to servers and applications
- Security patches
- Disk encryption
- Network / domain segregation
- Encryption on the website
- Physical controls:
- Physical entry controls
- Locked cabinets
- Restricted access to the facilities
1.9. Individual Access
If you would like to access your personal information that is stored on our systems, you can make a request in writing to firstname.lastname@example.org. If information is found to be inaccurate, you can correct the information by contacting our Privacy Officer.
1.10. Inquiries And Challenging Compliance
Office of the Privacy Commissioner of Canada
30, Victoria Street
Date of last review: 11/26