At Danyliw and Mann Professional Corporation (DMPC), we are committed to protecting your privacy and safeguarding your personal, business and financial information. This Privacy Statement applies to Danyliw and Mann Professional Corporation and all its Associates, Employees and Individuals associated with DMPC.
The purpose of this Privacy Statement is to inform you about the types of Personal Information that DMPC collects, uses and discloses. It explains how we use and disclose that information, the choices you have regarding such use and disclosure, and how you may correct that information.
This Privacy Statement is designed to meet the standards prescribed by the Personal Information Protection and Electronic Documents Act and the regulations thereunder ("PIPEDA") as well as applicable provincial privacy legislation and regulations, including, the Personal Information Protection Act (Alberta), the Personal Information Protection Act (British Columbia), and An Act respecting the protection of personal information in the private sector (Quebec). We also note that in addition to these standards, we continue to be subject to the confidentiality rules of the Institutes of Chartered Professional Accountants.
What is Personal Information?
"Personal Information" is any information that is identifiable with you, as an individual. This information may include but is not limited to your name, mailing address, telephone number, email address, business facsimile number, age, gender, marital status, health status, financial status, credit card information and credit history. Personal Information, however, does not include your name, business title or business address or business telephone number in your capacity as an employee of an organization.
How is your Personal Information collected?
We will always collect your Personal Information by fair and lawful means (for example, when you engage us to provide services, or speak to a DMPC representative). We collect Personal Information from you and from third party service providers, where we have obtained your consent to do so or as otherwise permitted by law. We will keep the Personal Information that we collect at the DMPC offices.
How do we use your Personal Information? We identify the purposes for which we use your Personal Information at the time we collect such information from you and obtain your consent, in any case, prior to such use. We generally use your Personal Information for the following purposes:
To whom do we provide your Personal Information?
We identify to whom, and for what purposes, we disclose your Personal Information, at the time we collect such information from you and obtain your consent to such disclosure.
Generally, we will only make disclosures of Personal Information to such persons for which you provide your consent. In addition, we may send Personal Information outside of the country for the purposes set out above, including for process and storage by service providers in connection with such purposes. In particular, while electronic data storage for DMPC is located in Canada, the primary and back-up servers and email correspondence to and from DMPC goes through Microsoft servers located in the US
However, you should note that to the extent that any Personal Information is out of the country, it is subject to the laws of the country in which it is held, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country.
When and how do we obtain your consent?
We generally obtain your consent prior to collecting, and in any case, prior to using or disclosing your Personal Information for any purpose. You may provide your consent to us either orally, electronically or in writing. The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the personal information and the reasonable expectations you might have in the circumstances. We will not, as a condition of the supply of our professional services or products, require you to consent to the collection, use, disclosure or protection of information beyond that which is required to fulfill the specified and legitimate purposes for which the information is being collected.
How do we ensure the privacy of your Personal Information when dealing with our affiliates and other third parties?
How long will we utilize, disclose or retain your Personal Information?
We may keep a record of your Personal Information, correspondence or comments in a file specific to you. We will utilize, disclose or retain your Personal Information for as long as necessary to fulfill the purposes for which that Personal Information was collected and as permitted or required by law.
How can you review your Personal Information that we have collected, utilized or disclosed?
If you make a written request to review any Personal Information about you that we have collected, utilized or disclosed, we will provide you with any such Personal Information to the extent required by law. We will make such Personal Information available to you in a form that is generally understandable, and will explain any abbreviations or codes.
How do you know that the Personal Information we have on you is accurate?
We will ensure that your Personal Information is kept as accurate, complete and up-to-date aspossible. We will not routinely update your Personal Information, unless such a process isnecessary. We expect you, from time to time, to supply us with written updates to your Personal Information, when required.
What if the Personal Information we have on you is inaccurate?
At any time, you can challenge the accuracy or completeness of your Personal Information in ourrecords. If you successfully demonstrate that your Personal Information in our records isinaccurate or incomplete, we will amend the Personal Information as required. Where appropriate, we will transmit the amended information to third parties having access to your Personal Information.
What safeguards have we implemented to protect your Personal Information?
We have implemented physical, organizational, contractual and technological security measures to protect your Personal Information from loss or theft, unauthorized access, disclosure, copying, use or modification. The only employees who are granted access to your Personal Information are those with a business 'need-to-know' or whose duties reasonably require such information.