Commercial Credit Adjusters Privacy Policy

Commercial Credit Adjusters (CCA) respects the privacy of our clients and their customers and has published the following privacy policy.

Compliance with PIPEDA

CCA complies with the following principles of Canada’s Personal Information Protection and Electronic Documents Act;

Principle 1: Accountability; we responsibly maintain and protect the information we have about our clients and their customers.
Principle 2: Identifying Purposes; the purpose for which information is being collected is explained either before or when it is collected.
Principle 3: Consent; we will obtain our clients’ consent to disclose information on customer accounts to the Canadian Credit Bureaus.
Principle 4: Limiting Collection; we will limit the information we collect to what is needed for the purposes of collecting an overdue or bad debt account on behalf of our client.
Principle 5: Limiting Use, Disclosure and Retention; we will use and disclose our clients and their customer information only for the purposes we have identified, or when it is required or permitted by law.
Principle 6: Accuracy; we strive to keep all personal information as accurate, complete and up to date as possible.
Principle 7: Safeguards; we protect our clients’ information with appropriate safeguards and security measures. Our employees and service providers only have access to your information for the identified purposes and access is permitted only to the extent necessary for such purposes. CCA has taken several measures to safeguard information, such as restricting physical access to our offices and the use of computer passwords and file encryption utilities.
Principle 8: Openness; upon request, CCA will provide specific details about our information handling policies and procedures.
Principle 9: Access; we will provide access for any individual to information we have about them. Individuals may check the accuracy of their information and amend it as appropriate. Accuracy is important to CCA.
Principle 10: Challenging Our Compliance; we will investigate and respond to concerns about any aspect of our handling of private information. Internal compliance audits will be conducted on a regular basis.

Protection of Personal Information

CCA is committed to the protection of individual privacy and personal information (PII) disclosed to us during the course of business.
All personal information collected through any completed forms or contact via telephone, mail, fax, e-mail or any other means is maintained in a secure environment.

Collection and Use of Personal Information

CCA collects personal information such as name, address, contact information, date of birth, and financial information. CCA may request a Social Insurance Number for credit report identification purposes only. CCA collects these numbers at the option of the customer.
CCA uses the information it collects to confirm identification, to collect a debt on behalf of our client or to provide receivable management services to our client.
No personal or non-personal information is collected on our web site through use of browser cookies or any other means. A browser cookie is data, which is transferred to your computer for record keeping purposes.

Disclosure of Personal Information

CCA does not sell information about our clients or their customers to others. CCA will only disclose personal information to credit rating organizations in order to protect and enforce the rights and property of our clients or if the disclosure is required or permitted by law.

Data Controller and Data Processor

Commercial Credit Adjusters business clients are the data providers/controllers for most of the information that is entered into the CCA Collection Resource System and supporting systems.
The information is used by CCA employees in order to provide debt collection and receivable management services. This positions CCA as the data processor for most information stored and processed by CCA.
Additionally, CCA employs a variety of technologies and partners that periodically act as sub-processors. If users have any questions or concerns about the processing and handling of their personal information, they may communicate directly with the Privacy Officer(s) at CCA.

Legal Basis of Processing

Below are the legal bases for CCA to collect personal information;

Clients have given their consent to use their customer information for one or more specific purposes.
Provision of data is necessary for the performance of the service we provide our clients within contractual agreements.
Processing is necessary for compliance with a legal obligation.
Processing is necessary for the legitimate interests pursued by the controller or by a third party.

Retention Time

Personal data is to be processed and stored for as long as required to fulfill the purpose for which it is collected, therefore;

Personal data collected for the performance of a contract between CCA and a business customer is retained until such contract has been entirely performed or the business customer asks for the data to be deleted.
Personal data collected for CCA’s legitimate requirements shall be retained as long as needed to fulfill such purposes.
Retention and disposal of Documents containing Personal information; where required by law, we will retain all paper or electronic documents containing personal information for a period of seven years.

Furthermore, CCA may be obligated to retain personal data for a more extended periods whenever required to perform a legal obligation or upon order of an authority. After seven years in which such documents are no longer required to conduct our normal course of business, the aforementioned documents will be destroyed or securely deleted.

Processing Requests and Inquiries from Individuals

Consent. Consent to collect and process private information for the purpose of collecting a legally owned debt is not required.
Access their data. Individuals have the right to learn if CCA is processing their data, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the data undergoing processing.
Verify and seek rectification. Individuals have the right to verify their data accuracy and ask for it to be updated or corrected.
Lodge a complaint. Individuals have the right to bring a claim before their competent data protection authority.

Process for Individuals to Exercise These Rights

Any requests to exercise individual rights can be directed to CCA through our Chief Privacy Officer. These requests can be exercised free of charge and will be addressed by CCA as early as possible and always within one month.

Chief Privacy Officer Contact:
Phone: 1-866-958-5850 Ext. 120
Website: Contact Us / Complaints / Disputes
Email: QA@cca.ca
Mail: “Attention Chief Privacy Office” 300-317 Donald Street, Winnipeg, MB, R3B 2H6

Cookie Policy

The CCA website uses cookies without PII for functional and statistical purposes. These cookies are used for Google metrics, analytics and for supporting the chat application.