Compliance with PIPEDA
- Principle 1: Accountability; we responsibly maintain and protect the information we have about our clients and their customers.
- Principle 2: Identifying Purposes; the purpose for which information is being collected is explained either before or when it is collected.
- Principle 3: Consent; we will obtain our clients’ consent to disclose information on customer accounts to the Canadian Credit Bureaus.
- Principle 4: Limiting Collection; we will limit the information we collect to what is needed for the purposes of collecting an overdue or bad debt account on behalf of our client.
- Principle 5: Limiting Use, Disclosure and Retention; we will use and disclose our clients and their customer information only for the purposes we have identified, or when it is required or permitted by law.
- Principle 6: Accuracy; we strive to keep all personal information as accurate, complete and up to date as possible.
- Principle 7: Safeguards; we protect our clients’ information with appropriate safeguards and security measures. Our employees and service providers only have access to your information for the identified purposes and access is permitted only to the extent necessary for such purposes. CCA has taken several measures to safeguard information, such as restricting physical access to our offices and the use of computer passwords and file encryption utilities.
- Principle 8: Openness; upon request, CCA will provide specific details about our information handling policies and procedures.
- Principle 9: Access; we will provide access for any individual to information we have about them. Individuals may check the accuracy of their information and amend it as appropriate. Accuracy is important to CCA.
- Principle 10: Challenging Our Compliance; we will investigate and respond to concerns about any aspect of our handling of private information. Internal compliance audits will be conducted on a regular basis.
Protection of Personal Information
All personal information collected through any completed forms or contact via telephone, mail, fax, e-mail or any other means is maintained in a secure environment.
Collection and Use of Personal Information
CCA collects personal information such as name, address, contact information, date of birth, and financial information. CCA may request a Social Insurance Number for credit report identification purposes only. CCA collects these numbers at the option of the customer.
CCA uses the information it collects to confirm identification, to collect a debt on behalf of our client or to provide receivable management services to our client.
No personal or non-personal information is collected on our web site through use of browser cookies or any other means. A browser cookie is data, which is transferred to your computer for record keeping purposes.
Disclosure of Personal Information
Data Controller and Data Processor
The information is used by CCA employees in order to provide debt collection and receivable management services. This positions CCA as the data processor for most information stored and processed by CCA.
Additionally, CCA employs a variety of technologies and partners that periodically act as sub-processors. If users have any questions or concerns about the processing and handling of their personal information, they may communicate directly with the Privacy Officer(s) at CCA.
Legal Basis of Processing
- Clients have given their consent to use their customer information for one or more specific purposes.
- Provision of data is necessary for the performance of the service we provide our clients within contractual agreements.
- Processing is necessary for compliance with a legal obligation.
- Processing is necessary for the legitimate interests pursued by the controller or by a third party.
- Personal data collected for the performance of a contract between CCA and a business customer is retained until such contract has been entirely performed or the business customer asks for the data to be deleted.
- Personal data collected for CCA’s legitimate requirements shall be retained as long as needed to fulfill such purposes.
- Retention and disposal of Documents containing Personal information; where required by law, we will retain all paper or electronic documents containing personal information for a period of seven years.
Processing Requests and Inquiries from Individuals
Access their data. Individuals have the right to learn if CCA is processing their data, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the data undergoing processing.
Verify and seek rectification. Individuals have the right to verify their data accuracy and ask for it to be updated or corrected.
Lodge a complaint. Individuals have the right to bring a claim before their competent data protection authority.
Process for Individuals to Exercise These Rights
Any requests to exercise individual rights can be directed to CCA through our Chief Privacy Officer. These requests can be exercised free of charge and will be addressed by CCA as early as possible and always within one month.
Chief Privacy Officer Contact:
Phone: 1-866-958-5850 Ext. 120
Website: Contact Us / Complaints / Disputes
Mail: “Attention Chief Privacy Office” 300-317 Donald Street, Winnipeg, MB, R3B 2H6