- AAC is accountable for personal information in its custody or control.
- AAC will continue to implement procedures to protect the privacy of personal information with safeguards appropriate to the sensitivity of the information. For example, AAC will safeguard personal information in its custody or control from loss or theft and from unauthorized access, use, disclosure, copying or modification through appropriate security measures depending on the sensitivity, format and storage of the personal information. As well, AAC will use care when destroying or disposing of personal information to prevent unauthorized access, use or disclosure of any personal information.
- AAC will seek assurances regarding the privacy of personal information that has been transferred to a third party for use or processing by requiring that those third parties safeguard all personal information as required by law.
- AAC employees with access to personal information are expected to respect the confidentiality of such information.
2. Notice and Consent
- AAC will generally obtain consent from individual members, non-member participants, and others regarding the purpose for collection, use or disclosure of personal information before, or at the time it collects the personal information, except as required by law. Consent may be express, deemed or implied.
- Except in limited circumstances, the consent of an individual may be withdrawn at any time. These limited circumstances include where the personal information is required to provide the good or service, or the withdrawal of the consent would frustrate the performance of a legal obligation. The withdrawal of consent may restrict ACC’s ability to provide a particular good or service— if this is the case, ACC will explain the situation to assist the individual in making the decision.
- Pursuant to applicable provincial legislation, AAC will provide notice to its employees and volunteers before collecting, using or disclosing personal information reasonably necessary for establishing, managing, or concluding the employment or volunteer relationship. Notice may be express, constructive or implied in the circumstances.
- In determining the appropriate form of consent, or notice if applicable, AAC will consider the sensitivity of the personal information and the reasonable expectations of the subject individual.
- In seeking consent or in giving notice of collection, AAC will explain in plain language the purposes for which personal information will be collected, used or disclosed. The purposes may be expressed orally or in writing.
- AAC may collect personal information using a variety of means, including written and verbal communications and through its website.
- AAC collects, uses and discloses personal information for a variety of purposes, including:
- to understand the needs and preferences of members, non-member participants, employees, and volunteers;
- to develop, enhance, market or provide agility-related products and services to meet the needs or expectations of members and non-member participants;
- to maintain complete and accurate membership files for business purposes (e.g. membership renewals, communication with members, voting, newsletter dissemination, and the delivery of agility awards and titles);
- to manage and develop business and operations, including personnel and employment matters, and billing for goods and services;
- to meet legal and regulatory requirements;
- to comply with lawful requests from government agencies (e.g. Revenue Canada); and
- such additional purposes that are identified to an individual.
- On request, persons collecting personal information will elaborate on the purpose or object for such collection or refer the individual to the designated person who can do so.
- Personal information will not be used or disclosed for any new purpose without first identifying the new purpose and providing notice to or obtaining the consent of the individual, as applicable, unless permitted by law.
- In some circumstances, AAC may collect, use or disclose personal information without notice or consent. Some examples include:
- it is reasonable to expect that the collection with the consent of the individual would compromise the availability or the accuracy of the personal information and the collection is reasonable for an investigation or a proceeding;
- the collection is necessary to determine the individual's suitability to receive an honour, award or similar benefit;
- it is clearly in the individual’s best interest and the appropriate notice or consent cannot be obtained in a timely manner;
- there is an emergency that threatens an individual's life, health, or personal security;
- it is to a lawyer representing AAC; and
- it is required or authorized by law.
3. Limiting Collection, Use, Disclosure, and Retention of Personal Information
- AAC will take reasonable steps to limit the amount and type of personal information it collects uses and discloses. AAC only collects personal information which is reasonably necessary for its identified purposes. AAC will keep personal information for only as long as necessary for the identified purposes or as required by law.
- If personal information has been used to make a decision about an employee or another individual, AAC will keep the personal information for at least one year and, if necessary, a reasonably sufficient additional period to allow the individual to have access to it after the decision has been made.
- AAC will maintain controls, schedules, practices and procedures for retention and destruction of personal information.
4. Access, Openness, and Compliance
- Any individual may request to be informed of the existence, use and disclosure of personal information pertaining to him or her. Upon a good faith request in writing, AAC will respond to the individual making the request within 30 business days of the request. AAC may extend the response time in certain cases. Unless exempted by law, AC will provide the individual with access to his or her personal information under AAC’s possession or control and an accounting of the collection, use and disclosure of his or her personal information.
- Except for employee personal information, AAC may charge a reasonable fee for access. AAC may provide an estimate of the fee in advance and in some cases may require a deposit for all or part of the fee. The requesting individual may be asked to prove their identity.
- AAC will not disclose personal information that:
- could reasonably be expected to threaten the safety or physical or mental health of an individual other than the individual who made the request;
- can reasonably be expected to cause immediate or grave harm to the safety or to the physical or mental health of the individual who made the request;
- would reveal personal information about another individual; and
- would reveal the identity of an individual who has provided personal information about another individual, such as reports, assessments, and reviews, and the individual providing the personal information does not consent to disclosure of his or her identity.
- In some cases, AAC may not provide access to personal information. Examples of when this may occur are:
- it is work product information and/or disclosing the personal information could reveal confidential commercial or corporate information;
- if the personal information is protected by solicitor-client privilege;
- if the personal information relates to existing or anticipated legal proceedings against the individual making the request;
- if the personal information is collected for purposes of an investigation or the information is the result of an arbitration, mediation, or other formal dispute resolution process;
- where the request is frivolous or vexatious; and
- where the denial of access is required or authorized by law;
- If AAC denies an individual’s request for access to personal information, AAC will advise the individual of the reason for the refusal.
- AAC will use reasonable efforts to ensure that personal information is accurate and complete for the purposes for which it is to be used. An individual is permitted to challenge the accuracy and completeness of their personal information and, in appropriate circumstances, AAC will amend its records. Any differences as to accuracy or completeness that cannot be resolved will be noted in the individual’s file, if applicable.
- AAC will not disadvantage an individual because the individual, acting in good faith, has invoked or may invoke, the provisions of this policy or any applicable federal or provincial privacy legislation.
ACC’s Privacy Officer may be contacted at:
Direct Line: 1-519-225-2821
Any concern, inquiry, or request related to privacy should be directed to the Privacy Officer.