Privacy Policy
This policy statement sets out the privacy policies and practices for Legend Power with respect to the collection, use and disclosure of personal information. This policy may be updated by Legend Power giving reasonable notice of the revised Policy (including by e-mail), and this Policy may be supplemented or modified by agreements entered into between Legend Power and an individual from time to time. Personal information is any information about an identifiable individual, as defined under the Personal Information Protection Act (BC) or other applicable laws.
Privacy Officer – The Privacy Officer is responsible for ensuring Legend Power’s compliance with this policy statement.
Paul Moffat
Privacy Officer
1480 Frances Street.
Vancouver, BC V5L 1Y9
Collection, Use and Disclosure Purposes – Except where otherwise required or permitted by law, Legend Power will inform individuals of the purposes for the collection, use or disclosure of the individual’s personal information, prior to collecting, using or disclosing that personal information.
Legend Power collects information from customers and potential customers through various means including guest registration sign-up sheets, campaign registrations, web-form registrations, purchase and sale agreements and customer survey responses. The type of information collected will vary depending on the means through which an individual submits his/her personal information. The type of information collected may include an individual’s name, residential address, e-mail address, home phone number, occupation, employment status, age group, financial and credit information.
Requirements for consent to collection, use, or disclosure of personal information vary depending on circumstances and on the type of personal information that is intended to be collected, used or disclosed. In determining whether consent is required and, if so, which form of consent is appropriate, Legend Power will take into account both the sensitivity of the personal information at issue and the purposes for which Legend Power will use the information. Consent may be express, implied (including through use of “opt-out” consent where appropriate), or deemed. For example, if an individual provides his/her mailing address and requests information regarding a particular product, consent to use the address to mail product information to the individual is implied.
On giving reasonable written notice to Legend Power, an individual may withdraw consent to the collection, use or disclosure of his or her personal information. Upon receipt of this withdrawal, Legend Power will notify the individual of the likely consequences of withdrawing his or her consent. Except where otherwise required or permitted by law, Legend Power will then stop collecting, using or disclosing the individual’s personal information.
Limits to the Collection of Personal Information – Except where required or permitted by law, Legend Power will limit the collection of personal information to that which is necessary to fulfill the purposes for which it is collected. Personal information will be collected by fair and lawful means.
Use, Disclosure and Retention – Legend Power will not use or disclose personal information for purposes other than those for which it was collected, except with the consent of the individual or as required or permitted by law. Once the information is no longer required to fulfill its intended purposes, and is no longer required or permitted to be retained for legal or business purposes, it will be destroyed, erased or made anonymous.
Legend Power may disclose certain personal information to third party service providers and to affiliated entities in order to carry out work on behalf of Legend Power. Prior to making this disclosure, Legend Power will take appropriate steps to ensure that such recipients safeguard the personal information and use the information only for authorized purposes.
Accuracy – Legend Power will make reasonable efforts to ensure that any personal information collected by it, or on its behalf, is accurate and complete if the personal information is likely to be used by Legend Power to make a decision that affects the individual to whom the personal information relates or if the information is likely to be disclosed to a third party.
Security – Legend Power will protect personal information with security safeguards appropriate to the sensitivity of the information. Security safeguards are employed to protect personal information against loss, theft and unauthorized access, collection, use, disclosure, copying, modification or disposal or similar risks. The nature of these safeguards will vary depending on the sensitivity of the personal information that has been collected. The methods of safeguards include:
- Physical security measures such as locked filing cabinets and areas
- Security clearances and limiting access on a “need to know” basis
- Technological measures such as the use of passwords
- Legend Power will inform employees about Legend Power’s policies and procedures for protecting personal information and employees will be required to conform to Legend Power’s Privacy Policy.
Openness – Upon request, Legend Power will make information available about its personal information policies and practices, and its complaint process.
Individual Access – Upon written request, with sufficient detail to enable Legend Power to identify the individual and the personal information being sought, Legend Power will inform an individual of the existence, use and disclosure of his or her personal information under Legend Power’s control and will provide access to that information, unless otherwise prohibited or permitted by law. Legend Power will respond to all requests within 30 days. Legend Power may extend the time limit for a further 30 days, or, for a longer period, with the Privacy Commissioner’s permission or as otherwise permitted by law.
Upon written request, an individual may request Legend Power to correct an error or omission in the personal information that is under Legend Power’s control. If Legend Power is satisfied on reasonable grounds that a correction should be made, it will amend the information as requested as soon as reasonably possible, and it will send the corrected information to each organization to which it has disclosed that information during the year prior to the date of correction.
Challenging Compliance – An individual may direct a complaint concerning compliance with the Policy to Legend Power’s Privacy Officer. The complaint must be in writing. Within a reasonable
time of receipt of the complaint, the Privacy Officer will conduct an investigation into the compliant. The format of this investigation will vary depending on the circumstances and may or may not involve an interview of the complainant and/or Legend Power employees conduct by the Privacy Officer.
Within a reasonable time of conclusion of the investigation, the Privacy Officer will inform the complainant, either verbally or in writing, that the complaint is either: (a) denied (if, in the Privacy Officer’s opinion, it has no merit): or (b) allowed (if, in the Privacy Officer’s opinion, the complaint is valid).
If the Privacy Officer allows the complaint, Legend Power will take appropriate measure necessary to rectify the source of the complaint.