Privacy Policy
A. Introduction
The purpose of this Privacy Policy (the “Policy”) is to outline the Sound Research Inc.’s (the “Sound”) obligations with respect to the proper collection, use and disclosure of Personal Information (as defined below) of clients and third parties in compliance with British Columbia’s Personal Information Protection Act (“PIPA”). The Sound recognizes and respects the importance of privacy and the sensitivity of its clients’ Personal Information.
The Sound will continue to review this Policy to make sure that it is relevant and remains current with changing standards in the consulting profession and the law.
B. Definitions
“Business Contact Information” means information that enables an individual to be contacted at work, including his/her name, title, business address, business telephone number, fax number and e-mail address;
“Personal Information” means personally identifiable information about clients and third parties, but does not include Business Contact Information or Work Product Information;
“Personal Information Officer” means that officer whose contact information is set out in paragraph L of this Policy;
“Work Product Information” means information prepared or collected by an individual or group of individuals as part of their employment or business responsibilities or activities related to their employment or business.
C. Scope and Application of this Policy
This Policy applies to all Personal Information of clients, employees, suppliers, agents, contractors, partners and affiliated entities and other third parties that is collected, used or disclosed by the Sound.
This Policy does not, however, impose any limits on the collection, use and disclosure of:
- information that is not personally identifiable;
- Business Contact Information; and
- information that is publicly available or is required or authorized by law to be collected, used or disclosed.
D. Purpose for Collection
The Sound collects Personal Information for the following purposes:
- to provide consulting services to its clients;
- to develop, enhance and market consulting services and products to its clients and third parties;
- to better understand the needs and preferences of its clients and third parties;
- to establish and maintain relations with its clients, employees and third parties;
- to meet legal and regulatory requirements; and
- such additional purposes that are identified.
E. Consent
The Sound requires the informed consent of individuals to collect, use or disclose any Personal Information, subject to certain exceptions discussed below. Consent can be express, implied or given through an authorized representative and may be given orally, in writing or electronically depending on such factors as the sensitivity of the Personal Information, applicable time limitations and the reasonable expectations of the client or third party.
By retaining the Sound to provide consulting services, an individual consents to the collection, use and disclosure of Personal Information by the Sound in order to properly advise the individual.
If possible, the Sound will seek consent to use and disclose the Personal Information at the same time as it collects the Personal Information.
After the Personal Information has been collected, the Sound may want to use the Personal Information for a new purpose. In such circumstances, the Sound will not use or disclose Personal Information for the new purpose without obtaining the consent of the individual concerned, unless permitted or authorized by law.
Subject to contractual or legal arrangements, an individual may withdraw or refuse consent. In such circumstances, the Sound will stop collecting, using and disclosing the Personal Information of such individual. The Sound will inform such individual of the likely consequences of withdrawing his or her consent, if any.
The Sound can collect, use or disclose Personal Information without an individual’s knowledge or consent in the following circumstances:
- when such collection, use or disclosure is clearly in the interests of the individual and consent cannot be obtained in a timely way;
- when such collection, use or disclosure is for the medical treatment of the individual and the individual is unable or does not have the legal capacity to give consent;
- when the information is publicly available;
- when such collection or use is on behalf of another organization and the individual has consented to the collection of Personal Information by that other organization, as long as the Personal Information is collected and used by the Sound for the purposes for which it was previously collected and the Personal Information assists the Sound in carrying out work on behalf of the other organization; and
- when such collection, use or disclosure is required or authorized by law.
F. Limiting Collection of Personal Information
The Sound will only collect Personal Information that is necessary for purposes disclosed above or disclosed at or before the time of collection or as permitted by law. The Sound will collect Personal Information only by fair and lawful means.
Where practical, the Sound will collect Personal Information directly from the individual to whom the information relates. When necessary or as otherwise permitted by PIPA, the Sound may collect Personal Information from other sources.
G. Limiting Use, Disclosure and Retention of Personal Information
The Sound will only use or disclose Personal Information for the purpose for which it was collected, subject to the consent of the individual or as permitted or required by law. Under some circumstances, the Sound may have a legal obligation or right to disclose Personal Information without an individual’s consent.
The Sound may disclose an individual’s Personal Information:
- to a third party who in the reasonable judgment of the Sound is seeking the information as an agent of the individual;
- to a third party engaged by the Sound to perform functions on its behalf, including research or data processing; to collect fees or other amounts owed to the Sound;
- to a public authority or agent of a public authority if, in the reasonable judgement of the Sound, it appears that there is imminent danger to life or property which could be avoided or minimized by disclosure of the information;
- where the client or third party consents to such disclosure; or
- as required or authorized by law.
The Sound will retain Personal Information for only as long as is necessary for the purposes for which it was collected, for legal or business purposes or as required by law. Subsequently, such information will be destroyed, erased or made anonymous in accordance with established procedures.
H. Accuracy of Personal Information
The Sound will make reasonable efforts to ensure that Personal Information in its control is as accurate, complete and current as required for the purposes for which it was collected and will minimize the possibility that incorrect Personal Information may be used to make a decision about a client or third party or may be disclosed to a third party. However, the Sound will not routinely update other Personal Information unless it is necessary to fulfill the purposes for which it was collected.
I. Safeguarding Personal Information
The Sound will protect Personal Information in its control against risks of loss, theft, unauthorized access, disclosure, copying, use, modification or destruction by security safeguards that are appropriate to the sensitivity of the information.
The Sound will use appropriate security measures when destroying or disposing of Personal Information to prevent unauthorized access, use and disclosure of such information.
J. Access and Correction
Clients and third parties have a right to make a written request for access to their Personal Information in the control of the Sound.
The Sound will, within 30 days, or such other time period if the Sound has obtained an extension under PIPA, inform the individual of the Personal Information about that individual in its possession, what it is being used for, and where reasonably possible, to whom it has been disclosed.
If the Sound is granted an extension under PIPA to respond to a request to view Personal Information, it will notify the individual of the reason for the extension, the time when a response can be expected and the right of the individual to complain about the extension to British Columbia’s Information and Privacy Commissioner.
The reasons for not providing access to Personal Information may include that the Personal Information:
- contains references to other individuals;
- cannot be disclosed for legal, security or commercial reasons;
- would threaten the life or security of another individual;
- is necessary to protect the Sound’s rights and property;
- relates to existing or anticipated legal proceedings against that individual; or
- was collected as part of an investigation (as defined in PIPA).
If an individual’s request for access to Personal Information is rejected by the Sound, the Sound will:
- inform the individual of the reasons for the rejection and the applicable provision of PIPA on which the rejection is based;
- provide the name, title and contact information of the Personal Information Officer who can address the refusal; and
- inform the individual that she or he is entitled to request a review of the decision.
The Sound reserves the right to charge a reasonable fee for access to Personal Information that will vary with the type and amount of information requested. Where a cost will be incurred by the requesting individual, the Sound will inform the individual of the cost and request further direction from the individual on whether or not the Sound should proceed with the request. In some circumstances, the Sound will require a deposit for all or part of the fee.
Individuals may request corrections to their Personal Information in the control of the Sound. If an individual’s request for correction is rejected by the Sound, the Sound will make a notation of such request and rejection on the individual’s file or Personal Information.
K. Questions and Complaints
Questions and complaints relating to this Policy and the Sound’s handling of an individual’s Personal Information should be directed in writing to the Sound’s Personal Information Officer or any other person designated for this purpose by the Sound. The Sound will investigate the complaint and notify the complainant of the results of the investigation.
If the Sound does not address the individual’s concerns to the satisfaction of the individual, the individual may ask for a review of the Sound’s decision or make a complaint to the British Columbia Information and Privacy Commissioner.
L. Personal Information Officer
The Sound’s Personal Information Officer may be contacted at:
Office of the Personal Information Officer
The Sound Research
Suite 250, 49 Dunlevy Avenue
Vancouver BC
V6A 3A3
Tel: 604.732.1090
Email: info@thesoundresearch.com
M. Address of British Columbia’s Information and Privacy Commissioner
British Columbia’s Information and Privacy Commissioner may be contacted at:
Office of the Information and Privacy Commissioner for British Columbia
P.O. Box 9038, Stn. Prov. Govt.
Victoria, BC V8W 9A4
Tel: in Vancouver: 604-660-2421
in Victoria: 250-387-5629
rest of BC: 1-800-663-7867
Fax: 250-387-1696