Privacy and data policy
We have a simple approach to data protection and privacy which adheres to the PIPEDA fair information principles.
- Identifying Purposes
- limiting Collection
- Limiting use, Disclosure, and Retention
- Individual Access
- Challenging Compliance
We collect your personal information so that we can provide you with the products, services or information that we supply. Sometimes we collect personal information from a third party or from a publicly available source, but only if you have consented to your information being used in this way, or would reasonably expect us to collect it in this way. We only collect this information from companies or sources that are allowed to disclose it to us. Below you will find a breakdown of the different ways your personal information is collected.
What we collect from public/clients
User contact forms
When you fill out a contact form wishing to get in touch with us, we will collect that information and use it to get in touch with you in response to your query. We may use the information to reach out to you to inform you of some of the services we provide, provided it is in line with your original query.
When you sign up with us and create a login with us
When you sign up to our website using your personal details, we will collect this personal information so that your user preferences are stored when you come back and login.
Credit card payments including PayPal
If you make a credit card payment on our website please be aware that in some instances your credit card details may be made fully available to us so that we can process your payment. You can rest assured in that we destroy all credit card information the moment the payment has gone through.
What we collect from your online activity
- Site performance indicators: these give us information on how our websites are used, so that we can make the necessary improvements or amendments to make your experience a better one.
- Community Analytics Cookies: these give us the statistics to understand how many people are on our website, which areas are popular and which areas we need to work on.
communityanalytics.ca may collect, use and/or share your location data so as to provide you with location-based services. Please be aware that your location data may only be tracked through an opt-in process which most browsers and devices will notify you of. No specific location data will be collected without your authorisation being provided.
What we collect and receive from others
We may also collect personal information from other companies that are able to disclose it to us as this information is received in line with their privacy policies.
Use and Disclosure
We only use personal information for the purpose which was requested of us, or for the purposes which directly relate to one of our functions or activities. We will not provide your personal information to other entities or bodies, or any other party unless one of the following applies:
- You have consented
- You would reasonably expect, or have been informed, that information of such kind would be passed on to those individuals, entities or bodies
- It is otherwise required or authorised by law, or reasonably necessary for the enforcement of a criminal law or of a law imposing a pecuniary penalty, or for the protection of public revenue
- It may prevent or lessen a serious and imminent threat to somebody’s life or health.
Quality of Personal Information
We do what we can to keep your personal information up to date and accurate at all times as this allows us to deliver a better service to you. If any information we have for you needs to be corrected, you can contact us via firstname.lastname@example.org.
We take active steps to protect the personal information we hold against loss, unauthorised access, use, modification or disclosure, and against other misuse. These steps include password protection for all of our IT systems. While we cannot share with you details of our entire security system for safety reasons, if you have any questions, you can always contact us at email@example.com.
When no longer required or requested by you, all personal information is destroyed in a secure manner.
Your Right to access and correct Your Personal Information
- Under the Canadian Privacy Act PIPEDA, you have the right to seek access to information which Spatial Media holds about you and to correct that information if it is incorrect.
- If you wish to exercise your rights, please contact Spatial Media using the contact information below. Spatial Media may require you to provide verification of your identity and to pay an administrative fee to provide a copy of the information that it holds.
- Please note that in certain circumstances Spatial Media may withhold access to your information where Spatial Media has the right to do so under The Canadian Privacy Act, for example, where disclosing the information may reveal the identity of a third party.
Rights for EU based persons
Under the GDPR, if you are an EU based person you have the right to:
- access and correct your personal information.
- in certain circumstances, have your personal information erased.
- restrict the processing of your personal information.
- move, copy or transfer your personal data easily for your own purposes across different services in a safe and secure way.
- object to processing where CA is relying on its legitimate interests as the basis for processing.
- withdraw your consent to our processing of your personal information where your consent is being relied on by Spatial Media.
If you wish to exercise your rights, please contact Spatial Media using the contact information below; we may require you to provide verification of your identity.
Access and Correction
At Spatial Media, we do everything we can to keep your personal information accurate. If you find that any information we hold about you is incorrect, you can contact us at firstname.lastname@example.org, or as per the contact details below and we will endeavour to assist you with your questions. Please bear in mind that under Canadian privacy laws, there may be situations where we cannot provide access to such personal information. For instance, if it would reasonably affect someone else’s privacy or may pose a threat to someone’s life, health or safety.
If you have any complaints or feel that there has been a breach of the Canadian Privacy Principles, or a registered APP code, you can contact us at email@example.com or via another option below.
If you are not satisfied with the process of making a complaint to our Privacy Officer you may make a complaint to the Office of the Privacy Commissioner of Canada.
Data Breach Response Plan
Our data breach response plan is our framework which sets out the roles and responsibilities for managing an appropriate response to a data breach as well as describing the steps to be taken by an entity in managing a breach if one ever occurs. Our plan is constantly reviewed and updated, for the most recent copy please click here to download.
How to Contact Us
We understand that your personal information is important to you and are thrilled that you made it this far! If you have any questions or concerns about this policy or our practices you can get in touch with us in the following ways:
Phone: 1 800 474-2153
Address: 25 Columbine Ave, Toronto ON M4L 1P4