The Policies presented in this privacy statment apply to the perosonal information of individuals. information about an identifiable corporation or other organization is not personal information under applicable privacy legislation and , therefore , is not protected by this policy. furthermore , the name , Title , business address and business telephone numbers of an employee of an organization are not considered personal information.
Mr. Merchant Inc., as an organization, is ultimately responsible for the collection, use and disclosure of personal information under its control and remains liable for compliance with applicable privacy legislation. At Mr. Merchant Inc., the development of policies and procedures, implementation and compliance with those policies and procedures and the handling of inquires or complaints related to those policies and procedures, is delegated to the Administration Officer.
Purposes of Collection:
Information is collected for the following purposes:
- To supply goods and services as requested by the individual,
- To process credit card transactions,
- To provide information about products and promotions,
- To identify products that may be of interest, and
- To verify the accuracy and/or validity of information provided by an individual.
In carrying out the above purposes, personal information may be disclosed to third parties who do this work on behalf of Mr. Merchant Inc. In instances where personal information is disclosed to third parties, Mr. Merchant Inc. will ensure that the third party has appropriate policies in place that will provide a similar level of protection.
Personal identification information:
We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, register on the site, place an order, fill out a form, subscribe to the newsletter and in connection with other activities, services, features or resources we make available on our Site. Users may be asked for, as appropriate, name, email address, mailing address, phone number.
Users may, however, visit our Site anonymously.
We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personally identification information, except that it may prevent them from engaging in certain Site related activities.
Non-personal identification information:
We may collect non-personal identification information about Users whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Site, such as the operating system and the Internet service provider utilized and other similar information.
The information collected will be limited to that reasonably required to fulfill the purposes outlined above.
Limiting Use, Disclosure and Retention:
Information will be used for the purposes specified above.
Except as noted in this paragraph, information will not be disclosed to third parties unless consent has been obtained to do so. Disclosure of information to facilitate the delivery and payment for goods and services shall be implied when this information is provided at the time of setting up an account or placing an order. Disclosure of information to a third party contracted to perform a service on behalf of Mr. Merchant Inc. (for example, a mail house or consulting firm) shall be subject to requirements to maintain the confidentiality of such information and to only use it for the purposes of fulfilling such contracted service.
Information will be retained throughout the period that a person has an active account with Mr. Merchant Inc. An account shall be deemed active if there has been a transaction within the previous 12months. Information may be destroyed any time after an account is designated as inactive, and will be destroyed for all accounts that have not had a transaction in the past five years. Legislative requirements will take precedence and may require a longer retention period.
Information shall be sufficiently accurate, complete and up to date to minimize the possibility that inappropriate information may be used to make a decision about an individual.
The need for accurate, complete and up-to-date information depends of the purposes for which it is collected, used and disclosed. Personal information that is used on an on-going basis or is disclosed to third parties should generally be accurate, complete and up-to-date.
On request, Mr. Merchant Inc. will inform an individual of the personal information collected and how it is used and disclosed. Mr. Merchant Inc. will provide access to the information for the purposes of ensuring its accuracy and completeness.
Reasonable safeguards will be used to protect personal information against loss, theft or unauthorized access, disclosure, copying, use or modification.
Access to information stored by electronic means will be protected by password. Log on profiles are created that only provide access to the information required to perform one’s duties.
All information is collected and stored on central servers. Reasonable steps are taken to prevent unauthorized access by external sources. Access to servers is limited to IT staff. Servers are physically secured and data is backed-up daily to prevent loss.
Access to hard copy, sensitive personal information is limited to those who require the information to perform their duties. When unattended, filing cabinets containing sensitive personal information are locked.
The safeguards employed depend on the sensitivity of the personal information. More sensitive information is afforded higher levels of protection.
When a request is received in writing by the Privacy Officer at the address below, an individual shall have access to their personal information and an account of how it has been used and an account of third parties to which it has been disclosed. This information shall be provided within 30 days.
If a request for access is denied, the denial shall be made in writing and explain the reasons for denial. Some valid reasons for denial include: excessive cost to retrieve, relative to the risk to privacy; it would likely reveal personal information about a third party, unless said third party grants consent for the individual to access the information; it is protected by client-solicitor privilege; it would reveal confidential commercial information; it would threaten the life or security of another; it was collected with respect to an investigation or generated in the course of a formal dispute resolution process.
If an individual has a complaint with respect to Mr. Merchant Inc.’s privacy policies and procedures, it can be submitted in writing to the Privacy Officer at the address below.
All complaints shall be investigated and appropriate corrective measures taken.
If personal information exists, an individual shall have access to it and if the individual successfully demonstrates its inaccuracy or incompleteness it shall be amended through correction, deletion or addition.
Any inquiries, requests or complaints should be addressed to:
Mr. Merchant Inc.,
114 New Pines Trail,
Brampton, ON L6Z 0H7