Where do we keep your personal information?
We usually keep your personal information in Canada. However, we may sometimes disclose your personal information outside Quebec or your province of residence. In such cases, your personal information is also subject to the laws of that province or other location. Before we disclose your personal information, we take appropriate measures to protect it. We also sign a contract that includes appropriate security measures for the information communicated.
How long do we keep your personal information?
We retain your personal information for as long as necessary to fulfill the purposes described in this Policy. Even if you no longer have a relationship with us, we may need to keep your personal information for a period of time to meet our retention obligations. While we retain it, we continue to protect your personal information and ensure its confidentiality.
When we no longer need the information, we destroy it permanently and securely.
How do we protect your personal information?
Personal information in our possession is protected by various physical, technological and organizational measures against unauthorized access, loss,
theft, disclosure or modification. Your personal information will be protected by reasonable security safeguards appropriate to the sensitivity of the information in our files.
We are committed to taking appropriate precautions to protect your personal information from loss, fraud or unwanted use.
We restrict access to your personal information. Only those employees who need to process your personal information to perform their duties have
access to it. These people only have access to the information they need to perform their duties.
We have established roles and responsibilities for our employees throughout the life cycle of your personal information, from collection to destruction.
These roles and responsibilities are described in our Privacy Governance Framework. We regularly review and update them.
We implement robust security measures. We have put in place several types of measures to protect your personal information against loss, theft and unauthorized access, use or disclosure. These include
- physical measures, such as locked premises;
- technological measures, such as firewalls and payment card industry security standards;
- organizational measures, such as the adoption of an information security policy.
We destroy your personal information once we have fulfilled our obligations. For more information, see How long do we keep your personal information?
What rights do you have regarding your personal information?