Effective Date: November 1, 2024
1. Introduction

Welcome to bhm28.ca. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Accountability

We are responsible for the personal information under our control and have designated a Privacy Officer to ensure compliance with PIPEDA. If you have any questions or concerns about our privacy practices, please contact our Privacy Officer at policies@bhm28.ca

We collect personal information for the following purposes:

• To provide and manage our services
• To communicate with you
• To improve our website and services
• To comply with legal and regulatory requirements

4. Consent

We obtain your consent to collect, use, and disclose your personal information, except where permitted or required by law. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice.

5. Limiting Collection

We collect personal information only for the purposes identified in this Privacy Policy. The information we collect is limited to what is necessary for these purposes.

6. Limiting Use, Disclosure, and Retention

We use and disclose your personal information only for the purposes for which it was collected, unless you have consented otherwise or as required by law. We retain your personal information only as long as necessary to fulfill these purposes, or as required by applicable laws and regulations.

Data Retention Periods:

• Account Information:We retain your account information for as long as your account is active and for a reasonable period thereafter in case you decide to reactivate your account. We may also retain certain information as required by law or for legitimate business purposes.
• Transaction Data:We retain transaction data for a minimum of [insert period, e.g., 7 years] to comply with legal and regulatory requirements.
• Communication Data:We retain communication data (e.g., emails, chat logs) for [insert period, e.g., 2 years] to ensure we can address any follow-up questions or issues.
• Usage Data:We retain usage data for 1 year to analyze and improve our services.

After the retention period has expired, we securely delete or anonymize your personal information to prevent unauthorized access or use.

7. Accuracy

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. You may request corrections to your personal information by contacting our Privacy Officer.

8. Safeguards

We protect your personal information using appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction.

9. Openness

We make information about our privacy policies and practices readily available to you. This Privacy Policy is available on our website, and you may contact our Privacy Officer for more information.

10. Individual Access

You have the right to access your personal information held by us. To request access, please contact our Privacy Officer. We will respond to your request within a reasonable time and provide you with access to your personal information, subject to legal restrictions.

11. User Rights

Under PIPEDA, you have the following rights regarding your personal information:

• Right to Access:You can request access to your personal information and obtain information about how it is being used and disclosed.
• Right to Correction:You can request corrections to your personal information if it is inaccurate or incomplete.
• Right to Withdraw Consent:You can withdraw your consent for the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions.
• Right to Complain:You can file a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights under PIPEDA have been violated.

12. Data Breach Procedures

We take data breaches very seriously and have implemented procedures to respond promptly and effectively. In the event of a data breach involving your personal information, we will:

• Contain the Breach:Immediately take steps to contain the breach and prevent further unauthorized access.
• Assess the Risks:Evaluate the risks associated with the breach, including the sensitivity of the information and the potential harm to individuals.
• Notify Affected Individuals:Inform affected individuals as soon as possible if there is a real risk of significant harm. Notifications will include details of the breach, the information involved, and steps individuals can take to protect themselves.
• Report to Authorities:Notify the Office of the Privacy Commissioner of Canada if the breach poses a real risk of significant harm.
• Review and Mitigate:Investigate the cause of the breach and implement measures to prevent future breaches.

13. Challenging Compliance

If you have any concerns about our compliance with this Privacy Policy or PIPEDA, please contact our Privacy Officer. We will investigate and respond to your concerns promptly.

Contact Information

Privacy Officer
bhm28.ca
policies@bhm28.ca