Personal information is any identifying information about an individual. This includes an individual’s name, home address, phone number, age, sex, marital or family status, any identifying number (ex. SIN), financial information, educational history, employment role or history, etc.

Due to the nature of s01ve’s business, personal information also includes distinct technological identifiers, such as email addresses, Internet Provider addresses (IP address), MAC addresses, WiFi geolocations, and any other present or future data that could be used to identify an individual.

We collect only the personal information that is needed for the purposes of providing services to our clients. We normally collect information directly from the interacting party, whether it is client information about that client, or broker information about that broker. We may collect your information from other persons or organizations with your consent or as authorized by law.

The types and frequency of this collection are different depending on the service requested, and is broken down, below:

We inform our clients, before or at the time of collecting personal information, of the purposes for which we are collecting the information. However, we don’t provide this notification when a client, partner, or broker volunteers information for an obvious purpose (for example, producing a credit card for payment of a product or service when the information will only be used to process the payment).

We will ask for your express consent for some purposes and may not be able to provide certain services if you are unwilling to provide consent to the collection, use, or disclosure of certain personal information. Where express consent is needed, we will normally ask clients to provide their consent in a formalized way orally (in person or by telephone), in writing (by signing a consent form or waiver), or electronically (by clicking a button or applying a digital signature).

s01ve does not apply “opt-out” consent, and your personal information will only be disclosed to partners or third parties in order to facilitate the service for which s01ve was granted the personal information originally. We do not share client information with partners for the purposes of business development, marketing, or promotions without express consent from our clients.

A client may withdraw consent for s01ve to use and disclose their personal information at any time unless the personal information is necessary for us to fulfill our legal obligations. We will respect your decision, but we may not be able to provide you with certain products and services if we do not have the necessary personal information.

s01ve may collect, use, or disclose client personal information without consent only as authorized by law. For example, we may not request consent when the collection, use, or disclosure is reasonable for an investigation or legal proceeding, to collect a debt owed to our organization, in an emergency that threatens life, health, or safety, or when the personal information is available in a public resource like a telephone directory.

s01ve will use and disclose personal information only for the purposes for which the information was collected, except as authorized by law. For example, we may use client contact information to deliver goods. The law also allows us to use that contact information for the purpose of collecting a debt owed to our organization, should that be necessary.

As outlined in our consent policy, we will only use your personal information for a new business purpose after asking your express consent.

s01ve takes the protection of personal information very seriously, and uses a variety of technologies, processes, and policies to ensure that client personal information is protected against unauthorized or accidental release. Due to the nature of our business, we strive to exceed reasonable measures where possible.

The information collected by the s01ve Scan will be held indefinitely for as long as the client intends to do business with s01ve. Data collected by the s01ve Scan is not retained for individuals or organizations that do not wish to do business with s01ve. If a client ends their business relationship with s01ve, we will only retain the client information necessary to maintain any legacy accounting and administration until such time that all accounts are settled and closed, a period not exceeding six years from the last tax year of the client relationship.

We will notify the Office of the Information and Privacy Commissioner of Alberta, without delay, of a security breach affecting personal information if it creates a real risk of significant harm to individuals. This extends as well to any potential breach of any vendors or business partners of s01ve which operate outside of Canada.

s01ve may be required, from time to time, to conduct investigative work on behalf of clients. Records and results from investigative work are kept indefinitely in encrypted storage drives, duly segregated from s01ve’s day-to-day IT infrastructure, and/or in high-security storage if the records exist as physical copies.

At the expiry of a record’s useful period, or at the direction of a client, s01ve will render the information non-identifying by conducting one or more of the following:

Clients of s01ve have the right of access to their own personal information in a record that is in our custody or under our control, subject to some exceptions. For example, organizations are required under the Personal Information Protection Act (PIPA) to refuse to provide access to information that would reveal personal information about an individual. Organizations are authorized under the Act to refuse access to personal information if disclosure would reveal confidential business information. Access may also be refused if the information is privileged or contained in mediation records.

As required by law, s01ve may also refuse access to some personal records based on their relation to any past or ongoing contracted forensic investigations.

If s01ve refuses a request in whole or in part, we will provide the reasons for the refusal in writing. In some cases where exceptions to access apply, we may withhold information and provide you with the remainder of the record.

You may make a request for access to your personal information by writing to s01ve’s Privacy Officer. The Officer’s contact information is included within this policy. s01ve asks that you provide sufficient information in your request to allow us to identify the information you are seeking.

You may also ask request information about our use of your personal information and any disclosure of that information to persons outside our organization.

You may also request a correction of an error or omission in our records at any time.

s01ve will respond to all records requests within 45 calendar days, unless granted an extension. We may also charge a reasonable fee to provide information from our records, but not to make a correction. We will advise of any applicable fees before beginning to process your request.

If you have a question or concern about any collection, use or disclosure of personal information by s01ve, or a request for access to your own personal information, please contact s01ve’s PIPA-mandated Privacy Officer in the first instance for service.