The privacy of individuals connected with our business, including our customers, contractors, and employees, has always been of great importance to Tri-5 & Muscle. Keeping personal information in strict confidence is a cornerstone of our business. Regardless of how the range of products and services we offer our customers expands, we will always strive to protect the privacy of personal information, subject to any consent an individual had provided for its use.
This policy describes the principles on which Tri-5 & Muscle will protect the privacy of personal information. The policy is based on the Canadian Standards Association Model Code for the Protection of Personal Information. This policy is part of Tri-5 & Muscle’s commitment to ensuring that all personal information of individuals in its possession is protected and used in accordance with the law.
Personal information is any information about an identifiable person, other than the name, title, business address and business telephone number of a person. It does include such things as a person’s home address, date of birth, and social insurance number. With respect to customers, such information is collected primarily in connection with services and products provided by Tri-5 & Muscle. Employees may be asked to provide such information to Tri-5 & Muscle in connection with matters relating to their employment. In all cases, Tri-5 & Muscle is committed to protecting the privacy of individuals and the integrity of their personal information.
Cookies and related technologies
Tri-5 & Muscle’s website platform uses cookies. A cookie is a small piece of data or a text file that is downloaded to the user’s computer or mobile device when they access certain websites. Cookies may contain text that can be read by the web server that delivered the cookie to the user. The text contained in the cookie generally consists of a sequence of letters and numbers that uniquely identifies their computer or mobile device; it may contain other information as well.
Tri-5 & Muscle uses Google Analytics cookie to collect information about the use of the website. We use the information we get from Google Analytics to analyze traffic, re-market our products and services to users, improve our marketing, advertising, and to improve our website. Google Analytics collects only an anonymized version of the IP address assigned to the user on the date they visit our website, not their name or other identifying information. We do not combine the information collected using Google Analytics with Personal Data. Google Analytics plants a permanent cookie on the user’s web browser to identify them as a unique user the next time they visit our website, but the cookie cannot be used by anyone but Google. For more information on how Google collects and processes the data, visit https://policies.google.com/technologies/partner-sites.
Users can prevent Google Analytics from using their information by opting out at this link: https://tools.google.com/dlpage/gaoptout.
1 Accountability
Tri-5 & Muscle is responsible for personal information under its control, including any personal information disclosed to third parties for handling or administrative purposes. Tri-5 & Muscle will designate a Privacy Coordinator who is accountable for Tri-5 & Muscle’s compliance with this Policy and with privacy legislation.
1.1 While ultimate accountability for Tri-5 & Muscle compliance with the Policy rests with the Privacy Coordinator and the Operators of Tri-5 & Muscle, day-to-day compliance with the Policy is delegated to select staff throughout Tri-5 & Muscle.
1.2 With respect to personal information that has been transferred to a third party for processing, Tri-5 & Muscle will use contractual or other means which may include the examination of such third party’s practices with respect to personal information, to safeguard personal information while it is being handled by a third party.
1.3 Tri-5 & Muscle will implement internal guidelines and practices to give effect to this Policy, including:
(a) establishing procedures to protect personal information;
(b) establishing procedures to receive and respond to complaints and inquiries;
(c) developing information to explain Tri-5 & Muscle policies and procedures; and
(d) training staff and communicating to staff information about Tri-5 & Muscle’s policies and procedures
1.4 Tri-5 & Muscle will implement practices to effectively monitor compliance with this policy, including the appointment of a Privacy Coordinator and regular privacy compliance reviews.
2 Identifying the Purposes for which Personal Information is Collected
Tri-5 & Muscle will identify the purposes for which personal information is collected at, or before, the time the information is collected unless such purposes are obvious.
2.1 Tri-5 & Muscle will ensure that the purposes for which personal information is collected and the way in which the information may be used are clear to the individual. In some cases, the purpose will be clear from the context of the interaction, and in other circumstances, a written or verbal explanation may be required.
For example:
When a customer orders a product online, some basic personal information may be collected, such as name and address, which is necessary to effectively serve the customer.
Employees are required to give certain personal information that is essential to the employer-employee relationship, such as SIN and banking information for payroll deposits.
3 Consent
Tri-5 & Muscle will not collect, use or disclose the personal information of a person without the individual’s knowledge and consent, except in certain limited circumstances permitted by law, such as where immediate health of a person is at risk, or in connection with the breach of an agreement or a law.
3.1 Tri-5 & Muscle will obtain consent, either express or implied, for the use or disclosure of personal information at the time of the collection of the information. In certain circumstances, consent with respect to use or disclosure will be sought after the information has been collected but before use, particularly if Tri-5 & Muscle wants to use the information for a purpose not previously identified to the individual.
3.2 Tri-5 & Muscle is committed to obtaining meaningful consent to the collection, use and disclosure of personal information. To achieve this aim, the purposes for which the information will be used, if not obvious, will be explained in such a manner that the individual can reasonably understand how the information will be used or disclosed.
3.3 Tri-5 & Muscle will not, as a condition of the supply of a product or service, unreasonably require an individual to consent to the collection, use, or disclosure of information beyond what is required in the circumstances.
3.4 The way in which Tri-5 & Muscle seeks consent may vary, depending on the circumstances and the type of information collected. In determining the type of consent that may be required, Tri-5 & Muscle will consider the nature of the information, the use to which the information will be put, applicable laws and the type of interaction in which the information is provided.
3.5 Consent may be express or implied, given orally, electronically or in writing and provided by an action or inaction. Consent may be given through a legally appointed representative or a legal guardian.
For example:
Implied consent will be provided in circumstances where it is clear that the collection and use of the information are required for a specific purpose. For example, when a customer orders a product or service online, certain basic information will be collected from the customer and this will constitute implied consent for Tri-5 & Muscle to use that information for the purpose of processing the order.
3.6 An individual, subject to legal or contractual limitations, may withdraw his or her consent at any time on sufficient notice to Tri-5 & Muscle. Withdrawal of consent may result in Tri-5 & Muscle becoming unable to provide or continue to provide the person with certain services, products or benefits, and the individual will be given notice of the implications of the withdrawal of his or her consent.
4 Limits on the Collection of Personal Information by Tri-5 & Muscle
The collection of personal information by Tri-5 & Muscle will be limited to that which is necessary for the purposes identified by Tri-5 & Muscle. At all times, Tri-5 & Muscle will collect personal information by fair and lawful means.
It is possible that Tri-5 & Muscle may, with the consent of an individual, collect and use information about that individual from a third party. For instance, employment references may be checked if an individual is applying for a job.
5 Limits on the Use, Disclosure and Retention of Personal Information by Tri-5 & Muscle
Personal information will not be used or disclosed by Tri-5 & Muscle for purposes other than those for which it was collected, except with the consent of the individual or as required or permitted by law. Personal information will be retained only as long as reasonably necessary for the fulfillment of those purposes or as required by law. When personal information is discarded, it will be done in an appropriate manner (e.g. shredding).
6 The accuracy of Personal Information held by Tri-5 & Muscle
Tri-5 & Muscle will make reasonable efforts to ensure that personal information of individuals is as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.
6.1 Personal information will not be updated without the consent of the individual and it will only be updated if it is necessary for the continued use of personal information.
6.2 Tri-5 & Muscle will make reasonable efforts to obtain information from individuals in order to update information on hand if required to fulfill the purposes for which the information was collected. Once informed by a person that personal information held by Tri-5 & Muscle about them is inaccurate, Tri-5 & Muscle will update the information as soon as possible.
Safeguarding Personal 7 7 Information
Tri-5 & Muscle will protect personal information through the use of security safeguards appropriate to the sensitivity of the information.
7.1 Tri-5 & Muscle will employ security safeguards that will protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification, regardless of the format in which the information is held.
7.2 The nature of the safeguards used by Tri-5 & Muscle will vary depending on the sensitivity of the information that has been collected, the amount, distribution, and format of the information, and the method of storage of the information. A higher level of protection will safeguard more sensitive information.
7.3 The methods of protection used by Tri-5 & Muscle will include:
(a) physical measures, for example, locked filing cabinets and restricted access to offices;
(b) organizational measures, for example, limiting access on a “need-to-know” basis; and
(c) technological measures, for example, the use of passwords and encryption.
7.4 Tri-5 & Muscle will ensure that its employees who are in contact with personal information are trained in the appropriate protection of personal information and that they are aware of the importance of maintaining confidentiality of personal information. Employees are required to abide by the Policy.
7.5 If personal information is disclosed to third parties for the purpose of processing or another administrative purpose, Tri-5 & Muscle will make reasonable efforts to ensure that the third party uses safeguards to protect personal information which is comparable to those used by Tri-5 & Muscle.
8 Openness
Tri-5 & Muscle will make available to individuals information about its policies and practices relating to the management of personal information. Tri-5 & Muscle is open about the policy it has to ensure the protection of personal information.
8.1 Tri-5 & Muscle will make this information readily available to individuals. The information will be made available in a form that is generally understandable.
8.2 Tri-5 & Muscle may make information on its policies and practices available in a variety of ways, depending on the nature of the service or product being provided and the nature of the personal information.
9 Individual Access to Personal Information
Upon the receipt by Tri-5 & Muscle of a written request, an individual will be informed, within a reasonable time following such request, of the existence, use, and disclosure of his or her personal information and will be given access to that information. In certain limited circumstances, as permitted by law, certain information, such as that collected and held in the context of an investigation of the breach of a law or a contract, will not be disclosed to the individual. Tri-5 & Muscle has established procedures for an individual to follow in order to access their personal information.
9.1 Subject to applicable laws, upon receipt of a written request from an individual, Tri-5 & Muscle will inform him or her whether or not Tri-5 & Muscle holds personal information about the individual and make reasonable efforts to indicate the source of the information. In addition, Tri-5 & Muscle will, upon written request, provide a summary of the use that has been made or is being made of this information.
9.2 An individual may be required to provide sufficient information to permit Tri-5 & Muscle to provide an account of the existence, use, and disclosure of personal information. The information provided will only be used for this purpose.
9.3 Upon receipt of a written request, Tri-5 & Muscle will provide an individual with the identities of third parties to which it may have disclosed personal information about the individual and the purpose for which the information may have been disclosed to the third party.
9.4 Tri-5 & Muscle may charge a reasonable fee to cover its costs of providing the information, provided that Tri-5 & Muscle will inform the individual of the approximate cost of providing the information prior to doing so and will afford the individual the opportunity to withdraw his or her request.
9.5 If an individual successfully demonstrates the inaccuracy or incompleteness of personal information held by Tri-5 & Muscle, Tri-5 & Muscle will amend the information as required. Where appropriate, the amended information will be transmitted to third parties having access to the information in question.
9.6 Tri-5 & Muscle may decline to provide individual access to his or her information in accordance with applicable laws. If such refusal is made, Tri-5 & Muscle will inform the individual of the reasons why such access has been denied, except when Tri-5 & Muscle is prohibited from doing so by law.
10 Complaints and Questions
A person about whom personal information is kept may challenge Tri-5 & Muscle concerning its compliance with the Policy.
10.1 Complaints and questions regarding Tri-5 & Muscle’s compliance with this Policy may be made in writing to 14448-124 Avenue, Edmonton, AB, T5L 3B3. Attn: Privacy Coordinator.
10.2 Tri-5 & Muscle has procedures in place to receive and respond to inquiries or complaints about this Policy and its practices relating to the handling of personal information.
10.3 If an individual is not satisfied with a response by Tri-5 & Muscle to a complaint or is otherwise not satisfied with Tri-5 & Muscle’s policies and practices with respect to its handling of personal information, a complaint may be made to the provincial privacy commissioner of the province where the personal information of the individual is kept.