DOWNTOWN LANGLEY BUSINESS ASSOCIATION PERSONAL INFORMATION PROTECTION POLICY
The purpose of this policy is to govern Downtown Langley Business Association's collection, storage, use, and disclosure of personal information in a manner which recognizes both the right of individuals to protect their personal information and our need to collect, store, use, and disclose personal information for purposes reasonably related to our operations.
This policy is intended to ensure compliance with the requirements of the B.C. Personal Information Protection Act (the “Act”) and adherence to the principles set out in the National Standard of Canada entitled Model Code for the Protection of Personal Information.
For the purposes of this Personal Information Protection Policy:
"Contact information" means information to enable an individual at a place of business to be contacted and includes the name, position name or title, business telephone number, business address, and business email of the individual.
"Cookies" means small pieces of data that web pages place in devices (e.g., computers or mobile phones) to assist in returning to that page.
"Personal information" means any information about an identifiable individual, whether it was collected before or after this Policy was first published, including but not limited to the individual’s name, address, age, gender, identification numbers, income, employment, assets, liabilities, credit card numbers, credit ratings, financial plans and other finance-related information. “Personal information” may also include a physical description, habits, personality, character, marital history, immigration status, travel or movement details, lifestyle, leisure activities, professional or trade union memberships, and licences and permits held. Personal information does not include contact information. Downtown Langley Business Association may or may not have personal information within these enumerated categories with respect to any specific individual.
We have designated an Employee (the “Personal Information Administrator”) to be responsible for ensuring our compliance with the requirements of the Act and we shall make available the Personal Information Administrator’s contact information.
We have and shall continue to: develop and follow policies and practices that are necessary to ensure compliance with the Act; provide a process to respond to complaints that may arise relating to the operation of the Act; and make those practices, policies, and processes available upon request.
B. Collection, Use, And Disclosure of Personal Information
We shall only collect, use, or disclose personal information when the individual’s consent has been obtained, or when the Act allows the collection, use, or disclosure without the individual’s consent, or when the Act deems the consent to have been given by the individual.
As a condition of supplying a product or service, we shall only require an individual to consent to our collection, use, or disclosure of personal information when that collection, use, or disclosure is reasonably necessary to provide a product or service.
Where required by the Act, on or before collecting personal information about an individual we shall make available to the individual, or to such other person(s) from whom the personal information is being collected, our purposes for the collection of the personal information and the contact information for the Personal Information Administrator.
In the course of our operations, we may transfer personal information to third-party service providers, some of whom may be located outside of Canada. In all such circumstances, we utilize contractual and other means to ensure that the information is used and disclosed only for the limited purposes of the service provider’s engagement with us, and that reasonable and comparable safeguards are in place while the information is in the custody of the third party.
C. Use and Disclosure of Personal Information
We shall only use or disclose personal information for purposes that are reasonably appropriate in the circumstances and fulfill the purposes for which the personal information was collected or otherwise permitted by the Act.
D. Access to Personal Information
When required by the Act we shall provide to an individual, upon request of the individual: that individual’s personal information which is under our control; details about how the individual’s personal information is being used by us; and details about the individuals and organizations to whom the individual’s personal information has been disclosed.
When required by the Act, we shall correct an error or omission in the individual’s personal information and send the corrected personal information to each individual or organization to whom the individual’s personal information was disclosed in the previous one year period. If we do not change the personal information as a result of a request we shall make a notation that a change was requested.
E. Care of Personal Information
We shall make a reasonable effort to ensure that personal information collected by us or on our behalf is accurate and complete for the purposes for which it is to be used. We shall protect personal information in our custody or under our control by making reasonable security arrangements to prevent unauthorized access, collection, use, disclosure, copying, modification, or disposal or similar risks.
F. Retention and Destruction of Personal Information
As required by the Act, we shall retain personal information for such reasonable period of time that the individual has a reasonable opportunity to obtain access to it.
As required by the Act, we shall destroy documents containing personal information or remove how the personal information may be associated with a particular individual when the purpose for which the personal information was collected is no longer served by its retention and the retention is no longer required for legal or business purposes.
G. Requests to the Personal Information Administrator
An individual shall submit a request in writing to the Personal Information Administrator if the individual wishes to:
- have access to that individual’s personal information which is under our control;
- have access to details about how that individual’s personal information is being used by us;
- have access to details about the individuals and organizations to whom the individual’s personal information has been disclosed by us;
- have access to details about our policies and practices relating to personal information;
- have access to details relating to the complaint process set out herein; or
- correct an error or omission in that individual’s personal information.
- We will endeavour to respond to the applicant within 30 days of receipt of the request.
H. Complaints Relating to Personal Information
Our process to respond to complaints that may arise relating to the operation of the Act as it relates to us is set out below.
Submission of Complaints
An individual wishing to submit a complaint relating to our collection, storage, use, or disclosure of that individual’s personal information may submit a complaint in writing to the Personal Information Administrator within 30 days of learning of the action complained of (or within such other period of time as is reasonable in the circumstances).
Review of Complaints
The Personal Information Administrator shall review complaints, give them and the underlying circumstances reasonable consideration, and provide the individual with a meaningful response within 30 days of receiving the complaint unless, due to the complexity of the complaint or other matters beyond the control of the Personal Information Administrator, reasonable further time is required.
Reconsideration of Complaints
If the individual’s complaint is not resolved at the initial step set out above, the Personal Information Administrator shall, upon the individual’s written request, submit the written complaint to a senior officer, manager, or another responsible person who shall review the complaint and the Personal Information Administrator’s response to the complaint and within an additional 14 days shall provide the individual with a further, meaningful response.
Co-Operation of Individual Submitting Complaint
Where required by us for the purpose of satisfying our obligations under this process, the individual shall provide his or her co-operation and assistance to us in our efforts to understand and assess the merits of that individual’s complaint.
Dismissal of Complaints
We may dismiss a complaint for reasons including (but not limited to): the individual’s failure to raise or pursue the complaint in a timely manner; the individual’s failure to abide by his or her obligations under this process; the absence of merit or reasonableness in the complaint (including frivolous or vexatious complaints); or the fact that the complaint or the proposed resolution is contrary to our obligations under the Act or under any other statute or law.
Confidentiality of Complaints
Except where disclosure is necessary for the purposes of investigating a complaint, responding to the complaint or allegation, implementing a resolution, or as required by law, we shall make reasonable efforts to respect the sensitivity of the situation and to hold in confidence the individual’s identity and/or the nature of the complaint.
This process does not bar or prohibit individuals from accessing their rights in another forum, including under the processes provided in the Act. Where a complaint is raised in another forum, however, we may halt (or refuse to initiate) any proceedings initiated or pending under this process.
On this website, we collect demographic data from Google’s Interest-based advertising with Google Analytics. Visitors can opt out of Google Analytics for Display Advertising and customize Google Display Network ads using the Ads Settings.
I. Third-Party Marketing Arrangements
Website visitors can opt-out of certain directed remarketing conducted by our by third-party vendors by visiting the third party’s own settings and opt-out pages, such as Google Ads Settings.
J. Our Personal Information Administrator
For the purposes set out herein and in the Act, the contact information for our Personal Information Administrator is:
Personal Information Administrator
Downtown Langley Business Association
201-20559 Fraser Highway
Langley, British Columbia, Canada
DOWNTOWN LANGLEY BUSINESS ASSOCIATION DISCLAIMER
You agree that use of our services is at your own risk. Downtown Langley Business Association provides content, including but not limited to referrals to and sales of third party products and services, on an “as is” basis and without any representations, warranties, covenants or conditions of any kind, whether express or implied, and including, without limitation, as to the accuracy, completeness and suitability of any and all information, products and services provided, and as to any third party licensing, third party liability for any personal injury or other loss damage and expense, and the provision of or adequacy of any third party liability or other insurance, and including the implied warranties of merchantability or fitness for a particular purpose, all of which are hereby fully disclaimed by Downtown Langley Business Association to the fullest extent permitted by law. You agree to undertake your own independent investigation and review of any and all information, products and/or services provided by Downtown Langley Business Association and/or any third party products and services provider as you deem appropriate and to satisfy yourself to the extent you require as to the accuracy, completeness or suitability of any and all information, products and services provided, and including without limitation as to any third party licensing, third party liability for any personal injury or other loss damage and expense, and the provision of or adequacy of any third party liability insurance, and including the implied warranties of merchantability or fitness for a particular purpose, which you hereby acknowledge and agree are hereby disclaimed by Downtown Langley Business Association.