EPR only collects uses and discloses personal information for the following purposes:
• To comply with the law, or requests of law enforcement agencies or regulators
• To offer services provided by EPR
• To notify individuals of changes to the law, accounting practices, articles or pronouncements that we feel would be of value
• For inclusion on personal and corporate income tax returns, and other information returns required by Canada Revenue Agency (CRA), WEB or other governmental or regulatory agencies
When personal information is to be used or disclosed for a purpose not previously identified, the new purpose will be identified and new consent requested, unless the new purpose is permitted or required by law. For specific information on these exclusions, please contact the Office of the Information and Privacy Commissioner of BC at 1-250-387-5629 (toll free via Enquiry BC at 604-660-2421 in Vancouver, or 1-800-663-7867 outside of Vancouver) or visit their website at www.oipc.bc.ca.
Knowledge and consent of EPR’s collection, use and disclosure of personal information is critical in allowing us to provide services and complete engagements. We rely on certain actions as indications of consent to our existing and future personal information practices. This includes written, oral or electronic consent obtained in the course of performing our responsibilities or completing our engagements. In determining the appropriate form of consent, EPR will take into account the sensitivity of the personal information and reasonable expectations of all parties. There are some exceptions to obtaining consent for collecting, using or disclosing personal information without knowledge or consent. These are specified in the PIPA Act. For information on these exclusions, please contact the Office of the Information and Privacy Commissioner of BC at 1-250-387-5629 (toll free via Enquiry BC at 604-660-2421 in Vancouver, or 1-800-663-7867 outside of Vancouver) or visit their website at www.oipc.bc.ca/private/.
Subject to legal or contractual restrictions and reasonable notice, your consent may be withdrawn at any time. In some cases, refusing to provide personal information or withdrawing consent for EPR to collect, use or disclose personal information could mean that we cannot provide services that are requested. To withdraw consent, please contact the EPR Privacy Officer at 604-936-4377 or firstname.lastname@example.org.
LIMITING COLLECTION AND RETENTION OF PERSONAL INFORMATION
EPR will only collect, use or disclose personal information that is necessary in the identified purposes, or as required by law, and only will collect personal information by fair and lawful means.
If we use your personal information to make a decision that directly affects you, we will retain that personal information for at least one year so that you will have a reasonable opportunity to request access to it. Otherwise, we will retain your personal information only so long as necessary to fulfill the identified purposes for which it was collected, or if required for legal or business purposes.
EPR will maintain personal information as accurate, complete and up to date as is necessary for the identified purposes.
EPR will protect personal information by security safeguards appropriate to the sensitivity of the information. Safeguards will vary depending on the sensitivity, location and storage of the personal information but will include protection against such risks as loss or theft, unauthorized access, disclosure, copying, use, modification or destruction, regardless of the format in which it is held. These include but are not limited to confidentiality agreements signed by sub-contractors, password protection on computers, firewalls, encrypted software, building alarm security and confidentiality agreements signed by all employees.
OPENNESS AND ACCESS
EPR will make specific information about its policies and procedures relating to the management of personal information readily available. We will provide information about the existence, use and disclosure of personal information on request, and will give access to that information.