Effective Date: July 23, 2024
The Investment Industry Association of Canada (“IIAC”) is committed to respecting and protecting individuals’ privacy. The IIAC has designated a Privacy Officer who is accountable for the IIAC’s privacy compliance. Please refer to the Contact Us section below for information on contacting our Privacy Officer.
1. Scope and Application
This Privacy Policy describes the manner in which the IIAC collects, uses, and/or discloses personal information, including on our website at the following URL: https://iiac-accvm.ca/ (“Site”).
The IIAC is committed to providing our Site users with exceptional service. Part of providing this service may involve the collection, use and disclosure of some personal information about our users. We respect the privacy of our users and aim to protect the personal information of individuals who visit the Site.
This Policy applies when you (i) visit our Site; (ii) register to become a Site user, to receive the IIAC eNewsletter, or for an IIAC event; (iii) complete the IIAC Membership Application and Agreement; (iv) participate in an IIAC event; (v) participate in certain IIAC surveys; or, (vi) use the IIAC Job Board on our Site.
In this Policy, “personal information” means any factual or subjective personal information, recorded or not, that can be used, either alone or in combination with other information, to identify an individual.
2. Collection of Personal Information
The IIAC limits its collection of personal information to that information which is necessary for the purposes identified in this Policy. Any time the IIAC collects personal information from you, it will notify you of the specific purposes for such collection, at or before the time of collection, and obtain the appropriate consent from you.
When you (i) register to become a Site user, to receive the IIAC eNewsletter, or for an IIAC event; (ii) complete the IIAC Membership Application and Agreement; (iii) participate in certain IIAC surveys; (iv) use the IIAC Job Board on our Site; or, (v) contact us directly, we may collect contact information about you such as your name, mailing address, telephone number, e-mail address, job title, and employer name.
In addition to the personal information you may provide to us directly, the Site uses technology that allows the IIAC to collect certain technical information automatically when you visit the Site. This information may include your location, your computer’s operating system, your browser type, your device type and name, your email address, and the address of any referring websites.
From time to time, the IIAC may place information on your computer to allow the IIAC to identify you. This information is commonly known as “cookies”. By showing how and when IIAC visitors use the Site, this information can help the IIAC continue to improve the Site. If you do not wish to receive cookies, or want to be notified of when they are placed, you may set your web browser to do so, if your browser so permits. Please understand, however, that if cookies are turned off, you may not be able to view certain parts of the Site that may enhance your visit.
3. Use of Personal Information
Personal information collected by the IIAC may be used for one or more of the following purposes or otherwise with your consent:
- to verify your identity;
- to process your IIAC membership application;
- to provide you with information respecting the IIAC’s services;
- to improve the content of our Site and/or our services;
- to provide you with a service that you have requested (for instance, an event organized by the IIAC);
- to respond to your requests when you contact us; and,
- to comply with applicable law.
4. Consent
By submitting personal information to us via the Site, IIAC surveys, or the IIAC Membership Application and Agreement, you agree that the IIAC may collect, use and disclose such personal information as described in, and in accordance with, this Policy and as permitted or required by law. You may refuse or withdraw your consent to certain of the identified purposes in this Policy by contacting our Privacy Officer at the address indicated below. If you refuse or withdraw your consent to certain purposes, we may not be able to establish or maintain a relationship with you or provide you with services or information that may be of value to you.
If you no longer wish to receive commercial electronic messages from us, please follow the unsubscribe procedure included in each of these messages.
5. Disclosure of Personal Information
The IIAC will only disclose your personal information to the following parties and for the purposes identified in this Policy or otherwise with your consent:
- To the IIAC’s subcontractors or agents who perform tasks related to the Site and its services, including cloud storage providers; data and web hosting companies; website, IT, and data security support providers; email marketing and online survey providers; and, the IIAC’s member relationship management service provider;
- To government agencies and financial regulators when required by law; and,
- In the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our assets, we may transfer the personal information we have collected to the relevant third party, in compliance with applicable laws.
Please also note that if the IIAC is compelled by law, court order or other judicial process to disclose any of your personal information to a court, administrative body, government agency or other third party, the IIAC will attempt to give you prior notice using the contact information you provided.
The IIAC does not engage in the practice of selling or trading personal information to third parties for promotional or other purposes.
6. Cross-Border Transfers of Personal Information
While we endeavour to keep your personal information within Canada, we, or our service providers, may access, store or process your personal information outside of the province or country where you reside. As a result, when your personal information is used or stored in a jurisdiction other than where you are residing, it may be subject to the law of this foreign jurisdiction, including any law permitting or requiring disclosure of the information to the government, government agencies, courts and law enforcement in that jurisdiction. We will transfer your personal information in compliance with applicable data protection laws and will implement suitable safeguards to ensure that your personal information remains adequately protected.
7. Retention, Security Safeguards and Data Governance
The IIAC retains your personal information only for so long as is necessary to fulfill the purposes identified in this Policy. Once no longer required, your personal information will be securely destroyed or anonymized in accordance with legal requirements.
The IIAC will protect your personal information through safeguards appropriate to the sensitivity of the information to protect your personal information against loss or theft, as well as unauthorized access, disclosure, copying, use or modification.
The IIAC maintains appropriate policies and practices aimed at safeguarding personal information under its custody. Depending on the volume and sensitivity of the information, the purposes for which it is used, and the format in which it is stored, we implement a combination of measures to protect your personal information, including:
- A privacy framework governing the protection of personal information through its lifecycle. This framework includes internal policies or procedures that define the roles and responsibilities of IIAC personnel in respect of personal information, provides a process for dealing with complaints regarding the protection of the information, and addresses the retention and destruction of personal information;
- A requirement that agreements entered into by the IIAC with any third party to whom personal information is provided include a provision setting out the confidentiality obligations of the third party, prior to the transfer of personal information to such authorized third party;
- A designated Privacy Officer to monitor IIAC’s compliance with applicable privacy laws;
- Employee privacy and data security training.
8. Access and Rectification
You have the right to access the personal information we hold about you and request its correction if it is inaccurate, incomplete or equivocal. Upon request, we will provide you with access to your personal information within a reasonable timeframe, in compliance with applicable laws. You may make your request by contacting our Privacy Officer using the email address provided in the Contact Us section below. If you request a copy of your personal information, we may request that you pay a nominal fee that will cover the cost of transcription, reproduction or transmission.
9. Changes to this Policy
We may make changes to this Policy from time to time at our sole discretion. Any changes we make will be effective when we post the revised Policy on our Site. If we make any significant changes to the Policy, we will post a notice on our Site or contact you to inform you when required by law. By continuing to interact with us after the modified version of the Policy has been posted, you are accepting the changes to the Policy, subject to any additional requirements that may apply. It is your responsibility to ensure that you read, understand and accept the latest version of the Policy. The “Effective Date” at the top of this Policy indicates when it was last updated.
10. Links to Third-Party Websites
The Site may contain links to other websites whose information and privacy practices are different from the IIAC’s. We encourage users to consult the privacy notices of these other websites, as they are not governed by the IIAC’s Privacy Policy.
11. Contact Us
The IIAC takes privacy seriously and welcomes questions and feedback on its management of personal information. To exercise your rights of access and rectification, to withdraw your consent, or for any comments or questions you may have about this Policy or about the information we have gathered about you, please contact our Privacy Officer at privacy@iiac.ca.
