Updated in 2015
As the internationally recognized organization that is the leader in providing training, education services, certification and standards for Canada's business continuity planning/disaster recovery professionals, the DISASTER RECOVERY INSTITUTE CANADA (DRIC) treats sensitive public information collected, shared and/or stored within their office precincts in the highest regard of best information and privacy management practices.
Any information collected for the purpose of use or shared by DRIC will follow this policy. DRIC may store and disclose personal information following applicable legislation, including making disclosures that are necessary or advisable to:
DRIC may collect or authorize third parties to collect anonymous information from visitors to the DRIC website such as aggregate statistical data on website visitation so that the information is useable for statistical purposes and for evaluating the DRIC website to make it more useful to visitors. However, if the information may contain any identifiable information, it will be treated with the utmost protective approach based on the sensitivity and the identifiable elements contained in the information.
Various pages of the DRIC website invite visitors to email their name and contact details especially during the following processes: a request for information; subscription for information releases; or a request to receive information about certification or courses.
At DRIC "personal information" includes those types and categories of information described in Canadian private sector privacy legislation and records of:
DRIC will collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate.
DRIC will hold personal information for administrative purposes:
DRIC or someone else on its behalf may contact members and affiliates in response to their feedback or query and for other purposes that are in accordance with this policy.
DRIC may use the expertise of an outside company to do work involving some personal information – for example, operating record keeping systems. As a matter of good business practices, good corporate governance, and solid common sense, the DRIC Executive is careful in selecting companies that use standards comparable to DRIC's.
DRIC does not use or disclose personal information about any individual for a purpose other than the primary purpose for which it is collected.
There are some exceptions to the above rule. For example, DRIC might be obliged by contract or by law to collect, use or disclose information.
Personal information may be stored and disclosed if doing so is necessary to:
DRIC website, or the public. Among other things, this means that if you attempt to provide stolen credit card details or pose as someone else, information about you may be disclosed as part of any investigation into your actions.
DRIC will transfer personal information about an individual to someone in a foreign country only if it reasonably believes that the recipient of the information is subject to a law, binding scheme or contract which effectively upholds the principles for fair handling of the information that are substantially similar to the principles of Canadian private sector privacy legislation; or
Links to other websites may appear within the DRIC website, and are provided as a convenience to DRIC website visitors.
DRIC is not responsible for content, business practices, or the privacy policies of linked sites.
Site visitors are encouraged to be aware when they leave the DRIC website, and to read the privacy statements of each and every website that they visit and which might collect personally identifiable information. The DRIC privacy statement applies solely to information collected by the DRIC website.
DRIC will continue to:
You can ask for access to your personal information, and request that your personal information be corrected or updated. You may have to provide identification before personal information is released.
If your request for a copy of your personal information is refused, the reasons for refusal will be provided.
You may challenge the refusal by contacting the Federal or Provincial Privacy Commissioner. In general, refusals will depend largely upon exceptions provided in Canadian private sector privacy legislation.
There is no charge for verifying or correcting your information, but there may be a charge if you want a copy of records or if special expense is involved in retrieving your information. If that is the case, you will be advised of any charges in advance.
DRIC has implemented reasonable measures as indicated in this policy designed to secure personal information from accidental loss and from unauthorized access, use, alteration, or disclosure. However, we cannot guarantee that unauthorized third parties will never be able to defeat those measures or use your personal information for improper purposes.
If DRIC enters into a transition — such as being merged into another organization or selling a portion of its assets — users' personal information will, in most instances, be part of the assets transferred.
Users will be notified before a change of control of their personal information. If as a result of the transition, the users' personal identifiable information will be used in a manner different from that stated at the time of collection they will be given an opportunity for consent.
If you have questions or concerns about DRIC policies or procedures on personal information, contact the DRIC Privacy Officer:
DISASTER RECOVERY INSTITUTE CANADA
468 Queen Street East, LL-02
Toronto, Ontario M5A 1T7
By Phone 416-646-1600 or 1-844-228-8135
By E-Mail – firstname.lastname@example.org