Privacy

In carrying out its business, CRD gathers personal information about individuals from individual clients or from employer clients. CRD is committed to excellence in protecting the privacy of personal information. CRD continually reviews and updates its procedures to protect the privacy of individuals.

1. Accountability

CRD is responsible for personal information under its control and has designated a Privacy Officer responsible for CRD's compliance with the federal and local privacy rules and regulations. CRD requires all clients to enter into Privacy and Terms of Service Agreements, which identify the importance of CRD's strict privacy and accountability standards. CRD continuously updates and trains its staff with regard to the importance of protecting personal information. CRD has agreements with third party organizations who may process information during the course of CRD's work. CRD monitors all third parties' compliance with CRD's requirements and privacy principles.

2. Identifying Purposes

CRD gathers personal information from its clients to facilitate CRD's work CRD gathers no more personal information than is necessary for the services being provided. CRD does not use personal information for any other purposes than those that are disclosed to clients for the services being provided. If CRD wishes to use personal information in its possession for any new purpose, the consent of clients is obtained prior to use. CRD maintains personal information only for as long as is required for the services being provided.

3. Consent

CRD requires the express, informed consent of our clients from whom the collection, use or disclosure of personal information are being sought. Clients who are not prepared to provide their consent or who have questions about CRD's collection of personal information are invited to contact CRD's privacy officer by writing to:

Privacy Officer
CRD Inc.
PO Box 20531 RPO Sheppard Pharm
Scarborough ON M1T 3V5

4. Limiting Collection

CRD limits the collection of personal information to that which is necessary for the purposes identified for the services being provided. CRD collects information by fair and lawful means. CRD continually reviews the amount and type of information being gathered from clients to ensure that no more information is gathered than is necessary to complete CRD's work.

5. Limiting Use, Disclosure & Retention

CRD does not use or disclose personal information for purposes other than those for which it was collected without with the consent of the individual or as required by law. CRD retains personal information only as long as necessary for fulfillment of those purposes. CRD does not use personal information for reasons other than those specified for the services being provided. Personal information is removed from our database as required by CRD's clients, in accordance with CRD's privacy policy and as required by law. CRD's employer clients determine the period of time that they require information to be available for their purposes. Information that is non-identifiable to specific individuals may be used for statistical purposes. When personal information is no longer required for CRD's work or no longer required to be retained by law, CRD destroys the information in a manner consistent with CRD's privacy policy and principles.

6. Accuracy

CRD ensures that personal information is as accurate, complete, and up-to-date for the purposes for which it is to be used, by all means available to CRD. CRD relies on its clients to provide accurate information; CRD maintains high standards of accuracy and verification with respect to its work.

7. Safeguards

Personal information in CRD's possession is maintained in CRD's secure databases and protected by security safeguards appropriate to the sensitivity of the information. CRD maintains physical, technological and organizational systems, and protocols to safeguard information from unauthorized access, disclosure, use, copying or modification. CRD continually updates and upgrades its systems and protocols to avoid new threats to the safety of information in its possession.

8. Openness

CRD is committed to keeping its clients informed as to its privacy policy and addressing any concerns clients may have. Clients are invited to voice any concerns by writing to:

Privacy Officer
CRD Inc.
PO Box 20531 RPO Sheppard Pharm
Scarborough ON M1T 3V5

Or you can raise any concerns with our privacy partner, PrivacyTrust:http://www.privacytrust.org/complaint/raise_privacy_complaint.php

CRD is committed to addressing and responding to client concerns in a timely fashion.

9. Individual Access

Upon written request to CRD, a client shall be informed of the existence, content, use and disclosure of his or her personal information and shall be given access to that information. Individuals may challenge the accuracy and completeness of the information in CRD's possession and have it amended as appropriate. CRD provides access for individuals to review and challenge personal information in CRD's possession. CRD corrects errors in information provided to employer clients. Individual clients seeking access to their personal information are invited to request access by writing to:

Privacy Officer
CRD Inc.
PO Box 20531 RPO Sheppard Pharm
Scarborough ON M1T 3V5

CRD is committed to addressing and responding to individual client's requests in a timely fashion.

10. Complaints

Individuals who have concerns about CRD's privacy policies are invited to contact CRD's Privacy Officer by writing to:

Privacy Officer
CRD Inc.
PO Box 20531 RPO Sheppard Pharm
Scarborough ON M1T 3V5

CRD is committed to addressing and responding to complaints in a timely fashion.

11. CRD does not intentionally collect information from anyone under the age of 18.

12. Clients can opt out of having CRD store their information upon request.

13. Any changes to the CRD Privacy Policy will be noted on CRD’s websites.

14. CRD does use cookies only for language preference and session identification. A cookie is a small amount of data generated by our website and saved by your web browser.

15. CRD retains information that has been collected for a period not shorter than 2 years from the time it was submitted.

CRD, December 2015