Privacy Policy
PRIVACY POLICY
Purpose of the Policy
Cook Music School. (the “Company” or “us”/”we”) may collect personal information in the course of its activities. The Company is committed to ensuring compliance with the Canada Personal Information Protection and Electronic Documents Act (“PIPEDA”) and all other applicable privacy legislation.
The privacy of both Students and Teachers is important to us. We strive to make your experience with us as enjoyable and rewarding as possible, and we want you to use our family of websites and all of our services with complete confidence. This Privacy Policy is intended to inform Teachers and Students about the policies, procedures and practices we use in collecting, using, and disseminating personal information and demonstrate our commitment to privacy and security. This Privacy Policy supplements any other agreement that we may have with you.
The purpose of this Privacy Policy is to establish rules that govern the collection, use, disclosure, and retention of personal information by the Company in a manner that recognizes the need to balance an individual’s right of privacy with respect to personal information and the Company’s need to collect, use, and/or disclose that information in order to fulfill its purposes.
This Policy is expected to change as the body of knowledge in this area grows and as the environment within which the Company operates evolves. The Company will post and explain any changes to this Privacy Policy as soon as they go into effect.
By providing us with your Personal Information, you are consenting to the collection, use, disclosure, and retention, by us, of your Personal Information, as set out in this Policy.
Scope
All employees, directors, officers, representatives, consultants, contractors, agents, and other persons who act or provide services on behalf of the Company shall be subject to this Policy.
Definitions
Personal Information – Personal information is any factual or subjective information, recorded or not, about an identifiable person (e.g. age, name, address, income, phone number, etc.). Personal information does not include the name, title, or business address or telephone number of an employee of an organization.
Policy
The Company is committed to ensuring that all personal information gathered by the Company is kept confidential and is treated in a manner that a reasonable person would consider appropriate in the circumstances.
All personal information under the control or custody of the Company shall be regarded as confidential and available only to authorized users. Subject to specific limitations and exceptions, individuals (or their legal representatives) may access their own personal information contained in records under the custody or control of the Company following the process outline in this Policy.
The Company’s websites were not designed and are not directed to children eighteen (18) years of age or younger. Committed to protecting children’s privacy in an on-line environment, we do not intentionally collect or maintain Personal Information provided by children.
The following are the Company’s key privacy principles, codified as Schedule 1 of PIPEDA:
1. Accountability for Personal Information
The Company shall be responsible for the personal information in its custody or control, including information that has been transferred to a third party for processing. The Company shall use contractual or other means to ensure the protection of any information in the possession of a third party. The Company’s employees and agents shall be responsible for any personal information that they have in their possession at all times.
The Company has a Privacy Officer that is committed to ensuring the Company’s compliance with PIPEDA.
2. Identifying Purposes for Collecting Personal Information
The Company shall collect personal information for the purpose of providing its services to Teachers and Students and communicating with Teachers and Students.
When personal information is required to be collected from an individual, the Company will identify and document the purpose for which it is being collected, will explain how it will be used, and will obtain the individual’s consent to collect, use, and disclose it. The Company will use reasonable efforts to ensure that the individual reasonably understands how the information will be used and disclosed.
If personal information that has been collected is required to be used for a different purpose than originally disclosed, the new purpose will be identified to the relevant individual prior to use. Unless the new purpose is required or permitted by law, such individual’s consent will be obtained before the information is used for that new purpose.
3. Consent for Collection, Use, and Disclosure of Personal Information
Consent is required for the collection of personal information and the use and disclosure of such information. The Company shall seek consent for the use and disclosure of personal information either prior to or at the time of collection.
In determining the form of consent to collect, use, or disclose personal information (implied/express, verbal/written), the Company will take into account the sensitivity of the information and applicable legal requirements. Regardless of the form of consent given, the Company will ensure that the consent is knowledgeable, voluntary, related to the information in question, and given by the relevant individual.
Consent may be withdrawn at any time, subject to legal restrictions and reasonable notice. If an individual would like to withdraw his/her consent to the Company’s use of his/her personal information, such individual can do so by emailing info@cookmusicschool.ca. A withdrawal of consent will not apply to a collection, use, or disclosure that had occurred prior to receiving the notice of withdrawal.
4. Limiting Collection of Personal Information
The collection, use, and disclosure of personal information will be limited to that which is necessary to fulfill the purposes identified.
5. Limiting Use, Disclosure, and Retention of Personal Information
The Company will only use personal information for the purposes for which consent has been given.
The Company may provide personal information to other parties:
-
when consent to do so has been provided; and/or
-
when the Company is required or permitted to do so by law.
Personal information will be kept until the stated purpose is complete and the relevant individual has exhausted any legal recourse regarding an access request. At such time, or at the end of the legislatively required retention period, whichever is longer, the personal information will be disposed of by means of shredding or another secure disposal method, with care taken to prevent unauthorized parties from gaining access to the information.
6. Ensuring Accuracy
While the Company will use reasonable efforts to ensure that an individual’s personal information is as accurate, complete, and up-to-date as necessary for the purposes for which the Company uses the information, ultimately, an individual will be responsible for ensuring that the Company has his/her current and complete personal information in the Company’s records. The Company will not routinely update personal information, unless such a process is necessary to fulfill the purposes for which the information was collected.
7. Use of Safeguards to Protect Information
The Company will use appropriate procedures and security measures to protect personal information in its custody or control against theft, loss, and unauthorized use, disclosure, modification, or disposal, regardless of the format in which the information is held.
The methods of protection may include the following:
-
locked filing cabinets;
-
restricted access to offices;
-
alarm system;
-
confidentiality agreements with staff and volunteers; and/or
-
use of passwords, access controls, and encryption.