Personal data protection policy
September 2023
Table of contents
- Personal Data Protection
- Important Terms
- About this Personal Data Protection Policy
- Data we collect
- Ways we collect data
- Use and disclosure of your information
- Personal information protection
- Personal information retention
- What are your rights when it comes to the protection of your personal information?
- How to update your personal information?
- Any concerns?
- Internal Procedures, Directories and miscellaneous documents relating to this Policy
- Revision History
Personal Data Protection
This Personal Data Protection Policy explains how we collect, use, disclose and protect your personal information.
Important Terms
Businesses represented in this Policy
- Plomberie du Portage Inc.
- M3i Inc.
- Extincteurs JSD Inc.
We, Us, Our
These terms refer to all three business names listed above
Personal Data (or Personal Identifiable Information)
Any data relating to an Individual that would allow them to be identified. This data is confidential. Barring exceptions, they cannot be communicated without the consent of the individual concerned.
NOT Personal Data:
An Individual’s professional data while performing their duties
About this Personal Data Protection Policy
In this Policy, we explain the way we collect, use, disclose and protect all personal data collected by us and we provide you with information relating to your rights and choices you have regarding your Personal Data with us.
When you solicit our services or do business with us, you consent to our collection, use and disclosure of your Personal Data.
Should the need arise, we will amend this Personal Data Protection Policy. All changes will take effect as soon as the amended Policy is published on our website: www.m3i-industriel.com.
Data we collect
There are three types (categories) of individuals for which personal data is collected: job applicants, employees and Plomberie du Portage’s residential services customers. The employee (and staff) category is the one where we collect the most personal data.
The type of personal data we collect depend not only on the category of individuals, but also other factors like the nature and duration of the relationship, the applicable legal and regulatory requirements, etc.
Types of Individuals | Information collected, per type |
---|---|
Employees | Contact information First, middle and last name, address, telephone number, email adress, SIN number, health card number, driver’s licence number |
Health information Screening results, information related to a work injury or when on short-term/long-term disability. |
|
Financial information and data required for payroll Salary, bank account number, garnishing orders, data relating to income tax |
|
Academic and training information Diplomas, resume, professional certifications, etc. |
|
Data relating to social or family situation Relating to Group Insurance: marital status, dependents, date of birth of all insureds, alimony obligations, next of kin (name, phone number). |
|
Job applicants | Contact information First, middle and last name, address, telephone number, email address |
Academic and training information Diplomas, resume, professional certifications, etc. |
|
Customers Residential Plumbing Services |
Contact information First and last name, address, telephone number, email address |
Financial information Partial credit card number on TPV reports Credit card number*, when paying by phone Bank account number, when customer pays by cheque |
* Once payment is complete, the card number is erased
Ways we collect data
We collect data directly from you, in these instances:
- Hiring process
- When you contact us to advise of a change in your personal information
- When you sollicit our produts and services for residential plumbing
Sometimes, we might get personal information from third parties. We always do so with your consent or when required by law.
For example,
- Verifying references from an ex-employer
- Government institutions or regulatory bodies, in particular, the CCQ.
Use and disclosure of your information
When we talk about disclosing your information, we primarily mean sharing information between operating units within our company. We may share certain information with subcontractors or affiliated suppliers.
We use and share your personal information to:
- Offer you products and services
- Communicate with you
- Manage our operations: Group insurance, Cognibox, CNESST, CCQ
- Comply with income tax, legal and regulatory obligations
- For statistical analysis (depersonnalized)
- Collection agencies, if necessary
Personal information protection
We take the protection of your personal information very seriously. Reasonable efforts are made to prevent the unauthorized use or disclosure of the information we hold, as well as the loss and theft (leaks) of this information.
Our Personal Data Protection Officer is making sure that all internal procedures pertaining to personal data are followed. Particularily, our computer system is in a secure environment and is accessible by authorized personel only. The same is true for any paper documents containing personal data. They are kept under lock and key in filing cabinets stored in the HR and accounting offices.
Despite all of our efforts to secure your personal information, a cycer-attack, theft or data leak could occur. In that case, our Data Breach Officer will follow the Data Breach Response Plan in place.
Personal information retention
We have a procedure in place for the retention, destruction and anonymization of personal information. Our Data Retention Officer knows how long we must keep your personal data and has the mandate of destroying and/or anonymizing this data in due time.
As a general rule, we only keep your personal information when it is reasonnable to do so, for the purpose of customer service, commercial or legal means. For these reasons, we may retain your personal data for a while after after your relationship with us ends. As soon as your personal data is no longer needed, we destroy or anonymize them.
What are your rights when it comes to the protection of your personal information?
You can, at any time, withdraw your consent to the collection, use or disclosure of your personal information, except in the case where there is a legal, commercial or contractual requirement in effect that prevents us to do so. Simply contact us, and the Officer in charge of de-indexing and deleting data will follow our Request for de-indexing and deleting of personal data procedure.
Your request must be done in writing, and we will take reasonable steps to verify your identity before granting your request.
Contact information:
Mélanie Dumont, HR Director, Personal Data Protection Officer
Ph. 418-766-2145 ext. 213
email : m.dumont@m3i-industriel.com
How to update your personal information?
If you need to update (or correct) personal information we have collected, simply contact our Personal Data Protection Officer via email or by phone.
Contact information:
Mélanie Dumont, HR Director, Personal Data Protection Officer
Ph. 418-766-2145 ext. 213
email : m.dumont@m3i-industriel.com
Any concerns?
This Policy is also available in paper form.
Please let us know of any concerns or complaints you may have with respect to this Policy or our Procedures pertaining to the protection of personal information. Our Complaint-Handling Officer will contact you within 48 hours (2 business days).
Contact information:
Mélanie Dumont, HR Director, Personal Data Protection Officer
Ph. 418-766-2145 ext. 213
email : m.dumont@m3i-industriel.com
Internal Procedures, Directories and miscellaneous documents relating to this Policy
This Policy is being implemented with the help of various internal Procedures, such as those listed in the table below. We also hold Directories to record any event that occured while protecting personal information and other various tools.
Document Title | Revision |
---|---|
Collection, Destruction and Anonymization of Personal Information Procedure | September 2023 |
Access Request or Complaint Procedure | September 2023 |
Request for de-indexing and deleting of personal data procedure | September 2023 |
Data Breach Response Plan | September 2023 |
Staff turnover management Procedure | September 2023 |
Request for de-indexing and deleting personal data Directory | September 2023 |
Confidentiality Incidents Directory | September 2023 |
Access Request Complaints Directory | September 2023 |
Access Request Directory | September 2023 |
Inventory of Personal Information | September 2023 |
Data Retention Calendar | September 2023 |
Best practices for the protection of personal data | September 2023 |
Delivery of goods and data Certificate | September 2023 |
Consent form | September 2023 |
Revision History
Revision | Nature of the changes | Date |
---|---|---|
Actual | New Policy | September 22, 2023 |