KEYSXCHANGE INC.
Privacy Policy
KeysXchange Inc. (the “Company”) is committed to protecting the privacy and security of all Personal Information inputted via its website at keysXchange.com (the “Website”) or stored on servers under its control. This policy explains the steps the Company takes to ensure Personal Information is handled appropriately. The Company’s policies and practices have been designed to comply with the Personal Information Protection Act of British Columbia (“PIPA”). This privacy policy applies to all users of the Website.
1. Definitions
1.1. “Personal Information” means information about an identifiable individual including name, age, home address, income, employment information, etc. Personal information does not include Contact Information.
1.2. “Contact Information” means information that would enable an individual to be contacted at a place of business and includes name, position name or title, business telephone number, business address, business email or business fax number. Contact Information is not covered by this privacy policy or by PIPA.
2. Collecting Personal Information
2.1. Unless the purposes for collecting Personal Information are obvious and the user provides his or her Personal Information for those purposes, the Company will communicate the purposes for which Personal Information is being collected before or at the time of collection.
2.2. The Company will only collect Personal Information necessary to fulfill the purposes set out in Section 4.1 below.
2.3. Examples of the Personal Information the Company collects include:
- Name.
- Email Address.
- Phone Number.
- Property photographs (to the extent they include information about an identifiable individual); and
- Website usage data (including IP address, browser type, unique device identifiers, and other diagnostic data).
3. Consent
3.1. The Company will obtain user consent to collect, use, or disclose Personal Information (except where, as noted below, the Company is authorized to do so without consent).
3.2. Consent can be provided orally or in writing, or it can be implied where the purpose for collecting, using, or disclosing the Personal Information would be considered obvious and the user voluntarily provides Personal Information for that purpose.
3.3. Subject to certain exceptions (e.g., the Personal Information is necessary to provide the service or product, or the withdrawal of consent would frustrate the performance of a legal obligation), users can withhold or withdraw their consent for the Company to use their Personal Information in certain ways. A user’s decision to withhold or withdraw their consent to certain uses of Personal Information may restrict the Company’s ability to provide a particular service or product.
4. Using Personal Information
4.1. The Company will use Personal Information for the following purposes:
- To communicate with users generally; and
- To fulfill any other purpose that would be obvious to a reasonable person.
5. Sharing Personal Information
5.1. The Company may share Personal Information with third party web hosting services (e.g. Amazon Web Services) to facilitate the storage of Personal Information.
5.2. The Company may publish Personal Information on the Website in order to allow potential buyers of a user’s property to communicate with that user.
6. Retaining Personal Information
6.1. If the Company uses a user’s Personal Information to make a decision that directly affects that user, the Company will retain that Personal Information for at least one year so the user has a reasonable opportunity to request access to it.
6.2. Subject to Section 6.1, the Company will retain Personal Information only as long as necessary to fulfill the identified purposes or a legal or business purpose.
7. Ensuring Accuracy of Personal Information
7.1. The Company will make reasonable efforts to ensure that a user’s Personal Information is accurate and complete where it may be used to make a decision about the user or disclosed to another organization.
7.2. Users may request correction to their Personal Information in order to ensure its accuracy and completeness. A request to correct Personal Information must be made in writing and provide sufficient detail to identify the Personal Information and the correction being sought.
7.3. If the Personal Information is demonstrated to be inaccurate or incomplete, the Company will correct the information as required and send the corrected information to any organization to which the Company disclosed the Personal Information in the previous year.
8. Securing Personal Information
8.1. The Company is committed to ensuring the security of Personal Information in order to protect it from unauthorized access, collection, use, disclosure, copying, modification or disposal, or similar risks.
8.2. The Company will employ the following security measures to ensure that Personal Information is appropriately protected:
- Physical security measures such as restricted access facilities.
- Electronic security measures for computerized data such as password protection and database encryption.
- Organizational processes such as limiting access to Personal Information to a selected group of individuals; and
- Contractual obligations with third parties requiring them to protect and secure your Personal Information.
8.3. The Company will continually review and update our security policies and controls as technology changes to ensure ongoing Personal Information security.
9. Providing Access to Personal Information
9.1. Users have a right to access their Personal Information, subject to limited exceptions.
9.2. A request to access Personal Information must be made in writing and provide sufficient detail to identify the Personal Information being sought.
9.3. Upon request, the Company will tell users how the Company uses their Personal Information and to whom it has been disclosed, if applicable.
9.4. The Company will make the requested Personal Information available within 30 business days or provide written notice of an extension where additional time is required to fulfill the request.
9.5. If a request is refused in full or in part, the Company will notify the user in writing, providing the reasons for refusal and the recourse available to the user.
10. Privacy Officer
10.1. The Company’s Privacy Officer is responsible for ensuring the Company’s compliance with this policy and PIPA.
10.2. Users should direct any complaints, concerns or questions regarding the Company’s compliance in writing to the Company’s Privacy Officer at:
Email: info@keysXchange.com
Address: #201-714 Veterans Ave, Keremeos, BC V0X 1N3
10.3. If the Privacy Officer is unable to resolve the concern, the user may also write to the Information and Privacy Commissioner of British Columbia.
