Generally Accepted Privacy Principles are founded on the following privacy objective:
the LBC Group (LBC), a division of Lundell Business Consulting collects, uses and discloses personal information in the possession, or under the control of its clients to the extent required to fulfill its services and to operate its business. the LBC Group is committed to maintaining the privacy of personal information provided by its clients and to protecting all personal information in its possession or control.
This Privacy Statement sets out the principles and procedures we follow in meeting its privacy commitments to its clients and in complying with the requirements of federal and provincial privacy legislation.
Principle #1 - Accountability:
LBC is accountable for all personal information in its possession or control. This includes any personal information received directly from clients who are individuals, or indirectly through clients that
are organizations (e.g., corporations, government entities, not-for-profit organizations).
• Established and put into effect policies and procedures aimed at properly protecting personal information;
• Educated its principals and employees regarding its privacy policies, and of their roles and responsibilities in keeping personal information private; and
• Appointed a Privacy Officer to oversee privacy issues.
If you have any questions about our privacy policies and practices, the Privacy Officer can be reached by email at email@example.com or by letter at PO Box 45 Islay, AB T0B 2J0.
Principle #2 – Identifying Purposes:
LBC identifies the purposes for which it collects personal information from clients before it is collected. LBC collects personal information from clients and uses and discloses such personal information only to provide the requested services to those clients. The types of information that may be collected for this engagement, and the purpose for which it is collected, are set out under Principles 3 and 4 of the privacy statements.
Personal information attached to clients’ email accounts will be retained for archiving and future requirements. Personal information uploaded by clients to the portal site will be retained on secure servers for archiving and future requirements.
Principle #3 – Consent:
The Firm obtains client consent before collecting personal information from that client. The Terms and Conditions of our services are documented in each Service Agreement. These Terms and Conditions include an explanation about how, if any, we may use and disclose your personal information. By signing the Service Agreement, you will be providing your consent to the collection, use and disclosure described in the Agreement.
Such personal information could include:
• Home addresses
• Home telephone numbers
• Personal identification numbers
• Financial information
• Personal information
• Information linked to the type of client
You always have the option not to provide your consent to the collection, use and distribution of your personal information, or to withdraw consent at a later stage. Where a client chooses not to provide us with permission to collect, use or disclose personal information, we may not have enough information to provide you with our services.
Principle #4 – Limiting Collection:
LBC collects only that personal information required to perform its services and to operate its business, and such information is collected by fair and lawful means. The owners, partners and staff involved in a Service Agreement will access only the information required to complete that agreement in accordance with generally accepted and appropriate business practices including invoicing, debt collection and general correspondence.
Principle #5 – Limiting Use, Disclosure & Retention:
LBC uses or discloses personal information only for purposes for which it has consent, or as required by law. LBC retains personal information only as long as necessary to fulfill those purposes. LBC documents the work it performs in records, commonly called working paper files. Such files may include personal information obtained from a client. Working paper files are retained for the time required by law and regulation. Working papers are safeguarded against inappropriate access, as discussed under Principle 7.
The personal information collected from a client during a service engagement may be:
• Shared with personnel participating in such engagement;
• Disclosed to employees within LBC to the extent required for the provision of services to the client, and to conduct quality control reviews of the work performed.
LBC regularly and systematically destroys, erases, or makes anonymous personal information that is no longer required to fulfill the above collection purposes, and is no longer required by laws and regulations.
Principle #6 – Accuracy:
LBC endeavors to keep accurate, complete, and up-to-date, personal information in its possession or control, to the extent required to meet the purposes for which it was collected. Individual clients are encouraged to contact us to update their personal information whenever changes are required. Clients who have consented to set-up and use a portal account on the portal site are responsible for notifying LBC of any changes to their user access profile immediately so that the information can be updated appropriately (email all updates to firstname.lastname@example.org).
Principle #7 - Safeguards:
LBC protects the privacy of personal information in its possession or control by using security safeguards appropriate to the sensitivity of the information. Physical security (e.g., restricted access, locked rooms and filing cabinets) is maintained over personal information stored in hard copy form. Employees are authorized to access personal information based on client services and quality control responsibilities. Authentication is used to prevent unauthorized access to personal information stored electronically.
Principle #8 - Openness:
Principle #9 – Individual Access:
LBC responds on a timely basis to requests from clients about their personal information that we possess or control. Individual clients have the right to contact LBC to obtain access to their personal information. Similarly, authorized officers or employees of organizations that are clients have the same rights to obtain access to personal information provided by that client.
Principle #10 – Challenging Compliance: