Building Environmental Aboriginal Human Resources (BEAHR) provides a broad range of services to its members. In providing these services, BEAHR gives utmost priority to the maintenance of member privacy and therefore strives to protect the confidentiality of any personal information that you may give us online, in a telephone conversation, in person, or on a completed printed form. Personal information is any information that identifies you or provides a method by which your identity could be deduced.

The collection and use of your personal information is subject to this Privacy Policy, a formal statement of principles and guidelines that BEAHR has adopted to promote responsible practices in the management of personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). For more information on PIPEDA, please visit: www.privcom.gc.ca.

1. Your Privacy Rights
Beginning January 1, 2004, all organizations engaged in commercial activities must comply with the Personal Information Protection and Electronic Documents Act, which grants rights concerning the privacy of your personal information. This Act's obligations extend to BEAHR and we will ensure your rights through this policy and by training BEAHR staff on privacy policies and practices.

2. Types of Personal Information Collected
BEAHR may collect personal information for memberships through electronic forms, email, phone, fax, mail or in person. These memberships and registrations may involve personal information, such as, but not necessarily limited to, the following:

• Your name, home address, and home telephone and/or cell phone numbers
• Your email address
• Your place of employment and job title
• Your employment history and educational achievements
• Credit card information and/or banking information

Please note that our credit card provider handles online payments securely and credit card data is available only to authorized staff.

3. Purpose of Collecting Personal Information
In order to provide BEAHR's many services to our wide membership base, we require some personal information. The nature and precise use of your personal information will be outlined at the time of information collection. In addition to these uses, your personal information may also be required for the efficient administration of BEAHR, the creation and maintenance of membership lists, the monitoring of memberships, and the production of marketing materials concerning services and developments related to BEAHR. At no time will your information be released to any outside agency or organization (unless such an organization has been contracted to perform BEAHR-related work and agrees to be bound by BEAHR's Privacy Policy).

4. Collection of Personal Information and Your Consent
BEAHR collects information only by lawful and fair means and not in an unreasonably intrusive way. Wherever possible, we collect your personal information directly from you at the start of your membership. Additional information may be collected as you participate in an increasing number of BEAHR services and/or programs.

BEAHR must obtain your consent to collect, use or disclose your personal information. Normally, we ask for your consent in writing or through an electronic form, but in some circumstances, we may accept your oral consent. Whatever the means, you will be asked to give your consent at the point of collection, at which time you will also be informed that your personal information is being collected, the purpose for which it is being collected, and that you have a right of access to the information. Please note that BEAHR retains your consent until you withdraw it in writing.

BEAHR may share personal information with third parties who are contracted to complete research, administrative services, or work on a BEAHR project. In such cases, BEAHR's Privacy Policy will bind the third party(s).

BEAHR does not sell, share, barter, rent, divulge or otherwise disseminate personal information.

BEAHR may monitor website traffic patterns, site usage, and related site information in order to optimize our web services. This information may also be used for statistical analysis and may be provided to third parties, but this statistical information does not include any identifiable personal information.

6. Disclosure of your Personal Information
BEAHR may disclose your personal information under circumstances such as the following:

• When we are required or authorized by law to do so, for example, if a court issues a subpoena
  
• If we engage a third party to provide administrative services to us (such as a mailing service or archival file storage), in which case the third party will be bound by our Privacy Policy
  
• If we retain agents or consultants to assist us in completing research relating to BEAHR, in which case these people and/or organizations will be bound by our Privacy Policy
• If BEAHR needs to protect itself or its interests. For example, if a member or potential member takes action or lodges a complaint against BEAHR, we may use your information to defend BEAHR, notwithstanding any case where you have not consented to BEAHR's use of your personal information.

Please note that in all of these situations, BEAHR will only disclose as much personal information as is required by the circumstances.

7. Updating and Correcting Your Information
Since we use your personal information to provide you with our services, it is important that your information be accurate and up-to-date. If any of your personal information changes during the course of your membership, please inform us so that we can make any necessary changes. From time to time, BEAHR may contact you to request an update of your personal information.

If BEAHR does hold information about you that is inaccurate, incomplete or not up-to-date, we will take reasonable steps to correct it. By contacting BEAHR's Privacy Officer (see section 12 for contact information), you can arrange a review of your record(s). Should you find these records to be inaccurate, we will amend them and where we have (as part of your membership with BEAHR) furnished erroneous information to others, we will inform them of the corrected information. Please note: we may ask you to provide documentation to assist us in making corrections.

The process is as follows for withdrawal of consent:

• The person requests in writing stating that they would like to withdraw their consent for BEAHR to use their personal information for the purpose(s) stated.
  
• The Privacy Officer will gather the information to be destroyed (in both paper format and electronic).
  
• The paper-based information will be shredded, then disposed of (in either the trash or recycle bin).
  
• The electronic information will be deleted from all electronic files where it is stored.
  
• The Privacy Officer will access all of the available electronic drives and files to ensure it is deleted.
  
• The information will be deleted from all backup records on the BEAHR server.

9. Security of Personal Information
BEAHR takes all reasonable precautions to ensure that your personal information is kept safe from loss, unauthorized access, modification or disclosure. Among the steps taken to protect your information are:

• Premises security
  
• Employee training in the storage, safeguarding and use of personal information
  
• Restricted file access to personal information (i.e. your data is accessed only by BEAHR staff with a direct involvement in the project(s) or service(s) for which you have provided your information)
  
• Technological safeguards such as security software and firewalls to prevent unauthorized computer access
  
• Internal password and security policies
  
• Contracts with third parties that bind them to BEAHR's Privacy Policy

Please note that despite the above security measures, any email correspondence that you have with BEAHR is not completely secure if you send non-encrypted emails.

10. Accessing Your Personal Information and BEAHR's Process for Handling Personal Information Requests
At any time, you may contact BEAHR's Privacy Officer (see section 12 for contact information) to request a review of the information that we hold on file for you. The process for accessing your information is outlined below. Summary information is available on request while more detailed requests that require retrieval costs may be subject to a reasonable fee. Please note: BEAHR reserves the right to confirm your identity before complying with any access requests.

Process for Handling Personal Information Requests:

• The person makes a request for details about their personal information to BEAHR. This request is sent/directed to the Privacy Officer.
  
• The Privacy Officer responds to the person in writing.
  
• The Privacy Officer responds to the request within two weeks.
  
• If the person would like to see a list of personal information BEAHR has about them, the Privacy Officer will send them a hard copy of the list through the mail, marked confidential.
  
• If the person would like to see the personal information that BEAHR has about them the Privacy Officer will schedule a meeting with that person to give them access to this personal information.
  
• In the letter and/or in the meeting, the Privacy Officer will advise the individual as to the next steps to be taken to follow up on the access request.
  
• After sending the letter or holding the meeting with the person, the Privacy Officer will record the letter/meeting information in a confidential, hard copy file.
  

There may be rare occasions when your rights to access or correct your personal information are denied. These occasions include, but are not necessarily limited to, the following instances:

• When denial of access is required or authorized by law
  
• When granting you access would have an unreasonable impact on other people's privacy
  
• When granting you access would negatively affect BEAHR rights and/or property

If we deny your request for access to information or refuse a request to correct information, we will attempt to explain why.

11. Third Party Websites and Personal Information
On BEAHR's website, there are links to third party websites that are not under our control. BEAHR cannot guarantee that these sites adhere to strict codes of conduct with respect to privacy, and visitors to our website should link and submit personal information to these third party sites at their own risk.

Privacy Officer
Building Environmental Aboriginal Human Resources (BEAHR) and ECO Canada
Suite 200, 308 -11 Ave SE Calgary, AB T2G 0Y2

Tel: (403) 233-0748
Fax: (403) 269-9544
Email: privacy@eco.ca

If you are not satisfied with our response, the Privacy Commissioner of Canada can be reached at:

112 Kent Street Ottawa, ON K1A 1H3
1-800-282-1376

13. Changes to this Privacy Policy
As BEAHR regularly reviews all policies and procedures, we may change our Privacy Policy from time to time. These changes will be posted on our website as soon as is practical.

This privacy statement was last updated on February 23, 2004. It replaces the privacy statement that was dated February 13, 2004.