CDAT SOFTWARE INC.
Personal Information Protection Policy
At CDAT Software Inc. ("CDAT"), we are committed to protecting the confidentiality, security and accuracy of the
personal information we receive. The management of personal information is fundamental to our services and this
Privacy Policy explains our approach to this commitment.
-
Collection, use and disclosure
Typically, CDAT receives personal information directly from an employer, an employer’s authorized agents,
association, insurer or benefits plan sponsor.
We limit the collection, use and disclosure of personal information to information that is necessary for the
following purposes:
-
To perform services that we have been hired to do by an employer, association, insurer, benefits plan
sponsor. These services may include:
-
Health management programs and services;
-
Pension and benefits consulting services to assist in the design, delivery and management of the
pension and benefits programs offered by an association, insurer or plan sponsors to their employees
or members;
-
Pension, health & welfare and health benefit exchange administration services to assist in the
administration of the pension, benefits, and/or insurance programs that associations, insurers or
plan sponsors offer their employees or members.
-
To provide our employer, association, insurer and plan sponsor clients and their employees and members with
information about our services, products and their usage and to enhance our overall service delivery.
-
To conduct research, compile aggregate data, statistics and reports and to perform analytics about CDAT’s
services, service standards and trends for use by CDAT. These forms of data, statistics and reports do not
contain any information that could reasonably be used to identify anyone personally.
-
For audit, quality control and legal and regulatory compliance purposes including the protection of our
interests in civil or criminal proceedings, to resolve any disputes that we may have and to enforce our
agreements.
We will retain personal information for as long as necessary for the purpose for which it has been collected, or
as required or permitted by law.
-
Consent
We will collect, use and disclose personal information with consent and only for the purposes we disclose, or as
otherwise required or permitted by law. Consent may be expressed or implied. For example by participating in a
benefits plan, an individual consents to our collection and use of personal information for the purposes of
providing services related to such plan. Further, consent may be obtained directly by us or through an
association, insurer, employer or benefits provider.
An individual may withhold or withdraw your consent for us to collect, use and disclose personal information, as
long as there are no legal or contractual reasons preventing an individual from doing so. Depending on the
circumstances, however, withdrawal of consent may impact our ability to continue to provide the products and
services an employer, association, insurer, benefits plan sponsor have requested, or, in the case group
benefits, it may prevent us from properly evaluating and processing any claims.
-
Safeguards
We will employ safeguards to protect personal information from unauthorized access, disclosure, copying, or
use, by using various methods of protection, appropriate to the sensitivity of the information. The methods
of protection include:
-
Physical measures (locked filing cabinets, restricted access to files and offices);
-
Technological measures (passwords, encryptions, firewalls, and audits);
-
Organizational controls (security clearances, limiting access on a "need-to-know" basis, staff training,
confidentiality agreements, policies and procedures); and
-
Contractual confidentiality covenants.
CDAT will also employ care in the disposal or destruction of personal information to protect against
unauthorized parties from gaining access to personal information.
Please note that confidentiality and security are not assured when information is transmitted through email
or other electronic communication. While CDAT makes every effort to secure all communications within our
control and on our premises, please be advised that no method of delivery is absolutely secure and any
communication of personal information may be accidentally or deliberately intercepted by third parties.
-
Accuracy and access
We will employ measures to keep personal information collected by us accurate and complete in order to
minimize the possibility of using or disclosing incorrect personal information. Upon request, we will inform
an individual of the existence, use, and disclosure of his or her personal information. However, we may deny
access to certain personal information we hold about an individual if the information is prohibitively
costly to provide, if it contains references to other individuals, if it cannot be disclosed for legal,
security or commercial proprietary reasons, if it is subject to solicitor-client or litigation privilege, or
as may otherwise be required by law. We will advise of the reason for denying the access request.
-
Enforcement, amendments and privacy concerns
This Privacy Policy may be amended from time to time. We will post any revised policy on our website.
If there are concerns related to privacy issues or our handling of personal information, please do not
hesitate to communicate in writing with our Privacy Officer so that concerns can be investigated and
resolved:
By regular mail:
Privacy Officer
CDAT Software Inc.
304-3999 Henning Drive
Burnaby, British Columbia, Canada
V5C 6P9
By electronic mail:
privacyofficer@cdat.com