Privacy Policy

1. INTRODUCTION

1.1 Our Commitment to Privacy Practices

Output Services Inc. and its affiliates and subsidiaries is a Canadian company service provider to customers across all industries (collectively, “Output” or “we”) and we both directly collect personal information of our Canadian employees as well as indirectly collect and process the personal information of individuals at customers’ and potential customers’ in order to perform the services we offer and to provide the products we sell, which are explained further in this Privacy Policy. Some of those customers may operate in the EU (known as a data controller and we act as their data processor). We respect the privacy and confidentiality of the Personal Information of our employees, customers and potential customers. In this Privacy Policy, we explain how Output collects, uses and discloses Personal Information.

1.2 Purpose of Our Privacy Policy

This Privacy Policy:

1. explains Output’s practices for the collection, use, disclosure and protection of Personal Information by Output; and
2. provides information on how to access, correct and update Personal Information and who to contact with privacy related questions, comments or complaints.

1.3 Applicable Legislation

This Privacy Policy has been developed in compliance with the British Columbia Personal Information Protection Act, S.B.C. 2003, c.63 the Alberta Personal Information Protection Act, R.S.A. 2000, c.P-6.5 and the EU General Data Protection Regulation (as applicable) (the “Privacy Legislation”). The Privacy Legislation set out rules for how organizations such as Output can collect, use and disclose Personal Information.

2. WHAT IS PERSONAL INFORMATION

2.1 Defined Terms

1. “Personal Information” means information about an identifiable individual or information that can identify an individual, including Employee Personal Information, such as someone’s name, home address, social insurance number, gender, income or family status but does not include:
   (i) Contact Information; or
   (ii) Work Product Information.
2. “Contact Information” means information that allows an individual to be contacted in a business capacity as a representative of a particular business, such as the name, position name or title, business telephone number, business address, business e-mail and business fax number for the individual.
3. “Employee Personal Information” means information Output collects, uses or discloses that is reasonably required to establish, maintain, manage or terminate an employment relationship between an employee and Output.
4. “Work Product Information” means information prepared or collected by an individual or group of individuals as part of the individual’s or group’s responsibilities or activities related to the individual’s or group’s employment or business but does not include personal information about an individual who did not prepare or collect the information.
5. “data controller” and “data processor” are with respect to EU citizens for which Output may be a data processor for its customer who is a data controller.

3. COLLECTION, USE, DISCLOSURE OF PERSONAL INFORMATION

3.1 Why do we Collect and Use Personal Information?

Output collects and uses Personal Information:

1. Customer Purposes
   (i) To verify customer identity.
   (ii) To provide requested services or products and manage the customer relationship.
   (iii) To communicate with the individual regarding activity on Output’s platform on which the individual is registered (either individually or through its employer).
   (iv) To provide periodic updates regarding Output products and services that may be of interest to a customer.
   (v) To register and manage an individual as a user on the Output platform so the individual may participate as a user in the platform environment.
2. Marketing Purposes
   (i) To verify a potential customer’s identity in order for Output’s platform to function, such as uploading and collecting innovative ideas that are then stored into Output’s environment for use by the customer.
   (ii) To compute demographics for internal marketing purposes in order to help us determine what products or services you might like.
   (iii) To coordinate promotional activities when we have a special offer for our products or services.
   (iv) To provide potential customers with information regarding Output products and services.
3. Employment Purposes
   (i) To verify employee identity for security, payroll and other requirements to administer the employment relationship. Output discloses Employee Personal Information to its automatic pay deposit program provider.
   (ii) To conduct background (including criminal records) and reference checks when an offer of employment has been made to an individual that is subject to such checks.
   (iii) To enroll eligible employees in Output’s benefits package and automatic pay deposit program, Output discloses Personal Information to its third party benefits provider.
   (iv) To establish and manage the employment relationship between Output and its employee with respect to position requirements, tools necessary for an employee to perform his or her duties, compensation, performance reviews, promotions and disciplinary actions.

Personal Information may only be used by Output in connection with the purposes set out in this Section 3.1. Output will request from the individuals to which the Personal Information relates in the event it wishes to use Personal Information for any other purpose.

3.2 What Type of Personal Information do we Collect and Use?

1. Customer Personal Information
   We collect an individual’s name, email address, location (if enabled by user’s IP configuration) and information provided by the individual when he or she is registered on the platform, such as a job title, innovation challenge contributions, comments and other participation activity on the platform.
2. Potential Customer Personal Information
   We collect the name, email address and location (if enable by user’s IP configuration).
3. Employee Personal Information
   We collect the name, home mailing address, home phone number, personal email address, employment, date of birth and character references and social insurance number (or equivalent in employee resides in another country).

3.3 Restrictions to our Collection, Use and Disclosure

1. Other than for the purposes set out in Section 3.1, Output will not disclose your Personal Information to third parties without your consent to do so.
2. Subject to Section 3.6, Output will only collect, use and disclose Personal Information that is necessary to fulfill the purposes identified in Section 3.1 hereof unless it has obtained your consent for another purpose.
3. Output will only collect, use or disclose Personal Information in accordance with Privacy Legislation.
4. Output will not sell or rent Personal Information unless it has obtained the consent of the individuals to which the Personal Information applies in accordance with Privacy Legislation, as the case may be.

3.4 When We are Required to Disclose Personal Information

1. Output reserves the right to disclose Personal Information if required to do so by law or in the good faith belief that such action is reasonably necessary to comply with law, respond to claims or to protect the rights, property or safety of Output, its partners, affiliates and each of their respective directors, officers, agents, employees and customers, or the public.
2. If Output discloses your Personal Information to another organization for the purposes of that other organization doing work for Output, Output will ensure there is an agreement in place that commits the organization providing services to adhere to this Privacy Policy.
3. Output will disclose personal information where authorized by Privacy Legislation or where otherwise required by law. Examples of a legal requirement to disclose Personal Information include, without limitation, a court order, subpoena or search warrant.

3.5 Obtaining Consent to Collect, Use and Disclose Personal Information

1. By submitting Personal Information to Output, you acknowledge and agree that you have consented to the collection, use and disclosure practices set out in this Privacy Statement as they relate to your Personal Information.
2. Individuals may consent to the collection, use and/or disclosure of Personal Information orally, in writing or electronically depending on the nature and sensitivity of the Personal Information.
3. Individuals may change or withdraw their consent at any time by giving Output reasonable notice. Such notice must be in writing and delivered to Output’s Privacy Officer (see Section 5.1 for contact information). Please be advised that by changing or withdrawing consent, individuals may be limiting Output’s ability to serve them. Further, individuals outside the EU can not withdraw their consent where doing so would frustrate performance of a legal obligation (such as a contract between Output and the individual).

3.6 Collection, Use and Disclosure of Personal Information Without Consent – for Canadian Individuals only:

1. Output does not collect Personal Information without the consent of the individual(s) to which the Personal Information relates.
2. Output may collect and use Personal Information about an individual without consent or from a source other than the individual, if:
   (i) the Personal Information is necessary to facilitate the collection of a debt owed to Output or the payment of a debt owed by Output;
   (ii) the Personal Information is collected and used for the purposes of Output providing services to a third party if:
   (A) the third party is providing the information to Output and has obtained consent of the individuals (or will be relying on Output to obtain the consent); and
   (B) the information is necessary for the purposes of providing those services.
3. For Canadian individuals, Output may collect and use Personal Information from or on behalf of another organization without consent of the individual to whom the Personal Information relates, if the individual previously consented to the collection or use of the Personal Information and the Personal Information is disclosed to or collected or used by Output solely:
   (i) for the purposes for which the Personal Information was previously collected; and
   (ii) to assist Output to carry out work on behalf of the other organization, and
4. Output may collect Employee Personal Information without consent of the individual if the collection is reasonable for the purposes of establishing, managing or terminating an employment relationship between Output and the individual.

3.7 Retention of Personal Information

1. Output will retain Personal Information of:
   (i) customers for a period of Five (5) years from the date the individual ceases to be a customer of Output; or
   (ii) Employees for a period of Seven (7) years from the date the individual ceases to be an employee of Output,
   but otherwise Output will only retain Personal Information for as long as necessary to fulfill the purposes identified in Section 4. or as long as required by applicable law.

3.8 Security of Personal Information

1. Output employs security practices to help protect the privacy and confidentiality of your Personal Information in the possession of Output, namely:
   (i) Personal Information of customers is secured in company computer databases accessible by authorized personnel only.
   (ii) Personal Information of potential customers is secured “off-site” with a bonded database manager and on secure company computer databases accessible by authorized personnel only.
   (iii) Employee Personal Information is secured in company databases and locked offices or cabinets accessible by authorized personnel only.
2. Output considers Personal Information provided by you to be private and confidential and accordingly, Output treats Personal Information with care.
3. Output will use reasonably secure methods whenever it destroys Personal Information.

3.9 Accuracy of Personal Information

1. Output will use reasonable efforts to ensure that your Personal Information is accurate and current.
2. At any time, you may request that Output correct or update your Personal Information by delivering a request in writing to Output’s Privacy Officer (see Section 5.1 for contact information). Output may not charge any fee in connection with the correction of Personal Information.
3. If Output is satisfied that an individual’s request for correction is reasonable, Output will correct the Personal Information as soon as reasonably possible.
4. Output will, as soon as reasonably possible, also send an individual’s corrected Personal Information to each organization it was disclosed to during the One (1) year before Output corrected it.
5. If Output does not correct an individual’s Personal Information, it will note the requested correction on copies of the Personal Information under Output’s custody or control.

3.10 Rights of Individuals

1. Individuals have the right to access their Personal Information under Output’s custody or control. For an individual to obtain access to Personal Information about that individual, he or she must make a written request to Output’s Privacy Officer (see Section 5.1 for contact information) setting out sufficient detail to enable Output, with a reasonable effort, to identify the information in respect of which the written request is made. The applicant may ask for a copy of the record, or ask to examine the record, that contains Personal Information about the applicant.
2. Attached as Schedule “A” is a Request for Access to Personal Information Form which individuals may use in connection with their request for access to Personal Information. Attached as Schedule “B” is a Request for Erasure Form” which individuals may use in connection with their request for all or certain information to be deleted.
3. Individuals have the right to have all or part of their Personal Information deleted, transferred to another data controller, may request the logic behind certain processing of their Personal Information and object to it in certain circumstances, and not be subject to automated processing of Personal Information (unless required under contract where Output is a data processor for a third-party data controller).
4. Output may require individuals to prove their identity before performing the above requests.
5. Where an individual makes a request, Output will provide the individual with access to:
   (i) the individual’s Personal Information contained in a record in its custody or control;
   (ii) the purposes for which the Personal Information has been and is being used by Output; and
   (iii) the names of the persons to whom and circumstances in which the Personal Information has been and is being disclosed.
6. Fees
   Output is entitled to charge a “minimal” fee for providing an individual with access to his or her Personal Information. If a fee is required, Output will provide the applicant with a written fee estimate. The applicant’s request will not be processed until the fee has been accepted by the applicant and where a deposit is required, the deposit is paid. If Output has provided an applicant with a fee estimate and has not received a response from the applicant within Thirty (30) calendar days from the day the estimate was provided to the applicant, Output will consider the applicant’s request to have been withdrawn. The balance of the fee owing by an applicant is payable at the time the information is delivered to the applicant.

    

   Output may not charge a fee in connection with a request for Employee Personal Information.

7. Response Time
   Output will respond to all requests for Personal Information within Thirty (30) business days after it is requested. Output may extend the response period by up to Thirty (30) additional calendar days in the following circumstances:
   (i) the applicant has not provided enough detail to enable Output to identify the Personal Information or the record relation to the Personal Information;
   (ii) a large amount of Personal Information is requested or must be searched;
   (iii) meeting the time limit would unreasonably interfere with Output’s operations; or
   (iv) Output requires additional time to consult with another organization or government agency before making a decision on provided access to Personal Information.
   In the event Output extends the response period as provided herein it will provide the applicant with written notice of its reason(s) for the extension and the time period within which the applicant can expect a response from Output. The applicant may request that the applicable Privacy Commissioner to review Output’s decision to extend the response time.
8. Refusal to Respond
   In some cases, Output may refuse to give an individual access to certain Personal Information where authorized or required by BC PIPA or AB PIPA, as the case may be. For example, Output may refuse to provide access to Personal Information that:
   (i) is subject to legal privilege;
   (ii) would reveal confidential commercial information;
   (iii) was collected for an investigation or legal proceeding;
   (iv) if disclosed, might result in that type of information no longer being provided to the organization, when it is reasonable that the information be provided;
   (v) was collected by a mediator or arbitrator, or during the conduct of a mediation or arbitration; or
   (vi) relates to or may be used in the exercise of prosecutorial discretion.
   (vii) Output will not provide access to Personal Information where disclosure:
   (viii) could reasonably be expected to threaten the life or security of another individual;
   (ix) would reveal Personal Information about an individual other than the applicant; or
   (x) would reveal the identity of an individual other than the applicant who has provided an opinion in confidence about the applicant, and has not consented to the disclosure of his or her identity.
   If Output refuses an access request, it will provide the applicant with written notice of its refusal, state the reasons for its refusal and outline any further steps available to the applicant in connection with the access request.

4. COOKIES

4.1 How do we use cookies?

Our Company uses cookies in a range of ways to improve your experience on our website, including keeping you signed in and understanding how you use our products and services. We use these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used. You can set your browser not to accept cookies. However, in a few cases, some of our website features may not function properly as a result.

5. QUESTIONS or COMPLAINTS

5.1 Privacy Officer

5.2 Privacy Commissioners

6. AMENDMENTS TO PRIVACY POLICY

This Privacy Policy may be amended from time to time without notice. Output’s most current Privacy Policy can always be found at: www.output.co.

Schedules Download

• SCHEDULE “A”
• SCHEDULE “B”