CASL Regulations, PIPEDA Compliance and Consent Requirements

---

Your consent is required for collecting, using, and disclosing personal information (PIPEDA) and sending commercial electronic messages (CEMs) under CASL. We seek express consent where required, such as for marketing CEMs or third-party disclosures related to our insurance services.

Express Consent: This is obtained via active opt-in (e.g., unchecked checkbox) when you submit information. We clearly state: 

- The purpose (e.g., "To allow [Third-Party Name or 'our partners'] to contact you via email or phone about relevant coverage options and offers"). 

- Our identification (business name, address, contact).

- That you can withdraw consent anytime (e.g., via unsubscribe link or contact).

Implied Consent: May apply in limited cases, like existing business relationships; however, we prioritize express consent for marketing our insurance services. 

Withdrawal: You can withdraw consent anytime by contacting us or using unsubscribe mechanisms. This may limit services but will be honored promptly (within 10 days for CASL). We inform you of any consequences (e.g., no further contacts).

For third-party sharing, consent explicitly covers that the third party may send CEMs or make phone contacts. We do not assume consent from publicly available information without meeting CASL criteria.

Disclosure of Personal Information to Third Parties

We may disclose your name, phone number, and email to third parties (e.g., marketing partners) for direct contact via phone or email regarding coverage options we offer. We:

- Obtain your express consent for such disclosures.

- Require third parties to comply with PIPEDA and CASL, using information only for consented purposes related to insurance services.

- Ensure third-party CEMs include sender identification, contact info, and unsubscribe mechanisms.

We remain accountable under PIPEDA for third-party handling and do not sell your information. Disclosures may also occur for legal reasons (e.g., court orders).

Requirements for Commercial Electronic Messages (CEMs)

All CEMs we or our third parties send will:

- Identify the sender (business name, on whose behalf sent if applicable).

- Provide contact information (mailing address, phone/email/web).

- Include a clear unsubscribe mechanism (e.g., link or reply "STOP"), effective within 10 days.

We maintain records of consents and unsubscribes as part of our compliance program.

Security of Your Personal Information

We use reasonable safeguards (e.g., encryption, access controls) to protect against unauthorized access, loss, or misuse of your personal information. No internet transmission is fully secure, but we strive for commercially acceptable protection.

Retention of Personal Information

We retain information only as needed for stated purposes or legal requirements (e.g., 2 years for implied consent under CASL, or longer for tax/audits). It is then securely deleted or anonymized.

Your Rights Under PIPEDA and CASL

Access and Correction: Request your information and corrections. 

Withdrawal of Consent: Opt out of uses/disclosures/CEMs. 

Complaints: Contact us or the Office of the Privacy Commissioner (priv.gc.ca) for PIPEDA, or CRTC (fightspam.gc.ca) for CASL. 

Accountability: We respond promptly to requests.

Cookies and Tracking Technologies

We use cookies for functionality and analytics (e.g., essential, performance) to enhance your experience on our website. Manage via browser; refusal may limit features.

International Transfers

Transfers outside Canada (e.g., US servers) use safeguards for comparable protection of your information.

Links to Third-Party Sites

We are not responsible for external sites' practices and how they handle your information.

Children's Privacy

Our services are not directed at children under 13; we do not knowingly collect information without parental consent.

Changes to This Policy

Updates to this policy will be posted here; continued use implies acceptance of these changes.

By providing your information, you consent to this policy. For CASL records, we document consents.

 You can also contact our Privacy Office directly at privacy@westerninsuranceconnection.com