PRIVACY POLICY

 

PRIVACY POLICY

Cold Lake Bus Lines is a leading transportation services provider operating in the private and public sectors across multiple Canadian jurisdictions. To facilitate the best service possible for its clients and customers, Cold Lake Bus Lines must at times collect and maintain personal information.

The purpose of this Privacy Policy is to provide a transparent guide to Cold Lake Bus Lines’ collection, use, protection, and disclosure of personal information.

Personal information refers to information about an identifiable individual, but does not include contact information related to that individual’s employment.

Unless otherwise noted, Cold Lake Bus Lines refers to Cold Lake Bus Lines and all its affiliated companies.

Cold Lake Bus Lines is committed to protecting personal information. That commitment starts by complying with federal and provincial privacy laws, but goes farther, as Cold Lake Bus Lines aims to apply leading privacy practices to its operations.

Accountability

Cold Lake Bus Lines is accountable for the personal information it collects.

Cold Lake Bus Lines has a Privacy Officer to manage its privacy obligations, whose responsibilities include:

  • overseeing the development, review and revision of this Privacy Policy, and any supplemental policies and practices related to the protection of personal information;
  • ensuring that employees and service providers comply with this Privacy Policy, and any supplemental policies and practices related to the protection of personal information; and
  • responding to concerns or complaints relating to this Privacy Policy, any supplemental policies and practices related to the protection of personal information.

The Privacy Officer may be reached at:

Bea Nguyen

privacy@corp.pwt.ca

1857 Centre Avenue SE

Calgary, AB T2E 6L3

 

Collection of Personal Information: Purpose & Consent

Cold Lake Bus Lines only collects personal information it requires to provide transportation services.

Accordingly Cold Lake Bus Lines relies on customers’ implied consent for the collection and use of that information as permitted by law.

Cold Lake Bus Lines collects information at the time of sale, including name, email address, physical address and telephone number, because it needs to know the identity of its customers, addresses for the provision of services, and contact information in case any change in the provision of services needs to be communicated.

Cold Lake Bus Lines does not collect any personal information in providing transportation services on behalf of municipal or regional governments, except for certain information needed to provide health-related transportation assistance. That additional information is necessary in case of emergency and to ensure that any assistance-related requirements are known in advance.

Cold Lake Bus Lines’s website uses Cookies, which track information given by a user or about a user’s activity on the website, to personalize the online experience and to save visitors time by recalling specific information on subsequent visits. Visitors to Cold Lake Bus Lines’s website are able to accept or decline Cookies and are prompted to make that selection on accessing the website. For more information on Cold Lake Bus Lines’s use of Cookies, please see our [Cookie Notice].

Customers may seek to withdraw their consent to the collection, use, or disclosure of personal information by contacting the appropriate Cold Lake Bus Lines affiliate or the Privacy Officer. Subject to receiving such requests in a timely manner, and any overriding legal obligations, Cold Lake Bus Lines will take steps to accommodate such requests. Withdrawal of consent prior to the provision of transportation services will negatively affect Cold Lake Bus Lines’s ability to provide those services and may result in services not being provided.

When Cold Lake Bus Lines provides student transportation services on behalf of school boards, it is similarly provided with information necessary to deliver those services, including: student names, addresses, phone numbers and (when needed) dietary and medical information, and photographs in the case of nonverbal students.

Cold Lake Bus Lines does not collect information, including personal information, from any social media platform on which it is active.

Limiting Use, Disclosure, and Retention

In addition to limiting the personal information that is collected, Cold Lake Bus Lines limits the use of that information, its disclosure and its retention.

Use

Cold Lake Bus Lines limits the use of customers’ personal information to what is required to provide transportation services.

Cold Lake Bus Lines does not use personal information for statistics or research, and does not sell, rent or lease that information to third parties.

Cookies used on Cold Lake Bus Lines’s website simplify the process of recording and recalling information, such as contact information, billing and shipping addresses. For more information on Cold Lake Bus Lines‘s use of Cookies, please see our [Cookie Notice].

Disclosure

Cold Lake Bus Lines does not disclose personal information to third parties for any statistical or research use.

Cold Lake Bus Lines and its affiliates do not share personal information with each other.

Cold Lake Bus Lines will not disclose an individual’s personal information without notice to that individual or his or her consent, except in very limited circumstances and only as permitted or required by law, including when disclosure is in the individual’s interest and consent cannot be obtained in a timely way.

When Cold Lake Bus Lines collects personal information in the course of acting as a service provider to federal and provincial governments, that information may be disclosed as required by that government and permitted by law.

Retention

In almost all cases, Cold Lake Bus Lines retains personal information for a minimum of one year, and otherwise for so long as is necessary to facilitate the provision of transportation services.

Cold Lake Bus Lines destroys any student personal information six months after completing the student transportation route to which the personal information relates or as per contractual agreement with our customer.

Safeguards

Cold Lake Bus Lines has reasonable security arrangements in place commensurate with the sensitivity of the type of personal information collected in order to guard against unauthorized access, collection, use, disclosure and disposal of that information.

Storage

Cold Lake Bus Lines collects customer information online and offline. When collected offline, the information is entered into an online database, and otherwise destroyed unless required for use by drivers.

For information stored electronically, Cold Lake Bus Lines‘s data and data systems are physically situated in a tier 1 data centre in Alberta. Only Cold Lake Bus Lines Information & Technology staff have physical access to the data centre. Cold Lake Bus Lines’s data and data systems are otherwise protected by standard network access controls.

Physically recorded personal information is limited to the information that Cold Lake Bus Lines drivers require during day-to-day operations.

When not in use by drivers, documents containing personal information are stored at local Cold Lake Bus Lines offices, which are subject to standard physical access controls. Any extra copies of such documents are disposed of on a daily basis in secured document containers and destroyed on a monthly basis.

Cold Lake Bus Lines does not retain copies of tickets bearing customers’ personal information.

Cold Lake Bus Lines does not collect or store customer financial information. When information such as a credit card number is transmitted to other websites (third party points of sale), it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol.

Training

All Cold Lake Bus Lines employees receive privacy training upon employment, which includes review of:

  • this Privacy Policy;
  • employee obligations to ensure that personal information is protected; and
  • employee obligations to report any access breach or suspected access breach of personal information to the Privacy Officer.

Drivers are specifically trained to ensure proper use, storage and disposal of documents containing customer and passenger personal information.

Incident Response

Cold Lake Bus Lines has established a comprehensive IT Security Incident response plan setting forth processes and protocols for management and communications in the event of a security breach related to its collection, use, storage and disposal or disclosure of personal information. For details regarding Cold Lake Bus Lines’s IT Security Incident response plan please contact the Privacy Officer.

Accuracy & Access

Cold Lake Bus Lines aims to ensure the accuracy of personal information, but it relies on customers to provide accurate information.

Customers seeking to correct or update personal information are encouraged to contact the appropriate Cold Lake Bus Lines affiliate by phone to correct any error or omission.

All contact information for various Cold Lake Bus Lines affiliates is available at https://www.coldlakebus.ca/contact-us/

Customers may also request access to their personal information in Cold Lake Bus Lines’s control at any time through the access to information processes provided for under provincial and federal legislation.

Such inquiries may be made to the Privacy Officer.

In responding to any such request, Cold Lake Bus Lines may seek to confirm the identity of the person requesting information, and any additional personal information collected in that process will be destroyed as soon as reasonably possible once that identity is confirmed.

Subject to any overriding legal obligations, Cold Lake Bus Lines will provide customers with a description of what, if any, personal information it retains, the use it makes of that information and what, if any, disclosure has been made of it.

Updates

Cold Lake Bus Lines will occasionally update this policy to reflect company and customer feedback, as well as developments in legislation and best practices.