Our philosophy on privacy Credit unions in Canada have a long history of respecting the privacy of their customers. As a co-operative financial institution, we are committed to developing policies, procedures and service offerings that address privacy concerns.
We continue to protect your privacy and your right to control the collection, use and disclosure of your personal information. We have procedures in place that guide our employees and directors in maintaining confidentiality. What has been our ongoing business practice has become our documented commitment to you.
Your credit union Board of Directors has adopted the Credit Union Code for the Protection of Personal Information, established related Policies and Procedures and appointed a Privacy Officer. Our employees understand the importance of the policies and procedures and follow them carefully.
To find out more contact our Privacy Officer.
Glen Goddard
General Manager
306-662-2683
Glen.Goddard@cypress.cu.sk.ca
Your Personal Information
What is personal information?
Personal information is information about an identifiable individual. This includes, for example, an individual’s race, ethnic origin, colour, age, marital status, religion, education, medical information, criminal record, employment history, financial records, address, telephone number, e-mail address, Social Insurance Number, fingerprints, blood type, and tissue or biological sample.
Why do we collect it?
We hold personal information about members to help us meet and maintain the highest standards of financial service. This information can include your name, address, age, income, use of accounts and credit history.
We obtain this information from you directly, and from the product and service arrangements you have made with or through us. Information is also obtained with your permission from credit bureaus, other financial institutions and from the references you provide us.
Your personal information is collected for one or more of the following purposes:
- To understand your needs and eligibility for products and services;
- To open, maintain and administer your accounts and provide financial services that meet your needs;
- To obtain credit reports and evaluate your credit rating and credit worthiness;
- To administer and manage security and risk in relation to your accounts and the financial services provided to you;
- To comply with legal and regulatory requirements;
- To assist in dispute resolution;
- To offer and provide you with other products and services of the Credit Union and of its affiliates and service suppliers.
The law requires us to ask for your Social Insurance Number (SIN) when you open an interest bearing account. We also ask for your SIN to identify you with credit bureaus and other financial institutions for credit matching purposes. Using the SIN is the best way to ensure the credit information actually refers to you. Giving us your SIN is not a condition on service.
Who do we share your personal information with?
We use trusted and reputable suppliers to provide cheque and statement printing, data processing, research and payment clearing services. We provide them with only that information which is necessary to perform the required services. They are not allowed to use this information for any other purpose than what we contract them for. Our suppliers and their employees are required to protect your information in a manner that is consistent with our Privacy Code.
Your information is sometimes shared within the Co-operative Financial Services Group™ of companies so we can offer you a full range of financial products and services. These affiliates include: Credit Union Members Insurance Society (CUMIS), Credential Group, Co-operative Trust Company of Canada, The Co-operators Insurance, Credit Union Payment Services (CUPS), Collabria and Celero Solutions. Any product or service offering that is derived from this sharing of information comes directly from us and not from our affiliates.
How can you access and verify your personal information?
You have the right to review your personal information held by Cypress Credit Union and to verify its accuracy. Your request should be made in writing. There may be a charge for such a request.
The 10 Principles
The following is a summary of the 10 Principles of the Credit Union Code for the Protection of Personal Information.
1. Accountability We have designated a Privacy Officer who is accountable for our compliance with the principles of the Code.
2. Identifying Purposes When we ask you for personal information, we will identify the purposes for which it will be used or disclosed.
3. Consent We require your knowledge and express or complied consent for the collection, use or disclosure of personal information.
4. Limiting Collection The collection of personal information is limited to the purposes we have identified for you.
5. Limiting Use, Disclosure, and Retention We will use or disclose your personal information only with your express or implied consent, or as required by law. We will retain your information for only as long as is necessary to fulfill identified purposes.
6. Accuracy We will keep your information accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.
7. Safeguards We will protect your personal information with appropriate security safeguards.
8. Openness We will make specific, understandable information readily available to you about our personal information policies and practices.
9. Individual Access When you request it, we will give you access to your personal information, how we use it and who we disclose it to. You are entitled to question its accuracy, its completeness and its uses.
10. Challenging Compliance You are entitled to question the Privacy Officer about our compliance with any of these principles.
The Privacy Officer
The Privacy Officer is your point of contact if you wish to raise any matters regarding the use of your personal information.
The Privacy Officer is responsible for monitoring information collection and data security, and ensures that other credit union employees receive appropriate training on privacy issues and their responsibilities under the Code. The Privacy Officer also handles all privacy inquiries and personal information access requests under the Code.
Your consent
Depending upon the sensitivity of the information, you can provide us with your consent in writing, electronically or verbally.
We will obtain your consent in writing when you become a credit union member or when you apply for a new credit union service offering.
We may possess personal information about you that we collected prior to implementation of our Privacy Code, for which we do not have your express consent to use. We will continue to use that information for the purposes listed in this brochure, unless you ask us to stop using that information. This is considered implied consent.
We obtain or use your information only with your consent. We do not sell it to third parties or use it in any way we have not told you about. We obtain your consent before we:
- obtain credit reports or check references;
- contact you about other products or services of the credit union by direct mail, email or telephone;
- share your information with our affiliates so that we can offer their products and services to you;
- disclose your information to third parties unless we are obliged to do so by law or it is required for us to provide our financial services to you.
The following withdrawal of consent form provides you with an opportunity to limit the uses and disclosures of your personal information should you choose to do so. You may limit or withdraw your consent at any time, subject to legal or contractual obligations. For example, your credit union is required by law to provide a record of your interest earning information to the Canada Customs and Revenue Agency.
To withdraw your consent, print and fill out the form and send it in to the Cypress Credit Union’s Privacy Officer at:
Glen Goddard
Box 1060
Maple Creek, SK
S0N 1N0
Click here to print off the form.
Website Privacy Policy
On our website, we collect only personal information that is required to improve the services we offer, to improve our site content and, with your permission, to contact you with information about our services. We will not share any personal information obtained on this web site with any other organization without your express knowledge and consent.
You can visit all public areas of our site without providing any personal information. Our site collects only non-personal information based on a visitor’s Internet Protocol (IP) address (this is not personally identifiable). Information collected includes the date and time of visit, the type of Internet browser used to access the site, the referring address (the link a visitor uses to access the site). This data is used to create statistics on site usage and improve online services.
If you send us an e-mail, any information provided by you will be used only for the purposes of responding to your inquiry or acting on your request. We will not use your name or e-mail address for any other purposes without additional consent.
Links to other websites Our web site contains links to other web sites that are part of, affiliated with, or have a business relationship with Cypress Credit Union. When you leave our site to visit one of these other sites, the only information transferred to the new site is the fact that you came from the Cypress Credit Union web site. Transmission of this referring address allows other sites to monitor their own web traffic, but does not disclose any personal information about you.
Mobile App
The following list of permissions and activities are required by our mobile app to operate. These include:
- “Access Camera” permission is used by the app to deposit a cheque via mobile deposit capture, store a custom profile picture and background.
- “Access Location” permission is used by the app to accurately locate the nearest ATM or branch in the “Find Us” feature.
- “Call Permission” is used to automatically call the user’s preferred branch by tapping on the phone number in the “Find Us” feature.
- “Read Contacts” permission is used to set up new Interac e-Transfer contacts and send an Interac e-Transfer. Only the device contact information a user confirms is readable by Interac.
- “Internal Storage” permission is required to view, share and download PDF files from the mobile app to a user’s device.
- “App Activities” uses mobile app interaction data for analytics on usage and crash information for the current app version. We also monitor application stability using the crash logs to make ongoing improvements. Data collected on app activities, information and performance is completely anonymous and aggregated-individual users are not identifiable.
Challenging compliance
If you have any concerns about how your personal information is handled or distributed, please contact us. Our Privacy Officer will be pleased to discuss your concerns with you.
For an Inquiry or Complaint:
Please specify the following in a dated and signed letter:
- The nature of the inquiry or complaint (please be as specific as possible); and
- Your name, address, and a telephone number where you can be reached during the daytime.
If, for any reason, you feel your concerns were not appropriately addressed, you may then take the matter to the Office of the Privacy Commissioner in Ottawa.