2. Guiding principles
Our Policy rests on the following seven guiding principles:
2.1 Identifying the purposes of use
The nature and scope of the Personal Information we need depends to a great extent on which products, solutions or services are of interest to you. BDC will collect Personal Information only in relation to its operating programs or activities for business purposes in order to:
Personal Information such as your name, telephone number, personal address, date of birth, gender, and password helps us to identify you or allow you to register for an event.
Determine your eligibility for products, solutions or services you request and their suitability
Personal Information such as information relating to assets, liabilities, financial transactions, income, education, employment, etc. is needed to evaluate your creditworthiness, assess your eligibility, and to make decisions in the context of an application for financing.
Offer products, solutions and services that meet your needs
BDC delivers custom-made services. Personal Information enables our specialists to respond to your requests for such services and to assess, plan, and implement integrated management solutions at every stage of your business development.
Advise on our products, solutions and services
BDC will try to satisfy your request for advice on various matters and direct you towards appropriate products, solutions and services whenever possible. Personal Information ensures the advice we give you is best suited to your financial profile. It allows us to recommend features and tools such as our ratio calculators and online benchmarking tools, designed to provide automated feedback on business opportunities based on your input.
Provide ongoing services
Personal Information about you and your business allows us to communicate with you and respond adequately and promptly to your enquiries about applications, accounts, or other online services.
Recognize your achievements
To select and contact the winners for BDC’s awards and recognition, we may require certain Personal and financial Information concerning, for instance, your financial statements, your business plans, and your community involvement.
Protect you and us against errors and fraud
All your activities are electronically logged, so that BDC can review them in case of any suspicious activity. BDC uses software to monitor site traffic and to detect unauthorized attempts to upload, change information, or otherwise cause damage.
Promote our products, solutions and services to you
When you specify your consent on any online BDC subscription or registration form, BDC may, from time to time, use your email or regular mailing address to send you information on BDC's products, solutions and services, trends, business opportunities, or other topics and events of current interest. In order to do so, BDC may also collect the information that you provided on the subscription or registration form, such as your name, address, telephone and fax numbers, and your language of preference.
Comply with legal, security, processing, and regulatory requirements
Allow you to apply for jobs online
2.2 Obtaining your Consent
Your Consent can be express or implied ("Consent"). It can be expressed in writing, or electronically when, for example, you authorize us to check your employment, to obtain a credit report, or to exchange Personal Information with credit bureaus or other financial institutions in the context of an application for financing.
Your Consent can be implied through your action or inaction. For instance, when you file an application, we conclude that you have consented to the collection, use, and disclosure of the Personal Information it contains for the intended purposes. The same conclusion may be drawn when you use one of our products, solutions or services. Your Consent can also be given by your authorized representative, for instance, if he/she is providing Personal Information and is seeking financing online from BDC on your behalf.
Your Personal Information will be viewed by BDC employees or representatives for the purposes of their work or for which it was given, as outlined in main 2.1.
In some circumstances, BDC may collect, use, or disclose Personal Information without your Consent for legal, security, or processing reasons, or when it is impossible to obtain your Consent in cases contemplated by applicable privacy legislation. Examples of such circumstances include compliance with applicable laws or court orders, the protection of the public interest, BDC's rights, fraud detection and prevention, the use of Personal Information emanating from a third party, and the collection of overdue accounts.
You can withdraw your Consent at any time, provided BDC is given reasonable notice and there are no legal or contractual requirements preventing this.
2.3 Limiting collection, use, and disclosure of Personal Information
BDC will not, without your Consent, collect, use, or disclose Personal Information except for the purposes identified or for a use consistent with those purposes or as otherwise required or permitted by applicable law. With your Consent, BDC may obtain Personal Information from third parties, including through credit checks, other lenders, or credit bureaus.
BDC may transfer (or otherwise make available) Personal Information to third parties who provide services on our behalf. For example, we may use service providers to process Personal Information, authorize and process payments, or host our website. Personal Information may be stored and processed outside of Canada, including the United States, by our third-party service providers. Our service providers are not authorized to use or disclose your Personal Information for any purpose other than providing the services on our behalf or as otherwise required by applicable law.
BDC is subject to various legal and business requirements in dealing with document retention, including electronic documents such as emails. BDC will retain the Personal Information only for such periods of time as may be prescribed by applicable laws and regulations, as deemed necessary for the identified purposes. In accordance with legal requirements and applicable guidelines, BDC will destroy, erase, render anonymous, or otherwise dispose of Personal Information after such period of time.
2.4 Providing access and accuracy
Subject to legal requirements provided by the Privacy Act or the Access to Information Act, BDC will respect your right of access to your Personal Information by informing you of its procedures and requirements for responding to your request for access. BDC will act diligently to give you access, at minimal or no cost wherever possible. In certain exceptional circumstances, BDC may not be able to give you access to your Personal Information. For example, some Personal Information banks may contain references to other persons or to BDC's proprietary information, or be covered by solicitor-client privilege.
You can challenge the accuracy of your Personal Information and request corrections if you believe there are errors or omissions. You may also require in certain circumstances that an annotation be attached to your Personal Information reflecting any correction requested but not made, or that such annotation or correction be notified to certain individuals.
BDC will take all reasonable steps to ensure Personal Information used on an ongoing basis is as accurate, up-to-date, and complete for the purposes in which it was collected; BDC will rely on you to inform it of any required corrections.
2.5 Responding to your privacy concerns
BDC will respond to your questions and investigate diligently any complaints with respect to your Personal Information.
2.6 Complying with applicable privacy legislation
Your and BDC's rights and obligations regarding privacy are governed by applicable privacy legislation in Canada. The application and interpretation of this Policy and of our guiding privacy principles are subject to and will comply with such legislation.
Web analytics involves the collection, analysis, measurement and presentation of data on website traffic and on visits, for the purpose of understanding and optimizing Web use. The information collected by the cookies may be used by Web analytics to keep your interactions with BDC.ca in memory.
Information used for the purpose of web analytics is collected pursuant to the Financial Administration Act. BDC uses the information for its own internal statistical and analytical purposes, to evaluate and enhance users' experience of the website by identifying customer preferences and trends that we may use for marketing purposes and to further develop our business and operations.
When your computer requests a BDC Web page, BDC collects the following types of information, for web analytics, such as:
- the Internet Protocol (IP) address of your computer;
- the date and time of your request;
- the pages viewed and downloaded;
- the identifier attributed to registered users accessing restricted areas on the site;
- the type of operating system; and
- the type of browser & browser settings used.
Data collected for web analytics purposes will sometimes go outside of Canada to the United States of America and may be subject to the governing legislation of that country, such as the USA Patriot Act.
BDC uses Google Analytics, and the data gathered are sent to Google, an external service provider. Your IP address is anonymized before being saved on the Google server, in order to safeguard your Personal Information. The data gathered are anonymized by truncating your computer's IP address. No Personal Information identifying you is saved or provided to Google.
BDC uses software to monitor site traffic and to detect unauthorized attempts to upload, change information, or otherwise cause damage. The software receives and records the Internet Protocol (IP) addresses of the computers that have visited this site, including the date and time of visits, the pages that were viewed and downloaded, and the identifier attributed to any registered user who accesses restricted areas on this site. The software also captures information regarding the type of browser and operating system. BDC does not attempt to link the IP addresses and the identifiers with the identity of users visiting this site unless there is an attempt to damage the site.