Privacy Policy

Purpose

The Hotel Association of Canada is committed to protecting the privacy of personal information of its members and all users of its services. This Privacy Policy has been prepared to affirm HAC’s commitment to maintaining high standards of confidentiality, to provide information on HAC’s practices concerning the collection, use and disclosure of personal information and to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable statutes.

Policy

HAC shall respect and uphold an individual’s right to privacy and to protection of his or her personal information. The HAC Privacy Policy shall incorporate the provisions of the Personal Information Protection and Electronic Documents Act. This policy applies to all members and persons who provide personal information to HAC directly or through other means.

Procedures

HAC shall be accountable for the personal information under its control.

HAC may collect and use personal information about members solely for the following purposes:

  • to enable communication between members and to administer member records;
  • to provide products and services requested;
  • to provide income tax receipts if applicable;
  • to process payment for the products and services requested;
  • to support analysis, research, and management of HAC’s programs;
  • to enable access to the members-only web sites,
    to meet statutory and regulatory requirements;
  • for admission;
  • to conduct professional practice investigations where required; and,
  • for research and planning purposes.

The only circumstances under which personal information may be disclosed to third parties is for the fulfillment of any purposes identified above, or as required by law. Where personal information is disclosed to third parties for the fulfillment of any purposes identified above, HAC will make all reasonable efforts to ensure that the third party has appropriate security procedures in place for the protection of the personal information being transferred.

Registration as a member of HAC or the use of its products and services will be regarded as consent by the member for HAC to collect, use, and disclose personal information for the purposes stated in this Policy.

Members may refuse or withdraw consent at any time to provide HAC with personal information, subject to legal and contractual restrictions and reasonable notice. However, the decision by members to withhold particular information may impact their ability to meet the membership requirements of HAC.

HAC shall not use or disclose personal information for any purpose other than that for which it was collected, except with members’ consent or as required by law. HAC shall not sell, lease, or provide information about members to other parties. Personal information shall be retained only as long as is necessary for the fulfillment of the purposes for which it was collected, or as required by law.

HAC will make all reasonable efforts to ensure that personal information is as accurate, complete, and current as required for the purposes for which it was collected. Members may report any inaccuracies in their information to HAC. HAC will make the appropriate corrections promptly. In some cases, HAC will necessarily rely on members to ensure that certain information about them, such as their mailing address and telephone number, is current, complete, and accurate.

HAC shall use appropriate security safeguards to protect members’ personal information from risks such as loss, misuse, unauthorized access, disclosure, or alteration. Safeguards shall include physical, administrative, and electronic security measures. All HAC staff shall abide by HAC’s privacy standards.

Members shall have the right to access their personal information under the control of HAC. Upon request in writing to HAC, members will be informed of the existence, use, and disclosure of their personal information and will be given access to that information. In certain exceptional situations, HAC may not be able to provide access to certain personal information that it holds about members. For example, HAC may not provide access to personal information if doing so would reveal personal information about a third party. If access cannot be provided, HAC will notify the member, in writing, of the reasons for the refusal.