Overview and scope
Privacy rights and accountability
PIPEDA defines "personal information" broadly as any information about an identifiable individual. Generally speaking, personal information does not include "business contact information" such as the name, job title, business address, or business telephone number of an employee of an organization.
Veritas obtains your consent before it collects, uses, or discloses your personal information. Normally, Veritas asks for your consent in writing, but in some circumstances, it may accept your oral consent. Sometimes, your consent may be implied through your conduct with Veritas.
There may be circumstances where you have provided personal information for an identified purpose, and Veritas later needs to use that information for a different purpose. In such circumstances, Veritas will seek your consent to use the information for the new purpose.
Why Veritas collects, uses and discloses your personal information
Veritas collects, uses and discloses your personal information for the purposes identified at the time of collection, or as otherwise permitted or required by applicable law, including for the following purposes:
- to provide you with investment research services, including more specifically:
- to manage its business and maintain commercial relationships with you;
- to evaluate your satisfaction and conduct market research;
- to maintain and develop its systems and databases for managing documents and knowledge;
- to detect and protect against error, negligence, breach of contract, fraud, theft and any other illegal activity, and where necessary to meet its insurance requirements;
- to send you information about Veritas' services and about developments in markets, to invite you to Veritas events and to communicate with you generally;
- as permitted by, and to comply with, applicable legal or regulatory requirements; and
- to further any other purpose for which it has your consent.
Veritas may also ask for and collect your personal information at certain points throughout the Website. In addition to the information you knowingly provide, Veritas collects the domain names and IP addresses of its visitors, along with usage statistics (e.g., types of web browsers and operating systems used) and browsing history. This data is used to more efficiently operate Veritas' business, promote our services and administer the Website. As well, Veritas collects any information you may choose to provide in your communications with it.
How Veritas collects, uses and discloses your personal information
Veritas collects your personal information by fair and lawful means and, wherever appropriate, directly from you. Wherever possible, Veritas limits the amount of personal information it collects, uses or discloses to that necessary and appropriate to provide its investment research services and to operate Veritas' business.
When Veritas discloses your personal information
- when disclosure to third parties assists it in providing you the investment research services that you have requested;
- when necessary to collect outstanding accounts;
- when necessary to comply with court orders, regulatory rules, or to satisfy Veritas' insurance requirements;
- in connection with a business transaction involving Veritas; and
- when Veritas reasonably believes that a third party requesting your personal information is your agent.
Please note that there are circumstances where the use and/or disclosure of personal information may be justified or permitted or where Veritas may or must disclose information without your consent, in accordance with applicable law. For example, Veritas may disclose your personal information to a government institution that has asserted its lawful authority to obtain the information or where Veritas has reasonable grounds to believe the information could be useful in the investigation of unlawful activity, or to comply with a subpoena or warrant or an order made by a court, person or body with jurisdiction to compel the production of information, or to comply with court rules regarding the production of records and information, or to protect Veritas' rights and property. Where obliged or permitted to disclose information without consent, Veritas will not disclose more information than is required for the purpose that obligates or permits it to disclose such information.
Disclosure of your personal information to third party service providers
When Veritas transfers your personal information to a third party to provide administrative and other services, it uses appropriate measures to ensure that the third party will only use your personal information to perform the services Veritas has specified. The increasingly global nature of Veritas' business sometimes requires it to use service providers who may be located in the United States or elsewhere outside of Canada. Accordingly, your personal information may be transferred outside of Canada and if so, it will be subject to the legal requirements of the applicable foreign jurisdictions, including local requirements to disclose information to courts, law enforcement and national security authorities.
To the extent Veritas enters into arrangements with service providers, agents and contractors to store, handle or process personal information on its behalf, such as for data processing, document storage software support and office services, Veritas' policy will be to require such parties by contractual or other means to provide comparable privacy protection while the information is processed or handled by them.
Where Veritas stores your personal information
Your personal information is stored in secured locations and on servers controlled by Veritas, located either at our offices or at the offices of our service providers. Your personal information may be processed, accessed and/or stored in Canada or another jurisdiction, and will be subject to the laws of that jurisdiction.
Security of your personal information
Veritas uses the standard safeguards of the financial services industry to protect the security of personal information in its possession, including physical, organizational and technological measures. These measures include:
- premises security;
- restricted access to files that contain personal information;
- technological safeguards like security software and firewalls to prevent hacking or unauthorized computer access; and
- internal password and security policies.
However, no method of transmitting or storing information is completely secure. While Veritas takes appropriate measures to protect your personal information, there is always a risk that it may be lost, intercepted or misused. Veritas may exchange electronic versions of documents and e-mails with you using commercially available software that may be vulnerable to attack by viruses and other destructive electronic programs. Veritas cannot guarantee that all communications and documents sent via e-mail will always be received, or that such communications and documents will always be virus free. Veritas makes no warranty with respect to the integrity of any electronic communications between Veritas and you or with respect to the security of any such communication and you consent to Veritas' exchange of electronic communications, including confidential documents, unencrypted.
Accessing your personal information
You may ask for access to any personal information Veritas holds about you. Summary information is available on request. More detailed requests which require archive or other retrieval costs may be subject to Veritas' normal professional and disbursement fees.
Subject to certain exceptions prescribed by law, you will be given reasonable access to your personal information and will be entitled to challenge the accuracy and completeness of that information and, to the extent that you have proven such inaccuracy or incompleteness, have it amended as appropriate. Examples of such exceptions include information that is prohibitively costly to provide, information that contains references to other individuals, information that cannot be disclosed for legal, security or commercial proprietary reasons, and information that is subject to solicitor-client or litigation privilege.
Updating the accuracy of your personal information
You can help Veritas maintain the accuracy of your personal information by notifying Veritas of any changes to your personal information. If Veritas holds information about you and you advise us that it is not accurate, complete and up-to-date, Veritas will take reasonable steps to correct it.
Being denied access to your personal information
Your rights to access your personal information are not absolute. Veritas may deny access when:
- denial of access is required or authorized by law;
- information relates to existing or anticipated legal proceedings against you;
- granting you access would have an unreasonable impact on other people's privacy;
- protecting Veritas' rights and property; and
- your request is frivolous or vexatious.
If Veritas denies your request for access to your personal information, or refuses a request to correct information, Veritas will explain why.
Personal information and Website
The Website may use "cookies", a technology that installs information on a Website user's computer to permit the Website to recognize future visits using that computer. Cookies enhance the convenience and use of the Website. The use of cookie technology is common on the Internet, and many Internet browsers are initially set to accept cookies automatically.
Like many other websites, the Website may make use of "per session" and "persistent" cookie technology. Per session cookies track information during an open session and are stored only temporarily in your computer’s memory. Persistent cookies are deposited on a visitor's computer until they expire or until the visitor deletes the cookies. Information from these cookies help Veritas analyze traffic patterns to the Website, including the total number of visitors, the geographical location of the visitor, and the types of Internet browsers (e.g., Google Chrome or Internet Explorer) and operating systems (e.g., Windows or Macintosh) that the Website's visitors use. Veritas uses this information to facilitate and enhance your online visits. Veritas does not cross-reference this information with any type of personal information that is voluntarily offered through the Website.
On the Website, like most other commercial websites, Veritas may monitor traffic patterns, site usage and related site information. This is done in order to optimise its web service. Veritas may provide aggregated information to third parties, but these statistics do not include any personal information.
The Website uses Google Analytics to collect information, in an anonymous form, about how visitors use the Website, including the number of visitors to the Website and the pages they have visited. Veritas uses such information to compile reports and to help it improve the Website. By using the Website, you agree to such use of Google Analytics. Should you wish to opt-out of the use of Google Analytics, please click on the following link: https://tools.google.com/dlpage/gaoptout
The Website may also use third party vendor re-marketing tracking cookies, including the Google AdWords tracking cookie. This means Veritas may show ads to you across the Internet, specifically on the Google Display Network. Veritas does not collect personal information through the use of Google's or any other third party remarketing system. Rather, the third party vendors will place cookies on web browsers in order to serve ads based on past visits to the Website. This allows Veritas to continue to market its services to those who have shown interest in Veritas.
Serious privacy breach notifications
Veritas will notify you of any breach of the security safeguards involving your personal information under Veritas' control if it is reasonable in the circumstances to believe that the breach creates a real risk of significant harm to you (a "Serious Privacy Breach"). This notice will be conspicuous and given to you in the manner prescribed under PIPEDA as soon as feasible after Veritas determines that such a breach has occurred.
Likewise, Veritas will report any Serious Privacy Breach to the Office of the Privacy Commissioner of Canada in the manner prescribed under PIPEDA as soon as feasible after Veritas determines that such a breach has occurred.
Individual clients may review any personal information concerning themselves Veritas has on file in its offices by contacting Veritas' Privacy Officer at the address below. Individuals who are not clients may request access to personal information Veritas holds about them by written request to:
Lou Fabiano, Privacy Officer,
Veritas Investment Research Corporation
100 Wellington Street West
Toronto, ON M5K 1E7
If you are not satisfied with Veritas' response, the Privacy Commissioner of Canada can be reached at:
112 Kent Street
Place du Ville Tower, 3rd Floor
Ottawa, Ontario K1A 1H3