Northcrest Developments is subject to the Privacy Act.

To make a request under the Privacy Act visit the ATIP Online Request Service [https://atip-aiprp.apps.gc.ca/atip/welcome.do] website or send your completed personal information request form to:

Tammy Marer
1250 René-Lévesque Boulevard West, Suite 1400
Montréal, Québec, Canada H3B 5E9

Privacy Notice

Northcrest Developments respects the privacy of visitors. This Privacy Notice summarizes the privacy practices for Northcrest’s online activities. All personal information collected by this institution is governed by the Privacy Act.
The purpose of this Privacy Notice is to outline the policies, procedures and measures that Northcrest Developments takes with respect to the collection, use, disclosure, protection, and handling of personal information in order to comply with its obligations under the federal Privacy Act, the Privacy Regulations, and applicable policies, directives and guidelines of the Treasury Board of Canada Secretariat (“Treasury Board”) issued pursuant to its mandate under the Privacy Act.

Collection of Personal Information

Northcrest Developments shall not collect personal information unless you provide it to us, either verbally or by written correspondence, including in person, and through faxes, emails and telephone inquiries.
Subject to limited exceptions under the Privacy Act, Northcrest shall, wherever possible, collect personal information that is intended to be used for an administrative purpose directly from the individual to whom the information relates, except where the individual otherwise authorizes.
Northcrest shall inform any individual from whom it collects personal information of the following:

• the purpose for which the information is being collected;
• the authority for the collection, including whether response is voluntary or is required by law;
• any uses or disclosures that are consistent with the original purpose;
• any uses or disclosures that are not related to the original purpose;
• of the possible legal or administrative consequences of refusing to provide the information; and
• that the individual has rights of access to, correction of and protection of the personal information under the Privacy Act

Retention and Disposal of Personal Information

Personal information that has been used by Northcrest for an administrative purpose shall be retained for at least two years following the last time the information was used for such purpose, unless the individual consents to its disposal. Where a request for access to the information has been received, the personal information subject to such request shall be retained until the requesting individual has had the opportunity to exercise all his or her rights under the Privacy Act or the Access to Information Act.

Northcrest shall dispose of personal information under its control in accordance with the Privacy Regulations and in accordance with any directives or guidelines issued by Treasury Board in relation to the disposal of that information. Northcrest will also consider the provisions of the Library and Archives of Canada Act when disposing of records containing personal information.

Accuracy of Personal Information

Northcrest shall take all reasonable steps to ensure that personal information it uses for an administrative purpose is as accurate, up-to-date and complete as possible.

Use and Disclosure of Personal Information

Northcrest shall not, without the consent of the individual to whom the personal information relates, use personal information under its control except for the purpose for which the information was obtained or compiled by Northcrest or for a use consistent with that purpose, or for a purpose for which the information may be disclosed in accordance with the Privacy Act. i.e. This restriction does not apply to disclosures to federal investigative bodies for the purpose of law enforcement or investigations under Section 8(2)(e) of the Privacy Act.
Northcrest shall not, without the consent of the individual to whom the personal information relates, disclose personal information under its control except for the purpose for which the information was obtained or compiled by Northcrest or for a use consistent with that purpose or otherwise for a purpose enumerated and permitted under the Privacy Act.

Security and Protection of Personal Information

Northcrest shall protect personal information in its custody or control using physical, organizational and technical security safeguards appropriate to the sensitivity of the information. The security safeguards shall protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. More sensitive personal information shall be safeguarded by a higher level of protection.

Access to Personal Information

Subject to and in accordance with the Privacy Act and the Privacy Regulations, Northcrest shall, on request by an individual, give access to: (1) any personal information about that individual contained in a personal information bank; and (2) any other personal information under its control with respect to which an individual is able to provide sufficiently specific information on the location of the information so as to render it reasonably retrievable by Northcrest. Northcrest will respect the privacy of requesters and will limit, on a need-to-know basis, the disclosure of information that could directly or indirectly lead to the identification of a requester, unless the requester consents to such disclosure.

Formal requests for access to personal information must be in writing to the designated officer of Northcrest or ATIP Coordinator in the form of Access to Personal Information Request Form prescribed by Treasury Board, and must identify each personal information bank that is the subject of the request or each class of personal information that is not contained within a personal information bank, providing sufficiently specific information about the location of the information so as to render it reasonably retrievable by Northcrest. A request that is submitted by telephone or by e-mail shall not be considered to have been submitted pursuant the terms of the Privacy Act. The designated officer of Northcrest or ATIP Coordinator will consider whether it is appropriate to process the request on an informal basis, in which case the requester will be offered that option along with an explanation that only formal requests are subject to the provisions of the Privacy Act.

Northcrest will make every reasonable effort to search records under Northcrest’s control to identify and locate the personal information that is responsive to the request. Northcrest shall respond to the individual within thirty days of receipt of a formal request for access, subject to extension of time limits permitted in the Privacy Act, by:

• giving written notice as to whether or not access to the information or a part of the requested information will be given, and
• if access is to be given, giving the requesting individual access to the information or part of the information, or
• if access is refused, giving written notice that (1) the personal information does not exist, or (2) the specific provision of the Privacy Act on which the refusal was based or the provision on which a refusal could reasonably be expected to be based if the information existed, and shall state that the individual who made the request has the right to make a complaint to the Privacy Commissioner of Canada about the refusal.

Access to personal information in the control of Northcrest shall be subject to the permissive and mandatory exemptions set out in the Privacy Act. Under the guidance of the ATIP Coordinator, all requested personal information shall be reviewed for the purpose of identifying and severing any portions excluded from the Privacy Act or which must be exempted, and for making a decision concerning disclosure of personal information which may be exempted, and which review shall include all consultations with other government departments as required by Treasury Board policy. Exemptions will be cited on the records unless doing so would reveal the exempted information or cause the injury upon which the exemption is based.

Before providing access to personal information, Northcrest shall require the requesting individual to provide adequate identification. Northcrest may require the individual to present him/herself in person for identification purposes.

If access is to be provided, Northcrest shall:

• permit the individual to examine the information by providing reasonable facilities for the examination and setting a time for the examination convenient for both Northcrest and the individual, or
• provide the individual with a copy of the information, and
• if the individual requests that the information be given in a particular official language of Canada and the personal information does not exist in that language and if necessary to enable the individual to understand the information, cause the information to be translated or interpreted for the individual;
• if the individual has a sensory disability and requests that access be given in an alternative format, if it is necessary to enable the individual to exercise his or her right of access and if it is reasonable to cause the information to be converted, provide the information in an alternative format acceptable to the individual.

Northcrest shall consult with the appropriate institutions in all instances involving the application of sections 21, 22 and 23 of the Privacy Act.

Northcrest shall provide assistance, as required, to individuals in exercising their rights of access under the Privacy Act.

Personal Information Corrections and Notations

Every individual who is given access under Section 6 above to personal information that has been used, is being used or is available for use for an administrative purpose is entitled to:

• request correction of the personal information where the individual believes there is an error or omission in the information;
• require that a notation be attached to the information reflecting any correction requested but not made, and
• require that any person or body to whom the information has been disclosed for use for an administrative purpose within two years prior to the time a correction is requested or a notation is required: (1) be notified of the correction or notation, and (2) where the disclosure is to another government institution, the institution make the correction or notation on any copy of personal information under its control.

Formal requests for correction of personal information must be in writing to the designated officer of Northcrest in the form of Correction Request Form prescribed by Treasury Board.

Where a correction is made by Northcrest pursuant to the request, within thirty days after receipt of the request, Northcrest shall:
notify the individual that the correction has been made;
notify any person or body to whom the personal information has been disclosed as described in (a) above that the correction has been made, and
if the person or body to whom the personal information has been disclosed as described in (a) above is another government institution, notify the appropriate officer of that institution of the requirement to make the correction on every copy of the personal information under the control of the institution.

Where a request for correction is refused by Northcrest in whole or in part, within thirty days after receipt of the request, Northcrest shall:

• attach a notation to the personal information reflecting that a correction was requested but was refused in whole or in part;
• notify the individual that (1) the request for correction has been refused in whole or in part and set out the reasons for the refusal, (2) the notation described above has been attached to the personal information, and (3) the individual has the right under the Privacy Act to make a complaint to the Privacy Commissioner of Canada;
• notify any person or body to whom the personal information has been disclosed as described in (a) above that the required notation has been attached to the personal information, and notify the appropriate officer of any government institution to whom the personal information has been disclosed as described in (a) above that the required notation has been attached to the personal information and that the officer is required to attach such a notation to every copy of the personal information under the control of the institution.

Your Privacy and the Internet

The nature of the Internet is such that Web servers automatically collect certain information about a visit to a website, including the visitor’s Internet Protocol (IP) address. IP addresses are unique numbers assigned by Internet Service Providers (ISP) to all devices used to access the Internet. Web servers automatically log the IP addresses of visitors to their sites. The IP address, on its own, does not identify an individual. However, in certain circumstances, such as with the co-operation of an ISP for example, it could be used to identify an individual using the site. For this reason, Northcrest considers the IP address to be personal information, particularly when combined with other data automatically collected when visitor requests a Web page such as the page or pages visited, date and time of the visit. Unless otherwise noted, Northcrest does not automatically gather any specific information from you, such as your name, telephone number or email address. Northcrest would obtain this type of information only if you supply it to us, for example, by email.

Communicating with Northcrest via e-mail

If you choose to send an email, your personal information is used by Northcrest in order to respond to your inquiry. The information you provide will only be shared with another government institution if your inquiry relates to that institution. Northcrest does not use the information to create individual profiles nor does it disclose the information to anyone other than to those in the federal government who need to provide you with a response. Any disclosure of your personal information is in accordance with the Privacy Act. Emails and other electronic methods used to communicate with Northcrest may not be secure and Northcrest cannot guarantee the confidentiality of messages that are received/sent via email. Therefore, it is recommended that you do not send sensitive personal information, such as your Social Insurance Number or your date of birth, through electronic means.

Digital Markers (including cookies)

A digital marker is a resource created by a visited website’s Web server in order to remember certain pieces of information for the Web server to reference during the same or subsequent visit to the website. Examples of digital markers are “cookies” or HTML5 web storage. Some examples of what digital markers do are as follows:

• they allow a website to recognize a previous visit each time the visitor accesses the site;
• they track what information is viewed on a site which helps website administrators ensure visitors find what they are looking for.

Northcrest may use sessional and persistent digital markers on some portions of its website. During your on-line visit, your browser exchanges data with Northcrest’s Web server. The digital markers used do not allow Northcrest to identify individuals. You may adjust your browser settings to reject digital markers, including cookies, if you so choose. However, it may affect your ability to interact with Northcrest’s website.

Web Analytics

Web analytics is the collection, analysis, measurement, and reporting of data about Web traffic and visits for purposes of understanding and optimizing Web usage. Information in digital markers may be used for the purpose of web analytics in order to remember your interactions with Northcrest’s website.

Northcrest uses Web analytics to improve its website. When your computer requests Northcrest’s Web page, our institution collects the following types of information for Web analytics:

• the originating IP address
• the geographic location of the originating IP address (city and country)
• the date and time of the request
• the type of browser used
• the page(s) visited
• the type of device used
• the frequency of visits
• the duration of visits
• the traffic sources

Northcrest uses Google Analytics and the information collected is disclosed to Google, a third-party service provider. Your IP address is anonymized prior to being stored on the service provider’s servers in order to help safeguard your privacy. The information collected is de-personalized by truncating the last 4 digits of your IP address.

Data collected for Web analytics purposes may be sent to, and stored in, locations outside of Canada, such as the United States and other countries where Google’s servers are located and may be subject to the governing legislation of those countries (for example the USA Patriot Act).
Information used for the purpose of Web analytics may be used for communications and information technology statistical purposes, audit, evaluation, research, planning and reporting.

Protecting the Security of Northcrest’s Website

Northcrest employs tools to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. These tools receive and record the IP address of the computer that has contacted our website, the date and time of the visit and the pages visited. We make no attempt to link these addresses with the identity of individuals visiting our site unless an attempt to damage the site has been detected.

Inquiring about these Practices

Any questions, comments, concerns or complaints you may have regarding the administration of the Privacy Act and privacy policies regarding Northcrest’s Web presence may be directed to our Access to Information and Privacy by writing to her at 1250 René-Lévesque Boulevard West, Suite 900, Montreal, Quebec, Canada H3B 4W8.
If you are not satisfied with Northcrest’s response to your privacy concern, you may wish to contact the Office of the Privacy Commissioner by telephone at 1-800-282-1376.

Definitions

In this Privacy Notice, the following terms have the following meanings:

“administrative purpose” means the use of an individual’s personal information in a decision making process that directly affects that individual.

“ATIP Coordinator” means the Northcrest officer appointed to this position.

“personal information” means information about an identifiable individual that is recorded in any form, including (without restricting the generality of the foregoing):

information relating to the race, national or ethnic origin, colour, religion, age or marital status of the individual; information relating to the education or the medical, criminal or employment history of the individual or information relating to financial transactions in which the individual has been involved;

any identifying number, symbol or other particular assigned to the individual;

the address, fingerprints or blood type of the individual;

the personal opinions or views of the individual except where they are about another individual or about a proposal for a grant, an award or a prize to be made to another individual by a government institution or a part of a government institution specified in the regulations under the Privacy Act;
correspondence sent to a government institution by the individual that is implicitly or explicitly of a private or confidential nature, and replies to such correspondence that would reveal the contents of the original correspondence;

the views or opinions of another individual about the individual;

the views or opinions of another individual about a proposal for a grant, an award or a prize to be made to the individual by an institution or a part of an institution referred to in the fifth bullet above, but excluding the name of the other individual where it appears with the views or opinions of the other individual, and

the name of the individual where it appears with other personal information relating to the individual or where the disclosure of the name itself would reveal information about the individual.

For the purposes of use and disclosure of personal information described above, “personal information” does not include:

certain information about officers, employees of Northcrest and other government institutions that relates to the position or functions of the individual, as set out in more detail in the Privacy Act;

information about an individual who is or was performing services under contract for Northcrest that relates to the services performed, including the terms of the contract, the name of the individual and the opinions or views of the individual given in the course of the performance of those services;

information relating to any discretionary benefit of a financial nature, including the granting of a license or permit, conferred on an individual, including the name of the individual and the exact nature of the benefit, and
information about an individual who has been dead for more than twenty years.

Access to Information

Access to Information Act Requests

Northcrest is subject to the Access to Information Act.

You can make an access to information request through the ATIP Online Request Service website using this link or by completing request form and the requisite fee (a $5 cheque or money order payable to Public Sector Pension Investment Board) to:
Tammy Marer
1250 René-Lévesque Boulevard West, Suite 1400
Montréal, Québec, Canada H3B 5E9
Completed Access to Information Requests
Summaries of completed access to information requests are available at the following link: http://open.canada.ca/en/search/ati