In order to accomplish daily client requests, RightFit Plus gathers personal information about individuals. We are committed to excellence and the protection of the privacy of individuals. The following is a point-by-point response to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Accountability
An organization is responsible for personal information under its control and shall designate an individual or individuals who are accountable for the organization’s compliance with the following principles.
RightFit Plus assumes entire responsibility for information that is provided by our clients to us. RightFit Plus has assigned a privacy officer who is responsible for ensuring the organization’s compliance with these principles. RightFit Plus asks all of their clients to sign a Privacy and Terms of Service Agreement, which identifies the importance of strict privacy and accountability standards.
RightFit Plus continuously updates and trains staff with regards to the importance of protecting personal information. Each RightFit Plus associate has been thoroughly screened and has signed a confidentiality agreement. RightFit Plus has signed contractual agreements with third party organizations that may process information during the course of a background check. RightFit Plus monitors all third parties’ compliance with PIPEDA principles.
Identifying Purposes
The purposes for which personal information is collected shall be identified by the organization at or before the time the information is collected.
RightFit Plus has developed consent forms that clearly identify the purpose for which personal information is being gathered. In general, the purpose of gathering personal information is to complete components of a background check during the hiring process. Only personal information that is required to complete the service(s) is collected prior to conducting any searches. Clear written disclosure of the reason for that request is mandatory.
Consent
The knowledge and consent of the individual are required for the collection, use or disclosure of personal information, except when inappropriate.
RightFit Plus collects information from individuals for the purposes that are clearly laid out in consent forms, which are provided to our client. RightFit Plus does not complete any services without the written consent of a candidate. Background information subsequently collected is only disclosed to parties as specified on the consent form.
Limiting Collection
The collection of personal information shall be limited to that which is necessary for the purposes identified by the organization. Information shall be collected by fair and lawful means.
Personal information is collected on clearly laid out consent forms. RightFit Plus recommends that clients collect information in a fair and lawful manner that is consistent with each client’s hiring process.
Limiting Use, Disclosure & Retention
Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by the law. Personal information shall be retained only as long as necessary for fulfillment of those purposes.
RightFit Plus does not use personal identification information for reasons other than those specified in consent forms that individuals sign during the employment process. RightFit Plus only provides background information about individuals for approved clients who have been deemed corporations in good standing. RightFit Plus does not release personal information to individuals other than those who are clearly designated by our client.
For some services that RightFit Plus completes, proof of consent documents are kept on file for a minimum period of 3 years. Results of background checks are removed from our database upon the instruction of our client, who will determine the period of time that they may require information to be available for their purposes.
RightFit Plus maintains personal information in strict confidence and does not utilize personal information for reasons other than those that are clearly defined in consent forms, as signed by the applicant. Information that is non-identifiable to specific individuals may be used for statistical purposes. RightFit Plus encourages all clients to maintain strict protocol with respect to access to, storage of, and destruction of information collected during the background checking process.
Accuracy
Personal information shall be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used. Information that is submitted by applicants and/or our clients to RightFit Plus is transferred into our secure database. When completing any background check, RightFit Plus upholds a high standard of accuracy and verification of accuracy of work completed.
Safeguards
Personal information shall be protected by security safeguards appropriate to the sensitivity of the information.
RightFit Plus uses industry-standard encryption technologies when receiving and transferring consumer data exchanged with our sites to safeguard personal information about our clients and their employees or employment applicants. Our secure online delivery system is password protected and ensures that unauthorized individuals are not given access to personal information. RightFit Plus has a strict policy for release of information to individuals upon inquiry, including identity verification.
Openness
An organization shall make readily available to individuals specific information about its policies and practices relating to the management of personal information.
This policy is available online for employers, employees, and employment applicants to view. A printed copy can be mailed to an individual as requested.
RightFit Plus does not provide information to any subsidiaries.
RightFit Plus stores a copy of consent forms as signed by an individual employment applicant, and the results of the components of the background check.
Individual Access
Upon request, an individual shall be informed of the existence, use and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.
Challenging Compliance
An individual shall be able to address a challenge concerning compliance with the above principles to the designated individual or individuals for the organization’s compliance. Should a challenge be enacted, any corrections or amendments that are made will be forwarded to the end-user who originally requested the background check. Should a challenge remain unresolved, the existence of an unresolved challenge will be documented and forwarded to the end-user.
