UAP Inc. ("UAP") has made it its mission to be the Canadian leader in the sale, distribution and marketing of automotive parts and accessories for cars and heavy vehicles. To carry out this mission, UAP relies on a team of motivated and competent employees evolving in a dynamic environment.
Over the years, UAP has not only become known for the excellence of its products and its dynamic approach to its business markets, but also for its commitment to offering its customers high-quality services and top-notch advice.
To live up to this commitment, UAP attaches great importance to the protection of the Personal lnformation provided to it by its customers in the scope of its commercial activities, including when they are consulting its web sites, or using its on-line services.
Scope and application
This policy has been drawn up to meet the requirements of the relevant provisions of the statutes that govern the protection of Personal Information and privacy.
More specifically, this policy focuses on the provisions that were adopted to govern the collecting, holding, use, communication and destruction of Personal Information in the private sector. The rules that were introduced were designed to establish a balance between the rights pertaining to the protection of privacy of individuals with regard to their Personal Information, and UAP's needs to collect, use or communicate such information in connection with its business activities.
For the application of this policy, "Personal Information" means any information which relates to a natural person and allows that person to be identified.
To ensure compliance with this policy, UAP makes every effort to require that its employees, representatives or agents conduct themselves in a responsible manner with respect to the protection of Personal Information. To this end, it provides them with the appropriate information sessions, or sensitization.
At UAP, the protection and confidentiality of Personal lnformation that it holds is controlled at every stage of the management of this information: the collecting, holding, use, communication and destruction thereof.
At each phase of the management of the Personal lnformation that UAP holds, it makes sure that it gets consent from the person concerned. This consent must be manifest, free, enlightened and given for specific purposes, and is valid only for the length of time necessary to achieve the purpose for which it was requested. In this respect, UAP prefers that consent from the person concerned be given in writing.
Only the employees, representatives or agents whose functions at UAP require the use of Personal lnformation are authorized to collect such information on UAP's behalf.
In general, this information should be collected from the person concerned, and only with his or her consent. It may however be collected from a third party, provided the consent of the person concerned was obtained, or where it is authorized by law.
UAP may only collect Personal lnformation which is necessary to carry out its functions, to achieve specified ends, or to fulfill its mission. The person who provides the information must be informed of the foregoing, how the information will be used, the category of persons who will have access to it, where it will be held, and his or her right to access or correct it.
UAP applies strict security rules and makes every reasonable commercial effort to ensure the confidentiality of the Personal lnformation it holds on its customers and the protection thereof against loss, unauthorized access, unauthorized use, duplication or alteration. UAP must ensure that these means are reasonable, given in particular, the sensitive nature of such Personal Information, the ultimate aim of its use, its quantity, breakdown and medium.
Furthermore, UAP ensures that the Personal lnformation contained on paper is kept under lock and key, and under the responsibility of a specified individual. As for Personal lnformation contained on a computing medium, this is kept in a manner that ensures the effective and secure control thereof, and a limited access thereto.
Access to the Personal lnformation will be restricted to UAP's employees, representatives and agents who may only use such Personal lnformation in the performance of their duties.
The use of the Personal lnformation held by UAP is limited to the purposes for which it was collected.
UAP must ensure that the Personal lnformation it holds is current and accurate when it is used.
UAP undertakes not to communicate the Personal lnformation that it holds to third parties without first obtaining the consent of the person concerned, or where authorized by law.
UAP undertakes at all times not to sell, transfer or lease Personal lnformation in its possession to third parties.
Where disclosure of information is authorized or permitted, UAP ensures that the confidentiality of the Personal lnformation is protected.
In particular, e-mail must not be used to communicate a message or documents containing Personal lnformation without the consent of the person concerned, unless appropriate measures have been taken to ensure the communication is secure and confidential.
Where Personal lnformation held by UAP is no longer necessary for the purposes for which it was collected, UAP ensures that any document containing Personal Information, regardless of the medium, is destroyed using a process that ensures the confidentiality of the information it contains.
UAP undertakes to inform any person who so requests that it holds information about such person, what use is made thereof, and that it has been disclosed to third parties, where applicable. UAP must, at all times, permit the person concerned to obtain access to, and consult the Personal lnformation about him or her.
The person concerned may also dispute the accuracy of the Personal lnformation about him or her in UAP's possession, and make the appropriate corrections thereto, in accordance with the law.
To make a request for access to Personal Information, or request that such Information be corrected or updated, the person concerned should contact UAP's Director Administration in writing at the following address: 7025 Ontario Street East, Montreal, Quebec, H1N 2B3. The latter must respond to the person concerned within thirty (30) days of the receipt of the request.
All employees, representatives and agents of UAP handling Personal lnformation shall take all appropriate measures to ensure the strict compliance with this Policy, as well as with the requirements relating to the protection of Personal Information, and this, at all times.
In case of doubt regarding the application of this Policy, any employee, representative or agent of UAP must consult UAP's Director Administration before taking any action whatsoever which could have the effect of collecting, holding, using, communicating or destroying Personal lnformation in breach of the present Policy or the law.
Any observed or anticipated breach of the provisions of this Policy or of the law which could detrimentally affect the confidentiality of Personal lnformation held by UAP must be reported without delay to UAP's Director Administration.