At Coastal Community, your privacy is of great importance to us. Coastal Community is committed to the protection of the personal information of all members, customers, website visitors and other individuals whose personal information is entrusted to Coastal Community. This policy applies to Coastal Community Credit Union and its subsidiaries,hereinafter referred to as “Coastal Community”.
Accountability for Your Privacy
Coastal Community takes full responsibility for the management and confidentiality of personal information. Personal information is collected, used, shared and stored in accordance with the B.C. Personal Information Protection Act. Coastal Community also respects the privacy best practice principles contained in the Canadian Standards Association Model Code for the Protection of Personal Information
Coastal Community has appointed a Privacy Officer who oversees compliance with privacy laws and best practice. The Privacy Officer’s duties include:
- Developing and, on a regular basis, reviewing Coastal Community policies and practices to ensure consistent implementation and compliance;
- Ensuring all staff are trained on privacy best practices and are aware of the importance of safeguarding any personal information that they are privy to;
- Ensuring that all inquiries and complaints relating to privacy are appropriately handled; and
- Ensuring all third parties to whom Coastal Community provides access to personal information adhere to appropriate standards of care in managing that information.
Collecting your Information
‘Personal information’ is any information about an identifiable individual. This includes your name, contact information, date of birth, any identifiers such as your social insurance number, and any identifiable on-line activity. It also includes financial information such as your account number, credit rating or income.
Personal information can be collected in several ways, including through our forms,documents you provide, or our online banking system. We collect limited personal information to offer and deliver our products or services and do so with your consent or as otherwise authorized by law. We identify when information may be provided optionally and when it is necessary in order to service you.
Your consent can be withdrawn at any time, subject to legal or contractual restrictions, by providing us with written notice. Upon receipt of notice of withdrawal of consent, we will inform you of the likely consequences of withdrawing your consent before we process your request, which may include the inability of Coastal Community to provide you with certain products or services.
Using Your Information
We collect and use personal information for the following specific purposes:
- To establish and maintain a business relationship with you;
- To verify your identity or contact you;
- To process your application for an account, determine eligibility and suitability for certain products and services, and to provide on-going service;
- To assess your needs and enhance Coastal Community products and services;
- To assess creditworthiness, for example, by obtaining a credit report on you where appropriate and with your authorization;
- To assess and manage risk, including detecting and preventing fraud or error;
- To collect debts owed to Coastal Community and enforce agreements between you and Coastal Community;
- To provide you with access to online banking and to administer and manager your access rights;
- To inform you about Coastal Community products or services that may be of interest to you; and
- To meet legal and regulatory requirements.
In addition, when you use visit Coastal Community’s website, use online banking or our mobile banking app, we automatically receive and record information on our server logs from your browser or mobile platform, including the date and time of your visit, your IP address, unique device identifier, and other device information (such as your operating system version and mobile network provider). We collect such information to analyze and improve the performance of our digital services. For more information about online privacy, click here.
Sharing Your Information
Coastal Community takes all reasonable steps to protect the interest of our members and customers when disclosing personal information. We do not disclose personal information for purposes other than those for which it was collected, unless you have provided consent to do so or we are required by law to disclose the information. Keep in mind that if you have accounts that are jointly held with other persons, your personal information may, in certain circumstances, be disclosed to joint accountholders.
We may also share your personal information with participants in the payment, clearing and settlement systems, as well as Coastal Community’s service providers. Such service providers include the following:
- Lawyers, appraisers, accountants and other professionals and consultants in connection with processing and administering products and services provided to you;
- IT service providers;
- Cheque printers;
- Card manufacturers;
- Provincial or national central credit unions;
- Credit reporting and fraud checking agencies; and
- Marketing and market research partners, including data analytics.
We take reasonable steps to ensure that any such third parties who we entrust with your personal information are reputable, and have safeguards in place to protect this information. In working with business partners and service providers, your personal information may be transferred to a foreign jurisdiction to be processed or stored. Such information may be provided to law enforcement or national security authorities of that jurisdiction upon request in order to comply with foreign laws.
Keeping Your Information Safe
Coastal Community has implemented critical physical, organizational and technical measures to guard against unauthorized or unlawful access to the personal information we
manage and store. We have also taken steps to avoid accidental loss or destruction of, or damage to, your personal information. While no system is completely secure, the measures implemented by Coastal Community significantly reduce the likelihood of a data security breach.
Here are some examples of the security controls we have in place:
- Secure office premises;
- Locked fire resistant filing cabinets and a secure shredding practice for paper records;
- The use of encryption and robust authentication processes, including complex passwords, for electronic records;
- Limited access to personal information by employees who have been appropriately cleared and who need the information to do their jobs;
- The use of data centers with effective physical and logical data security controls; and
- Staff that are keenly aware of their data protection and Privacy responsibilities
In addition, we recommend that you do your part in protecting yourself from unauthorized access to your Coastal Community accounts. Coastal Community is not liable for any unauthorized access to your personal information that is beyond our control. Click here for Personal Data Security Tips to help you better protect your information.
Let us know right away if your contact information changes or you find any errors in your account statements. If you have reason to believe that the security of your account has been compromised, you must immediately notify Coastal Community of the problem in order for us to investigate the issue in a timely manner.
Accessing Your Information
We make every effort to ensure that the personal information we hold is accurate, complete and up-to-date for the purposes for which we collect it. You can make a written request for access to your personal information at any time, and also request that it be corrected if there are any inaccuracies. You will need to provide as much information as you can to help us process your request, such as dates, account numbers and any other details that can help us locate the information you require. We may charge a fee related to responding to your access request.
Upon your request, Coastal Community will also inform you of how your personal information has been or is being used, and who your personal information has been shared with.
Coastal Community responds to access requests within 30 days, unless an extension of time is required. However, there may be contexts where access is refused or only partial information is provided, for example, in the context of an on-going investigation or where another individual’s personal information or identity must be protected.
How Long We Keep Your Information
Coastal Community retains personal information for as long as necessary to fulfill legal or business purposes and in accordance with our retention schedules. Once your information is no longer required to administer products or services and meet legal or regulatory requirements, it is securely destroyed, erased or made anonymous.
Although we strive for limited retention of personal information, any information that is used to make a decision that affects you will be retained for at least one year, to provide you with an opportunity to access it. Also, keep in mind that residual information may remain in back-ups for a period of time after its destruction date.
External Links and Social Media
We may offer links from our website or mobile app to the sites of third parties, such as affiliated organizations, that may be of interest to you. Coastal Community makes no representations as to such third parties’ privacy practices and we recommend that you review their privacy policies before providing your personal information to any such third parties.
Coastal Community’s use of social media serves as an extension of our presence on the Internet. Social media account(s) are public and are not hosted on Coastal Community’s servers. Users who choose to interact with Coastal Community via social media, such as Facebook, should read the terms of service and privacy policies of these services/platforms.
Our Privacy Complaint and Breach Management Process
Coastal Community takes privacy complaints very seriously and has a procedure in place for escalating and managing any privacy related concerns to ensure that they are responded to in a timely and effective manner. Any suspected privacy breach must be escalated internally to Coastal Community’s Privacy Officer who oversees the containment, investigation and corrective actions for the breach situation.
In the event that you are not satisfied with Coastal Community’s resolution of a complaint or privacy breach, you may contact the B.C. Office of the Information and Privacy Commissioner. Visit https://www.oipc.bc.ca/about/contact-us/.
Changes to this Policy
Getting in Touch
Any inquires, concerns or complaints regarding privacy should be directed to:
Coastal Community Credit Union
220 – 59 Wharf Street
Nanaimo, B.C. V9R 2X3
Your concerns will receive prompt attention. Our Privacy Officer can also provide you with more detailed information about Coastal Community’s policies and practices or assist you with completing an access to information request. Coastal Community’s ‘Contact Us’ on our secure internet banking site as well as our ‘webchat services’, provide a secure and encrypted method of communicating with Coastal Community Keep in mind however that unencrypted e-mail or text messaging are not secure forms of communication, so never send confidential personal information to us this way.
Thank you for continued trust in Coastal Community