01
Accountability
Jonathon Carr is the privacy officer accountable for Resyrv's handling of personal information, reachable at [email protected]. The privacy policy names this person.
+Security & trust
PIPEDA: personal information for Canadian organizations
PIPEDA sets out ten fair information principles for private organizations that collect personal information in the course of commercial activity in Canada. Resyrv is a US company; when a Canadian flight school, club or shop uses Resyrv, the personal information of its members and customers is processed under these commitments.
All standardsHow Resyrv meets it
02
Cross-border processing
Resyrv stores and processes data in the United States. The privacy policy says so plainly, and says that information held in the United States may be reachable by United States courts and authorities. A Canadian organization should tell its members this when it adopts Resyrv, and the policy includes the wording to use.
03
Consent and purpose
Signup records the terms and privacy version accepted and when. Each organization decides which optional fields it collects about members; Resyrv collects nothing for its own purposes beyond running the service and the analytics a visitor opts into.
04
Access, correction and deletion
Every member can download their own personal data from their profile as a machine-readable file, correct their details, and delete their account. Deleted accounts are purged on a retention schedule, with bookkeeping records kept as the law requires.
05
Breaches
The privacy policy describes the breach process: contain, assess, notify the affected organization and individuals and the Privacy Commissioner where the breach creates a real risk of significant harm, and record every breach in a log kept for at least 24 months.
Questions? Email [email protected].