Best report
ϟ
May 11, 2017
This is what is posted on their website, which has not been updated since 2013......
ARO Inc. ("ARO") is committed to the protection of the personal information entrusted to the organization; and to maintaining the privacy, security and accuracy of the personal information they collect, use and disclose in accordance with applicable legislation and the specific contractual obligations to its clients.
The following statement of principles and guidelines (ARO's Code) concerning the protection of personal information of including but not limited to, clients and clients' customer information, individual service providers and other individuals ("you") whose personal information is collected, used and disclosed in accordance with our Privacy Policy. This policy applies to all ARO employees who have custody, control or access to general and personal information and by virtue of their relationship with ARO all contracted service providers. ARO considers all non-public information it has in its possession or control over to be confidential.
BY SUBMITTING PERSONAL INFORMATION TO ARO OR ITS AGENTS, YOU AGREE THAT WE MAY COLLECT, USE AND DISCLOSE SUCH PERSONAL INFORMATION IN ACCORDANCE WITH THIS PRIVACY POLICY, THE PRIVACY PREFERENCES YOU HAVE MADE KNOWN TO US AND AS PERMITTED OR REQUIRED BY LAW. Subject to legal and contractual requirements, you may refuse or withdraw your consent to certain of the identified purposes at any time by contacting us. If you refuse or withdraw your consent, we may not be able to provide you or continue to provide you with certain services or information that may be of value to you.
ARO's Ombudsman has been designated to oversee privacy governance including policy, dispute resolution, education, communications and escalation. The Ombudsman can be contacted at:
ARO Inc.
4240 Glanford Avenue, Suite 100,
Victoria, BC V8Z 0A1
Email: ombudsman@aro.ca
ARO's CODE
Principle 1: Accountability
The organization is responsible for personal information under its custody and control and shall designate one or more persons who are accountable for the companies' compliance with the following principles.
Principle 2: Purpose of Collection and Limitations
ARO's policy does not specify what personal data elements can be collected. However, the organization shall collect personal information by fair and lawful means and shall limit the collection of personal information to that which is necessary for the purposes identified by the company and to that which is required to fulfill the authorized purposes.
Principle 3: Consent and Notice
The knowledge and consent of a customer are required for the collection, use or disclosure of personal information, except where inappropriate.
Principle 4: Limiting Use and Disclosure
ARO shall use and disclose personal information in the course of rendering the Services only for the purposes for which it was collected, or purposes consistent with these purposes, except with the informed consent of the individual, or as required or permitted by law.
Principle 5: Retention
ARO shall retain personal information only as long as necessary for the fulfillment of those purposes, and to comply with legislative or business requirements.
Principle 6: Accuracy
Personal information shall be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.
Principle 7: Protection of the Information
ARO shall protect personal information by security safeguards appropriate to the sensitivity of the information.
Principle 8 - Openness Concerning Policies and Practices
ARO shall make readily available to customers specific information about its policies and practices relating to the management of personal information.
Principle 9: Right Access to Personal Information
ARO shall inform a customer of the existence, use and disclosure of his or her personal information upon request and shall give the individual access to that information.
Principle 10: Code Compliance
A customer shall be able to address a challenge concerning compliance with the above principles to the designated person or persons accountable for the compliance of the organization with ARO's Code.
ARO Inc. ("ARO") is committed to the protection of the personal information entrusted to the organization; and to maintaining the privacy, security and accuracy of the personal information they collect, use and disclose in accordance with applicable legislation and the specific contractual obligations to its clients.
The following statement of principles and guidelines (ARO's Code) concerning the protection of personal information of including but not limited to, clients and clients' customer information, individual service providers and other individuals ("you") whose personal information is collected, used and disclosed in accordance with our Privacy Policy. This policy applies to all ARO employees who have custody, control or access to general and personal information and by virtue of their relationship with ARO all contracted service providers. ARO considers all non-public information it has in its possession or control over to be confidential.
BY SUBMITTING PERSONAL INFORMATION TO ARO OR ITS AGENTS, YOU AGREE THAT WE MAY COLLECT, USE AND DISCLOSE SUCH PERSONAL INFORMATION IN ACCORDANCE WITH THIS PRIVACY POLICY, THE PRIVACY PREFERENCES YOU HAVE MADE KNOWN TO US AND AS PERMITTED OR REQUIRED BY LAW. Subject to legal and contractual requirements, you may refuse or withdraw your consent to certain of the identified purposes at any time by contacting us. If you refuse or withdraw your consent, we may not be able to provide you or continue to provide you with certain services or information that may be of value to you.
ARO's Ombudsman has been designated to oversee privacy governance including policy, dispute resolution, education, communications and escalation. The Ombudsman can be contacted at:
ARO Inc.
4240 Glanford Avenue, Suite 100,
Victoria, BC V8Z 0A1
Email: ombudsman@aro.ca
ARO's CODE
Principle 1: Accountability
The organization is responsible for personal information under its custody and control and shall designate one or more persons who are accountable for the companies' compliance with the following principles.
Principle 2: Purpose of Collection and Limitations
ARO's policy does not specify what personal data elements can be collected. However, the organization shall collect personal information by fair and lawful means and shall limit the collection of personal information to that which is necessary for the purposes identified by the company and to that which is required to fulfill the authorized purposes.
Principle 3: Consent and Notice
The knowledge and consent of a customer are required for the collection, use or disclosure of personal information, except where inappropriate.
Principle 4: Limiting Use and Disclosure
ARO shall use and disclose personal information in the course of rendering the Services only for the purposes for which it was collected, or purposes consistent with these purposes, except with the informed consent of the individual, or as required or permitted by law.
Principle 5: Retention
ARO shall retain personal information only as long as necessary for the fulfillment of those purposes, and to comply with legislative or business requirements.
Principle 6: Accuracy
Personal information shall be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.
Principle 7: Protection of the Information
ARO shall protect personal information by security safeguards appropriate to the sensitivity of the information.
Principle 8 - Openness Concerning Policies and Practices
ARO shall make readily available to customers specific information about its policies and practices relating to the management of personal information.
Principle 9: Right Access to Personal Information
ARO shall inform a customer of the existence, use and disclosure of his or her personal information upon request and shall give the individual access to that information.
Principle 10: Code Compliance
A customer shall be able to address a challenge concerning compliance with the above principles to the designated person or persons accountable for the compliance of the organization with ARO's Code.