JBS EDUCATION PRIVACY POLICY

JBS EDUCATION is committed to the protection of personal information and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial and international privacy legislation. This policy applies to all business functions of JBS EDUCATION, including University Affairs and Scholarship Partners Canada.

ACCOUNTABILITY

JBS EDUCATION is responsible for all personal information under its control, including personal information disclosed to third parties for processing. Privacy Impact Assessments are conducted for any activity which may potentially involve personal information, prior to the activity beginning.

JBS EDUCATION has appointed a Privacy Officer who is accountable for the organization’s privacy program, for conducting Privacy Impact Assessments and for compliance with this Policy.

IDENTIFYING THE PURPOSES FOR COLLECTION OF PERSONAL INFORMATION

JBS EDUCATION will clearly identify the purposes for which personal information is collected, used, disclosed, and retained before or at the time the information is collected. General purposes for the collection of personal information by JBS EDUCATION are:

• to ensure efficient operations and effective communications with stakeholders and the public;
• to develop aggregate information and statistics on subjects related to higher education and to help inform policy and advocacy directions;
• to allow users to subscribe to mailing lists, newsletters and to receive University Affairs magazine;
• to allow users to register for events organized by JBS EDUCATION;
• to process and evaluate scholarship applications, select recipients and administer payments;
• to audit and assess the efficacy of programs and publications administered by JBS EDUCATION;
• to provide and administer payroll and benefits services to other employers in the higher education sector;
• to market publications of interest to the higher education sector; and
• to identify and offer information services and products to meet stakeholders’ needs or preferences.

More specific purposes for the collection of personal information, if applicable, will be identified to the user at the time of collection.

CONSENT

JBS EDUCATION will always obtain the consent of individuals before or when it collects, personal information, unless an exception is authorized by law. As part of the consent process, JBS EDUCATION will identify the purposes for which personal information will be collected, used, disclosed, and retained.

If JBS EDUCATION proposes to use, disclose or retain personal information for a purpose not identified at the time of collection, subjects will be notified, and consent obtained and documented prior to the new use.

An individual may withdraw their consent at any time, subject to legal or contractual restrictions and reasonable notice. Individuals may withdraw their consent by contacting JBS EDUCATION. Withdrawal of consent may result in the removal of the individual from the program or service.

LIMITING THE COLLECTION OF PERSONAL INFORMATION

JBS EDUCATION will only collect the personal information which is necessary for the purpose(s) identified and collects personal information primarily from individuals directly. JBS EDUCATION may also collect personal information from other sources including:

• publishers, list brokers or other associations;
• scholarship and program administration clients;
• authorized representatives of employers using JBS EDUCATION’s payroll and benefit services.

Before collecting personal information from a third party, JBS EDUCATION requires the source to obtain written, informed consent from the individual, to share their personal information with JBS EDUCATION.

LIMITING USE, DISCLOSURE AND RETENTION OF PERSONAL INFORMATION

JBS EDUCATION will not use, disclose or retain personal information for purposes other than those identified at the time of collection, unless required or authorized by law. Personal information is only accessible by JBS EDUCATION’s personnel and access is limited to what is required for an individual to perform their duties or services.

JBS EDUCATION, depending on circumstance, may disclose personal information to:

• third party service providers;
• a person acting as an agent for a scholarship applicant or recipient;
• members of a scholarship or program selection committee;
• the sponsor of a scholarship or mobility program administered by JBS EDUCATION;
• employers using JBS EDUCATION’s payroll and benefit services.

Prior to disclosing personal information, JBS EDUCATION requires that a written agreement between parties be signed, describing the responsibilities of both parties in relation to the activities being performed and when applicable, the security standards used to protect the information being disclosed.

JBS EDUCATION’s records, particularly those containing personal information, are only retained as long as deemed necessary for the fulfilment of business and legal obligations. Once those obligations have been met, personal information is either deleted, destroyed, or anonymized.

ACCURACY

JBS EDUCATION will make every effort to maintain the accuracy of the personal information it stores, but relies on the individual to provide accurate information. JBS EDUCATION will on request correct inaccuracies during the period of its retention. Where notification of inaccuracies is received, JBS EDUCATION will communicate them to appropriate third parties to whom this information has been disclosed, for correction purposes.

SAFEGUARDS

JBS EDUCATION will protect personal information with security safeguards appropriate to the sensitivity of the information. All personal information is required to be stored on Canadian servers, wherever possible. Canadian servers may be located outside of Quebec.

JBS EDUCATION will protect personal information against loss or theft as well as unauthorized access, disclosure, use or modification and will restrict internal access to personnel who require such access to perform their duties.

Personal information transferred to third parties providing services to JBS EDUCATION, is protected through contracts, which are reviewed by the Privacy Officer prior to being signed, to ensure providers adhere to industry accepted privacy and information security practices.

In the event of a suspected privacy breach, JBS EDUCATION’s staff will immediately undertake an investigation to assess the severity of the breach and the risk of serious injury to potentially affected individuals. Should a breach be confirmed, JBS EDUCATION will ensure prompt response and appropriate notification to all potentially affected individuals and the Privacy Commissioner of Canada as soon as feasibly possible. Where applicable laws, such as the General Data Protection Regulation (GDPR) or contracts contain additional requirements (e.g. notification within 72 hours), JBS EDUCATION shall comply with those requirements. All incidents will be recorded, reviewed, and appropriate action will be taken to prevent future breaches.

OPENNESS

JBS EDUCATION will make readily available information about its policies and procedures with respect to the management of personal information. Individuals will be able to acquire this information at minimal or no cost and without unreasonable effort.

ACCESS TO PERSONAL INFORMATION

On written request, and subject to the exemptions stipulated by law, JBS EDUCATION will inform individuals of the existence, use, disclosure and retention of their personal information and provide access to that information. An individual will be able to challenge the accuracy and completeness of the information and have it amended where inaccuracies exist.

CHALLENGING COMPLIANCE

An individual will be able to address a challenge concerning compliance by JBS EDUCATION with this Policy to the Privacy Officer. JBS EDUCATION will investigate all complaints within 30 days of receipt. If a complaint is found to be justified, JBS EDUCATION will take appropriate measures, including amending its policies and procedures if necessary.