Governance policies and practices regarding personal information

Immeubles Penny Levine Inc. (hereinafter the "AGENCY") is governed by the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1) ("the Act").

Personal information

Personal information is any information which relates to a natural person and allows that person, directly or indirectly, to be identified. A written document, an image, a video or a sound recording may contain personal information. In the course of its professional activities, the AGENCY or the BROKER may collect personal information such as the name, home address, date of birth, identification document information, social insurance number, income information, marital status, etc.

Consent

The AGENCY may collect, use and communicate personal information with the consent of the person concerned. To be valid, consent must be manifest, free, enlightened and given for specific purposes. The person who consents to provide his/her personal information is presumed to consent to its use and communication for the purposes for which it was collected.

Any person may at any time withdraw his/her consent to the collection, use and communication of his/her personal information by the AGENCY or the BROKER. In such cases, if the collection is necessary for the conclusion or performance of the contract by the AGENCY or the BROKER, the AGENCY or the BROKER may not be able to fulfil a request for service.

Responsibility

The AGENCY is responsible for protecting the personal information held in the course of its real estate brokerage activities. To this end, the AGENCY has adopted a privacy policy as well as governance policies and practices concerning personal information, the purpose of which is to control the collection, use, communication, retention and destruction of personal information.

Collection of personal information

The AGENCY collects only such personal information as is necessary to carry out its real estate brokerage activities. This information may be collected for the purposes of carrying out a real estate transaction, record keeping, monitoring of professional practices by the Organisme d'autoréglementation du courtage immobilier du Québec (OACIQ), or any other purpose determined by the AGENCY and made known to the person whose consent is being sought.

The AGENCY may also collect personal information verbally in the course of correspondence with persons involved in a transaction, or through various documents submitted for the completion of a real estate transaction (identification documents, financial documents, powers of attorney, etc.).

Use and communication of personal information

Personal information is used and communicated for the purposes for which it was collected and with the consent of the person concerned. In certain cases provided for under the Act, personal information may be used for other purposes, for example to detect and prevent fraud or to provide a service to the person concerned.

The AGENCY may be required to communicate personal information to third parties, including suppliers, co-contractors, sub-contractors, mandataries, insurers (such as the Fonds d'assurance responsabilité professionnelle du courtage immobilier du Québec [FARCIQ]), professionals, other regulators, or parties outside Québec.

Retention and destruction of personal information

Once the purposes for which the personal information was collected or used have been fulfilled, the AGENCY must destroy the information, subject to a retention period stipulated under the Act. As stipulated in their professional obligations, the AGENCY must retain records for at least six (6) years following the final closing of a file.

Security measures

When collecting, using, retaining and destroying personal information, the AGENCY applies the necessary security measures to protect the confidentiality of the information.

Confidentiality incident

A confidentiality incident is any access, use or communication of personal information that is not authorized under the Act, or the loss of personal information or any other breach of protection of personal information.

The AGENCY has implemented a confidentiality incident management protocol that identifies the persons who assist the Person in charge of the protection of personal information and sets out the concrete actions to be taken in the event of an incident.

Roles and responsibilities

The AGENCY:

• Implements appropriate protection measures to reduce the risk of confidentiality incidents, such as computer security, updating of policies relating to personal information.
• Has standardized methods for the filing of documents containing personal information.
• Has standardized methods for the retention of documents containing personal information, including digitization procedures.
• Ensures the secure destruction of personal information.

Right of access, withdrawal and rectification

A person (or his/her authorized representative) may request access to his/her personal information held by the AGENCY. A person may withdraw consent to the collection, use and communication of personal information. Such withdrawal is recorded in writing.

A person may request the correction of personal information in a file concerning him/her that he/she believes to be inaccurate, incomplete or unclear.

Complaints

A person who deems to have been wronged may file a complaint regarding the handling of his/her personal information by the AGENCY.

To request access to or rectification of your personal information or to file a complaint regarding the handling of personal information, please contact: Penny Levine, Licensed Chartered Real Estate Broker. Immeubles Penny Levine Inc. penny@pennylevine.com