Privacy Policy
Introduction
MyCompass is a web application and secure online platform that enables individuals with disabilities, family members, friends, support agencies, support workers, health care providers, and administrators the ability to share information that helps facilitate person directed planning and follow up on how plans unfold (“MyCompass” or the “Platform”). The Platform is located at http:// www.mycompassplanning.com, and includes all connected websites. MyCompass is owned and operated by MyCompass Planning Inc. (“the Company”, “we” or “us”).
We take privacy seriously and will take reasonable steps to protect this information in accordance
with applicable laws.
MyCompass facilitates the collection, use, and disclosure of the personal information
(including health information) of individuals with disabilities by the support agency that
is providing MyCompass to the individual (the “Support Agency”). The Support Agency is
responsible for protecting such information in accordance with their own privacy policies and
applicable laws. You can generally find out about the privacy practices of a Support Agency by
contacting them or by accessing their website. MyCompass is not responsible for the privacy
practices of Support Agencies.
INDIVIDUAL/GUARDIAN CONSENT TO DISCLOSURE OF PERSONAL HEALTH INFORMATION:
All Users represent and warrant that they have signed (or, as applicable, their parent or legal
guardian has signed) a written consent to release of information form facilitated by the Company
or Support Agency prior to accessing MyCompass, such consent to include the release of Health
Information.
By proceeding to access and use the Platform, you hereby consent to the collection, use, and
disclosure of all personal information (including health information) that you have uploaded
to the Platform or that you have authorized others to upload to the Platform on your behalf.
Such information will be disclosed to your designated Support Administrators, Support
Workers, Family/Friend and, if applicable, your designated Government Funders. Only those
Support Administrators, Support Workers, Family/Friends and/or your legal guardian who have
given written consent to release information forms will be able to share information through
MyCompass. You hereby authorize the Company to facilitate the disclosure of your personal
iInformation (including health information) on MyCompass.
This Privacy Policy (the “Policy”) sets out how we use, protect, collect and preserve information
submitted by Users. Any capitalized terms not defined in the Policy have the same meaning as
defined in the Terms of Use and should be read in conjunction with the Policy.
You are prohibited from using the Platform unless you fully understand and agree to the Terms of Use and the Policy.
If you have any questions about the Terms of Use or the Policy, please contact us by sending an
Privacy Policy
2
email with your questions to hello@mycompassplanning.com before accessing or entering any
information on the Platform.
- Identifying Information About Users We Collect and Store
- Privacy Practices
- Collection of Personal Information
- Obligations of Users
- Additional Data Collected by MyCompass
- Deleting Your Information
- Keeping Your Information Secure
- Security Breaches
- Using Third-Party Applications
- MyCompass and Children
- Contact Us
1. Identifying Information About Users We
Collect and Store
When i) an Individual; ii) a Support Administrator with consent from and on behalf of an Individual; or iii) a Family/Friend, Government Funder, Support Worker or Support Administrator choose to create a Profile with MyCompass and use the Platform, we will collect and retain all identifying information about the User submitted to us for the purposes of creating a profile. We collect and retain this information for the purposes of administering MyCompass and facilitating the exchange of information by Users (including Support Agencies).
Identifying information may include but is not necessarily limited to:
- Name;
- Email address;
- Telephone number;
- Mailing address;
- Gender;
- Age;
We will not use your identifying information for commercial reasons unrelated to MyCompass.
The following third party service providers, provide the following services in relation to MyCompass:
- Lift Interactive - information technology services including platform design, security, and bug fix support relating to MyCompass instances
- Digital Ocean - Canadian Server host of MyCompass information (no access to personal information)
Confidentiality agreements are in place with these services providers in order to protect personal
3
information within MyCompass. MyCompass users, employees, and other service providers) are
required to sign appropriate confidentiality pledges and are provided with regular training and
reminders relating to confidentiality
2. Privacy Practices
MyCompass has implemented a privacy compliance program to reflect the privacy principles
outlined in this policy including to put appropriate safeguards in place for personal information
and personal health information. The program is regularly reviewed and includes, among other
things, appropriate policies, procedures, contractual requirements and training for staff and
service providers, and an incident response plan.
3. Collection of Personal Health Information
In order to facilitate their interactions with other Users, Individuals and other authorized Users are able to upload personal information (including personal health information) to the Platform.
Subject to Support Administrators and Support Workers’ own legal and professional obligations,
Support Administrators and Support Workers’ may periodically disclose the Individual’s personal
information (including health information) to others to facilitate the process of providing health
care services to Individuals. Such disclosure will not always be made through the Platform and
may include disclosure of Health Information directly to and from other Support Administrators,
Support Workers’ and other health care professionals.
4. Obligations of Users
Support Administrators and Support Workers acknowledge that any disclosure of personal Health Information obtained via the Platform shall be conducted pursuant to their own legal and professional obligations, including in Alberta, the Health Information Act, RSA 2000 c H-5 and its regulations, as they may be amended from time to time, and any successor legislation.
All Users (including Support Agencies) are required to conduct themselves in compliance with any and all applicable privacy laws.
We do not manage or cannot control how Users will treat the personal information and Health
Information provided to them through MyCompass. We are not responsible for the privacy
practices of Users.
5. Additional Data Collected by MyCompass
To learn about your user experience and to make periodic improvements to the Platform and our
Service, we collect and retain technical non-identifiable information routinely collected by web
browsers and mobile devices. We will automatically record information about your activity on the
Platform. This may include your Internet Protocol address, browser type, the web pages visited
before and after you came to the Platform, locale preferences, identification numbers associated
with your computer or mobile devices, your mobile carrier, date and time stamps associated with
transactions, system configuration information, metadata, and other interactions with MyCompass,
our Platform and Service.
We use “cookies” to collect information and improve the Platform. A cookie is a small data file that
we transfer to your computer or mobile device. We may use “persistent cookies” to save your user
ID and login password for future logins to the Platform. We may use “session ID cookies” to enable
certain features of the Platform, to better understand how you interact with the Platform and to
monitor aggregate usage and web traffic routing on the Platform. You can instruct your browser,
by changing its options, to stop accepting cookies or to prompt you before accepting a cookie
from the Platforms you visit. If you do not accept cookies, however, you may not be able to use all
aspects of our Platform.
We may use the data collected from “cookies” and web browsers for its own purposes, both
related to and unrelated to improving the Platform and other services. In the event we disclose
this data to any third-party for any purposes, it will be used anonymously and stripped of any and
all personal or identifying information. We will not under any circumstances collect personal health
information in “cookies”.
6. Deleting Your Information
If you want us to permanently delete your information from our servers at any time, be it identifying information or personal health information, please send an email to hello@mycompassplanning.com. We will ensure your information is deleted in a reasonable time after receiving that request. Deleting such information may require us to terminate your account in its entirety.
So long as your account remains active, we will preserve your information in accordance with the Policy.
When deleting your information, whether by request or due to inactivity, we will use standard electronic means to remove your personal information from our files, including known backups containing personal information.
We will also retain any and all information that we are required to retain under any applicable laws
for the full duration of time required under those laws.
7. Keeping Your Information Secure
We will store your information only in electronic format on industry-standard servers that we have selected. Our servers are located in Canada, and thus are subject to applicable Canadian privacy laws. Except where required to do so by law, we will not store your personal information in any physical or paper-based format.
The servers we select to store information engage security software and generally accepted
standards to protect personal information. The software used by these servers is intended to
prevent unauthorized access or improper use. However, no security system is perfect and there is
always a risk of unauthorized parties accessing your personal information. Therefore, we cannot
guarantee the complete protection and security of your personal information.Further information
on the servers employed by MyCompass will be made available to Users upon request to the
extent necessary to ensure Users are fulfilling their statutory, legal and professional privacy
obligations. We make no guarantees or representations as to the technical or legal compliance of
its servers.
8. Security Breaches
In the event User information is disclosed as the result of any breach of security of the Platform or its servers, regardless of who is at fault, we will take steps to advise all known affected Users within one week of learning of the breach and comply with applicable privacy laws with respect to the breach.
All Users are required to notify us immediately of any suspected or actual security or privacy
breach (including, for example, any loss of information or any access to the Platform by someone
who is not an authorized User).
9. Using Third-Party Applications
In order to provide an enhanced experience to Users, certain features of the Platform may now or in the future connect with various third-party applications. By using these third-party application to interact with the Platform, we will not be given access to your login credentials, user name, password, or any information you may provide directly to these applications.
We will not under any circumstances disclose personal health information to third-party
applications used in conjunction with the Platform.
10. MyCompass and Children
The services offered on the Platform are not intended to be accessed by children without parental/guardian consent. The Platform should not be used in the process of providing health care services to children without parental/guardian consent.
We take special precautions to protect the information of persons under the age of 18 (including to
require such persons to have parental/guardian consent before using the Platform). In the event
any information is submitted by a person under the age of 18 without parental/guardian consent,
we will delete that information immediately upon being advised of that person’s true age.
11. Contact Us
We encourage you to send us questions and inquiries on the Policy and the steps we take to keep your information secure. Please send us an email: hello@mycompassplanning.com. We will respond to all inquiries on the Policy within 30 days.