Privacy

This is a demonstration website. Northwood Insurance Brokers Ltd. is a fictional brokerage. No form on this site transmits anything anywhere, no analytics are collected, and no cookies are set. The policy below describes what a real Canadian brokerage would be required to do.

The law that applies

A Canadian insurance brokerage handling personal information in the course of commercial activity is governed by the Personal Information Protection and Electronic Documents Act, known as PIPEDA, administered by the Office of the Privacy Commissioner of Canada. Alberta, British Columbia and Québec have their own substantially similar provincial statutes, and Québec’s Law 25 imposes additional obligations including breach reporting, privacy impact assessments and a designated privacy officer.

What would be collected

• Identity and contact details: name, address, postal code, telephone, email and preferred language.
• Risk information: the vehicles, property, travel plans or business operations you ask us to insure.
• Insurance history: prior claims, prior carriers, and the loss history report an insurer obtains with your consent.
• For auto, your driver’s licence number and driving record, obtained with your consent from the provincial authority.
• For life and health, medical information you provide on an application, held under stricter controls and shared only with the insurers considering the application.

Why it would be collected

To obtain quotations from insurers, to place and service policies, to advocate on claims, and to meet the record-keeping obligations imposed by the provincial regulator that licenses each broker. Nothing more.

Who it would be shared with

Insurers and reinsurers considering your risk, the public auto insurer in British Columbia, Saskatchewan and Manitoba where basic coverage is placed with them, adjusters and restoration contractors on a claim, and provincial regulators where required by law. It would not be sold, rented or traded for marketing purposes. Not ever.

Consent and withdrawal

Consent would be obtained at the point of collection and could be withdrawn at any time in writing, subject to the effect withdrawal has on our ability to service your policy. Commercial electronic messages would follow Canada’s Anti-Spam Legislation, with a working unsubscribe in every message.

Retention and access

Records supporting a placed policy would be retained for the period the provincial regulator requires, commonly seven years after the policy ends. You would have the right to ask what is held about you, to have it corrected, and to receive an answer within thirty days.

Complaints

A privacy complaint would go first to our privacy officer, then to the Office of the Privacy Commissioner of Canada, or to the Commission d’accès à l’information du Québec for Québec residents.