Protection of personal information has always been a priority at MSH INTERNATIONAL. Our policy sets high standards for collecting, using, disclosing and storing personal information. We also have comprehensive procedures in place for managing personal information, including enhanced security for online information. MSH INTERNATIONAL's Privacy Officer is responsible for ensuring that our standards for protection of privacy remain high, that we are responsive to privacy requests and enquiries from our clients, and that we are in compliance with the Legislation at all times.
MSH INTERNATIONAL (CANADA) LTD abides by Ten Privacy Principles. These Principles are based on the federal government's privacy legislation, the Personal Information Protection and Electronic Documents Act. In addition to our Policy, our Online Privacy Statement and our practices and procedures to manage your personal information, these define the high standards we set for ourselves to manage and protect your personal information.
Ten Privacy Principles
- Accountability:We are responsible for personal information under our control. We have designated individuals who are responsible for monitoring our ongoing compliance with the Privacy Principles.
- Identifying purposes: The purposes for which personal information is collected, will be identified by us, or through our, or your, authorized representatives.
- Consent:Your consent is required for the collection, use and disclosure of personal information, subject to certain exceptions. Such exceptions are set out in the law and include where legal, medical or security reasons make it impossible, or impractical, to seek consent. Your consent may be expressed in writing. It may also be given verbally, electronically, or through our, or your, authorized representatives. In certain circumstances, it may also be implied.
- Limiting collection:The collection of your personal information must be by fair and lawful means, and be limited to that which is necessary for the purposes identified.
- Limiting use, disclosure and retention: Your personal information may only be used or disclosed for the purposes for which it was collected, other purposes you consent to, or as required or permitted by law. It may only be kept for as long as is necessary to satisfy the purposes for which it was collected, or as required or permitted by law.
- Accuracy: Any personal information that is collected, used or disclosed should be as accurate, complete and as up-to-date as is necessary for the purpose for which it is to be used.
- Safeguards: Personal information shall be protected by security safeguards that are appropriate to the sensitivity of the information, in order to protect your personal information from unwarranted intrusion, release or misuse.
- Openness: Information about our privacy policies and practices for managing your personal information shall be made available to you.
- Individual access: Upon written request, you will be informed of the existence, use and disclosure of your personal information and you will be given access to it, subject to certain exceptions, as permitted by law. You may also verify the accuracy and completeness of your information, and request that it be amended, if appropriate.
- Inquiries and concerns: You may contact us if you have any inquiries or concerns about our privacy policies and practices.
What our customers should know about MSH INTERNATIONAL’s privacy practices
For any MSH INTERNATIONAL product or service you obtain, we will tell you the purposes for which we need the personal information we collect and we will tell you how we will use and share your information. We will collect, use and share information from you and about you, only with your consent, or as required or permitted by law. We will only keep it for as long as it is needed to fulfill the identified purposes, or as required by law.
The information we collect
Personal information is information about an identifiable individual.
We will use fair and lawful means to collect your personal information. We will only collect information that is pertinent and consistent with the purposes of the collection. We may collect the required information directly from you, or from your advisor or an authorized representative(s), in completed applications and forms, through other means of correspondence, such as the telephone, mail or the Internet or other electronic means, and through your business dealings with us.
We may collect your personal information through public sources such as the Internet or through other third party service providers. In some cases, and with your consent, we may need to ask an independent source to verify or provide supplemental information. These sources could include, for example, service providers we retain, other insurance companies, or your employer. In the case of your medical or health-related information, additional sources could include your doctor(s), other healthcare providers or facilities.
If your information is being collected by telephone, the call may be recorded or monitored for the following reasons:
- To establish a record of the information you provide,
- To take or verify instructions from you,
- To confirm your identity,
- To maintain quality service levels,
If you are not comfortable with having your telephone calls recorded, you have the option of communicating with us in writing instead. Where you have chosen to only communicate with us in writing, your written communications should request that any response to you be in writing, as well.
What we need to know and why
The type of personal information we gather will depend on the type of product or service involved. If you are applying for insurance or group insurance benefits, it may also include health information or lifestyle-related information, such as your occupation, travel history and plans, driving record or criminal record.
Generally, we collect, use and disclose your personal information to:
- Confirm your identity, and to protect both you and us against errors, fraud or other misrepresentations,
- Determine the suitability of our products and services for you,
- Determine your eligibility for products and services,
- Properly administer the products and services we provide, including the assessment of claims,
- Communicate to you with regards to the administration of your products,
- Comply with a variety of legal requirements, such as anti-money laundering.
Your social insurance number
There are a number of reasons why we may ask for your Social Insurance Number (SIN).
Where there may be other income to be reported, your SIN is required by law in order to meet tax-reporting requirements.
With your consent, we may also use your SIN as a unique identifier, to keep your personal information separate from that of other customers, or individuals with a similar name, and to help maintain the integrity and accuracy of your personal information.
You may elect not to have your SIN used for purposes other than as required by law; however, as explained earlier, this may affect our ability to fully ensure the accuracy and integrity of your personal information.
Your consent may be expressed in writing, or it may be given verbally, or electronically.
Your consent may also be implied or inferred from certain actions. For example, if you present your benefit identification card to your healthcare provider, instead of paying for the prescription or procedure directly, it is understood that you are giving your consent for the healthcare provider to provide your personal information to us, in order for us to process the claim payment.
You may withhold or withdraw your consent for us to collect, use and disclose your personal information, as long as there are no legal or contractual reasons preventing you from doing so. Depending on the circumstances, however, withdrawal of your consent may impact our ability to continue to provide you with the products and services you have requested, or, in the case of insurance and group insurance benefits, it may prevent us from keeping your coverage in force, or properly evaluating and processing any claims.
How we share and destroy your information
Generally, the disclosure of your personal information will be restricted to those who have a need for, and the right to, the information.
Your personal information will only be provided to, or be accessible by:
- Our employees, and representatives, who need the information in the performance of their duties for us,
- Our affiliates, to:
- resolve your concerns about any related products and services with us
- assist in other required investigations
- Service providers, who need the information in the performance of their duties for us, and to satisfy their obligations to us,
- Any person or organization to whom you gave consent, and,
- Anyone who is otherwise authorized by law
In some cases, your personal information will be provided to these people, organizations and service providers in other provinces or jurisdictions outside Canada, and would therefore be subject to the laws of those provinces or jurisdictions.
Due to the nature of our products and services, we are required to keep your information for extended periods of time. Personal information that is no longer required will be securely destroyed, or erased.
When we destroy personal information, we will use safeguards to prevent unauthorized access to the information during the destruction process.
We use service providers to provide us with various services such as paramedical, and claims adjudication. Where personal information is provided to our service providers, we will require them to protect the information in a manner that is consistent with our privacy policies and practices.
Accessing and amending your information
We will make all reasonable efforts to ensure that any personal information we collect and keep is as accurate, complete and as up-to-date as required for the identified purposes. To do so, we will rely to a large extent on you to provide us with accurate information and to inform us of changes, such as changes in your contact information. You have the right to access and verify your personal information maintained in our files, and to request that any factually inaccurate personal information be corrected, if appropriate. Depending on the circumstances, we may not always be able to give you access to all information. Should this happen, we will let you know.
We are committed to protecting your information
We are committed to protecting your personal information from unauthorized access or use, by ensuring that the necessary physical, organizational and technological safeguards are in place, that are appropriate to the sensitivity of the information. Essentially, this means that personal information is protected:
- Physically, by building security measures and physical barriers,
- Organizationally, by our policies, procedures and access levels, and,
- Technologically by, for example, where appropriate, the use of passwords, encryption, firewalls, and anti-virus software
All of our employees, representatives, and service providers, who act on our behalf, are required to abide by our privacy policies and practices.
If we receive a request to release your personal information, we will only do so upon satisfactory identification and proof of entitlement of the requestor, or as required or permitted by law.
If you have any questions or concerns about our privacy policies and practices, or you want to know more about the process for accessing and/or correcting your personal information, please contact us:
MSH INTERNATIONAL (Canada)
300, 999-8th Street SW
Calgary, AB, Canada T2R 1N7
To contact by email, please click here