Personal information governance

Académie Fay inc. is a very small company. The person with the highest authority acts as person in charge of the protection of personal information and approves these practices.

• Retention and destruction: we apply the periods in our privacy policy and review them once a year, and whenever we change a provider.
• Roles: the person in charge decides who has access. Anyone helping the company sees only what they need and undertakes confidentiality in writing.
• Complaints: write to privacy@fayacademy.com. We acknowledge receipt within five business days and reply in writing within 30 days of receiving the complaint.
• Confidentiality incidents: we keep a register. If an incident presents a risk of serious harm, we promptly notify the Commission d'accès à l'information and the people affected.
• New systems and transfers: we assess privacy factors before adopting a system that handles personal information and before disclosing information outside Québec.