Our Commitment to Data Security

Inclusive Workforce Solutions is committed to protecting the security and integrity of all personal and sensitive information entrusted to us. We implement comprehensive security measures to safeguard your data against unauthorized access, disclosure, alteration, or destruction.

Data Collection and Storage

We collect and store data in accordance with Ontario and Canadian privacy laws, including:

Personal Information Protection and Electronic Documents Act (PIPEDA)
Ontario's Freedom of Information and Protection of Privacy Act (FIPPA)
Accessibility for Ontarians with Disabilities Act (AODA) requirements

All data is stored on secure servers located in Canada, with encrypted backups maintained for disaster recovery purposes.

Technical Security Measures

We employ multiple layers of security to protect your information:

Encryption: Data is encrypted both in transit (using TLS/SSL) and at rest
Access Controls: Role-based access restrictions ensure only authorized personnel can access specific data
Authentication: Multi-factor authentication for staff accessing sensitive systems
Firewalls: Network security measures to prevent unauthorized access
Regular Updates: Security patches and software updates applied promptly
Monitoring: Continuous monitoring for suspicious activity and security threats

Physical Security

Physical security measures include:

Secure, locked storage for physical documents
Restricted access to offices and file storage areas
Secure disposal of documents through shredding
Clean desk policy to prevent unauthorized viewing of information
Visitor sign-in procedures and escort requirements

Staff Training and Accountability

All staff members and contractors receive comprehensive training on:

Privacy and confidentiality obligations
Data security best practices
Recognizing and reporting security threats
Proper handling and disposal of sensitive information
Incident response procedures

All personnel sign confidentiality agreements and are subject to disciplinary action for security breaches.

Data Retention and Disposal

We retain personal information only as long as necessary to:

Fulfill the purposes for which it was collected
Meet legal and regulatory requirements
Resolve disputes and enforce agreements

When data is no longer needed, it is securely destroyed using methods appropriate to the sensitivity of the information (e.g., secure deletion of electronic files, shredding of paper documents).

Third-Party Service Providers

When we engage third-party service providers who may have access to personal information, we ensure they maintain appropriate security measures through:

Written contracts requiring compliance with privacy and security standards
Regular security assessments and audits
Verification of security certifications and compliance
Limiting data access to only what is necessary for service delivery

Incident Response

In the event of a data breach or security incident, we will:

Immediately contain and investigate the incident
Assess the scope and impact of the breach
Notify affected individuals and relevant authorities as required by law
Take corrective action to prevent future incidents
Document the incident and response for review and improvement

Regular Security Reviews

We conduct regular reviews and assessments of our security practices, including:

Annual security audits
Vulnerability assessments and penetration testing
Review and update of security policies and procedures
Assessment of emerging threats and security technologies

Your Role in Data Security

You can help protect your information by:

Keeping your contact information up to date
Notifying us immediately if you suspect unauthorized access to your data
Being cautious about sharing sensitive information via email or phone
Reviewing your records regularly for accuracy
Asking questions if you have concerns about data security

Reporting Security Concerns

If you have concerns about the security of your information or suspect a security breach, please contact us immediately at:

Email: [email protected]

We take all security concerns seriously and will respond promptly to investigate and address any issues.

Updates to Security Practices

We continuously review and improve our security practices to address evolving threats and incorporate new technologies. This document will be updated to reflect significant changes in our data handling and security procedures.

Data Handling & Security