HATI Privacy Addendum - Canada

Canada-specific supplement to the HATI Global Privacy Notice.

1. Scope

This Addendum supplements the HATI Global Privacy Notice for individuals located in Canada and for personal information handled in a manner subject to Canadian private-sector privacy law.

Where applicable, Blokketen Solutions Inc. aims to process personal information in a manner consistent with Canadian privacy principles, including accountability, identifying purposes, consent, limited collection, limited use and retention, accuracy, safeguards, openness, individual access, and complaint handling.

2. Canadian law notes

Canadian private-sector privacy obligations may arise under federal law and, in some cases, under substantially similar provincial private-sector laws. The precise allocation of responsibility may depend on where the individual is located, where the processing occurs, and whether Blokketen Solutions Inc. acts as a controller-like organization for its own business purposes or as a service provider on behalf of a customer.

3. Purposes and consent

We identify the purposes for collection, use, and disclosure of personal information at or before the time of collection where required. Consent may be express or implied depending on the sensitivity of the information and the reasonable expectations of the individual, except where law permits or requires processing without consent.

If sensitive data is uploaded into HATI, customers should ensure they have an appropriate lawful basis and that the upload is necessary for the intended workflow.

4. Cross-border processing

HATI may use cloud infrastructure, support operations, and service providers located inside or outside Canada. Personal information may therefore be accessible from other jurisdictions and may be subject to lawful access requests in those jurisdictions. Where required, we use contractual and organizational safeguards appropriate to that arrangement.

5. Individual requests and complaints

Individuals may request access to personal information under Blokketen Solutions Inc.'s control and may request correction of inaccurate or incomplete personal information, subject to legal limits and appropriate verification.

Where Blokketen Solutions Inc. acts only on a customer's instructions, we may direct the request to the relevant customer so that the request can be handled in the proper role.

Insert the privacy contact details and complaint process here. If an individual is not satisfied, they may also have the right to contact the Office of the Privacy Commissioner of Canada or another competent regulator.

6. Province-specific note

Before publication, confirm whether Alberta, British Columbia, Quebec, or another province's sector-specific law changes the drafting, contact point, complaint language, or required disclosures for the actual HATI deployment.