Collection, Use and Disclosure I  Limits to the Collection of Personal Information I
Usage, Disclosure and Retention I Accuracy I Security I Individual Access I Challenging Compliance

Payless Travel Privacy Policy
The following policy statement (hereby referred to as the policy), outlines the privacy policies and practices for Payless Travel, its subsidiaries and affiliates (collectively referred to as, Payless Travel) with respect to the collection, use and disclosure of personal information. This policy may be amended by Payless Travel giving reasonable notice of the revised policy (including by email or by positing on Payless Travel websites) and this policy may be supplemented or modified by agreements entered into between Payless Travel and an individual from time to time.

Personal information is any information about an identifiable individual, as defined under the Canadian Privacy Act and the Personal Information Protection & Electronic Documents Act (PIPEDA) or other applicable laws.

Collection,Use and Disclosure
Except where otherwise required or permitted by law, Payless Travel will inform individuals of the purpose for the collection, use or disclosure of the individual’s personal information, prior to the collecting, using or disclosing that personal information.

Payless Travel collects information from clients and potential clients through various means including application forms, web-form registrations, marketing campaign, purchase/sale agreements and survey responses. The type of information collected will vary depending on the means through which an individual submits his/her personal information. The type of information collected may include an individual’s name, residential address, email address, home phone number, age group, preferences, credit information and specific comments.

Payless Travel uses information collected from clients and potential clients to provide services or products, in respond to the requests for information or the purchase of Payless Travel’s products & services; for mailing contacts for Payless Travel publications, marketing materials, special events or other marketing activity and for additional purposes that may be identified at or before the time that the information is collected. Payless Travel also uses personal information from purchasers for accounting and transactional completion purposes.

Payless Travel may disclose personal information to legal, financial and other professional advisors or in connection with the sale or reorganization of all or part of or its business or operations.

Requirement for consent to the collection, use or disclosure of personal information vary depending on circumstances and on the type of personal information that is intended to be collected, used or disclosed. In determining whether consent is required and, if so, which form of consent is appropriate, Payless Travel will take into account both the sensitivity of the personal information at issue and the purposes for which Payless Travel will use the information.

Consent may be express, implied through the use of opt-out consent where applicable or deemed. On giving reasonable written notice to Payless Travel, an individual may withdraw consent to the collections, use or disclosure of his or her personal information. Upon receipt of this withdrawal, Payless Travel will notify the individual of the likely consequences of withdrawing their consent. Except where otherwise required or permitted by law, Payless Travel will then cease collecting, using or disclosing the individual’s personal information.

Limits to the Collection of Personal Information
Except where required or permitted by law, Payless Travel will limit the collection of personal information to that which is necessary to fulfill the purpose for which it is collected. Personal information will be collected by fair and lawful means.

Usage, Disclosure and Retention
Payless Travel will not use or disclose personal information for purposes other than those for which it was collected, except with consent of the individual or as required or permitted by law.

Once the information is no longer required to fulfill its intended purpose, and is no longer required or permitted to be retained for legal or business purpose, it will be destroyed, erased or made anonymous.

Payless Travel may disclose certain information to third party service providers and to affiliated entities in order to carry out work on behalf of Payless Travel. Prior to making this disclosure, Payless Travel will take appropriate steps to ensure that such recipients safeguard the personal information and use the information only for authorized purposes.

Accuracy
Payless Travel will make reasonable efforts to ensure that any personal information collected by it, or on its behalf, is accurate and complete if the personal information is likely to be used by Payless Travel to make a decision that affects the individual to whom the personal information relates or if the information is likely to be disclosed to a third party.

Security
Payless Travel will protect personal information with security safeguards appropriate to the sensitivity of the information. Security safeguards are employed to protect personal information against loss, theft and unauthorized access, collections, use, disclosure, copying, modifications or disposal or similar risks. The nature of these safeguards will vary depending on the sensitivity of the personal information that has been collected. The methods of safeguards include:

• Physical security measures
• Security clearance and limiting access
• Technological measures such as user ID and passwords

Payless Travel will inform employees about Payless Travel's policies and practices for protecting personal information and employees are required to comply with Payless Travel's Privacy Policy.

Individual Access
Upon written request, with sufficient detail to enable Payless Travel to identify the individual and the personal information being sought, Payless Travel will inform an individual of the existence, use and the disclosure of his or her personal information under Payless Travel's control and will provide access to such information, unless otherwise prohibited or permitted by law. Payless Travel will respond to all requests within 30 days. Payless Travel may extend the time limit for a further 30 days, or for a longer period with the Privacy Commissioner's consent or as otherwise permitted by law.

Challenging Compliance
An individual may direct a complaint concerning compliance with the policy to Payless Travel's Privacy Officer.

The complaint must be in writing. Within a reasonable time of receipt of the complaint, the Privacy Officer will conduct an investigation into the complaint.

Within a reasonable time of conclusion of the investigation, the Privacy Officer will inform the complainant, either verbally or in writing, of their findings. If the Privacy Officer finds merit in the complaint, Payless Travel will take appropriate measures necessary to rectify the source of the complaint.