Privacy

Privacy statement

At Vancity Community Investment Bank (VCIB), nothing is more important to us than protecting your privacy and Personal Information and doing everything we can to protect you from theft and fraud. We strive to ensure that our security standards meet industry best standards. This Privacy Code outlines the principles and commitments we make to protect the privacy of your Personal Information.

Our Privacy Code was created in accordance with the Federal Personal Information Protection and Electronic Documents Act (PIPEDA) and we adhere to PIPEDA’s ten privacy principles, as detailed below.

Scope
Definitions
Section 1: Accountability
Section 2: Identifying the Purposes for Collection of Personal Information
Section 3: Your Consent
Section 4: Limits for Collecting Personal Information
Section 5: Limits for Using, Disclosing and Keeping Personal Information
Section 6: Accuracy
Section 7: Safeguarding Personal Information
Section 8: Breach Involving Your Personal Information
Section 9: Availability of Policies and Procedures
Section 10: Providing You Access to Personal Information
Section 11: Compliance and Complaints

Scope

This Privacy Code applies to VCIB and outlines our principles and procedures regarding the privacy, confidentiality and security of Personal Information, including the Personal Information of individual clients and individuals acting for, on behalf of, or in connection with our corporate clients.

This Privacy Code does not apply to VCIB’s corporate entities. However, VCIB also exercises care and diligence in protecting the confidentiality of such business information.

Return to top

Definitions

“Business Partner” – any person or company contracted to work on VCIB’s behalf, or provide products and services to VCIB Clients and/or VCIB.

“Personal Information” – means information about an identifiable individual, and includes information that is recorded in any form including name, address, date of birth, identification (such as a valid driver’s license, social insurance number (“SIN”) or passport), marital status, annual income, assets and liabilities, credit history and account transaction information (including payment history and account activity). Personal Information generally excludes business contact information such as an individual’s name, business title, business address, business phone number and business fax number.

“Vancity” – means Vancouver City Savings Credit Union and all subsidiaries and affiliates of Vancouver City Savings Credit Union from time to time, including Vancity Investment Management Ltd., Vancity Enterprises Ltd., Vancity Life Insurance Services Limited, SCU Insurance Services Ltd., Squamish Insurance Agencies Ltd., Vancity Capital Corporation, and Inventure Solutions Inc.

“VCIB” means Vancity Community Investment Bank and all subsidiaries, including Citizens Trust.

“we”, “us”, “our” means individually and collectively VCIB.

“you”, “your”, “yours” includes an individual who is or applies to be a client of VCIB or its subsidiaries; an individual who has indicated an interest in receiving information from or has made an inquiry directly with VCIB; or  a director, officer, employee, guarantor, beneficial or legal owner, trustee or other individual connected to  a corporate client of VCIB.

In this Privacy Code, except as otherwise provided or as the context otherwise requires, “including” or “includes” means including or includes, as applicable, without limitation or restriction.

Return to top

Section 1: VCIB’s Accountability

1.0 VCIB is accountable for the protection of Personal Information. While senior management is ultimately accountable for the protection of Personal Information, the day-to-day monitoring for compliance may be delegated to other staff.

1.1 VCIB’s Chief Privacy Officer bears overall responsibility for the protection of Personal Information and compliance with this Privacy Code. The Chief Privacy Officer may be contacted through the VCIB Corporate Privacy Office, as indicated in section 10.2 below.

1.2 VCIB is committed to ensuring that appropriate security measures are employed in the transfer of Personal Information. VCIB recommends that you and corporate clients not transmit Personal Information by unencrypted e-mail or wireless devices. Email and wireless communications are not always secure and Personal Information may be intercepted. Open access or unprotected WiFi creates a risk of interception and may allow others to impersonate you.

1.3 VCIB is not accountable for any damages suffered when you or a corporate client transmit Personal Information through e-mail or wireless communication to VCIB or when VCIB similarly transmits Personal Information at your request or that of a corporate client.

1.4 VCIB has developed policies and procedures to:

• protect Personal Information;
• receive and respond to complaints and inquiries; and
• train staff regarding privacy policies and procedures.

Return to top

Section 2: Identifying the Purposes of Personal Information

2.0 VCIB will communicate the purposes for which Personal Information is being collected, either orally or in writing.

2.1 VCIB may collect Personal Information from you directly, such as when you apply for products and services, use our online or mobile banking services, participate in workshops or events, interact with representatives, or participate in surveys or contests.

2.2 The purposes for which VCIB collects your Personal Information, including through interactions with VCIB and transactions made with or through VCIB, include:

• to provide financial services;
• to understand the financial and banking needs of VCIB’s clients;
• to develop and manage products and services to meet your needs;
• to verify your identity e.g. over the telephone;
• to contact you directly for products and services that may be of interest;
• to determine your eligibility for different products and services;
• to use the information for study and/or research while preserving your privacy and confidentiality to improve VCIB products, services and operations or for VCIB- approved third party research purposes;
• to periodically conduct surveys in order to enhance VCIB’s provision of services;
• to meet regulatory requirements;
• to bring or defend against legal proceedings;
• to help protect VCIB and you against fraud and error;
• to investigate complaints, fulfill access to information requests and to respond to privacy breaches; and
• to communicate with you about your accounts and services, including but not limited to sending, and receiving your responses to, alerts relating to your accounts with Vancity (for example, potential fraudulent activity alerts). We may communicate with you via phone call, SMS, email, mail, or any other means for these purposes.

2.3 We are required to collect certain Personal Information, like your SIN for tax residency self-certification and for any products that earn investment income to comply with the Canada Revenue Agency’s reporting requirements. Providing a SIN for credit products is optional. If you provide a SIN, VCIB may also use it to identify you and to keep Your Personal Information separate from that of other Clients with a similar name, including information VCIB obtains with your consent from credit reporting agencies. You may advise VCIB not to use your SIN as an aid to identify you with credit reporting agencies, by contacting the VCIB Corporate Privacy Office, as indicated in section 10.2 below.

2.4 For a credit card, line of credit, loan, mortgage or other credit facility, or a deposit account with overdraft protection, hold and/or withdrawal or transaction limits, VCIB may obtain information and reports about you from credit reporting agencies, financial institutions, and other lenders at the time of and during the application process, and on an ongoing basis to review and verify your creditworthiness and/or establish credit and hold limits. By not providing us with your SIN you may limit the credit options available to you.

2.5 VCIB may monitor and/or record your telephone discussions with VCIB representatives for our mutual protection, to enhance customer service, for quality assurance purposes and to develop, manage and internally test products and services to meet the needs of VCIB’s clients. If you prefer not to have your calls recorded you may transact business through online banking.

2.6 When you access VCIB’s website, VCIB may collect certain information from your computer or mobile device. Some examples of information VCIB may collect include: information about the types of web browsers used to access the site, the levels of encryption supported by these web browsers and the date and time of access.

2.7 When you access and use VCIB’s online service products which require you to sign into the service, or where you apply for VCIB products and services online, VCIB may collect and use the Personal Information that you submit to VCIB. Some examples of Personal Information VCIB may collect include, but are not limited to, your answers to authentication questions asked for the purpose of ascertaining your identity and ensuring the security of your account information, IP addresses, log-in identification and information regarding your online transactions.

Return to top

Section 3: Client Consent

3.0 VCIB will obtain your consent to collect, use or disclose any Personal Information, except where detailed in this Privacy Code or where authorized or required by law. VCIB will make reasonable efforts to ensure that you understand how your Personal Information will be used and disclosed. At any time, you may opt-out of receiving marketing offers from VCIB. You may also limit the Personal Information shared within VCIB for marketing purposes. To do so, you may call us at 1.888.708.8307or fill in the applicable online form at www.vancitycommunityinvestmentbank.ca/privacy

3.1 Your consent can be express, implied or given through an authorized representative such as a lawyer, agent or broker. You can withdraw consent at anytime, with certain exceptions (see section 3.4). VCIB, however, may collect, use or disclose Personal Information without your knowledge or consent in limited circumstances, including when:

• such collection, use or disclosure is required by law;
• acting in an emergency that threatens an individual’s life, health, or personal security;
• there is reason to suspect that you may be a victim of abuse (e.g. financial, elder, or other abuse) and VCIB is disclosing the Personal Information to a government institution or authorized representative for investigation and/or follow up; and
• collecting a debt from you.

3.2 Consent may be given orally, in writing or electronically. For example, consent can be expressed over the telephone when information is being collected, electronically when submitting an agreement, application, or other information, in writing when signing an agreement or application form, by using a product or service, or by indicating by means of a check-off box whether or not consent is granted.

3.3 VCIB obtains your consent to collect Personal Information directly from you, from product and service arrangements you make with VCIB, from credit bureaus and other financial institutions, and from any references you have provided to us.

3.4 Subject to contractual or legal arrangements, you may withdraw or refuse consent. Refusal or withdrawal of consent may prevent VCIB from providing a product or service to you. VCIB will not unreasonably withhold products or services from you if you refuse or withdraw consent.

Return to top

Section 4: Limits for Collecting Personal Information

4.0 Your Personal Information will be collected for the purpose for which it was obtained, as described in Section 2.2, or for purposes permitted or required by law. VCIB will not collect Personal Information for any other purposes unless VCIB obtains your consent to do so.

4.1 You agree that VCIB may collect Personal Information through product or service arrangements you make with us, from credit reporting agencies, lenders, other financial institutions, and from any references you have provided to us. You agree that VCIB may share your Personal Information with credit reporting agencies, other financial institutions, its employees and Business Partners, Canada Revenue Agency, financial industry regulators, and your representatives, but only as needed to provide the products and services requested, for the purposes described in Section 2.2 above or for purposes permitted or required by law. Our Business Partners may at times be responsible for processing or handling Personal Information. They are provided only the Personal Information necessary to perform the services by them or by their service providers. VCIB requires its Business Partners to protect Personal Information in a manner that is consistent with our privacy policies and security practices. You understand that certain of our Business Partners may be located in other jurisdictions and subject to the laws and regulations of such other jurisdictions or countries, such that other countries’ governments, courts or law enforcement agencies may access your Personal Information.

Return to top

Section 5: Limits for Using, Disclosing and Retaining Personal Information

5.0 Your Personal Information will be used or disclosed for the purpose for which it was collected, as described in Section 2.2, or as permitted or required by law. VCIB will not use or disclose Personal Information for any other purposes unless VCIB obtains your consent to do so.

5.1 If a client has a product or service where ownership or liability is shared with other individuals (for example, a client who has a multiple party account or a guarantor on their loan), VCIB may share the client’s information with such other individuals in connection with the product or service.

5.2 VCIB will not sell client lists or your Personal Information to third parties.

5.3 Subject to applicable law, VCIB may share your Personal Information with subsidiaries, Vancity, and affiliates in order to manage your total relationship with VCIB, maintain your information, and administer your account with VCIB including to collect debts owed to VCIB and market products and services that may be of interest to you.

5.4 VCIB will retain Your Personal Information only as long as necessary (or expected to be necessary) for the identified purposes, and for legal and business purposes.

5.5 VCIB may disclose Personal Information related to a financial asset or liability of VCIB along with transfer of the financial asset or liability.

5.6 From time to time, VCIB may acquire new businesses or sell some parts of its businesses or merge or amalgamate part or all of its businesses with other entities. Since Personal Information associated with any accounts, products or services of the business being purchased/sold/merged will typically be included in such transactions, VCIB may disclose such information to such other entities as part of the transaction or pre-transaction review. Any such disclosure will be subject to appropriate privacy and security safeguards and compliant with all applicable law.

Return to top

Section 6: Accuracy

6.0 VCIB will make reasonable efforts to ensure that Your Personal Information is as accurate, complete and current as is required for the purposes for which it was collected. In some cases, VCIB relies on you to ensure that certain Personal Information, such as your address or telephone number, and tax residency status, is current, complete, and accurate.

6.1 VCIB will not routinely update information unless it is necessary to fulfill the purposes for which it was collected or if it is required to maintain an active account.

6.2 You may request amendments to your records at VCIB in order to ensure the accuracy and completeness of your Personal Information. If the amendment request pertains to information that remains in dispute, VCIB will note the Client’s request in the file.

Return to top

Section 7: Safeguarding Personal Information

7.0 VCIB is committed to the safekeeping of Your Personal Information in order to prevent its loss, theft or unauthorized access, disclosure, duplication, use, or modification.

7.1 VCIB will employ appropriate security measures, selected based on the sensitivity of the Personal Information, to protect the Personal Information. Some examples of physical security measures include: locks, access cards and building security personnel. Some examples of electronic security measures include: passwords, encryption, and personal identification numbers.

7.2 VCIB will use appropriate security measures when disposing of your Personal Information.

7.3 Access to your Personal Information is restricted to authorized employees and Business Partners who have legitimate business reasons for accessing it. Employees and Business Partners must sign confidentiality agreements. Also, each year, employees certify that they have reviewed our Code of Conduct and will abide by VCIB’s ethical and professional standards which include obligations of confidentiality and privacy. Unauthorized access to and/or disclosure of your Personal Information by an employee of VCIB is strictly prohibited.

7.4 VCIB engages in an ongoing process of developing its policies and procedures for protecting your Personal Information. Changes in technology necessitate that VCIB continually develops, updates, and reviews information protection guidelines, controls, and employee training and security measures to ensure ongoing personal information security.

Return to top

Section 8: Breach Involving Your Personal Information

8.0 In accordance with PIPEDA, in the event that VCIB suffers a breach involving the loss of, unauthorized access to or unauthorized disclosure of your Personal Information that results a real risk of significant harm, VCIB will notify you and the Privacy Commissioner of Canada as soon as feasible.

Return to top

Section 9: Availability of Policies and Procedures

9.0 VCIB will notify you via its website of any substantial changes to this Privacy Code before the changes come into effect.

9.1 VCIB will make the following information available upon request:

• a description of the type of Personal Information held by VCIB, including a general account of its use; and
• an explanation of what Personal Information is made available to related organizations such as affiliated companies.

Return to top

Section 10: Providing Client Access to Personal Information

10.0 You have a right to access Your Personal Information held by VCIB. Upon written request, VCIB will tell you what Personal Information it has, what it has been used for, and to whom it has been disclosed, if applicable, pursuant to the time frame described in section 10.3 below. The Personal Information will be made available in an appropriate format if you have a sensory disability.

10.1 VCIB may request that you specify the type of information you would like to access and submit a written request to their contact at any VCIB office. If you require additional assistance with your request for Personal Information, you may contact VCIB’s Corporate Privacy Office, as indicated in Section 10.2 below.

10.2 VCIB requires that you provide Personal Information to identify yourself to enable VCIB to provide details regarding the existence, use, and disclosure of your Personal Information. Personal Information that you provide to verify your identity will only be used for this purpose.

10.3 VCIB will make the Personal Information, as mentioned in section 10.0, available within a 30 day time frame, or provide written notice of a time extension, no later than 30 days after the date of the request. The notice of extension to you will advise of the new time frame, the reasons for extending the time frame and of your right to make a complaint to the Office of the Privacy Commissioner of Canada regarding the extension.

10.4 The Personal Information may be made available at a cost that will vary with the type and amount of information requested. Where a cost is applicable, VCIB will inform you of the estimated cost and ask you whether VCIB should proceed with the request.

10.5 When advising you of the details of VCIB’s prior disclosure of your Personal Information to third parties, VCIB will not provide details regarding information transfers necessary for the daily provision of products and services to you. For example, transfers to organizations that process debit card purchases, cheque clearing, credit card transactions, and automated banking transactions will not be documented. Upon the request being approved, VCIB will provide a list of organizations where your Personal Information may have been sent, subject to section 10.7 below.

10.6 If an access request is refused, in whole or in part, VCIB will provide written notification to you of its refusal, reasons for refusal and resources for redress available to you.

10.7 In certain situations, VCIB may not be able to provide access to any or all Personal Information about you. In such cases, VCIB will explain the reasons it will not provide the requested information and identify resources for redress available to you. VCIB’s reasons for refusing to provide you with access to your Personal Information may include one or more of the following:

• to do so could reasonably be expected threaten the life or security of another individual;
• it was generated in the course of a formal dispute resolution process;
• it cannot be disclosed without disclosing the Personal Information of other individuals;
• to do so would disclose confidential commercial information; or
• it is protected by solicitor client or litigation privilege.

10.8 If the Personal Information provided is demonstrated to be inaccurate or incomplete, VCIB will amend the information as requested by you in accordance with section 6.2. Where appropriate, VCIB will transmit the amended information to relevant third parties.

Return to top

Section 11: Compliance and Complaints

11.0 We ask that you direct any complaints, concerns or questions regarding this Privacy Code in writing to the Chief Privacy Office. If the Chief Privacy Office is unable to address your concerns, the issue can be referred to the Senior Complaints Officer at srcomplaintsofficer@vcib.ca. At any point in this process you may also contact the Office of the Privacy Commissioner of Canada.

11.1 VCIB will acknowledge, record and investigate each privacy complaint it receives. If you submit a written privacy complaint to VCIB, at the address specified in section 10.2 below, you will receive a response from VCIB within a reasonable time period.

11.2 Contact Information:

Vancity Community Investment Bank Corporate Privacy Office
183 Terminal Avenue
Vancouver, B.C.
V6A 4G2

privacy@vcib.ca

May 23, 2025

Return to top

Privacy Code

To view this Vancity Community Investment Bank Privacy Code as a PDF, please click here.