Personal Information Protection Policy

Landor Investments Ltd. Personal Information Protection Policy

Landor Investments Ltd. is committed to safeguarding the personal information entrusted to us by our clients. We manage your personal information in accordance with Alberta's Personal Information Protection Act and other applicable laws. This policy outlines the principles and practices we follow in protecting your personal information.

This policy applies to Landor Investments Ltd., its subsidiary Dr. Bones CPR, and any person providing services on our behalf.

A copy of this policy is available to any client on request.

What is personal information?

Personal information means information about an identifiable individual. This can include a name, home address, phone number, age, sex, marital or family status, identifying numbers, and financial information.

What personal information do we collect?

We collect only the information needed to provide services to our clients, including information required to:

• Open and manage an account
• Deliver requested products and services
• Enroll a client in a program
• Contact clients about appointments
• Follow up about satisfaction with services
• Notify clients of upcoming events of interest
• Administer our loyalty program

We normally collect information directly from our clients, although we may collect information from other persons with consent or as authorized by law.

Use of service providers outside Canada

Our service providers in the United States may collect, use, or disclose personal information for purposes including account management and delivering requested products and services.

Consent

We ask for consent to collect, use, or disclose personal information except in situations where collection, use, or disclosure without consent is authorized or required by law. We may assume consent when information is volunteered for an obvious purpose.

Express consent may be requested orally, in writing, or electronically. In cases that do not involve sensitive personal information, we may rely on opt-out consent where permitted.

Clients may withdraw consent at any time unless the information is necessary for us to fulfill our legal obligations. If consent is withdrawn, some services may no longer be available.

How do we use and disclose personal information?

We use and disclose personal information only for the purposes for which it was collected, except as authorized by law. If we wish to use information for a new purpose, we will ask for consent.

How do we safeguard personal information?

We make every reasonable effort to ensure client information is accurate and complete, and we rely on clients to notify us of changes that affect their relationship with our organization.

We protect personal information in a manner appropriate for its sensitivity and work to prevent loss, misuse, unauthorized disclosure, modification, or access. Records are retained only as long as reasonably necessary for legal, business, or service purposes.

When information is no longer needed, we destroy or de-identify records using appropriate security measures.

Access to records containing personal information

Clients have a right of access to their own personal information in records under our custody or control, subject to legal exceptions. For example, information that would reveal personal information about another individual or disclose confidential business information may be withheld.

Requests for access or correction should be made in writing with enough detail for us to identify the information requested. We will respond within 45 calendar days unless an extension is granted.

Questions and complaints

If you have questions or concerns about the collection, use, or disclosure of personal information, or about a request for access to your own information, please contact our Privacy Officer.