CYBERSECURITY AND PERSONAL INFORMATION PROTECTION POLICY ÖKO CRÉATIONS INC.

PERSONAL INFORMATION

Karine Létourneau, shareholder, is officially appointed as the person responsible for personal information.

PERSONAL INFORMATION INVENTORY

INFORMATION	EMPLOYEES	CLIENTS	VISITORS	PROSPECTS
Name	X	X	X	X
Business address		X		X
Private address	X	X		X
SIN	X
Date of birth	X
Private phone	X	X		X
Business phone		X		X
E-mail	X	X	X	X
Website		X	X	X
Social networks	X	X	X	X
Cheque specimen	X

 

REGISTER OF CONFIDENTIALITY INCIDENTS

CONFIDENTIALITY INCIDENT REGISTER A register of confidentiality incidents is kept in the event of a breach of personal information confidentiality.

The following template register is to be completed in the event of an incident and must be communicated to the Access to Information Commission as well as the individual(s) affected by the incident.

Date of incident or discovery

Incident type

Information affected by the incident

Information storage medium

Number of people affected by the incident

Actions taken upon discovery of the incident

CYBERSECURITY MEASURES

Several measures are in place to ensure superior security regarding the protection of personal data and within the framework of cybersecurity:

Antivirus software is installed on each of the company's computers. Each company computer is continuously connected to a VPN application. Company employees are required to keep this application running at all times. System backups are performed once a month. Backup copies are stored on an external hard drive. All employees are required to maintain an active firewall at all times. Weekly verification by employees of compliance with cybersecurity measures is mandatory. All company employees must store their passwords only on our software. They are required to create highly secure passwords composed of uppercase letters, lowercase letters, numbers, and symbols. No password should be reused. Employees must use two-factor authentication if available. Our website is hosted on Shopify and is secure. A cookie consent banner is present on our websites. All company documents and external hard drives are kept in a secure room locked with a key. Company and client data are stored on ZOHO One software which uses AES, one of the most robust and powerful methods for encrypting sensitive data.

ACCESS MANAGEMENT LIST

INFORMATION	CEO	Accounting and administrative assistant	Marketing assistant	Collaborations
Name	X	X	X	X
Business address	X	X	X	X
Private address	X	X	X
SIN	X	X	X
Date of birth	X	X	X
Private phone	X	X	X	X
Business phone	X	X	X	X
E-mail	X	X	X	X
Website	X	X	X	X
Social networks	X		X	X
NEQ/NE	X	X	X
GST/QST number	X	X	X
Employer number	X	X	X
Specimen check	X	X	X	X
Banking access	X	X
Access to various software	X	X
Employee information	X	X	X

 

PERSONAL INFORMATION GOVERNANCE POLICIES