 | |  | |  | |  | |  |
| Enhance your skin health using our therapeutic blends. Beneficial for all skin types and especially useful for people with sensitivities, allergies, or anyone concerned about the ingredients that are being absorbed into their body. Aesthetic aromatherapy is a gentle and extremely effective alternative in cosmetics. Our cosmetic blends contain quality natural ingredients and are carefully formulated by a Certified Aromatherapist. The ingredients are selected from exotic ingredients available from all over the world. Natural products are best used right away, and should be good for 6 months and more if properly cared for. Keep in a cool, preferably dark place and tightly sealed when not in use. A humid washroom is not a good location. If you are not satisfied with your product, please email immediately with your concerns. Understanding that natural products may react differently than what you may be accustom to is very important. For best results only use our products, mixing natural with commercially prepared products may cause irritation. As your skin starts to detoxify, you may experience minor skin breakouts or even minor redness, however this should be temporary and there shouldn't be any discomfort. Should irritation develop, discontinue use. Many people have become sensitized due to cosmetic ingredients that react with their skin chemistry. Being natural doesn't mean that you can't have allergic reactions either. Be sure to check the ingredients if you have allergies. Products can be made with different ingredients to accommodate allergies, please contact us via email. Custom blending is a very important part of our business for clients who require special care. Allow 7 to 10 days for your skin to adjust to a new product. Your skin completely renews itself within 28 to 30 days, so minimally damaged skin should start to see improvements in less than a month. If your skin has been abused for many years or you have had trauma to the skin, it may take longer before you notice improvements. Please feel free to email if you have any questions or concerns. Please contact us if you have any problems with the website. |
| All products are for external use only. Our products are not meant as medicinal replacements or alternatives. The natural products work well to support your medical regime. In case of illnesses please consult with your health practitioner prior to use. Ingredient listing are on products. Aloe Vera Gel has been commercially stabilized as Aloe Vera will only keep for 2 to 3 days in it's natural state. To create any kind of consistent gel a chemical process is necessary. We've chosen a product which does not contain parabens. |
| Our company nestled in Muskoka Canada, was created out of love and necessity over the last 15 years. Many commercially prepared products were causing considerable skin problems in our family so we started switching to "natural alternatives". The benefits of natural products which are not inhibited by the artificial additives and fillers can work magic on your skin. The synergistic blends of natural raw ingredients allow the skin, your largest organ, to rejuvenate and heal itself. So with a lot of help from friends and family we are offering these wonderful skin products to you! |
 |
| |
 |
| |
 |
| |
 |
| |
 |
| |
 |
| |
 |
| |
 |
| |
 |
| |
 |
PRIVACY POLICY
TABLE OF CONTENTS
1.0 PURPOSE OF PRIVACY POLICY 3
1.1 The Ten Principles of PIPEDA Summarized 3
1.2 Personal Information Defined 4
2.0 PURPOSES OF COLLECTING PERSONAL INFORMATION 5
3.0 CONSENT 5
4.0 LIMITING COLLECTION 6
5.0 LIMITING USE, DISCLOSURE AND RETENTION 6
5.1 Use of Personal Information 6
5.2 Disclosure of Personal Information 6
5.3 Retention of Personal Information 7
6.0 ACCURACY 7
7.0 SAFEGUARDS 8
8.0 OPENNESS 8
9.0 INDIVIDUAL ACCESS 8
10.0 COMPLAINTS / RECOURSE 9
3 of 9
Rose Petals – Privacy Policy - Version 1.0
PRIVACY POLICY
1.0 Purpose of Rose Petals (ROSE PETALS) Privacy
Policy
Rose Petals (ROSE PETALS) is a for-profit organization creating healthy skin products. This privacy policy has been developed to comply with Canada’s Personal Information Protection and Electronic Documents Act
("PIPEDA"). PIPEDA sets out rules for the collection, use and disclosure of personal information in the course of commercial activity as defined in the Act.
1.1 The Ten Principles of PIPEDA Summarized The ten Principles of PIPEDA that form the basis of this Privacy Policy are as follows:
1. Accountability: organizations are accountable for the personal information they collect, use, retain and disclose in the course of their commercial activities, including, but not limited to, the appointment of a Chief
Privacy Officer; 2. Identifying Purposes: organizations are to explain the purposes for which the information is being used at the time of collection and can only be used for those purposes;
3. Consent: organizations must obtain an Individual’s express or implied consent when they collect, use, or disclose the individual’s personal information; 4. Limiting Collection: the collection of personal information
must be limited to only the amount and type that is reasonably necessary for the identified purposes; 5. Limiting Use, Disclosure and Retention: personal information must be used for only the identified purposes, and
must not be disclosed to third parties unless the Individual consents to the alternative use or disclosure; 6. Accuracy: organizations are required to keep personal information in active files accurate and up-to-date;
7. Safeguards: organizations are to use physical, organizational, and technological safeguards to protect personal information from unauthorized access or disclosure. 8. Openness: organizations must inform their clients
and train their employees about their privacy policies and procedures; 9. Individual Access: an individual has a right to access personal information held by an organization and to challenge its accuracy if need be; and
10. Provide Recourse: organizations are to inform clients and employees of how to bring a request for access, or complaint, to the Chief Privacy Officer, and respond promptly to a request or complaint by the individual.
This Privacy Policy applies to ROSE PETALS’s employees and contracted employees. As well, ROSE PETALS ensures that all third party service providers sign confidentiality agreements prior to any transfer of an
individuals personal information in the course of information transaction.
4 of 9
Rose Petals – Privacy Policy - Version 1.0
1.2 Definitions
"Personal information" means any information about an identifiable individual. It includes, without limitation, information relating to identity, nationality, age, gender, address, telephone number, e-mail address, Social
Insurance Number, date of birth, marital status, education, employment health history, assets, liabilities, payment records, credit records, loan records, income and information relating to financial transactions as
well as certain personal opinions or views of an Individual. "Business information" means business name, business address, business telephone number, name(s) of owner(s), officer(s) and director(s), job titles, business
registration numbers (GST, RST, source deductions), financial status. Although business information is not subject to PIPEDA, confidentiality of business information will be treated with the
same security measures by ROSE PETALS staff, members and Board members, as is required for individual personal information under PIPEDA. Individual" means the client’s owner(s) or shareholders, co-signors,
and/or any guarantor associated with a client. "Data base" means the list of names, addresses and telephone numbers of clients and individuals held by ROSE PETALS in the forms of, but not limited to, computer files,
paper files, and files on computer hard-drives. "File" means the information collected in the course of processing an order, as well as information collected/updated to maintain /service the account.
"Express consent" means the individual signs the application, or other forms containing personal information, authorizing ROSE PETALS to collect, use, and disclose the individual's personal information for the
purposes set out in the application and/or forms."Implied Consent" means the organization may assume that the individual consents tothe information being used, retained and disclosed for the original purposes, unless
notified by the individual. "Third Party" means a person or company that provides services to ROSE PETALS in support of the programs, benefits, and other services offered by ROSE PETALS, such as other lenders,
credit bureaus, persons with whom the individual or client does business, but does not include any Government office or department to whom ROSE PETALS reports in the delivery of such programs, benefits or
services.
5 of 9
Rose Petals – Privacy Policy - Version 1.0
2.0 Purposes of Collecting Personal Information Personal information is collected in order to process orders and send information – when requested by the client. The individual is the main source of information.
3.0 Consent An individual’s express, written consent will be obtained before or at the time of collecting personal information. The purposes for the collection, use or disclosure of thepersonal information will be
provided to the individual at the time of seeking his or her consent. Once consent is obtained from the individual to use his or her information for those purposes, ROSE PETALS has the individual's implied consent to
collect or receive any supplementary information that is necessary to fulfil the same purposes. Expressconsent will also be obtained if, or when, a new use outside of this policy is identified. By signing the application
and/or other forms, implied consent is granted by the individual to obtain and/or to verify information from third parties such as banks, credit
bureaus, other lenders, and insurance companies in the process of assessing the eligibility of an individual or client. A client or an individual can withdraw consent to ROSE PETALS’s use of personal information at
any time prior to the application being approved, by making such request in writing. This Privacy Policy does not cover statistical data from which the identity of individuals cannot be determined. ROSE PETALS
retains the right to use and disclose statistical data as it determines appropriate. 4.0 Limiting Collection Personal information collected will be limited to the purposes set out in this Privacy Policy, ROSE PETALS
applications, and/or other forms.
6 of 9
Rose Petals – Privacy Policy - Version 1.0
5.0 Limiting Use, Disclosure and Retention 5.1 Use of Personal Information Personal information will be used for only those purposes to which the individual has consented with the following exceptions, as permitted
under PIPEDA: ROSE PETALS will use personal information without the individual's consent, where: • the organization has reasonable grounds to believe the information could be useful when investigating a
contravention of a federal, provincial or foreign law and the information is used for that investigation; • an emergency exists that threatens an individual’s life, health or security; • the information is for statistical study or
research; • the information is publicly available; • the use is clearly in the individual’s interest, and consent is not available in a timely way; • knowledge and consent would compromise the availability or accuracy of
the information, and • collection is required to investigate a breach of an agreement. 5.2 Disclosure and Transfer of Personal Information Personal information will be disclosed to only those ROSE PETALS employees
for the purposes of their work. PIPEDA permits ROSE PETALS to disclose personal information to third parties, without an individual's knowledge and consent, to: • a lawyer representing ROSE PETALS;
• collect a debt owed to ROSE PETALS by the individual or client; • comply with a subpoena, a warrant or an order made by a court or other body with appropriate jurisdiction; • a law enforcement agency in the
process of a civil or criminal investigation; • a government agency or department requesting the information; or, • as required by law. PIPEDA permits ROSE PETALS to transfer personal information to a third party,
without the individual's knowledge or consent, if the transfer is simply for processing purposes and the third party only uses the information for the purposes for which it was transferred. ROSE PETALS will ensure, by
contractual or other means, that the third party reasonable protects the information and uses it only for the purposes for which it was transferred. ROSE PETALS will not share information without the clients consent.
7 of 9
Rose Petals – Privacy Policy - Version 1.0
5.3 Retention of Personal Information Personal information will be retained in client files as long as the file is active and for such periods of time as may be prescribed by applicable laws and regulations.
6.0 Accuracy ROSE PETALS endeavours to ensure that any personal information provided by the individual in his or her active file(s) is accurate, current and complete as is necessary to fulfill the purposes for which the
information has been collected, used, retained and disclosed. Individuals are requested to notify ROSE PETALS of any change in personal or business information. Information contained in inactive files is not updated.
7.0 Safeguards
ROSE PETALS will use physical, organizational, and technological measures to safeguard personal information to only those ROSE PETALS employees, volunteers, or third parties who need to know this information
for the purposes set out in this Privacy Policy. Organizational Safeguards: Access to personal information will be limited to ROSE PETALS staff. Employees are required to sign a confidentiality agreement binding
them to maintaining the confidentiality of all personal information to which they have access. Physical Safeguards: Active files are stored in locked filing cabinets when not in use. Access to work areas where active files
may be in use is restricted to ROSE PETALS’s employees only and authorized third parties. All inactive files or personal information no longer required are shredded prior to disposal to prevent inadvertent disclosure
to unauthorized persons. Technological Safeguards: Personal information contained in ROSE PETALS computers and electronic data bases are protected in accordance with ROSE PETALS’s Information Security
Policy. E-mail, and physical and logical access to ROSE PETALS systems is applied in a way that takes reasonable commercial precautions to protect security.
8 of 9
Rose Petals – Privacy Policy - Version 1.0
8.0 Openness
ROSE PETALS will endeavour to make its privacy policies and procedures known to the individual via this Privacy Policy. This document will also be available on ROSE PETALS website: www.rosepetals.ca
9.0 Individual Access An Individual who wishes to review or verify what personal information is held by ROSE PETALS, or to whom the information has been disclosed (as permitted by the Act), may make the
request for access, in writing, to ROSE PETALS. Upon verification of the individual's identity, ROSE PETALS will respond within 60 days. If the individual finds that the information held by ROSE PETALS is
inaccurate or incomplete, upon the individual providing documentary evidence to verify the correct information, ROSE PETALS will make the required changes to the individual's active file(s) promptly.
10.0 Complaints/Recourse
If an individual has a concern about ROSE PETALS’s personal information handling practises, a complaint, in writing, may be directed to ROSE PETALS owner. Upon verification of the individual's identity, ROSE
PETALS will act promptly to investigate the complaint and provide a written report of the investigation's findings to the individual. Where the ROSE PETALS owner makes a determination that the individual's
complaint is well founded, ROSE PETALS will take the necessary steps to correct the offending information handling practise and/or revise ROSE PETALS's privacy policies and procedures.
Where the ROSE PETALS owner determines that the individual's complaint is not well founded, the individual will be notified in writing. If the individual is dissatisfied with the finding and corresponding action
taken by ROSE PETALS, the individual may bring a complaint to the Federal Privacy Commissioner at the address below:
The Privacy Commissioner of Canada Email address: www.privcom.gc.ca.
112 Kent Street, Ottawa,
Ontario K1A 1H3
Tel 1-800-282-1376
Questions/Access Request/Complaint
Any questions regarding this or any other privacy policy of ROSE PETALS may be directed to the owner. Requests for access to information, or to make a complaint, are to
be made in writing and sent to the owner at the address below:
Rose Petals
302-36 Chaffey St. Huntsville, ON Canada P1H 1J4
9 of 9
Rose Petals – Privacy Policy - Version 1.0
TABLE OF CONTENTS
1.0 PURPOSE OF PRIVACY POLICY 3
1.1 The Ten Principles of PIPEDA Summarized 3
1.2 Personal Information Defined 4
2.0 PURPOSES OF COLLECTING PERSONAL INFORMATION 5
3.0 CONSENT 5
4.0 LIMITING COLLECTION 6
5.0 LIMITING USE, DISCLOSURE AND RETENTION 6
5.1 Use of Personal Information 6
5.2 Disclosure of Personal Information 6
5.3 Retention of Personal Information 7
6.0 ACCURACY 7
7.0 SAFEGUARDS 8
8.0 OPENNESS 8
9.0 INDIVIDUAL ACCESS 8
10.0 COMPLAINTS / RECOURSE 9
3 of 9
Rose Petals – Privacy Policy - Version 1.0
PRIVACY POLICY
1.0 Purpose of Rose Petals (ROSE PETALS) Privacy
Policy
Rose Petals (ROSE PETALS) is a for-profit organization creating healthy skin products. This privacy policy has been developed to comply with Canada’s Personal Information Protection and Electronic Documents Act
("PIPEDA"). PIPEDA sets out rules for the collection, use and disclosure of personal information in the course of commercial activity as defined in the Act.
1.1 The Ten Principles of PIPEDA Summarized The ten Principles of PIPEDA that form the basis of this Privacy Policy are as follows:
1. Accountability: organizations are accountable for the personal information they collect, use, retain and disclose in the course of their commercial activities, including, but not limited to, the appointment of a Chief
Privacy Officer; 2. Identifying Purposes: organizations are to explain the purposes for which the information is being used at the time of collection and can only be used for those purposes;
3. Consent: organizations must obtain an Individual’s express or implied consent when they collect, use, or disclose the individual’s personal information; 4. Limiting Collection: the collection of personal information
must be limited to only the amount and type that is reasonably necessary for the identified purposes; 5. Limiting Use, Disclosure and Retention: personal information must be used for only the identified purposes, and
must not be disclosed to third parties unless the Individual consents to the alternative use or disclosure; 6. Accuracy: organizations are required to keep personal information in active files accurate and up-to-date;
7. Safeguards: organizations are to use physical, organizational, and technological safeguards to protect personal information from unauthorized access or disclosure. 8. Openness: organizations must inform their clients
and train their employees about their privacy policies and procedures; 9. Individual Access: an individual has a right to access personal information held by an organization and to challenge its accuracy if need be; and
10. Provide Recourse: organizations are to inform clients and employees of how to bring a request for access, or complaint, to the Chief Privacy Officer, and respond promptly to a request or complaint by the individual.
This Privacy Policy applies to ROSE PETALS’s employees and contracted employees. As well, ROSE PETALS ensures that all third party service providers sign confidentiality agreements prior to any transfer of an
individuals personal information in the course of information transaction.
4 of 9
Rose Petals – Privacy Policy - Version 1.0
1.2 Definitions
"Personal information" means any information about an identifiable individual. It includes, without limitation, information relating to identity, nationality, age, gender, address, telephone number, e-mail address, Social
Insurance Number, date of birth, marital status, education, employment health history, assets, liabilities, payment records, credit records, loan records, income and information relating to financial transactions as
well as certain personal opinions or views of an Individual. "Business information" means business name, business address, business telephone number, name(s) of owner(s), officer(s) and director(s), job titles, business
registration numbers (GST, RST, source deductions), financial status. Although business information is not subject to PIPEDA, confidentiality of business information will be treated with the
same security measures by ROSE PETALS staff, members and Board members, as is required for individual personal information under PIPEDA. Individual" means the client’s owner(s) or shareholders, co-signors,
and/or any guarantor associated with a client. "Data base" means the list of names, addresses and telephone numbers of clients and individuals held by ROSE PETALS in the forms of, but not limited to, computer files,
paper files, and files on computer hard-drives. "File" means the information collected in the course of processing an order, as well as information collected/updated to maintain /service the account.
"Express consent" means the individual signs the application, or other forms containing personal information, authorizing ROSE PETALS to collect, use, and disclose the individual's personal information for the
purposes set out in the application and/or forms."Implied Consent" means the organization may assume that the individual consents tothe information being used, retained and disclosed for the original purposes, unless
notified by the individual. "Third Party" means a person or company that provides services to ROSE PETALS in support of the programs, benefits, and other services offered by ROSE PETALS, such as other lenders,
credit bureaus, persons with whom the individual or client does business, but does not include any Government office or department to whom ROSE PETALS reports in the delivery of such programs, benefits or
services.
5 of 9
Rose Petals – Privacy Policy - Version 1.0
2.0 Purposes of Collecting Personal Information Personal information is collected in order to process orders and send information – when requested by the client. The individual is the main source of information.
3.0 Consent An individual’s express, written consent will be obtained before or at the time of collecting personal information. The purposes for the collection, use or disclosure of thepersonal information will be
provided to the individual at the time of seeking his or her consent. Once consent is obtained from the individual to use his or her information for those purposes, ROSE PETALS has the individual's implied consent to
collect or receive any supplementary information that is necessary to fulfil the same purposes. Expressconsent will also be obtained if, or when, a new use outside of this policy is identified. By signing the application
and/or other forms, implied consent is granted by the individual to obtain and/or to verify information from third parties such as banks, credit
bureaus, other lenders, and insurance companies in the process of assessing the eligibility of an individual or client. A client or an individual can withdraw consent to ROSE PETALS’s use of personal information at
any time prior to the application being approved, by making such request in writing. This Privacy Policy does not cover statistical data from which the identity of individuals cannot be determined. ROSE PETALS
retains the right to use and disclose statistical data as it determines appropriate. 4.0 Limiting Collection Personal information collected will be limited to the purposes set out in this Privacy Policy, ROSE PETALS
applications, and/or other forms.
6 of 9
Rose Petals – Privacy Policy - Version 1.0
5.0 Limiting Use, Disclosure and Retention 5.1 Use of Personal Information Personal information will be used for only those purposes to which the individual has consented with the following exceptions, as permitted
under PIPEDA: ROSE PETALS will use personal information without the individual's consent, where: • the organization has reasonable grounds to believe the information could be useful when investigating a
contravention of a federal, provincial or foreign law and the information is used for that investigation; • an emergency exists that threatens an individual’s life, health or security; • the information is for statistical study or
research; • the information is publicly available; • the use is clearly in the individual’s interest, and consent is not available in a timely way; • knowledge and consent would compromise the availability or accuracy of
the information, and • collection is required to investigate a breach of an agreement. 5.2 Disclosure and Transfer of Personal Information Personal information will be disclosed to only those ROSE PETALS employees
for the purposes of their work. PIPEDA permits ROSE PETALS to disclose personal information to third parties, without an individual's knowledge and consent, to: • a lawyer representing ROSE PETALS;
• collect a debt owed to ROSE PETALS by the individual or client; • comply with a subpoena, a warrant or an order made by a court or other body with appropriate jurisdiction; • a law enforcement agency in the
process of a civil or criminal investigation; • a government agency or department requesting the information; or, • as required by law. PIPEDA permits ROSE PETALS to transfer personal information to a third party,
without the individual's knowledge or consent, if the transfer is simply for processing purposes and the third party only uses the information for the purposes for which it was transferred. ROSE PETALS will ensure, by
contractual or other means, that the third party reasonable protects the information and uses it only for the purposes for which it was transferred. ROSE PETALS will not share information without the clients consent.
7 of 9
Rose Petals – Privacy Policy - Version 1.0
5.3 Retention of Personal Information Personal information will be retained in client files as long as the file is active and for such periods of time as may be prescribed by applicable laws and regulations.
6.0 Accuracy ROSE PETALS endeavours to ensure that any personal information provided by the individual in his or her active file(s) is accurate, current and complete as is necessary to fulfill the purposes for which the
information has been collected, used, retained and disclosed. Individuals are requested to notify ROSE PETALS of any change in personal or business information. Information contained in inactive files is not updated.
7.0 Safeguards
ROSE PETALS will use physical, organizational, and technological measures to safeguard personal information to only those ROSE PETALS employees, volunteers, or third parties who need to know this information
for the purposes set out in this Privacy Policy. Organizational Safeguards: Access to personal information will be limited to ROSE PETALS staff. Employees are required to sign a confidentiality agreement binding
them to maintaining the confidentiality of all personal information to which they have access. Physical Safeguards: Active files are stored in locked filing cabinets when not in use. Access to work areas where active files
may be in use is restricted to ROSE PETALS’s employees only and authorized third parties. All inactive files or personal information no longer required are shredded prior to disposal to prevent inadvertent disclosure
to unauthorized persons. Technological Safeguards: Personal information contained in ROSE PETALS computers and electronic data bases are protected in accordance with ROSE PETALS’s Information Security
Policy. E-mail, and physical and logical access to ROSE PETALS systems is applied in a way that takes reasonable commercial precautions to protect security.
8 of 9
Rose Petals – Privacy Policy - Version 1.0
8.0 Openness
ROSE PETALS will endeavour to make its privacy policies and procedures known to the individual via this Privacy Policy. This document will also be available on ROSE PETALS website: www.rosepetals.ca
9.0 Individual Access An Individual who wishes to review or verify what personal information is held by ROSE PETALS, or to whom the information has been disclosed (as permitted by the Act), may make the
request for access, in writing, to ROSE PETALS. Upon verification of the individual's identity, ROSE PETALS will respond within 60 days. If the individual finds that the information held by ROSE PETALS is
inaccurate or incomplete, upon the individual providing documentary evidence to verify the correct information, ROSE PETALS will make the required changes to the individual's active file(s) promptly.
10.0 Complaints/Recourse
If an individual has a concern about ROSE PETALS’s personal information handling practises, a complaint, in writing, may be directed to ROSE PETALS owner. Upon verification of the individual's identity, ROSE
PETALS will act promptly to investigate the complaint and provide a written report of the investigation's findings to the individual. Where the ROSE PETALS owner makes a determination that the individual's
complaint is well founded, ROSE PETALS will take the necessary steps to correct the offending information handling practise and/or revise ROSE PETALS's privacy policies and procedures.
Where the ROSE PETALS owner determines that the individual's complaint is not well founded, the individual will be notified in writing. If the individual is dissatisfied with the finding and corresponding action
taken by ROSE PETALS, the individual may bring a complaint to the Federal Privacy Commissioner at the address below:
The Privacy Commissioner of Canada Email address: www.privcom.gc.ca.
112 Kent Street, Ottawa,
Ontario K1A 1H3
Tel 1-800-282-1376
Questions/Access Request/Complaint
Any questions regarding this or any other privacy policy of ROSE PETALS may be directed to the owner. Requests for access to information, or to make a complaint, are to
be made in writing and sent to the owner at the address below:
Rose Petals
302-36 Chaffey St. Huntsville, ON Canada P1H 1J4
9 of 9
Rose Petals – Privacy Policy - Version 1.0