This Canada Privacy Policy describes the personal information TheKey, LLC and TheKey affiliated companies, including HCA Home Care Assistance Canada, Inc. and other affiliated entities operating in Canada (collectively, “TheKey”) collect online and offline, and how we use and disclose this information. By using our Services or by choosing to give us personal information, you signify your consent to this Privacy Policy and to the collection, use and disclosure of your personal information as set out in this Privacy Policy. This policy does not apply to (i) TheKey personnel or job applicants seeking employment opportunities at TheKey or (ii) personnel working on behalf of business partners with whom we are conducting business.

We may collect the following categories of personal information about you:

• Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), email address, and other similar identifiers
  
• Additional Data such as: signature, physical characteristics or description, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information, medical information, and health insurance information
  
• Personal Classifications: personal characteristics such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical genetic information, disability, citizenship status, and veteran status
  
• Commercial Information: commercial information, including records of account and payment history with TheKey
  
• Online Activity: Internet and other electronic network activity information, including, but not limited to websites, applications or advertisements
  
• Geolocation Data
  
• Sensory Information: audio, electronic, visual, and similar information
  
• Employment Information: professional or employment-related information
  
• Inferences: information about you reflecting your preferences, characteristics, behaviour, or abilities

We may use the categories of personal information listed above for the purposes described in this Privacy policy. In addition, we may use these categories of personal information for certain purposes permitted or required by applicable law.

We may have collected and used your personal information, as described in section 1 above, during the 12-month period prior to the effective date of this Privacy Policy. For the personal information collected during that time frame, we describe below: (a) the categories of sources from which we may have obtained the personal information, (b) the categories of third parties with whom we may have shared the information, (c) the categories of personal information we may have shared, and (d) the categories of personal information we may have disclosed for a business purpose.

We may have obtained personal information about you from various sources, as described below.

We may have shared your personal information with certain categories of third parties, as described below.

We may allow our online advertising providers to collect your personal information via cookies and analytics scripts and other technologies placed on our website to provide an enhanced ability to serve you content and advertisements that may be of interest to you. The categories of personal information that may have been collected in this manner include Identifiers, Online Activity and Inferences. You have the right to opt out of this collection of your information by our online advertising providers by submitting a request to us via email or phone call, or using the options we provide on our website.

We use commercially reasonable efforts to store and maintain your personal information in a secure environment. We take technical, contractual, administrative, and physical security steps designed to help protect personal information that we control. We have implemented procedures designed to limit the dissemination of your personal information to only such designated staff as are reasonably necessary to carry out the stated purposes we have communicated to you, or such purposes required or permitted by law.

Even though we have taken steps to help protect the personal information in our control, you should know that we cannot fully eliminate security risks associated with personal information. No security measures can provide absolute protection. We cannot ensure or warrant the security of any information you provide to us.

Personal Information that we collect may be stored and processed in Canada, the United States or any other country in which we or our service providers maintain facilities. Personal Information processed and stored in another country may be subject to disclosure or access requests by the governments, courts or law enforcement or regulatory agencies in that country according to its laws.

By providing us with Personal Information, you consent to any such transfer of information outside of your country. If you have any questions about our use of service providers outside of Canada, you may contact us using the information below.

You have certain choices regarding our use and disclosure of your personal information, as described below:

• Access: You have the right to request that we disclose to you the personal information we have collected, used, or disclosed about you.
  
• Setting your preferences: You have the right to opt-out of the use of your personal information or restrict the use of your personal information by contacting us. for marketing purposes.
  
• Correction: You have an ability to request correction of your personal information if you believe it is inaccurate.

To submit a request, or if you have any questions or would like to submit a complaint, email us at hcaprivacy@thekey.com, or call us at (888) 601-8638.

To opt-out of the use of your personal information for marketing email us at hcaprivacy@thekey.com.

We routinely destroy personal information that is no longer required for the purposes for which it was collected, in accordance with applicable laws. We will delete your personal information when it is no longer required to retain the personal information as set out in this Privacy Policy.

We comply with Canada’s anti-spam legislation. You may sign up to receive marketing or promotional communications from us. Where you have expressly opted-in or it is lawful to do so, we may use your personal information to inform you about us and our products and our services, including promotional offers and events. Such information may be sent to you by post, email, telephone or SMS.

If you no longer wish to receive marketing or promotional communications from us, you can opt-out at any time by:

• using the unsubscribe feature found in our emails and other electronic communications;
• if you have created an account on our website, logging into your account and changing your contact preferences; or
• contacting us via email at hcaprivacy@thekey.com.

However, we reserve the right to send you transactional or informational emails such as customer service communications in connection with the website or any services you have received or requested, or changes to our website or our policies.

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request. If you request access to or correction of your personal information, we may require you to provide certain information to help us identify you. In addition, if you ask us to provide you with specific pieces of personal information, we will require you to sign a declaration that you are the consumer whose personal information is the subject of the request. If you designate an authorized agent to make an access, deletion or opt-out of sale request on your behalf

1. we may require you to provide the authorized agent written permission to do so, and
2. for access and correction requests, we may require you to verify your own identity directly with us (as described above).

Please note that in some cases, we may not be able to allow you to access certain personal information in certain circumstances, for example if it contains personal information of other persons, or for legal reasons.

We will not discriminate against a consumer because the consumer exercised any of the consumer’s rights under any applicable Canadian privacy law. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. This policy is available in alternative formats upon request. Please contact hcaprivacy@thekey.com to request this policy in an alternative format.