Privacy & Security

We take many precautions to protect the online banking environment and ensure your information is safe. Our online services offer you the best security currently available in a commercial environment so that your personal and financial information is protected while in transit between your computer and our server. This is done through the use of industry standard security techniques such as encryption. Encryption ensures that information cannot be read in transit or changed by scrambling the data using a complex mathematical formula. Some browsers can create a more secure channel than others, owing to the ‘strength’ of their encryption. We use only the strongest channel available - referred to as 128-bit SSL (Secure Socket Layer). If you have a browser that only supports ‘weaker’ encryption such as 40-bit or 56-bit SSL, you will need to upgrade your browser before using our site. The longer and more complex the ‘key’ is, the stronger the encryption. The 40 and 128 refer to the length of the key. Since 128 is longer, than 40, it is more secure. According to Netscape, 128-bit encryption is trillions of times stronger than 40-bit encryption.

We also ensure that only individuals who provide an authentic Personal Access Code can access your account information. After 20 minutes of inactivity your online banking session will end and you will be required to login again however personal information may remain visible after that time. To ensure your information remains private you should always logout of online banking to end your session.

Access to our databases is strictly managed and systems are in place to ensure security is not breached, including the physical security of our computer hardware and communications.

For more information on the specific policies and practices that we use to safeguard your personal and financial information, please click here to view our Privacy Statement.

Protecting your Personal Access Code (PAC)

Just as you play a vital role in ensuring the security of your home and your possessions, you too share in the responsibility for ensuring that your personal information is adequately protected.

In order for us to ensure that only you are accessing your accounts, we need a unique way of knowing that it's you. Just as the key to your home protects unwanted entry, the online banking ‘key’—your Personal Access Code (PAC)—ensures that only you can access your accounts.

It is your responsibility to ensure that your ‘key’ to the online banking section of this website is protected. Please observe the following security practices:

• Select a PAC that is easy for you to remember but difficult for others to guess.
• Do not select a part of your PIN (your ATM ‘key’) or another password.
• Keep your PAC confidential and do not share it with anyone.
• Do not write your PAC down or store it in a file on your computer.
• Never disclose your PAC in a voice or email, and do not disclose it over the phone.
• Ensure no one observes you typing in your PAC.
• Change your PAC on a regular basis. We suggest every 90–120 days.

Protecting your computer

We have provided a secure channel for our members to communicate with us. Once the information has reached your computer, it's up to you to protect it. To protect your information, you should:

• Never leave your computer unattended while using our online banking services.
• Always exit the site using the Logout button and close your browser if you step away from your computer. Your browser may retain information you entered in the login screen and elsewhere until you exit the browser.
• Prevent the browser from caching (storing) the pages that you view by using the Enhanced Security feature located on the login screen. We strongly recommend that you use this feature if you are accessing the online banking section of the website from a shared computer, such as at a friend's house or through a publicly-accessible computer, such as at a library or airport.
• Secure or erase files stored on your computer by your browser so others cannot read them. Most browsers store information in non-protected (unencrypted) files in the browser's cache to improve performance. These files remain there until erased. They can be erased using standard computer utilities or by using your browser feature to ‘empty’ the cache.
• Disable automatic password-save features in the browsers and software you use to access the Internet.
• Install and use a quality anti-virus program. As new viruses are created each and every day, be sure to update your anti-virus program often. It is recommended you update anti-virus definitions weekly. Scan all download files, programs, disks and attachments and only accept files and programs from a trusted source.
• Install and use a personal firewall on your computer to ensure others cannot access your computer through the Internet.
• Install new security patches as soon as your operating system and Internet browser manufacturers make them available.
• Install an anti-spyware program and check your computer regularly.

Protecting your information when using a public computer

You should be extra vigilant when using publicly available computers. Even if you adopt the tips above to protect your information, you need to bear in mind that even benign programs, like popular desktop search programs, can pose a security risk. Certain programs, such as Google Desktop, cache items that you have viewed so you - or potentially, an unwelcome third party - can easily search and find those pages later again.

If you come across a program like this when you are using a public computer, using the Enhanced Security feature located on the login screen will not stop these types of programs from caching the pages you view. You can adjust the search program preferences so it does not store secure pages you wish to view. If you forgot to adjust the preferences before banking online, you can remove the stored items via the Google Desktop results page by clicking on the Remove items link.

To ensure a safe and secure Internet session, only visit reputable sites. If you visit any questionable web site beforehand, we recommend you close your browser and restart it before proceeding to use our online banking services.

Electronic identity theft can occur when you respond to a fraudulent email that asks for your personal banking information. Armed with this information, a person may be able to access your accounts or establish credit, pay for items or borrow money using your name. You can help protect yourself from electronic identity theft by following some simple precautions.

Safety precautions for online banking

• The easiest way to tell if an email is fraudulent is to bear in mind that we will never ask you for your personal passwords, personal information numbers or login information in an email. Legitimate financial institutions do not include links to their web sites in email communications to customers.
• When banking online, check the address of any pages that ask you to enter personal account information. In the toolbar at the top of the page any legitimate Internet banking web site will begin with ‘https’ to indicate that the page is secure.
• Look for the padlock found in the lower right corner of your screen. If the page is legitimate, by clicking on the padlock, you can view the security certificate details for the site. A fraudulent site will not have these details.
• Type in our web address yourself to ensure you are transacting with our server.
• Check your bank and credit card statements regularly to ensure that all transactions are legitimate.

Contact Ladysmith & District Credit Union immediately if you suspect someone has gained knowledge of your PAC/PIN, or if you suspect any loss, theft or unauthorized use of your account.

We are committed to protecting your privacy and safeguarding your personal and financial information. While the Internet is revolutionizing the way that we do business — providing convenient access to financial services from your home or office — we also recognize that it may bring legitimate concerns about privacy and security.

Please refer to our Privacy Code to learn about our commitment to your privacy. To learn more about your privacy and this website, please refer to Privacy Online.

Commitment

The Ladysmith & District Credit Union is committed to ensuring the confidentiality, privacy and protection of personal information of all members and individuals whose personal information is held or controlled by the Ladysmith & District Credit Union.

Privacy Officer

The Ladysmith & District Credit Union has designated a Privacy Officer and an alternate to oversee the protection of personal information in compliance with the BC Financial Institutions Act, the BC Personal Information Protection Act, and the Ladysmith & District Credit Union's privacy policies and practices.

Policies

The Ladysmith & District Credit Union has developed policies and practices necessary for compliance with the Personal Information Protection Act and a process to respond to complaints that may arise, and make information available on request about the policies and practices and the complaint process.

Consent

The Ladysmith & District Credit Union will obtain consent for the collection, use, and disclosure of personal information, except in circumstances permitted by the Personal Information Protection Act or other law.

Conditions

The Ladysmith & District Credit Union will not, as a condition of providing a product or service, require a member to consent to the collection, use, or disclosure of personal information beyond what is necessary to provide the product or service.

Express Consent

The Ladysmith & District Credit Union will obtain express written or oral consent to the collection, use and disclosure of personal information, except in circumstances when the Personal Information Protection Act authorizes the collection, use, or disclosure without consent or deems the collection, use, or disclosure to be consented to.

Implicit Consent

Implied consent may be relied on when the purpose would be considered obvious to a reasonable person and the member voluntarily provides the personal information for that purpose.

Deemed Consent

The Ladysmith & District Credit Union may obtain consent to collect, use, or disclose personal information for specified purposes, if the Credit Union sends notice to the member that it intends to collect, use, or disclose personal information for those specified purposes and gives the member a reasonable opportunity to decline to have the personal information collected, used, or disclosed and the member does not decline the collection, use, or disclosure for those purposes, then the Credit Union will regard the lack of response as deemed consent to utilize the information for its intended purpose.

Withdrawal

A member may withdraw consent at any time, subject to legal or contractual restrictions, provided that reasonable notice of withdrawal of consent is given to the Ladysmith & District Credit Union. On receipt of notice of withdrawal of consent, the Credit Union will inform the member of the likely consequences of the withdrawal of consent, which may include the inability of the Credit Union to provide certain products or services, if the information is necessary to provide the products and services.

Purposes

When collecting information, the Ladysmith & District Credit Union will state the purpose of collection and provide on request the position or title and contact information for an officer who can answer the member's questions about the collection.

Collection

The Ladysmith & District Credit Union will limit the collection of information to information that is necessary to provide a product or service or that is necessary for the purpose consented to by the member or to information otherwise permitted to be collected by the Personal Information Protection Act or other law.

Use

The Ladysmith & District Credit Union will not use personal information for purposes other than those for which it was collected, except with the consent of the member or as required or authorized by law.

Disclosure

The Ladysmith & District Credit Union will not disclose personal information for purposes other than those for which it was collected, except with the consent of the member, account holder, or other individual or as required or authorized by law. When disclosing personal information the Credit Union will take all reasonable steps to protect the interests of its members and other individuals.

Sharing

The Ladysmith & District Credit Union may share personal information with its subsidiaries and other carefully selected organizations with the consent of the member or as required or authorized by law.

Access

Member and account holder information, such as copies of statements, transaction slips, and account agreements, will be provided upon request. The Credit Union may charge a fee for doing so.

For other information, upon written request, the Ladysmith & District Credit Union will provide the member with the personal information under the control of the Credit Union, information about the ways in which the personal information requested has been and is being used, and the names of individuals and organizations to whom the personal information requested has been disclosed. The Credit Union may charge a fee for providing information. The Credit Union will provide an estimate of the fee upon receiving the access to information request. The Credit Union may require a deposit for all or part of the fee.

Assistance

The Ladysmith & District Credit Union will assist members to complete an access to information request to ensure that the information wanted or needed is provided accurately, completely, and promptly. An applicant may be required to provide sufficient information to permit the Credit Union to provide an account of the existence, use, and disclosure of personal information it holds. The additional information provided will only be used for this purpose.

Exceptions

The Ladysmith & District Credit Union may not provide information that it is not required to disclose and will not disclose information that it is required not to disclose by law, such as information that would reveal the identity of another individual without his or her consent.

Time Limit

The Ladysmith & District Credit Union will endeavor to respond to an access to information request within 30 days. If additional time is required because sufficient detail has not been provided by the applicant, a large amount of material is requested or must be retrieved, or more time is needed to consult with other organizations, the Credit Union may apply to the BC Privacy Commissioner for an extension under the Personal Information Protection Act.

Refusals

If the Ladysmith & District Credit Union refuses access to personal information, the Credit Union's response to the access to information request will provide the reasons for refusal and provide the name, position/title, address, and telephone number of an officer of the Credit Union who can answer the applicant's questions about the refusal. The Credit Union may refuse to confirm or deny the existence of personal information collected as part of an investigation.

Accuracy

The Ladysmith & District Credit Union will make a reasonable effort to ensure that personal information it is using or disclosing is accurate and complete.

Corrections

If a member demonstrates the inaccuracy or incompleteness of personal information, the Credit Union will amend the information as required. If appropriate, the Credit Union will send the amended information to third parties to whom the information has been disclosed. When a challenge regarding the accuracy of personal information is not resolved to the satisfaction of the member, the Credit Union will annotate the personal information under its control with a note that the correction was requested but not made.

Protection

The Ladysmith & District Credit Union will protect the personal information in its custody or control by making reasonable security arrangements to prevent unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks. The Credit Union will take reasonable steps, through contractual or other reasonable means, to ensure that a comparable level of personal information protection is implemented by the suppliers and agents who assist in providing services to members and other individuals.

Retention

The Ladysmith & District Credit Union will keep personal information used to make a decision that affects the member for at least one year after using it to make the decision. The Credit Union will, in accordance with its retention schedule, destroy, erase, or make anonymous documents containing personal information, as soon as it is reasonable to assume that the original purpose is no longer being served by retention of the information and retention is no longer necessary for legal or business purposes. The Credit Union may retain personal information about members and account holders with their consent in order to assist in the provision of future products and services and for marketing purposes, such as sending information about products and services that may be of interest, and may update the information as necessary to provide products and services applied for. The Credit Union will take due care with the destruction of personal information so as to prevent unauthorized parties from gaining access to the information.

Safeguarding

The Ladysmith & District Credit Union will employ electronic and physical security safeguards appropriate to the sensitivity level of personal information, including: physical measures such as locked fire resistant filing cabinets and restricted access to offices; organizational measures such as restricting employee access to files and databases; electronic measures such as passwords and encryption; investigative measures if the Credit Union has reasonable grounds to believe that personal information is being inappropriately collected, used, or disclosed.

Questions

Members may direct any inquiries or complaints regarding their personal information to the Ladysmith & District Credit Union's Privacy Officer. Contact information will be available by inquiring at the Credit Union.

Complaint Process

The Ladysmith & District Credit Union will, on request, inform members of its complaint procedures, which will be accessible and simple to use. The Credit Union will ensure that inquiries, concerns, and complaints regarding personal information receive prompt attention and are resolved in a timely manner. Where appropriate, members will be informed of their right to file a complaint with the BC Privacy Commissioner and will be provided with contact information.