365 Safety
2026 REVISION 01
365 Safety Privacy Policy
How 365 Safety collects, uses, discloses, protects, retains and responds to Personal Information
1. Who We Are and Scope
1.1
Organization.
Feddonia Enterprises Inc. operates as 365 Safety Training Company and 365 Safety.
1.2
Scope.
This Privacy Policy applies to Personal Information handled through our websites, bookings, registrations, training and assessment services, support, payments, Records of Completion, verification services, operational complaints, safety matters and related business administration.
1.3
Applicable requirements.
We handle Personal Information according to applicable privacy law, contractual requirements and the information-handling rules that apply to the selected service.
2. Personal Information We Collect
2.1
Registration and service information.
Depending on the service, we may collect an official name, preferred name, Primary Email, telephone number, employer or sponsoring organization, mailing address where required, selected training or session information, booking or seat references and registration evidence.
2.2
Training and completion records.
We may create or retain attendance, registration status, no-show status, assessment or pass/fail status where applicable, completion information, correction records and a 365 Safety Record of Completion.
2.3
Prerequisite and identity evidence.
Where a prerequisite or identity check is required, we collect or retain only the information reasonably necessary for that process. Information viewed live may be processed without retaining the underlying document details where a retained copy is not required.
2.4
Booking and payment information.
We may collect Booking Holder contact information, booking details, transaction and invoice information, payment status, refund information and limited payment-method details returned by the payment provider. We do not retain the complete payment-card number or card security code.
2.5
Support, feedback, accessibility and operational matters.
We may collect contact information, request content, feedback, complaint information, safety or conduct information and the minimum operational information needed to respond to a service issue or arrange an accommodation or accessibility measure. We do not ask for diagnoses, medical records or unrelated health information merely to administer an accommodation.
2.6
Technical interaction information.
Our websites and systems may record IP address, date and time, request or session identifiers, pages or functions accessed, browser or device information and security events for service delivery, troubleshooting, security, accountability and fraud prevention. We do not create unrelated advertising profiles from Participant or training activity.
3. How We Collect Information
3.1
Direct collection.
Most Personal Information is provided directly by the Participant, Booking Holder or other person using our forms, checkout, support channels or live service processes.
3.2
Authorized indirect collection.
Where permitted, another authorized person or organization may provide information for a Participant. The registrant must have authority to provide the information and give the Participant access to the applicable privacy notice and service conditions.
3.3
Organization-created information.
We create operational records such as attendance, registration status, assessment results, support outcomes, completion records, safety or conduct records and security records as necessary to administer the service.
3.4
External sources.
We may receive limited information from payment providers, credentialing organizations, service providers or other authorized sources when needed to administer the service or maintain accurate records.
4. How We Use Personal Information
4.1
Training administration.
365 Safety uses the Personal Information provided in a registration to administer training, send essential service communications, maintain registration, attendance and completion records, issue the 365 Safety Record of Completion, support third-party verification of its authenticity and validity, and provide limited booking and completion information to the Booking Holder where applicable.
4.2
Safety, conduct and service administration.
We may use the minimum necessary information to respond to safety concerns, suspected impairment, disruptive conduct, equipment or facility matters, operational complaints, quality concerns and accessibility arrangements.
4.3
Other authorized purposes.
We also use Personal Information where necessary to process bookings and payments, verify eligibility or identity where required, provide support, correct records, protect systems and service integrity, administer complaints or incidents, and meet legal, contractual, tax, accounting, audit, insurance and recordkeeping obligations.
5. Essential Service Communications and Marketing
5.1
Essential communications.
Essential service communications are sent where reasonably required to administer a booking, registration, payment, training service, assessment, security matter or Record of Completion.
5.2
No service opt-out.
Because these communications are necessary to provide the service, they are not treated as marketing communications and are not subject to a marketing opt-out.
5.3
Marketing.
If 365 Safety conducts marketing, it will use Personal Information only where permitted and will apply any consent or unsubscribe requirement that applies. We do not sell Personal Information or disclose it to third parties for their unrelated marketing purposes.
6. Booking Holders
6.1
Information available to a Booking Holder.
Where another person or organization booked the training, the Booking Holder may receive the Participant's name, selected training date or session, registration status, attendance or no-show status, pass/fail or assessment status where applicable, and the available 365 Safety Record of Completion.
6.2
Disclosure limit.
Booking Holder access is limited to information reasonably required for booking administration and completion reporting. It does not ordinarily include the Participant's Primary Email, telephone number, mailing address, identification information, accommodation details, assessment content, private support communications, safety or conduct narrative, security information or unrelated records.
7. Record of Completion Verification
7.1
Verifiable credential.
Every 365 Safety Record of Completion is a verifiable credential. Third-party verification allows a person or organization presented with a Record of Completion to determine whether the credential is authentic and valid and helps protect against altered, fabricated or fraudulent credentials.
7.2
Verification limit.
The verification service displays only the limited information needed to confirm the credential and is not a general Participant search service. Verification request information may be retained where reasonably necessary for security, audit and misuse prevention.
8. Who May Receive Personal Information
8.1
Service and credential organizations.
Information may be disclosed to an external certifying, credentialing or program organization only to the extent required for the selected service, credential or applicable legal or contractual obligation.
8.2
Operational service providers.
We use service providers for functions such as hosting, communications, payment processing, backup, security, destruction and other business operations. They receive only the information reasonably required to provide the contracted service and are subject to applicable confidentiality and security controls.
8.3
Personnel and facilities.
Authorized Personnel and, where necessary, an assigned facility or service contact receive only the information needed for their training, support, safety, administrative, privacy, security or compliance function.
8.4
Legal or safety disclosures.
We may disclose Personal Information where required or permitted by law, court or tribunal process, regulatory authority, contractual duty, immediate safety need or another lawful authority.
9. Location and Access
9.1
Canada by default.
Our default is to store, process, back up, recover, support and administer Personal Information in Canada.
9.2
Authorized exceptions.
Access from outside Canada occurs only where permitted and authorized for a defined service, role and information set. A specific service notice may provide additional information where an exception applies.
10. Safeguards
10.1
Security measures.
We use administrative, physical and technical safeguards appropriate to the information and risk, including role-based access, encryption, account controls, multi-factor authentication where supported, confidentiality requirements, logging where appropriate, backup and recovery controls, vendor management and incident-response procedures.
10.2
Minimization.
We limit collection, access, use and disclosure to information reasonably necessary for an authorized purpose and avoid retaining sensitive source information when a minimum result or verification record is sufficient.
10.3
User responsibility.
Users should protect account credentials, Booking Access Links, meeting links and devices, and should promptly report suspected unauthorized access or misdirected information.
11. Retention and Destruction
11.1
Participant records.
Participant and training records follow the retention rule applicable to the service. Unless a different legal or contractual period applies, the default lifecycle generally ends 12 months plus one day after the applicable certificate or 365 Safety Record of Completion expires, or after completion where no expiry exists.
11.2
Financial records.
Checkout, payment, refund, transaction, invoice and reconciliation records are retained for at least seven years and are then reviewed rather than automatically deleted.
11.3
Operational, safety and conduct records.
Ordinary operational complaint, safety, quality or facility records are generally retained through closure plus three years. Serious safety, legal, insurance or safeguarding matters may be retained through closure plus five years or longer where required by law, contract, insurer, dispute or preservation hold.
11.4
Other records.
Support, privacy, security, vendor and Personnel records are retained for the period reasonably required by their purpose and applicable legal, contractual, audit, dispute or business requirements.
11.5
Preservation holds.
A legal, regulatory, contractual, insurance, complaint, investigation or litigation hold may extend an ordinary retention period for the affected information.
11.6
Destruction.
When retention ends and no hold applies, records are securely destroyed or otherwise disposed of using controls appropriate to the medium and sensitivity.
12. Access, Corrections, Deletion Requests and Complaints
12.1
Requests.
You may contact the Privacy Officer to request access to Personal Information, request a correction, ask for deletion or disposition review, or make a privacy complaint, subject to applicable law and other lawful restrictions.
12.2
Verification.
We verify the requester's identity and authority proportionately before disclosing, correcting or deleting Personal Information.
12.3
Corrections.
A correction made in a 365 Safety record does not automatically update information already submitted to another organization. Where applicable, the external organization's separate correction process must also be followed.
12.4
Deletion and disposition.
A deletion request is reviewed against the applicable retention rule and any legal, contractual, accounting, audit, certification, insurance, dispute or preservation requirement. Receiving a request does not automatically require immediate destruction.
12.5
Response.
We document and respond to privacy requests and complaints in accordance with the applicable legal and operational process.
13. Cookies and Technical Functions
13.1
Cookies and local storage.
Our website may use cookies or similar technologies that are necessary for session management, security, preferences, booking functions and other website features.
13.2
Browser controls.
You may be able to block or delete cookies through your browser, but doing so may prevent some website, booking or account functions from working properly.
13.3
Advertising profiles.
This policy does not authorize the creation of unrelated behavioural advertising profiles from Participant or training activity.
14. Contact and Policy Changes
14.1
Privacy contact.
Privacy questions, requests and complaints should be directed to the Privacy Officer at privacy@feddonia.com.
14.2
Support contact.
Routine booking, registration and service corrections may be directed to support@365training.ca.
14.3
Formal correspondence.
Formal privacy correspondence may be mailed to Feddonia Enterprises Inc., 104-1015 Columbia Street, Unit #973, New Westminster, British Columbia V3M 6V3.
14.4
Changes.
We identify the effective date of this policy and may update it prospectively when our services, legal requirements or information practices materially change. Prior public versions may be retained as historical records.
