1. Purpose

This Data Protection Policy outlines how Vision 24 collects, processes, stores, and protects personal data obtained through its website, security monitoring services, and operational systems.

2. Scope

This policy applies to:

• Employees and contractors of Vision 24
  
• Clients and authorized system users
  
• Website visitors
  
• Individuals whose data may be captured through monitored systems

3. Data We Process

Vision 24 may process the following categories of data:

a. Personal Data

• Name, email address, phone number
  
• Company or organization details
  
• Service inquiries and communication records

b. Security Monitoring Data

• Video surveillance footage
  
• Access control and entry records
  
• License plate recognition data
  
• Incident and audit logs
  
• System alerts and event metadata

c. Technical Data

• IP addresses
  
• Device and browser information
  
• System usage logs

4. Lawful Basis for Processing

Vision 24 processes data based on one or more of the following lawful grounds:

• Consent provided by clients or users
  
• Contractual necessity for service delivery
  
• Legitimate interests related to security monitoring
  
• Legal and regulatory obligations

Clients are responsible for ensuring lawful deployment of surveillance systems and obtaining any required consents.

5. Data Minimization and Purpose Limitation

Vision 24 collects only the data necessary to:

• Deliver security monitoring services
  
• Maintain system functionality
  
• Fulfill contractual and legal obligations

Data is not used for purposes beyond those originally stated.

6. Data Security Measures

Vision 24 implements appropriate safeguards to protect data, including:

• Access controls and authorization management
  
• Secure infrastructure and encrypted connections where applicable
  
• Restricted access to monitoring systems
  
• Regular system reviews and updates

While strong safeguards are in place, no system can guarantee absolute security.

7. Data Retention

Data is retained only for as long as necessary to:

• Provide services
  
• Meet legal and regulatory requirements
  
• Support audits, investigations, or incident reviews

Retention periods may vary based on contractual agreements and data type.

8. Data Subject Rights

Where applicable under PIPEDA or GDPR, individuals may have the right to:

• Access their personal data
  
• Request correction or deletion of inaccurate data
  
• Restrict or object to certain processing activities
  
• Request information about how data is used

Requests can be submitted to info@vision21.ca and will be handled within applicable legal timeframes.

9. Data Sharing and Transfers

Vision 24 does not sell personal data. Data may be shared only:

• With authorized clients and users
  
• With trusted service providers under confidentiality agreements
  
• When required by law or lawful authority

If data is transferred across borders, Vision 24 ensures appropriate safeguards are in place.

10. Incident Management and Breach Response

Vision 24 maintains procedures to detect, assess, and respond to data security incidents.

In the event of a data breach involving personal data, Vision 24 will:

• Take immediate steps to contain and mitigate the breach
  
• Notify affected parties where legally required
  
• Comply with regulatory reporting obligations

11. Responsibilities

Vision 24 employees and contractors are required to:

• Follow data protection and security procedures
  
• Access data only when authorized
  
• Report any suspected data incidents immediately

Clients are responsible for lawful system use and user access management.

12. Policy Updates

This Data Protection Policy may be updated to reflect changes in law, technology, or operational practices. Updated versions will be published on the Vision 24 website.

13. Contact Information

For questions, requests, or concerns regarding data protection, please contact:

Address:  2980 Drew Road Suite 244, Mississauga, ON, L4T 0A7

Email: info@vision24.ca

Phone: 905-226-1770