Data Privacy and Record Management Policy

1. Purpose

Hexagon Training is committed to protecting the privacy and confidentiality of participant information collected in connection with Continuing Education activities.

This Policy outlines how participant information is collected, stored, retained, and used in accordance with applicable Canadian privacy legislation and CE sponsor requirements.

2. Data Collected

In connection with CE activities, Hexagon Training may collect:
  • Name and contact information
  • Professional designation and licensure information
  • Registration and payment information
  • Attendance verification records
  • Evaluation responses
  • Assessment results where applicable
  • Certificate issuance records
Information is collected solely for the purposes of administering CE activities and verifying credit eligibility.

3. Use of Information

User information is used only for:
  • Registration and course administration
  • Verification of attendance and completion
  • Issuance of CE Credits and Certificates
  • Compliance with CE sponsor requirements
  • Audit or verification requests from sponsoring organizations
  • Internal quality improvement
Information will not be sold or disclosed for marketing purposes without consent.

4. Confidentiality of Evaluations

Participant evaluations are reviewed in aggregate form for quality improvement purposes. Individual evaluation responses are not disclosed publicly. Where evaluation comments relate to professional conduct concerns, they may be reviewed by the Board or designated oversight body.

5. Record Retention

  • 5.1 Documentation verifying CE Credit issuance, attendance, promotional materials, conflict of interest disclosures, video recordings, and program planning records are retained for a minimum of three (3) years.
  • 5.2 Records may be retained longer where required by law or sponsor standards.
  • 5.3 Records may be made available to CE sponsoring organizations upon request for audit or compliance review.

6. Data Security

Hexagon Training implements reasonable administrative, technical, and physical safeguards to protect participant information against unauthorized access, disclosure, or loss. Access to CE records is limited to authorized personnel.

7. User Access and Corrections

Users may request correction of inaccurate personal information related to their CE record. Requests must be submitted in writing and will be reviewed in a timely manner.

8. Certificate Verification

Hexagon Training may verify the authenticity of a Certificate of Completion upon request from regulatory bodies, employers, or sponsoring organizations, subject to privacy considerations.

9. Breach Notification

In the event of a data breach affecting CE participant information, Hexagon Training will take appropriate steps consistent with applicable privacy legislation.

Changes to this Policy

Hexagon Training reserves the right to change this Data Privacy and Record Management Policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the website and you are deemed to have accepted the terms of the Policy on your first use of the website following the alterations.