AVIVA COVID-19 BUSINESS INTERRUPTION CLASS ACTION

PRIVACY POLICY

Last Updated: May 10, 2023

Epiq Class Action Services Canada Inc. and its related entities (“Epiq”, “we” or “us”) are committed to the protection of your personal information. This privacy policy describes how we collect personal information provided to us by mail or in connection with our website on which this privacy policy is posted or linked, and how this information may be used, shared and safeguarded.

 

SCOPE OF POLICY

Epiq, as a third-party service provider acting on behalf of and under the direction of our clients, may collect, use and disclose personal information related to claims (the “claims data”), in order to provide our claims management services on behalf of such clients.

 

Our privacy policy has been designed to comply with Canada’s Personal Information Protection and Electronic Documents Act and other applicable federal and provincial privacy laws relating to the protection of personal information (collectively, “privacy legislation”). By visiting our websites or otherwise providing us with personal information, you are consenting to the collection, use and disclosure of your personal information as described in this privacy policy.

 

CHANGES TO OUR PRIVACY POLICY

Epiq reserves the right to modify or supplement this privacy policy at any time. If we make changes, we will notify you by posting the updated policy and revising the “Last Updated” date above. We will provide you with reasonable prior notice of substantial changes in how we use your information, including by email at the email address you provide. We encourage you to review this privacy policy whenever you access or use our website and to stay informed about our information practices and how you can help protect your privacy.

 

COLLECTION OF INFORMATION

In the course of our business, Epiq may collect claims data and other “personal information” (as defined under privacy legislation) from claimants, clients and third parties. The claims data we collect on behalf of our clients may include but is not limited to:

• Identity information, such as name, address, email address and other contactinformation for claimants and other related parties;
• Personal health information;
• Banking and financial account information;
• Publicly available information about you, related parties, and other relatedinformation related to your claim(s); and
• Other information that you may disclose to or share with us online, over the phone, or otherwise related to your claim(s).
  
  

We do not knowingly request or collect personal information from children – persons under 13 years of age, or another age if required by applicable law – without prior verifiable consent of his or her parent or legal guardian. If we become aware that we have unknowingly collected personal information about a child without verifiable parental or legal guardian consent, we will delete this information from our records or take reasonable available steps to de-identify the information.

 

HOW WE USE THE INFORMATION

We generally use the claims data and other personal information we collect for the following purposes:

• To initiate, process, review, investigate, assess, validate, settle, finalize, and otherwise administer claims, according to the terms and conditions of the class action settlement agreements as approved by the courts
• For reporting, auditing and analytics purposes, including to provide with reports on claims and to audit claims on behalf of its clients;

• To communicate with you regarding your claim(s);
• To verify your identity;
• To locate claimants with whom we have lost contact
• For fraud detection and verification purposes, and to otherwise protect us, our clients and others from fraud, error and other harm;
• To improve our services and operations that we use to provide claims management and related services, and to provide training to relevant personnel;
• In order to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena; and
• For any other purposes identified by our clients.

 

We may also use de-identified information and aggregate information relating to claims for research, analytics, and related purposes.

 

HOW WE SHARE YOUR INFORMATION

We will not disclose your personal information to any non-affiliated third party without your prior consent, other than as provided below.

 

In carrying out the activities and purposes described above on behalf of its clients, claims data may be processed by Epiq, including other affiliated Epiq entities, who perform services or provide support relating to the claims management services. Claims data and other personal information we collect may also be disclosed to third parties as set forth below:

• Adjusters, assessors, valuators and service providers engaged by Epiq to performservices or functions related to the claims management services; and
• Authorized representatives, consultants, research firms and other third party serviceproviders acting on our behalf, including cloud storage providers, data analyticsproviders, research partners, background check providers, consultants, lawyers,accountants and other professional services providers.

 

 

Epiq may also disclose the claims data to its clients, who have control over the claims data. In certain situations, our clients may be government authorities subject to different privacy laws. Our privacy policy does not apply to the practices of our clients or any third parties and Epiq does not assume any responsibility for such practices. We encourage you to review our clients’ privacy policies to determine how your information will be treated.

 

We reserve the right to disclose your personal information as required or permitted by law, in response to legal or regulatory process and law enforcement requests by government authorities that have asserted a lawful right to access such information, to our legal counsel, or as necessary to protect the property, interests and rights of Epiq.

 

If Epiq or substantially all of Epiq’s assets are acquired, or in the unlikely event Epiq were to go out of business or enter bankruptcy, claimant data or other personal information may be transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Epiq may continue to use your personal information as set forth in this privacy policy (as it may be amended from time to time).

 

We will not transfer your personal information across national borders to fulfil any of the above purposes, including to the United States, without your consent. All information collected by us will only be stored and accessed in Canada.

 

COOKIES

Epiq may also use cookies and other mechanisms to collect personal information about individuals when they visit or interact with us online. Cookies are unique identifiers, which are used to customize your website experience. Most web browsers automatically accept cookies, but you can usually change your browser to prevent or notify you whenever you

are sent a cookie. This gives you the chance to decide whether or not to accept the cookie. We use the information in cookies to help us improve our website and our services, and for fraud detection and verification purposes. If you do not accept a cookie, there may be limitations on your use of some site functions. To read about our cookie notice, click here.

 

ANALYTICS

We use automated devices and applications operated by third parties, including google analytics (http://www.google.com/intl/en/policies/privacy/ ) to evaluate the usage of our website and services, in order to improve our website and services, performance and user experiences. These third parties may use cookies and other tracking technologies to perform their services. We do not share your personal information with these third parties, but they may collect your IP address as part of their services.

 

LIMITING USE, DISCLOSURE, AND RETENTION

Personal information will not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Pursuant to privacy legislation or our mandate or upon a client’s or claimant’s direction, we will destroy, erase or anonymize documents or other records containing personal information as soon as it is reasonable to assume that the original purpose is no longer being served by retention of the information and retention is no longer necessary for a legal or business purpose. We will take due care when destroying personal information and anonymizing documents so as to prevent unauthorized access to, or reverse engineering of, the information.

 

HOW WE STORE AND SAFEGUARD YOUR INFORMATION

Epiq has implemented measures designed to secure personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All personal information is stored on our secure servers behind firewalls.

 

Epiq’s security measures include:

• Education and training to relevant staff to ensure they are aware of our privacyobligations when handling personal data;
• Administrative and technical controls to restrict access to personal data on a ‘needto know’ basis;
• Technological security measures, including firewalls, multi-factor authentication,encryption and anti-virus software;
• Physical security measures, such as staff security passes to access our premises; and
• Reasonable precautions for the disposal or destruction of personal information that may consist of securely shredding physical documents and deleting electronically stored information in a manner that prevents it from being readily recovered.

 

While we strive to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk. If we find out there has been a breach of our security safeguards and there is a real risk of significant harm to you, you will be notified unless otherwise prohibited by law.

 

ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

The personal information Epiq collects will be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used. We will, on an ongoing basis, take reasonable steps to ensure the accuracy and completeness of personal information under our care and control. Individuals who provide their personal information to Epiq must do so in an accurate and complete manner. Our goal is to minimize the possibility that inaccurate information is used to make a decision about any individual whose personal information we process.

 

You may request access to, or the correction of the personal information collected and processed by Epiq as part of the claim services, information about the ways in which that information is being used and a description of the individuals and organizations to whom that information has been disclosed, by making a written request to our privacy officer. You may be required to verify your identity. Because we are acting for and on behalf of our clients, we will provide them with your request and will work with them as needed to respond to your request. In some situations, we or our clients may not be able to provide access to certain personal information. This may be the case where, for example, disclosure would reveal personal information about another individual, the personal information is protected by solicitor/client privilege, the information was collected for the purpose of an investigation or where disclosure of the information would reveal confidential commercial information.

 

We may also be prevented by law from providing access to certain personal information. When an access request is refused, we will notify you in writing, document the reasons for refusal and outline further steps available to you.

 

WITHDRAWING YOUR CONSENT

You may withdraw your consent to the collection, use and disclosure of personal

information in accordance with this privacy policy at any time upon reasonable notice to Epiq in writing, subject to legal or contractual restrictions.

 

CONTACTING US

Epiq has designated a privacy officer who is responsible for our compliance with this policy. Any inquiries, complaints or questions regarding this policy should be directed in writing to our privacy officer as follows:

 

Elizabeth deBoer

Epiq Class Action Services Canada Inc.

Suite 400-220 Laurier Avenue West

Ottawa Ontario

K1P 5Z9 Canada

privacy@epiqglobal.com

 

If you believe the privacy legislation relating to the protection of your personal information or our privacy policy have not been respected, you may file a complaint with our privacy officer at the address listed above. Epiq will investigate all complaints. If, after an investigation, your complaint is deemed justified, Epiq will take appropriate steps to correct the situation, including, if necessary, amending our policies and practices. If you are not satisfied with the results of the investigation or the corrective measures taken by Epiq, you may exercise the remedies available under law by contacting the Office of the Privacy Commissioner of Canada at the address below:

 

Office of the Privacy Commissioner of Canada

30 Victoria Street

Gatineau, QC K1A 1H3

​

Use of Cookies

Cookies are small text files that are placed on your computer by websites that you visit. They are generally used to make websites work more efficiently and to provide information to the owners of the site. Cookies allow Epiq Class Action Services Canada Inc. (“Epiq”) to provide you with a smoother user experience by recognizing your computer(s), remembering your preferences and arranging content.

 

Third-party Cookies

Third-party cookies are cookies that another party places on your device through our site.

 

Cookie Type & Purpose

 

Performance

Performance cookies are used by third-party service providers to understand how you use our websites. For example, these cookies often track what pages are most frequently visited, and from what locations our visitors come from. Epiq only uses performance cookies to analyze user journeys and to improve how our websites operate. All information collected by these cookies is aggregated and therefore anonymous. If you elect not to allow these cookies, Epiq will not know when you have visited our site.

 

Google Analytics cookies are also used on this website. Google Analytics is a tool that helps website owners assess how users interact with website content. As a user navigates between web pages, Google Analytics provides JavaScript tags (libraries) to website owners to record information, such as a website URL, about the webpage a user has seen. The Google Analytics JavaScript tags use HTTP Cookies to "remember" actions a user has taken during previous pages/interactions with the website.

 

Cookie Lifespan

Epiq uses third-party cookies that are stored by a different domain to the visited page's domain. This can happen when the webpage references a file, such as JavaScript, located outside its domain. These persistent cookies remain on the user's computer/device for a pre-defined period.

 

Persistent

Our persistent cookies are not deleted when you close your browser but are saved on your device for a fixed period or until you delete them. Each time you visit the website, the server that sets the cookie will recognize the persistent cookie saved on your device. Third-parties use persistent cookies to store your preferences so that the preferences are available during your next visit to the website. These cookies keep an accurate account of how often you visit the website, how often you return to the website, and how your use of the website may vary over time.

 

How to delete Cookies

If you would like to opt-out of receiving cookies from Epiq, you can:

 

• Set your browser to reject all cookies;
• Set your browser to only accept cookies from “trusted” sites; or
• Set your browser to only accept cookies from websites that you are currently on.

 

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

 

Google Analytics

To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.