Privacy Policy and Terms of Use

GMS’s Privacy Policy is reviewed annually and may periodically change. The version of this policy published on gms.ca is the most current and up-to-date version.

GMS: Committed to Protecting Privacy

Collecting and using personal information is necessary for GMS to provide products and services. We commit to using this information only in a responsible manner and take accountability for our role in protecting it.

We take a principles-based approach to protecting personal information and respecting the privacy rights of our customers. GMS complies with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) for our business in Canada, and with any international privacy regulations to the extent that they apply and do not restrict our ability to comply with PIPEDA.

We strive to store personal information in Canada wherever possible; however, we work with suppliers and providers who may store and/or process personal information outside of Canada. When information is stored or processed outside of Canada, it may be subject to the laws of and be accessible by legal authorities in such other jurisdictions. We have taken appropriate technical, organizational, and legal steps to secure this information.

Accountability

GMS has a Privacy Officer responsible for managing privacy practices, monitoring compliance with this Policy, and overseeing employee privacy training. Our Privacy Officer is accountable to the GMS Board of Directors to report on privacy protection practices and issues.

Clearly Identified Purpose for Collection

Personal information may be used by GMS for the following purposes: 

  • maintaining our relationship with you, including verifying your identity and the accuracy of your information;
  • communicating with you, including understanding your needs, preferences, and satisfaction with our products and services;
  • evaluating applications, determining eligibility, assessing risk, processing claims and payments, and administering our products and services;
  • complying with legal and regulatory requirements;
  • protecting you and us from errors, misrepresentations, fraud, and/or illegal activity;
  • analyzing data to determine premiums, to understand utilization of benefits, and to develop new or improved products and services; and
  • providing you with offers for additional products or services you may be interested in.  

We may analyze how you use our products and services, including through our website and other electronic means. This may include preferences for certain products, demographics, interests, and lifestyle activities. Knowing this information helps us offer products and services that are more relevant to you.  

Phone calls with a GMS representative may be recorded or monitored to:

  • create a record of the information and instructions you provide;
  • maintain quality service levels; and
  • help with staff training.

Informed Consent and Limited Collection

GMS only collects and uses information when and where we have your permission to do so, and when you understand the reasons why information is being collected and how it may be used or disclosed. In certain exceptional circumstances we may not seek your consent to disclose personal information. These exceptional circumstances are determined by law and may include times where legal, medical, or security reasons make it impossible or impractical to seek consent.

You can give consent in writing, as well as verbally, electronically, or through authorized representatives. In certain circumstances, consent is also implied through your actions. For example, paying for a prescription drug using a pay-direct card implies consent for the pharmacy to share your personal information with us.

Consent is requested at the time of collection, as well as when a new use of personal information is identified. We will not collect more information than we need to provide you the product or service being offered. You may withdraw consent for personal information to be collected or used at any time, but this may prevent us from continuing to provide you with products or services. For example, withdrawing consent could prevent GMS from adjudicating or paying claims on your policy.

Information Collection Methods

GMS collects information in the following ways:

  • directly from forms and applications you send us;
  • through interactions with you or your authorized representatives over the phone, in person, or through email or other electronic means;
  • from public sources including government agencies and provincial health authorities;
  • from third parties we work with to provide products and services; and
  • from third parties you have consented to share information with us, including but not limited to:
    • other insurance companies or benefit carriers;
    • your current or former employers;
    • your travel suppliers; and/or
    • hospitals, doctors, or health practitioners.

GMS may also collect information on the use of our website which may include tracking browsing data using “cookies'' or other means. Detailed terms of use for our website are outlined in GMS’s Legal Notice.

Limited Use, Disclosure, and Retention

GMS only uses and discloses personal information for the purpose for which it was collected. Any other purposes require your consent, unless required or permitted by law. Depending on the circumstances, we may disclose your personal information to:

  • third parties we work with to provide products and services (e.g., printing, mail distribution, payments, software and data storage, market research, administration, claims processing and investigation, reinsurance, and other services);  
  • employees, agents, and representatives who need this information to perform their duties;
  • your broker and their employees;
  • any person or organization to whom you grant consent (e.g., by signing a power of attorney);
  • people or organizations that work to prevent and investigate suspected fraud as engaged by GMS; and
  • other benefit carriers for the purpose of coordination of benefits.

We keep your information as long as we need to provide products and services to you, or as long as required by law, whichever is longer. When we no longer require your information, it is permanently destroyed, erased, or made anonymous. We have a Records Retention and Destruction Policy outlining how long we retain different kinds of records for.

Protection through Appropriate Safeguards

We have procedures designed to protect your personal information from loss and unauthorized access, use, disclosure, or modification. We provide regular privacy training to all employees and require employees to attest annually to policy compliance  

We have an Information Security Policy which outlines the measures we take to protect your personal information. We use a combination of physical, organizational, and technological safeguards appropriate for the sensitivity of information and that continuously scan and respond to vulnerabilities and new threats.

When we share personal information with our service providers, they are required to protect it in ways that are consistent with our privacy policies and practices.

GMS takes privacy breaches seriously and has procedures in place to respond to them quickly and completely. We will notify you at the earliest opportunity if your personal information may have been exposed and take immediate steps to limit the harm done by the breach. We keep detailed records of all privacy breaches to adapt and prevent future incidents.  

When a real risk of significant harm exists (as defined in PIPEDA), we will notify the Office of the Privacy Commissioner that such a breach has occurred.

Access and Transparency

As a GMS customer, you have a right to access and verify the personal information GMS maintains about you. Depending on the circumstances, we may not be able to give you full access to this information A small charge may apply to fulfill a request.

We strive to keep personal information as current and accurate as possible for the purpose it is used. We appreciate timely and accurate notification of changes to personal information. Any information found to be inaccurate or incomplete will be corrected or amended by GMS at no charge to you. We will also correct that information if it has been shared by us with a third party.

Inquiries and Concerns

GMS is committed to protecting your private, personal information and to treating you with the highest level of courtesy and respect. If you have questions about how we approach privacy or any concerns about how a request for personal information was handled, please contact our Privacy Officer by email at @email or by mail c/o:

Privacy Officer 
GMS 
2055 Albert Street 
PO Box 1949 
Regina, SK S4P 0E3

 

This policy was last updated in June 2023.