Paramedic Contract Hub

Privacy Policy

Effective: July 20, 2026This policy describes how OPSEU Local 277 ("Peel Paramedic Union", "we", "us") collects and uses personal information in Paramedic Contract Hub (the "Service").

1. Who we are

Paramedic Contract Hub is an internal web application operated by Peel Paramedic Union for authorized union officers, staff, and invited users. It is not a public consumer service and is not intended for the general public.

2. Personal information we collect

Depending on how you use the Service, we may collect:

  • Account information — email address, name, preferred name, password (stored as a one-way hash), role, Local affiliation, optional phone, pronouns, bio, position, and certification level
  • Team roster contacts — names, emails, phones, and related details entered for Local team lists
  • User-generated content — comments, peer-help messages, pulse posts, feedback, and free-text notes on grievances, labour orders, and related casework (which may include member details you choose to enter)
  • Documents — collective agreements, MOUs, grievance, labour-order, and arbitration PDFs, and feedback screenshots uploaded to the Service
  • Security and audit data — invite and password-reset tokens, audit log entries (who did what and when), and optional web-push subscription details (endpoint keys and user agent)
  • Usage data — technical and interaction information collected through analytics cookies when you consent to them, used to understand how the Service is used

3. How we use personal information

  • Authenticate users and enforce role-based access
  • Operate collective-agreement intelligence and casework workflows
  • Send transactional email (invites, password resets, admin alerts)
  • Deliver optional browser push notifications you enable
  • Process agreement text with AI to extract clauses and wages for human review
  • Analyse Service usage to improve reliability, usability, and operations
  • Maintain security, audit trails, and service reliability

We do not sell personal information. We do not use it for third-party advertising.

4. Third parties and processors

We rely on the following categories of service providers:

  • Hosting — application, database, and uploaded files hosted on our infrastructure provider (currently Hostinger)
  • AI processing — Google Gemini receives excerpts of agreement or related document text solely to support extraction and comparison features; results are reviewed by humans before trusted categories are applied
  • Email — transactional messages via SMTP (Hostinger mail)
  • Web push — if you enable notifications, push delivery services (for example browser vendor push networks) receive the subscription endpoint needed to deliver messages
  • Analytics — when you accept analytics cookies, usage data may be processed by analytics service providers acting on our instructions to measure and improve the Service

5. Cookies and similar technologies

We use cookies and similar technologies to operate the Service, keep it secure, and—where you consent—measure how it is used. On your first visit you may choose Essential only or Accept all. Essential cookies are required for authentication and security and cannot be disabled while using the Service. Analytics cookies are set only if you choose Accept all. Theme preference is stored in your browser's local storage, not as a cookie.

CategoryPurposeConsent
EssentialSession, CSRF, and callback cookies used for sign-in and securityAlways active
PreferencesTheme preset and light/dark mode (local storage)Not a cookie
AnalyticsMeasure usage and performance to improve the ServiceAccept all

Your choice is stored so we can honour it on return visits. Clearing site data in your browser will reset the consent prompt.

6. Retention, security, and access

We retain account, casework, and document data for as long as needed for union operations, legal obligations, and dispute resolution, or until accounts and records are removed by authorized administrators. We use access controls, encrypted transport (HTTPS), hashed passwords, and audit logging to help protect the Service. No method of transmission or storage is completely secure.

Subject to applicable Canadian privacy law (including PIPEDA), you may request access to, or correction of, personal information we hold about you. Authorized users can update many profile fields in-app.

7. Contact and complaints

Privacy questions or requests should be directed to Peel Paramedic Union (OPSEU Local 277) leadership. Signed-in users may also use in-app Feedback to reach administrators.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

8. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Continued use of the Service after an update constitutes acceptance of the revised policy.

About Paramedic Contract Hub