Privacy Policy
Draft for review — not in force. Highlighted text is still being confirmed.
At a glance
What we collect: your contact details, information about your business and the work you do, your insurance and claims history, and payment details when you buy a policy.
Why: to quote, place and service your insurance, help with claims, prevent fraud and meet our regulator’s requirements. We send marketing only with your separate consent.
Who sees it: the insurers that quote or hold your policy, the service providers that run our systems, and regulators when the law requires it. We don’t sell your personal information.
Your rights: you can see and correct what we hold, withdraw marketing consent at any time, and complain to us or to the Privacy Commissioner of Canada.
Who we are
Worksured Inc., operating as Worksured Insurance Group and Worksured (“Worksured”, “we”, “us”, “our”) is an insurance brokerage licensed by the Registered Insurance Brokers of Ontario. We arrange insurance for companies and individuals, and we specialize in coverage for tradespeople and contractors.
This policy explains what personal information we collect, why, who we share it with, how long we keep it, and how you can see or correct it. It covers worksured.io (the “site”), our quote process, our AI assistant, and every other way you deal with us, including by phone, email and text message.
We handle personal information under the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Where we hold information about individuals in Alberta, Alberta’s Personal Information Protection Act (PIPA) also applies. Where the two set different standards, we apply the one that protects you more.
1. What personal information means
Personal information is information about an identifiable individual. In our business it usually includes:
- your name and contact details;
- information about your business and the work you do;
- your insurance and claims history;
- your payment details;
- for vehicle coverage, your driver’s licence and driving record.
Unless we say otherwise, we treat information about you as personal information under this policy.
2. What we collect
When you ask for a quote
Depending on the services you request, we may ask for: your name and contact details; your business name and structure; your business and mailing addresses; your trade and the work you actually do; how long you’ve been in business; estimated revenue and payroll; how many employees and subcontractors you use; the tools, equipment or projects you want covered; your current or previous insurance; and your claims history.
When you buy or hold a policy
Your signature or electronic acceptance, and the records of your policy, certificates of insurance, changes, renewals and claims. Card payments are processed by our payment processor, and we don’t store your full card number.
When you use our AI assistant
What you type into the chat and the assistant’s replies. See section 5.
When you come to us from Entuitive
If you start a quote from the Entuitive platform and tick the box agreeing to share them, we receive the details shown next to that box, such as your name, business name, trade and the insurance requirement on your file. If you don’t tick it, nothing is shared and you start with an empty form. See section 3.
When you deal with us
Our correspondence with you, notes of the advice we gave, and the quotes we prepared, which our regulator requires us to keep. We record and transcribe calls with our team, including voicemail messages.
When you visit our site
Your IP address, device and browser type, the pages you visit, the site that sent you, and how long you stay. See section 10.
3. Where we get it
Most of what we hold comes directly from you. With your consent, or where the law allows, we also collect it from:
- insurers, managing general agents and underwriters we approach for you, including their underwriting decisions and claims records;
- insurance information and claims-history databases;
- your previous broker or insurer, when you ask us to get your records;
- credit reporting agencies, only where an insurer or payment provider requires a credit check and you’ve given separate consent for it (see section 6);
- adjusters, appraisers, investigators and legal counsel, in connection with a claim;
- public sources and licensing, registration and corporate registries, to verify a business or a trade licence;
- Entuitive Workforce Inc., our affiliate, as described below.
Entuitive. Emails about insurance that you may receive from Entuitive, such as a reminder that your certificate of insurance is about to expire, are sent by Entuitive under its own privacy policy. Entuitive doesn’t share your information with us before you act. We receive information about you from Entuitive only when you choose to start a quote with us and agree to share the details shown. In our quote process, we also ask whether you agree that Worksured and Entuitive may share information about your insurance with each other, including your certificate of insurance, so that your Entuitive file stays up to date. That consent is optional, and you can withdraw it at any time.
Any sharing between Worksured and Entuitive is governed by written agreements between the two companies and by this policy. Our ownership is set out in our Disclosure Statement.
Where we get personal information from a third party, we take reasonable steps to make sure that party was entitled to give it to us, and that what you were told when it was collected covers our use of it.
4. Why we collect it
We collect, use and share your personal information to:
- check whether you’re eligible for coverage and prepare a quote;
- place, issue, run, change, renew and cancel your policy, and issue certificates of insurance;
- advise you on coverage and on the insurance requirements of the people who hire you;
- report and handle claims;
- bill and collect premium;
- verify your identity and the accuracy of what you’ve told us;
- keep the records our regulator and insurers require;
- detect and prevent fraud and error;
- answer your questions and handle complaints;
- meet our legal and regulatory obligations; and
- understand how our service and site are used, and improve them.
We use your information for marketing only as described in section 7.
5. Automated tools and our AI assistant
We use automated tools in parts of our service. You should always know when you’re dealing with one.
Our AI assistant
Our site has an AI assistant, Winston. It’s labelled as AI wherever it appears.
What it can do: explain what a question on the form is asking, describe types of coverage in general terms, and tell you the insurance requirements that a client or program you work with has set.
What it can’t do:
- give you advice about your business;
- tell you what limits you need;
- give you a price;
- confirm that you’re covered.
Only a licensed broker can advise you, and only a confirmation email from us puts coverage in place.
The chat, including Winston, runs on software from Intercom, Inc. When you use it, Intercom receives your IP address, the type of device you’re using, your email address and policy number if you give them to us, and everything you type. Intercom stores this on servers in the United States (see section 9). For how Intercom handles information, see its privacy policy.
Our team may review chats to check the assistant’s answers and to pass your question to a licensed broker. Chats are recorded and kept as part of your file, for as long as we keep your file (see section 12), for our records, claims review and fraud prevention. Intercom may use de-identified conversations with Winston to improve its AI services. Conversations with our team aren’t used for this. Please don’t type banking or card details, or send sensitive documents, in the chat unless we ask you to use a secure upload.
Quotes and decisions
A licensed broker reviews your quote and policy. Automated tools help us check that your information is complete and send it to the right insurer.
If you’d rather deal with a person, call 1-888-900-7155 or write to [email protected]. Our Disclosure Statement says when we’ll get back to you.
Calls
We don’t use AI voice agents on our phone lines. If that changes, we’ll update this policy before it does.
6. Consent
We collect, use and share your personal information with your consent, unless the law allows or requires otherwise. When you give us information for a quote or to buy a policy, you consent to its use for the purposes in section 4. For sensitive information we ask for your express consent. In some cases consent is implied, for example when you ask us to change your policy.
In all cases where an insurer or payment provider requires a credit check, we ask for your separate consent for that purpose.
We contact you about other insurance that may suit your business only if you’ve agreed to that separately. We ask for that consent when your policy is set up.
You can withdraw consent at any time, subject to legal and contractual limits and reasonable notice. If you withdraw consent for information we need to arrange or service your insurance, we may not be able to keep acting for you. We’ll tell you that before you decide.
We won’t make you consent to more than we need, for the purpose we’ve explained, as a condition of getting a quote or a policy.
7. Marketing, email and text messages
Your consent to marketing is separate from your consent for us to arrange your insurance. You can withdraw it without affecting your policy.
We send commercial electronic messages only where we have consent or Canada’s anti-spam law otherwise allows it. Every one identifies who sent it, gives a mailing address and includes an unsubscribe link. Every marketing text tells you how to reply to stop. We act on an unsubscribe request within ten business days.
Unsubscribing from marketing doesn’t stop messages we must send you about your policy: renewal and cancellation notices, billing, and claims.
We don’t sell, rent or trade your personal information. We don’t share mobile numbers or text-message consent with anyone for their own marketing.
8. Who we share it with
We share your personal information only as described here:
- Insurers, managing general agents and underwriters, to get terms, place and service your coverage, and handle claims.
- Adjusters, appraisers, investigators, experts and legal counsel, in connection with a claim.
- Premium finance companies, if you choose to finance your premium.
- Service providers working for us under contract, with only the information they need: hosting, document storage, client and policy systems, payment processing, phone, email and text messaging, the AI assistant, and analytics. They can’t use your information for their own purposes.
- Our regulator, auditors and professional advisers, including during a regulatory examination or audit.
- Entuitive Workforce Inc., our affiliate. With the consent you give in our quote process, we send Entuitive your certificate of insurance so it can update your file on its platform. We share nothing else with Entuitive.
- Where the law requires or allows it, for example in response to a court order, a warrant, or a valid request from a regulator, tax authority or law enforcement; to prevent fraud; or to establish or defend legal claims.
- A buyer or successor, if all or part of our business is financed, sold, merged or reorganised, on terms requiring the information to be protected and used for the same purposes.
9. Service providers outside Canada
Some of our service providers operate, or store information, outside Canada. Our chat provider, Intercom, Inc., stores chat information in the United States. Other service providers, such as our payment processor and our website analytics tools, may also process information outside Canada.
While your information is in another country, it’s subject to that country’s laws and may be accessible to its courts, law enforcement and government authorities. Our service providers may use your information only to perform the services we’ve engaged them for, and they’re bound by contract to protect it. Intercom processes chat information on our behalf under a data processing agreement that requires it to protect that information.
Questions about our use of service providers outside Canada go to our Privacy Officer (section 15).
10. Our website: cookies and analytics
You can visit our site without telling us who you are. We and our service providers collect technical information from every visitor, as described in section 2, to keep the site secure, understand how it’s used, and improve it.
We use cookies and similar browser storage. Some are needed to move you through the quote process, save your progress and keep your session secure. If you block those, you may not be able to finish a quote online. Others help us measure how the site is used. You can set your browser to refuse cookies or to tell you when one is set.
We use Google Analytics 4 and Google Search Console to understand how the site is used. You can opt out of Google Analytics with Google’s browser add-on.
Our site may link to sites we don’t run. Their privacy practices are their own, so read their policies before giving them your information.
11. How we protect it
We use administrative, technical and physical safeguards suited to how sensitive the information is:
- access only for the people who need it to do their jobs;
- confidentiality obligations on our staff and contractors;
- encryption of information in transit;
- secure disposal of records we no longer need;
- contractual protections with our service providers.
No method of sending information over the internet is completely secure. Please don’t send us banking details by unencrypted email.
If a breach of our safeguards creates a real risk of significant harm to you, we’ll report it to the Office of the Privacy Commissioner of Canada and, where it applies, to Alberta’s Office of the Information and Privacy Commissioner. We’ll also notify you as the law requires.
12. How long we keep it
We keep your personal information as long as it’s needed for the purposes in section 4, and to meet our legal, regulatory and insurer obligations. Those obligations continue after your policy ends.
We keep client files, including quotes we prepared for you, for at least six years, or longer where regulations or our agreements with insurers and service providers require it. Driving records are kept only while you’re working with us, or for one year, whichever is shorter. After that, we destroy the records securely or remove what identifies you.
13. Seeing and correcting your information
You can ask what personal information we hold about you, how we’ve used it and who we’ve shared it with. You can also have inaccurate or incomplete information corrected. Some exceptions apply: for example, we can’t give you information that would reveal someone else’s personal information, or that is legally privileged.
Write to our Privacy Officer (section 15). We may ask you to confirm your identity first. We’ll respond within thirty days, or tell you if we need longer and why. If we refuse a request, we’ll tell you why and how to complain.
14. Children
Our services are for businesses and for people old enough to hold an insurance policy. We don’t knowingly collect personal information from anyone under the age of majority in their province.
15. Questions and complaints
Contact our Privacy Officer if you have a question about this policy, want to see or correct your information, or want to complain about how we or our service providers have handled it:
Hugh McTavish, Privacy Officer
[email protected]
1-888-900-7155
We’ll acknowledge your complaint, look into it, and tell you the outcome and what we’ve done about it.
For anything that isn’t about privacy, such as your coverage, your policy or our service, write to [email protected]. Our Disclosure Statement explains how complaints are handled and escalated.
If you’re not satisfied with our response, you can contact:
- the Office of the Privacy Commissioner of Canada, at priv.gc.ca;
- Ontario’s Information and Privacy Commissioner, at ipc.on.ca;
- for information about individuals in Alberta, Alberta’s Office of the Information and Privacy Commissioner, at oipc.ab.ca;
- the Registered Insurance Brokers of Ontario, at ribo.com;
- the General Insurance OmbudService, at giocanada.org.
16. Changes to this policy
We may update this policy when our practices or the law change. We’ll post the new version on our site with a new effective date and, if a change is significant, take reasonable steps to bring it to your attention. Information is handled under the version in place when we collected it, unless you agree otherwise.