Applicable law
WorkTag operates with reference to Quebec Law 25 (Act to modernize legislative provisions as regards the protection of personal information, S.Q. 2021, c. 25) and, where applicable, federal Canadian privacy legislation (PIPEDA). Where a placement agency or other organization enrols workers and directs how their information is used, the responsibilities of each party are set out in our data processing addendum.
Purpose limitation
Personal information in WorkTag is used to operate the credential-verification service: verifying worker credentials, computing clearance eligibility, and communicating clearance status to the placement agencies and general contractors involved in a worker’s placement. Personal information is not sold, rented, or used for advertising or individual profiling. WorkTag may retain anonymized, aggregate statistics that do not identify any individual (see Retention).
Data minimization
Workers — or, where applicable, the placement agency managing a worker’s file — provide a display name, location (city/region), and credential documents (safety cards, licences, certifications). A profile photo is optional. Credential documents are reviewed before a credential is marked as verified. WorkTag stores the credential details (type, issuer, validity dates, and status) and retains the submitted document files in encrypted, access-controlled storage. Documents are disclosed only to authorized parties — the worker, WorkTag administrators reviewing credentials, and the general contractors a worker’s clearance is shared with — through expiring, access-logged links.
General contractors and placement agencies provide an organization name, contact email, and role; their use is limited to defining site requirements and viewing the clearance results disclosed to them.
WorkTag does not request Social Insurance Numbers or financial account details.
Consent and legal basis
Workers who create their own WorkTag account consent to the collection and use of their information at account creation. Where a placement agency enrols a worker, the agency is responsible for obtaining the worker’s consent or establishing another valid legal basis — for processing the worker’s information and for disclosing their clearance status to general contractors — as set out in the data processing addendum.
Workers control which fields are included in each disclosure (a clearance summary, or full credential details) for the viewers and share-link recipients they authorize. Disclosure grants can be revoked.
Access, correction, and deletion
Workers can access and update their own profile, credentials, and documents through the worker dashboard (once their account is activated) or at any time by writing to vie-privee@worktag.io. A worker may also request a copy of their personal information, a correction, or deletion. Where a placement agency is responsible for a worker’s file, such requests may be directed to that agency, and WorkTag assists in responding. We respond within the timelines required by applicable law. You may also file a complaint with the Commission d’accès à l’information du Québec (CAI).
Privacy impact assessments
Organizations with regulatory PIA obligations can request a summary of WorkTag’s data flows and processing architecture to support their assessment. Contact us to arrange a technical disclosure session.
Retention
Personal information is retained while an account or placement is active. On deletion, profile and credential data is removed from active systems. WorkTag may retain anonymized aggregate statistics that do not identify any individual.
Person in charge of the protection of personal information
Charles Dessane — vie-privee@worktag.io