Privacy Policy

Information We Collect

We collect the following personal information to operate the Orson platform:

• Profile information: first name, last name, email address, phone number, department, and role
• Emergency contact details: name, phone number, and relationship
• Tax documents: federal TD1 and provincial TP-1015 forms required for payroll
• Banking information: institution number, transit number, and account number (encrypted at rest)
• Government identification: Social Insurance Number (SIN) (encrypted at rest)
• Documents: void cheques and allergy cards uploaded as part of the onboarding process

How We Use Your Information

Your information is used exclusively for:

• Facilitating your onboarding with production companies that have invited you to join their crew
• Enabling production coordinators to collect and verify required compliance documents
• Processing payroll-related documents as required by law
• Sending reminders to complete your profile or submit outstanding documents

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. You may request deletion of your account and associated data at any time by contacting our privacy officer. Upon deletion, your information will be removed within 30 days, except where retention is required by law.

Your Rights Under Quebec Law 25

Under Quebec's Law 25 (Act to modernize legislative provisions as regards the protection of personal information), you have the following rights:

• Right of access: request a copy of the personal information we hold about you
• Right to rectification: request correction of inaccurate or incomplete information
• Right to deletion: request that your personal information be deleted
• Right to withdraw consent: revoke your consent to the processing of your personal information at any time
• Right to data portability: receive your personal information in a structured, commonly used format
• Right to file a complaint: lodge a complaint with the Commission d'acces a l'information (CAI) at cai.gouv.qc.ca if you believe your rights have been violated

Consent and Withdrawal

Your personal information is shared with production companies only with your explicit consent, granted when you accept an invitation to join their crew. You may revoke a company's access to your profile at any time from the Consent Management page within your account settings. Withdrawing consent will remove the company's access to your documents and profile data.

Data Security

We implement industry-standard security measures to protect your personal information:

• All data is encrypted in transit using TLS 1.2 or higher
• Sensitive fields (SIN, banking information) are encrypted at rest using AES-256
• Row-level security ensures each production company can only access data from crew members who have consented to share it
• Access controls limit data visibility to authorized personnel only

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Privacy Officer:

privacy@siasola.com

We will respond to all requests within 30 days.