sascu Privacy Policy
How this credit union collects, uses, and protects personal information. Privacy policy for sascu-cmo.com with PIEDPA compliance notes.
Who Uses Banking and Why: Privacy Policy
- the platform collects only the personal information needed to provide banking services.
- Personal information is never sold to third parties.
- You can access, correct, or delete your personal information on request.
- Privacy is governed by the Personal Information Protection Act of BC (PIPA).
What We Collect and Why
We collect account data, identity data, and device data - only what is needed to run your accounts.
To open and service accounts, sascu collects identity information (name, address, date of birth, government ID), contact details, and financial information (income, statements, property). Usage data from online banking - log-ins, device type, pages viewed - helps us secure the platform.
Credit unions like our team operate under the Personal Information Protection Act of BC; the federal privacy framework applies to banks. Both rules require consent, purpose limitation, and individual access.
How Your Information Is Used
Information is used for account service, fraud prevention, regulatory obligations and, with consent, marketing.
Every use of personal information maps to a purpose: opening and managing accounts, processing transactions, securing against fraud, meeting anti-money-laundering law, and - only with your separate consent - sending product offers.
We do not share personal information for third-party marketing. Service partners are contractually prevented from using your data beyond the specific job.
Your Privacy Rights
You can access, correct, and delete your information, and withdraw consent, with one request to privacy@sascu-cmo.com.
PIPA and PIPEDA give individuals the right to access the data held about them and correct errors. You can also ask us to delete records that we are not legally required to keep. Most requests are processed within 30 days.
To exercise your rights or ask questions, contact our privacy office - see contact us for the full list of channels.
Key facts at a glance
Four numbers decide most of this decision, and one caveat should always be kept in view.
- Data sold to 3rd parties: Never.
- Access requests: <30 days.
- Applies to: PIPA (BC).
This privacy notice does NOT apply to the cooperative business lending applications, which have a separate commercial-privacy notice. Our first policy was a one-pager; after a regulator review in 2024 we expanded the retention schedule to the current 7-year rule.
The official methodology is detailed in the sascu overview.
| P | u | r | p | o | s | e |
|---|---|---|---|---|---|---|
| Identity data | Account opening, AML | 7 years post-closure | ||||
| Transaction data | Servicing, statements | 7 years post-transaction | ||||
| Score data | Risk and underwriting | 2 years | ||||
| Device logs | Security, fraud | 90 days | ||||
| Marketing consent | Offers | Until withdrawal |
Consumer protection and credit-union rules are published by the Financial Consumer Agency of Canada.
Cardwise freezes saved us twice this year already when a card went missing.
Our farm loan was approved locally, with terms that a big bank would not touch.