CG Hylton Inc. ("CG Hylton", "we", "us") is a human resources and employee benefits consulting firm based in Calgary, Alberta. We have advised employers since 1981.
This policy explains what personal information we collect through www.hylton.ca, why we collect it, who we share it with, and what you can do about it. It applies to the website only. Personal information we handle under a signed client engagement is governed by that engagement and by any separate agreement with your employer.
We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
Questions, access requests, and complaints go to our Privacy Officer:
Brooklyn Shill
CG Hylton Inc.
201, 300 – 8120 Beddington Blvd. N.W., Calgary AB T3K 2A8
Email: info@hylton.ca
Phone: 403-264-5288
We collect personal information only when you choose to give it to us through one of the four forms on this website. We do not require an account, and we do not buy personal information about site visitors from third parties.
When you use the contact form we collect your first and last name, email address, telephone number, company name, the subject you select, and the message you write.
We use this to answer your enquiry and, where relevant, to follow up about the services you asked about. If you become a client, this information may be added to our client records.
This form is for individuals seeking support through an Employee Assistance Program. We collect your first name, email address, telephone number, employer, general location, your reason for getting in touch, whether the matter is urgent, how you prefer to be contacted, any notes you add, and your consent to be contacted.
This is sensitive personal information. The reason you give for contacting an EAP can reveal information about your health, your family, or your circumstances at work. We treat it accordingly:
There are limits to confidentiality. We may have to disclose information without your consent where there is a risk of serious harm to you or someone else, where a child may be at risk, or where we are required to by law or a court order.
This form is used by EAP service providers, not by individuals seeking support. It collects the provider's name, email address and telephone number, and, for each session billed, a client reference, session date, number of sessions, session type, invoice number, amount, and any notes.
Sessions are identified by a client reference rather than a client's name. We use this information to verify and process provider invoices.
When you apply for a role we collect your name, email address, telephone number, your answers to the screening questions for that role, any note you write, and the resume and cover letter files you upload.
We use this to assess your application and to contact you about it. Uploaded files are stored in a private storage area that is not publicly accessible.
Our hosting provider records standard technical information such as IP address, browser type, and the pages requested, for security and to keep the site running. Our anti-spam check (Cloudflare Turnstile) processes a token from your browser to confirm you are not an automated script. Two hidden fields on each form are spam traps and do not collect anything about you.
This website does not use analytics tracking or non-essential cookies. No consent banner is shown because none is required.
We collect personal information from this website only when you submit it to us. Submitting a form is your consent for us to use that information for the purpose the form describes.
You can withdraw consent at any time by contacting our Privacy Officer, subject to legal and contractual limits. If you withdraw consent we may no longer be able to respond to your enquiry or process your application.
We do not sell personal information. We do not share it for advertising.
We use a small number of service providers to run the website. Each processes information only on our instructions:
Information handled by these providers may be stored or processed outside Canada, including in the United States. While it is outside Canada it may be accessible to foreign courts, law enforcement, and government authorities under the laws of that country.
We may also disclose personal information where the law requires it, to enforce our agreements, or to protect the rights and safety of any person.
When information is no longer needed for the purpose it was collected, we delete it or render it anonymous.
We use safeguards appropriate to the sensitivity of the information, including encryption of data in transit, access controls limiting staff access to those who need it, private storage for uploaded files, and anti-spam protection on all forms.
No method of transmission over the internet is completely secure. If you need to send us something highly sensitive, contact us first and we will arrange a more secure method.
Please do not include detailed personal health information in a website form. Tell us enough to route your enquiry, and we will take the details through a more appropriate channel.
You have the right to:
Contact our Privacy Officer to exercise any of these. We will respond within 30 days, as required under PIPEDA and Alberta PIPA. We may ask you to verify your identity first. There is no charge for a routine access request.
If you are not satisfied with our response you may complain to the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).
This website is intended for employers, employees, and service providers. EAP services may extend to employee dependants, including those under 18. In those cases, we encourage young people to be supported by a parent or guardian when submitting information through the EAP form. We do not knowingly collect personal information from minors without parental or guardian awareness.
We may update this policy. The date at the top shows when it was last revised. Material changes will be noted on this page.