Our commitment to your privacy
At Conexus, protecting your privacy is fundamental to how we do business. Our Board has adopted this Privacy Code, approved supporting policies and procedures, and appointed a Privacy Officer accountable for compliance and for helping you exercise your privacy rights.

1) What “personal information” means

“Personal information” is information about an identifiable individual. It can include your name, contact details, age, marital status, employment history, financial records, Social Insurance Number (SIN), and -where applicable - biometric identifiers (such as facial features or fingerprints).

Conexus does not collect, receive, or store biometric identifiers used for authentication on your device. When you choose to use biometric login (e.g., fingerprint or facial recognition), the biometric information remains encrypted on your device and is not accessible to us.

2) Why we collect personal information

We collect only the information we need to:

• Understand your needs and determine eligibility for products and services;

• Open, maintain, and administer accounts and deliver services;

• Obtain credit reports and assess creditworthiness;

• Manage security and risk related to your accounts and our services;

• Comply with legal and regulatory obligations;

• Assist in dispute resolution; and

• Offer products and services from Conexus and selected affiliates and service providers; and

• Conduct research and surveys to assess satisfaction with our products and services.

Your Social Insurance Number (SIN). When you open an interest‑earning account at Conexus, we are legally required to ask for your Social Insurance Number (SIN) for tax reporting purposes.

With your permission, we may also use your SIN to help accurately match your credit information. Sharing your SIN for this purpose is completely optional and not required to open an account or receive service.

3) How we obtain your information

We collect information directly from you and through your product and service arrangements with or through us. With your authorization, we may also obtain information from credit bureaus, other financial institutions, and references you provide.

4) Our 10 privacy principles

We follow ten recognized privacy principles:

1. Accountability – Our Privacy Officer is accountable for compliance with this Code.

2. Identifying Purposes – We identify purposes before or at the time of collection.

3. Consent – We obtain your knowledge and consent (express or implied) for collection, use, and disclosure.

4. Limiting Collection – We collect only what is necessary for the identified purposes.

5. Limiting Use, Disclosure & Retention – We use and disclose information only as consented or as required by law and retain it only as long as needed.

6. Accuracy – We keep information accurate, complete, and up to date as necessary.

7. Safeguards – We protect information with appropriate administrative, technical, and physical safeguards.

8. Openness – We make information about our policies and practices readily available.

9. Individual Access – You can request access to, or correction of, your personal information.

10. Challenging Compliance – You can challenge our compliance with these principles.

5) Consent and your choices

Depending on the sensitivity of the information, your consent may be written, verbal, or electronic. We obtain written consent when you become a member or apply for new services. We may continue to use information collected before this Code for the same purposes unless you withdraw consent (implied consent).

We obtain your consent before we: obtain credit reports or check references; contact you about products or services by mail, email, or phone; share information with affiliates to offer their products/services; disclose information to third parties unless required by law or necessary to provide services; or conduct research/surveys as described.

You may limit or withdraw consent at any time, subject to legal or contractual obligations. We will explain any implications and process your choice as quickly as possible.

6) Sharing information with service providers and affiliates

We use trusted service providers for functions such as statement production, data processing, payment clearing, card services, digital services, research, and analytics. They receive only the information necessary to perform their services and must protect it under contract. We may share limited information within our corporate family to offer a full range of financial products and services.

A current list of key service providers and affiliates is available upon request.

7) Accessing and correcting your information

You have the right to access the personal information we hold about you and to request corrections. We aim to respond within 30 days of receiving your request. If your request is complex or voluminous, we may require additional time. If a fee applies, we will provide an estimate in advance.

How to make a request: Visit a branch, email at privacyofficer@conexus.ca, or contact us at 1-800-667-7477. To help us locate your information, please describe your request as precisely as possible.

8) Website & cookies (public website)

We collect limited information when you visit our public website(s), such as IP address, browser type, operating system, and referring address, to create usage statistics and improve services. We use session cookies (expire when you close your browser) and persistent cookies (remain for a set period) to maintain session integrity, remember preferences, analyze site usage, and, where permitted, present New Conexus marketing on other websites.

Our website may utilize third-party service providers to support website security, spam prevention, and fraud detection. These providers may collect technical information such as IP addresses, browser characteristics, and device information as necessary to provide these services.

9) Digital banking & mobile app privacy

When you use online banking (secure, login‑required areas), we maintain a secure channel and log transactions to ensure accuracy and service delivery; we treat these records with the same care as branch transactions.

Our mobile app may request device permissions - for example:
• Camera (mobile deposit)
• Location (find branches/ATMs)
• Phone (tap to call)
• Contacts (to set up e‑Transfer recipients you select)
• Storage (to view or download PDFs)

You control these permissions in your device settings.

Biometric Login (Fingerprint or Facial Recognition)

Our digital banking services offer the option to use your device’s built‑in biometric authentication (such as fingerprint or facial recognition) to log in.

• Your biometric data never leaves your device.

  New Conexus does not collect, store, or have access to your fingerprint, facial image, biometric template, or any biometric identifiers.

• Authentication is performed by your device’s operating system.

  Apple, Google, and other device manufacturers store and verify biometric information within a secure, encrypted area of the device. Our systems receive only a “successful/unsuccessful” authentication signal.

• Use of biometrics is optional.

  You may enable or disable biometric login at any time in your device settings or within the mobile app.

• Alternative login methods are always available.

  You may continue to log in using your password, PIN, or other available authentication methods.

For more information on how your device handles biometric information, please refer to the privacy policies of the device manufacturer and operating system provider.

10) Security monitoring (branches and contact centre)

• Video surveillance (and, in some lobbies, audio). We use surveillance for safety and security. Recordings that identify individuals are personal information. Typical retention is 90 days, unless we need to keep them longer for investigations, legal, or regulatory purposes.

• Facial recognition (if applicable). Where used, facial recognition compares live camera footage with records from prior safety/security incidents or publicly available sources to help protect members and staff. By entering our premises, you consent to this processing for safety/security purposes.

• Call recording & intelligent transcription. Calls to our Contact Centre are recorded and may be transcribed/summarized by intelligent systems to ensure accuracy, security, service quality, and staff training.

You may request access to personal information contained in these records as described in Section 7. We may disclose recordings to law enforcement or government authorities as required or permitted by law.

11) How to contact us

Privacy Office – Conexus Credit Union
P.O. Box 1960 Stn Main
Regina, SK S4P 4M1
Web: Contact Us
Email: privacyofficer@conexus.ca

12) Complaints & escalation

If you have concerns about our handling of your personal information, please contact our Privacy Office. If we cannot resolve your concern, we will explain your options, which may include contacting the Office of the Privacy Commissioner of Canada (30 Victoria Street, Gatineau, QC K1A 1H3; 1‑800‑282‑1376).

13) Updates to this Privacy Code

We may update this Privacy Code to reflect changes in our practices or legal requirements. The effective date appears at the top of this page.