CSA Group and its subsidiaries and affiliates (collectively CSA Group) are committed to respecting your privacy. This Privacy Policy describes how we collect, use, disclose, store and otherwise process information through this website and its affiliated websites and other online products and services. In addition, this Policy states how you can control the collection, correction and/or deletion of information. We will not use or share your information with anyone except as described in this Privacy Policy.

We urge you to read this Privacy Policy so that you understand our commitment to you and your privacy, and how you can participate in that commitment.

By providing your personal information to CSA Group in the ways described in this Privacy Policy, you agree that you are authorized to provide that information and are accepting this Privacy Policy and any supplementary privacy statement that may be relevant to you. You have the right at any point to revoke consent and CSA Group will stop using and processing your personal data. If you do not agree to our practices, please do not register, subscribe, create an account, or otherwise interact with our services, CSA Group’s websites, or mobile-device applications.

General

This Privacy Policy is based on CSA’s Model Code for the Protection of Personal Information (Can/CSA-Q830-96) as well as complying with the General Data Protection Regulation (GDPR) as set forth by the European Parliament in April 2015. The regulation mandates that CSA Group protects the personal data and privacy of EU data subjects. If there is any conflict between the policies in this Privacy Policy and GDPR, the GDPR principles shall govern.

What kind of Information do we collect and how do we use the information?

If you request information, products or services through CSA Group’s websites, you may be asked to provide personal information. Personal information refers to any information relating to an identified or identifiable natural person, such as an identification number, physical, physiological, mental, economic, cultural, or social identifiers. CSA Group collects personal information about you in connection with many of our services. When working with or using CSA Group, you may be prompted to register for an account, and in doing so, CSA Group may ask you for personal information such as your name, contact details including mailing address, email address, username and password, or credit card information. In addition you may be providing personal information when:

(i) communicating with CSA Group via phone calls, chats, emails, web forms, social media, and other methods of communication,

(ii) subscribing CSA Group’s marketing material,

(iii) applying for a job, or

(iv) providing services to CSA Group.

We collect this information to provide you products and services, such as to fulfill your requests for products or to help us personalize our offerings to you. In some cases, this involves sharing your information with a third party service provider for the purpose of fulfilling your order and providing you with the information, products or services you have requested. We also use your personal information to support our business functions, such as fraud prevention, marketing, and legal functions including but not limited to:

Website Usage Information

We may also collect Technical Information about you when you visit CSA Group websites, which your web browser automatically sends whenever you visit a website on the Internet. “Technical Information” is information that does not, by itself, identify a specific individual but which could be used to indirectly identify you. Our servers and analytic services (described below) automatically record this information, which may include your Internet Protocol (“IP”) address (a number that is automatically assigned to your computer by your internet service provider), the address of the website you are coming from, the amount of time you spend visiting our website, the pages visited, how you interact with those pages, if you link to us through a search engine, the keywords you used to find our website, browser type, browser language, and the date and time of your request. CSA Group also uses the web analytics services of FullStory and live chat services of LivePerson to analyze, monitor and facilitate visitor interactions on CSA Group’s website.

To learn more about LivePerson’s services and privacy practices, visit http://www.liveperson.com/policies/customer-website-privacy. To learn more about FullStory’s services and privacy practices, visit https://www.fullstory.com/legal/privacy/

Gathering your information helps us track visits to the CSA Group’s websites, understand and evaluate the customer experience, improve the content and layout of our website and customize the web experience, ensure our websites and other services work correctly, and support our customer analytic efforts. CSA Group will only attempt to link the logs to identifiable individuals if that is necessary for investigating a data security breach, a breach of contract, a violation of CSA Group’s policies and procedures or a contravention of laws.

Cookies

As is common practice with almost all professional websites, CSA Group’s websites use cookies, which are tiny files that are downloaded to your computer, to improve your experience. This section describes what information they gather, how we use it and why we sometimes need to store these cookies. We will also share how you can prevent these cookies from being stored, however this may downgrade or ‘break’ certain elements of the CSA Group’s websites’ functionality.

The information below describes the cookies we use on the site and why we use them. If located in the European Union, by clicking “Accept” you explicitly agree to cookies being used while browsing the site. For detailed guidance explaining what cookies are and how to control or delete them, we recommend you visit http://www.aboutcookies.org and http://www.youronlinechoices.eu

Google Analytics Cookies

We use Google Analytics to collect information about visitor behaviour. Google Analytics stores information about what pages you visit, how long you are on the site, how you got here and what you click on. As we sell products, it’s important for us to understand statistics about how many of the visitors to our site actually make a purchase and as such this is the kind of data that these cookies will track. This is important to you as it means that we can accurately make business predictions that allow us to monitor our advertising and product costs to ensure the best possible price. This Analytics data is not tied to personally identifiable information. We do not collect or store your personal information, e.g., your name or address, so this information cannot be used to identify who you are.

You can find out more about Google’s position on privacy as regards its analytics service at https://support.google.com/analytics/answer/6004245?hl=en.

Google AdSense Cookies

The Google AdSense service we use to serve advertising uses a DoubleClick cookie to serve more relevant ads across the web and limit the number of times that a given ad is shown to you.

For more information on Google AdSense see the official Google AdSense privacy FAQ at https://support.google.com/adsense/answer/3394713?hl=en.

Disabling Cookies

Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of this site. Therefore it is recommended that you do not disable cookies. If you disagree with the use of cookies, you have the following options:

Do Not Track

If you prefer not to use any cookies, you can also opt out in some browsers by turning on “Do Not Track” or visit http://www.aboutads.info/choices to opt out directly. We currently do not support Do Not Track browser settings, but are committed to supporting it in the future once there is a consistent industry standard for compliance.

Disclosure of Personal Information to Third Parties and International transfers

The personal information you provide through our site is never disclosed to third parties (other than our trusted service providers) without your consent. We do not sell, rent or trade your personal information to other organizations or companies with your explicit consent. When personal information is shared with others, it is only in ways that have been explained to you in advance. The limited exceptions to this rule include when:

CSA Group may also share customer information within our family of companies for a variety of purposes, for example to provide you with the latest information about our products and services and to offer you our latest promotions. To facilitate our global operations, CSA Group may transfer personal data from your home country to other CSA Group locations across the world. To protect your personal information, we will only transfer data to countries who provide an “adequate” level of personal data protection. If the data is transferred to countries without ‘adequate’ protection as determined by the European Parliament, we will use additional safeguards to ensure your data is protected.

Security Measures Taken to Protect Personal Information by Company

Security of all information is of the utmost importance for CSA Group. CSA Group uses technical and physical safeguards to protect the security of your personal information from unauthorized disclosure. We current best-practice encryption algorithms to keep all information secure. We also make all attempts to ensure that only necessary people and third parties have access to personal information. Nevertheless, such security measures cannot prevent all loss, misuse or alteration of personal information and we are not responsible for any damages or liabilities relating to any such incidents to the fullest extent permitted by law. In the case of a data breach, we will notify you without delay of any loss, misuse or alteration of personal information that may affect you. We will notify relevant regulatory bodies within 72 hours of a breach.

We also require that our third party service providers and channel partners agree to keep all confidential information we share with them and to use the information only to perform their obligations in the agreements we have in place with them. These third party service providers and channel partners are expected to maintain privacy and security protections that are consistent with CSA Group’s privacy and information security policies.

Data Retention and Storage

CSA Group retains your information for business purposes, for as long as your account is active, and/or as long as is reasonably necessary to provide you with our products and services. CSA Group will also retain your information as reasonably necessary to comply with our legal obligations, resolve disputes and enforce our agreements. We may also retain cached or archived copies of your information for a reasonable period of time. At any point in time, you can withdraw consent and we will immediately stop processing your data.

Any personal information collected about EU data subjects via our websites is processed in Canada by CSA Group or by a third party acting on our behalf. When you provide personal information to CSA Group, you consent to the processing of your information in Canada or the United States of America. Our websites are hosted in United States of America.

Your rights

Contact Point to Update/Delete Personal Information

You have the right to access and limit the use and disclosure of your personal data. If you would like to express your point of view, challenge an explanation of data use, or otherwise obtain further information, contact [email protected]. If at any time after registering for information, your personal information changes or is inaccurate, you have the right to request changes, please notify us and we will update or correct your information. At any point in time, you can confirm your data is being processed and request to access your data. If you wish to access/confirm your data is being processed, please contact [email protected]. Please note, at any time, if you desire to obtain or transfer your information, we will provide you with your personal data in a structured and commonly used electronic format.

Right to Erasure

You have the right to request CSA Group erases all of your personal data on a number of grounds, including if the data is no longer necessary for its original purpose or if you withdraw consent. If CSA Group receives a request, we will inform all third parties who have the data of this request. For additional information on when you can request data erasure, please contact [email protected].

Right to Restrict Processing

Even if personal data is still stored by a company, now or in the future, you can request that CSA Group stops using or processing your data. If you wish to restrict data processing, please contact [email protected].

Right to Object

You have the right to object to your personal data being processed for profiling, direct marketing, scientific research, and statistics. If you wish to object, please contact [email protected].

Changes to this Privacy Policy

Any changes to this privacy policy will be posted here. Where there is a significant change to this Privacy Policy, we may also email all of our registered users with the details of the new changes, and where required by law, we will obtain your consent to these changes.

Questions and Contact information

CSA Group takes full responsibility for the management and confidentiality of the personal information it collects through its website. By providing this Privacy Policy, CSA Group pledges its continued commitment to protecting the information you give us. We regularly review our online information handling practices to ensure that we are abiding by this Privacy Policy. If you believe CSA is not abiding by this Privacy Policy or have concerns about CSA Group’s online information handling practices please contact us at [email protected]. Your concerns will be addressed promptly.