Most recently amended January 24, 2018.

Our commitment to privacy: CrossBorderShopping.ca, a division of Cross Border Media Inc. (“We”, “Us”, “Our”, etc..) knows that protecting the privacy and confidentiality of your personal information is important to you. This Privacy Policy governs the collection, use and disclosure of your personal information in any form, whether written or electronic, by Us, Our affiliates, partners and subsidiaries. The collection, use and disclosure of your personal information is governed by the Personal Information Protection and Electronic Documents Act (the “Act”), and any applicable provincial legislation. This Privacy Policy explains what personal information may be collected from you and how it is used. It also explains how you can ask questions, make suggestions, and express concerns about our privacy practices.

Scope And Application Of The Company Privacy Policy (the “Privacy Policy”):

The scope and application of the Privacy Policy is as follows:

The Privacy Policy applies to Personal Information about Our Employees and non-employee Persons who interact with Us that is collected, used or disclosed by Us.

• Employees in this context includes Our past and present employees and independent contractors.

• Non-employee Persons in this context includes Individuals who are viewers, readers, subscribers, advertisers, account holders and Internet users who are exposed to the Our media content or the media content of any of our affiliates, partners or subsidiaries and about whom We collect Personal Information.

The Privacy Policy applies to the management of Personal Information in any form whether oral, electronic or written. We reserve the right to amend this Privacy Policy from time to time, at our sole discretion.

The application of the Privacy Policy is subject to the requirements or provisions of any applicable legislation, regulations or agreements, or the order of any court or other lawful authority.

Exclusions from privacy protection: The Privacy Policy does not impose any limits on the collection, use or disclosure of the following information by Us: a) information that is publicly available, such as a Person’s name, address, telephone number and electronic address, when listed in a directory or made available through directory assistance; b) business-contact information, such as the name, title or business address or telephone number of an employee of an organization; or c) aggregate information that cannot be associated with a specific person, such as demographic statistics about Our visitors, users, customers, advertisers, partners or number of visitors and average time spent on Our websites.

Purposes for Collection of Personal Information:

We have collected and collect Personal Information for the following purposes: a) to establish and maintain responsible commercial relations with Individuals and to provide ongoing service; b) to understand Individual needs; c) to develop, enhance, market or provide products and services; d) to manage and develop Our business and operations, including personnel and employment matters; e) to meet legal or regulatory requirements, including to protect or defend a legal interest; and f) in connection with an actual or possible corporate re-organization, merger or amalgamation with another entity, or an actual or possible sale of all or a substantial portion of Our shares or assets, provided that the Personal Information disclosed continues to be used by the entity acquiring the information either for evaluation of the possible transaction, or, on completion of any such transaction, for the purposes permitted by this Privacy Policy.

As examples of the above:

i)              We may from time to time use a Person’s Personal Information to contact the Person about changes, enhancements or similar notices related to Our products and services;

ii)             if a Person indicated that he/she was interested in receiving offers or information from Us or certain of our selected sponsors or advertisers, We may send the Person materials about products and services that We feel may be of interest to the Person; and

iii)            if a Person enters a contest or other promotion offered by Us, We may, under the rules of the promotion, use the Person’s name and certain other information to administer the promotion, such as contacting, announcing and promoting the winners of the promotion.

Sale of Business:

We may transfer your Personal Information to another entity that has acquired some or all or Our stock or assets, a member of Our family of businesses, or one of Our operating divisions, for example, as the result of a sale, merger, or reorganization, insolvency, dissolution or liquidation. If such a transfer occurs, the acquiring entity’s use of your personal information will still be subject to this Privacy Policy.

Obtaining Consent:

Company will make a reasonable effort to make sure Persons understand how their Personal Information will be used by Us. We will obtain consent from Persons before or when we collect the Personal Information.

A Person’s consent can be express, implied, or given through an authorized representative. A Person can withdraw consent at any time, with certain exceptions noted herein. We, however, may collect, use or disclose Personal Information without the Person’s knowledge or consent in exceptional circumstances where such collection, use or disclosure is permitted or as required by law.

If any Person at any time has any questions or concerns about Company’s privacy practices, the Person can either:

i) write to Us at Cross Border Media Inc., 188 Cleveland Street, Toronto, ON, M4S 2W6; or

ii) provide information to Us through the contact form located here.

Refusing or withdrawing Consent:

Subject to legal and contractual requirements, a Person can refuse to consent to Our collection, use or disclosure of Personal Information about the Person, or a Person may withdraw the Person’s consent to Our further collection, use or disclosure of Personal Information at any time in the future by giving Us reasonable notice, unless: i) the consent relates to certain information required for credit approval which a Person applies for or accepts, ii) the consent is otherwise required by law or iii) the use or disclosure is permitted by law or is related to the legal or regulatory requirements described herein. If a Person refuses or withdraws the Person’s consent, We may not be able to provide the Person or continue to provide the Person with some products, services or information which may be of value to the Person.

If you no longer wish to receive our emails you can Unsubscribe using the link located in the footer of our emails.

Internet Aspects:

Personal Information may be collected by Us or third-party service providers on Our behalf. Although information collected, used or disclosed on the Internet as described below often does not constitute Personal Information (and to the extent that such is the case, then the obligations under the Privacy Policy do not extend to such information), We provide the details below about Internet aspects of Our Services for the purposes of disclosure about Our Services.

Internet Protocol Address (IP Address)
When the user’s web browser requests a web page from another computer on the Internet, it automatically gives that computer the address where it should send the information. This address is called the computer’s “IP address.” For most users accessing the Internet from a dial-up Internet service provider (ISP), the IP address will be different every time the user logs on.

We may use the user’s IP Address to:

• facilitate the diagnosis and remedy of a technical problem reported by the user’s or Our technical team.

• display (or allow the display by Third Party advertising providers of) more appropriate and relevant content and advertising, such as content and advertising based on the user’s geographic area, demographic profile and site session behaviour.

• estimate user traffic from specific countries or organizations. Many IP addresses are commonly associated with Internet service providers, universities, or major corporations in specific regions or localities. Aggregate information derived from IP addresses may also be reported to advertisers.

Cookies
A cookie is a small text file, which often includes an anonymous unique identifier, that is sent to the user’s web browser from a website’s computers and is stored on the user’s computer’s hard drive. Cookies cannot be used to run programs or deliver viruses to a user’s computer.

We may use cookies to:

• improve the operation and performance of Our Services and to make Our Services easier and more convenient to use. For example, cookies help Us provide more personalized services by recalling user preferences on subsequent visits (e.g. language preference). Cookies also allow Us to save passwords and preferences for a user so that the user will not have to re-enter them on the next visit to a Our Site;

• measure aggregate user traffic and demographic statistics related to Our Services and advertisements (e.g. number of users, average time spent, average age and similar statistics). This information helps Us to better understand when to update, change or offer new services and provides Us with details as to the performance of Third Party advertisements and content. This information may be reported, in aggregate form only, to Our current and prospective sponsors, advertisers and business partners. No Personal Information will be disclosed in such reports;

• display advertisements. We and Third Party advertising providers may use cookies when serving advertisements on Our Sites. In some cases, advertisements from Third Party advertisers are delivered to users (in conjunction with Our Services) by such Third Party advertisers, or by separately contracted advertising providers on their behalf, and not by Us; as such, the Third-party advertisers’ use of cookies is subject to their own privacy policies, not the Privacy Policy, and users should consult the privacy policies of such Third Party advertisers.

Most browsers are initially set up to accept cookies. If a user prefers, the user can reset his/her browser either to notify the user when the user has received a cookie, or to refuse to accept cookies. The user should understand that while We do not require a user to use cookies, some of Our Services will not function properly if a user sets his/her browser to not accept cookies.

Web Beacons
Some of Our Services may contain electronic images known as Web beacons – sometimes called single-pixel gifs – that allow Us to count users who have visited those pages and to deliver co-branded services. Web beacons are not used to access Personal Information; they are a technique used to compile aggregated statistics about Our service usage. Web beacons collect only a limited set of information including a cookie number, time and date of a page view, and a description of the page on which the Web beacon resides. Some of Our Services web pages may also contain Web beacons placed there by Our advertising partners to help Us determine the effectiveness of Our Internet advertising campaigns.

Links To Other Sites And Advertisements
Our Services may contain links to other websites and services. While We try to link only to sites and services that share Our high standards and respect for privacy, a user should understand that We are not responsible for the content of, or the privacy practices employed by, other companies or websites. This Privacy Policy applies only to Our Services related to this Privacy Policy.

Many of the advertisements which are displayed in connection with Our Services are served through one or more Third Party advertisement-serving companies which deliver the advertisements to users in conjunction with Our Services. For more information about what information is collected and how information is used by a Third Party advertising provider click here.

Additional Information
We automatically collect certain information about the user’s computer hardware and software. This information may include: browser type, operating system type, domain names, access times and referring website addresses. This information is used by Us to operate Our Services, to maintain the quality of Our Services, and to provide general statistics regarding use of Our Sites.

Some of Our Services may be co-branded and offered in conjunction with another company. If a user registers for or uses such services, both Us and the other company may receive information collected in conjunction with the co-branded services.

Privacy Policies in Detail

Definitions

We, Us and Our – all current and future companies providing communications services under Cross Border Media Inc., CrossBorderShopping.ca and related brands, including their affiliates, subsidiaries, and any successor company or companies thereof, as a result of corporate reorganization, restructuring or sale.

Collection – the act of gathering, acquiring, recording or obtaining Personal Information from any source, including third parties, by any means.

Consent – voluntary agreement with the collection, use and disclosure of Personal Information for defined purposes. Consent can be either express or implied and can be provided directly by the Person or by an authorized representative. Express consent can be given orally, electronically or in writing but is always unequivocal and does not require any inference on Our part. Implied consent is consent that can reasonably be inferred from a Person’s action or inaction.

Disclosure – making Personal Information available to a Third Party.

Employee – an employee or independent contractor (including freelancers)1 of Our’s.

Individual – an individual other than an Employee who (a) corresponds with Us, including complaints and including applications for employment; (b) enters a contest offered or sponsored by Us; or (c) uses, or applies to use, Our products or services.

Person – an Employee or an Individual.

Personal Information – information about an identifiable Person, but not: a) information that is publicly available, such as a Person’s name, address, telephone number and electronic address, when listed in a directory or made available through directory assistance; b) business-contact information, such as the name, title or business address or telephone number of an employee of an organization; or c) aggregate information that cannot be associated with a specific person, such as demographic statistics about Our customers, or number of visitors and average time spent on a website.

Third Party – a person other than the Person or his agent, or an organization other than Us or our Affiliates.

Use – the treatment, handling, and management of Personal Information by Us.

Principle 1 – Accountability

We are responsible for Personal Information under Our control and shall designate one or more persons who are accountable for Our compliance with the following principles.

a)    Responsibility for ensuring compliance with the provisions of the Privacy Policy rests with Our senior management, which shall designate one or more persons to be accountable for compliance with the Privacy Policy. Other people may be delegated to act on behalf of the designated person(s) or to take responsibility for the day-to- day collection and processing of Personal Information.

b)    We have designated a Chief Privacy Officer to oversee compliance with the Privacy Policy. The Chief Privacy Officer can be contacted at Chief Privacy Officer, Cross Border Media Inc., 188 Cleveland Street, Toronto, Ontario, M4S 2W6.

c)    We are responsible for Personal Information in Our possession or control, including information that has been transferred to a Third Party for processing. We shall use appropriate means to provide a comparable level of protection while information is being processed by a Third Party (see Principle 7).

Principle 2 – Identifying Purposes for Collection of Personal Information

We have collected and collect Personal Information for the purposes set out below, and shall identify the purposes for which Personal Information is collected at or before the time the information is collected.

a)    We have collected and collect Personal Information for the following purposes: a) to establish and maintain responsible commercial relations with Individuals and to provide ongoing service; b) to understand Individual needs; c) to develop, enhance, market or provide products and services; d) to manage and develop Our business and operations, including personnel and employment matters; e) to meet legal or regulatory requirements, including to protect or defend a legal interest, and f) in connection with an actual or possible corporate re-organization, merger or amalgamation with another entity, or an actual or possible sale of all or a substantial portion of Our shares or assets, provided that the Personal Information disclosed continues to be used by the entity acquiring the information either for evaluation of the possible transaction, or, on completion of any such transaction, for the purposes permitted by this Privacy Policy.

As examples of the above:

i)                  We may from time to time use a Person’s Personal Information to contact the Person about changes, additions, enhancements or similar notices related to Our products and services;

ii)                 if a Person indicated that he/she was interested in receiving offers or information from Us or certain of our selected sponsors or advertisers, We may send the Person materials about products and services that We feel may be of interest to the Person; and

iii)                if a Person enters a contest or other promotion offered on one of Our websites, We may, under the rules of the promotion, use the Person’s name and certain other information to administer the promotion, such as contacting, announcing and promoting the winners of the promotion.

Further references to “identified purposes” mean the purposes identified in this Principle 2.

b)    We shall specify orally, electronically or in writing the identified purposes to the Person at or before the time Personal Information is collected. Upon request, persons collecting Personal Information shall explain these identified purposes or refer the Person to a designated person who shall explain the purposes.

c)    Unless required by law, We shall not use or disclose, for any new purpose, Personal Information that has been collected without first identifying the new purpose and obtaining the consent of the Person.

Principle 3 – Obtaining Consent for Collection, Use or Disclosure of Personal Information

The knowledge and consent of a Person are required for the collection, use or disclosure of Personal Information, except where inappropriate.

a)    Generally, We shall seek consent to use and disclose Personal Information at the same time it collects the information. However, We may seek consent to use and disclose Personal Information after it has been collected but before it is used or disclosed for a new purpose.

b)    In obtaining consent, We shall use reasonable efforts to ensure that a Person is advised of the identified purposes for which Personal Information will be used or disclosed. Purposes shall be stated in a manner that can be reasonably understood by the Person.

c)    We will require Individuals to consent to the collection, use or disclosure of Personal Information as a condition of the supply of a product or service only if such collection, use or disclosure is required to fulfill the identified purposes.

d)    In determining the appropriate form of consent, We shall take into account the sensitivity of the Personal Information and the reasonable expectations of the Persons.

e)    In general, the use of products and services by an Individual, or the acceptance of employment or benefits by an Employee, constitutes implied consent Us to collect, use and disclose Personal Information for all identified purposes.

f)     An Individual may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Individuals may contact Us for more information regarding the implications of withdrawing consent.

g)    In certain circumstances Personal Information can be collected, used or disclosed without the knowledge and consent of the Person. For example, We may collect or use Personal Information without knowledge or consent if it is clearly in the interests of the Person and consent cannot be obtained in a timely way, such as when the Person is a minor, seriously ill or mentally incapacitated. “We may from time to time engage outside suppliers, including technology providers.”

We may also collect, use or disclose Personal Information without knowledge or consent if seeking the consent of the Person might defeat the purpose of collecting the information such as in the investigation of a breach of an agreement or a contravention of a federal or provincial law.

We may also use or disclose Personal Information without knowledge or consent in the case of an emergency where the life, health or security of an individual or property is threatened.

We may disclose Personal Information without knowledge or consent to collect a debt, to comply with a subpoena, warrant or other court order, or as may be otherwise related to the legal or regulatory requirements described herein.

We, Our outside suppliers and other third parties to whom We disclose information under this policy may perform activities outside of Canada. As a result, your information may be securely used, stored or accessed in other countries and may be subject to the laws of those countries. For example, information may be disclosed in response to valid demands or requests from government authorities, courts, or law enforcement in these countries.

Principle 4 – Limiting Collection of Personal Information

We shall limit the collection of Personal Information to that which is necessary for the purposes identified by Us. We shall collect Personal Information by fair and lawful means.

a)    We collect Personal Information primarily from Individuals or Our Employees.

b)    We may also collect Personal Information from other sources including credit bureaus, employers or personal references, or other third parties that represent that they have the right to disclose the information.

Principle 5 – Limiting Use, Disclosure and Retention of Personal Information

We shall not use or disclose Personal Information for purposes other than those for which it was collected, except with the consent of the Person or as required by law. We shall retain Personal Information only as long as necessary for the fulfillment of the purposes for which it was collected.

a)    In certain circumstances Personal Information can be collected, used or disclosed without the knowledge and consent of the Person. (See Principle 3g)

b)    In addition, We may disclose a Person’s Personal Information to: a) another person for the development, enhancement, marketing or provision of any of Our products or services; b) a person who, in Our reasonable judgment, is seeking the information as an agent of the Person; c) Our affiliates, subsidiaries and related entities to permit the provision of services requested by the Person, and d) a Third Party or Third Parties, where the Person consents to such disclosure or disclosure is required by law.

c)    We may disclose Personal Information about Our employees: a) for normal personnel and benefits administration; b) in the context of providing references regarding current or former employees in response to requests from prospective employers; or c) where disclosure is required by law.

d)    Only those Employees who require access for business reasons, or whose duties reasonably so require, or are Our properly designated representatives, are granted access to Personal Information about Individuals and Employees.

e)    We shall keep Personal Information only as long as it remains necessary or relevant for the identified purposes or as required by law. Depending on the circumstances, where Personal Information has been used to make a decision about a Person, We shall retain, for a period of time that is reasonably sufficient to allow for access by the Person, either the actual information or the rationale for making the decision.

f)     We shall maintain reasonable and systematic controls, schedules and practices for information and records retention and destruction which apply to Personal Information that is no longer necessary or relevant for the identified purposes or required by law to be retained. Such information shall be destroyed, erased or made anonymous.

Principle 6 – Accuracy of Personal Information

Personal Information shall be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.

a)    Personal Information used by Us shall be sufficiently accurate, complete and up-to-date to minimize the possibility that inappropriate information may be used to make a decision about a Person.

b)    We shall update Personal Information about Persons as and when necessary to fulfill the identified purposes or upon notification by the Person.

Principle 7 – Security Safeguards

We shall protect Personal Information by security safeguards appropriate to the sensitivity of the information.

a)    We shall protect Personal Information against such risks as loss or theft, unauthorized access, disclosure, copying, use, modification or destruction, through appropriate security measures. We shall protect the information regardless of the format in which it is held.

b)    We shall protect Personal Information disclosed to third parties by contractual agreements stipulating the confidentiality of the information and the purposes for which it is to be used.

c)    All of Our Employees with access to Personal Information shall be required as a condition of employment to respect the confidentiality of Personal Information.

Principle 8 – Openness Concerning Policies and Practices

We shall make readily available to Persons specific information about its policies and practices relating to the management of Personal Information.

a)    We shall make information about its policies and practices easy to understand, including: a) The title and address of the person or persons accountable for the compliance with the Privacy Policy and to whom inquiries or complaints can be forwarded; b) The means of gaining access to Personal Information held by Us; and c) A description of the type of Personal Information held by Us, including a general account of its use.

b)    We shall make available information to help Persons exercise choices regarding the use of their Personal Information.

Principle 9 – Access to Personal Information

We shall inform a Person of the existence, use and disclosure of his or her Personal Information upon request and shall give the Person access to that information.

A Person shall be able to challenge the accuracy and completeness of the Personal Information and have it amended as appropriate.

a)    Upon request, We shall afford to a Person a reasonable opportunity to review the Personal Information in the Person’s file. Personal Information shall be provided in understandable form within a reasonable time and at minimal or no cost to the Person.

b)    In certain situations, We may not be able to provide access to all of the Personal Information that they hold about a Person. For example, We may not provide access to information if doing so would likely reveal Personal Information about a Third Party or could reasonably be expected to threaten the life or security of another person. Also, We may not provide access to information if disclosure would reveal confidential commercial information, if the information is protected by solicitor-client privilege, if the information was generated in the course of a formal dispute resolution process, or if the information was collected in relation to the investigation of a breach of an agreement or a contravention of a federal or provincial law, or if the information was collected as part of journalistic, literary or artistic activities. If access to Personal Information cannot be provided, We shall provide the reasons for denying access upon request.

c)    Upon request, We shall provide an account of the use and disclosure of Personal Information and, where reasonably possible, shall state the source of the information. In providing an account of disclosure, We shall provide a list of organizations to which it may have disclosed Personal Information about the individual when it is not possible to provide an actual list.

d)    In order to safeguard Personal Information, an individual or employee may be required to provide sufficient identification information to permit Us to account for the existence, use and disclosure of Personal Information and to authorize access to the individual’s file. Any such information shall be used only for this purpose.

e)    We shall promptly correct or complete any Personal Information found to be inaccurate or incomplete. Any unresolved differences as to accuracy or completeness shall be noted in the Person’s file. Where appropriate, We shall transmit to third parties having access to the Personal Information in question any amended information or the existence of any unresolved differences.

f)     A Person can obtain information or seek access to his or her Personal Information by contacting a designated representative at Our principal office.

g)    An employee can obtain information or seek access to his or her Personal Information by contacting his or her immediate supervisor.

Principle 10 – Challenging Compliance

A Person shall be able to address a challenge concerning compliance with the above principles to the designated person or persons accountable for Our compliance with the Privacy Policy.

a)    We shall maintain procedures for addressing and responding to all inquiries or complaints from Persons about Our handling of their Personal Information. If any Person at any time has any questions or concerns about Our privacy practices, the Person can either:

i)      write to Us at Cross Border Media Inc., 188 Cleveland Street, Toronto, ON, M4S 2W6; or

ii)     provide information to Us through the form located here.

b)    We shall inform Persons about the existence of these procedures as well as the availability of complaint procedures.

c)    The person or persons accountable for compliance with the Our Privacy Policy may seek external advice where appropriate before providing a final response to individual complaints.

d)    We shall investigate all complaints concerning compliance with Our Privacy Policy. If a complaint is found to be justified, We shall take appropriate measures to resolve the complaint including, if necessary, amending its policies and procedures. A Person shall be informed of the outcome of the investigation regarding his or her complaint.