Privacy Policy

CANADA'S BEST STORE FIXTURES INC. ("Company," "we," "us," or "our") is a corporation organized under the laws of the Province of Ontario, with its registered office at 100 King Street West, Suite 3400, Toronto, Ontario, M5X 1A4, Canada.

This Privacy Policy describes how we collect, use, disclose, and otherwise handle personal information in connection with our website (the "Website") and the services, inquiries, and transactions facilitated through it (collectively, the "Services"). This Policy applies to all visitors, users, customers, and business contacts who interact with us through the Website or related digital channels (collectively, "you" or "your").

We are committed to handling personal information in a manner consistent with the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5 ("PIPEDA"), and applicable provincial privacy legislation, including, where applicable, Québec's Act respecting the protection of personal information in the private sector, CQLR c P-39.1, as amended by An Act to modernize legislative provisions as regards the protection of personal information ("Québec Privacy Law").

This Policy does not cover the practices of third parties whose websites or services may be linked from our Website. We encourage you to review the privacy policies of any third-party services you access.

We collect personal information through a variety of means in connection with our Website and Services. The categories of information we collect depend on the nature of your interaction with us.

When you interact with our Website or communicate with us, you may provide personal information directly, including:

• your name, job title, and professional affiliation;
• your email address, telephone number, and mailing address;
• the name of your business or organization;
• details of your inquiry, project specifications, or product interests, as submitted through contact forms, request-for-quote forms, or similar intake mechanisms on the Website;
• correspondence and communications you send to us; and
• any other information you choose to provide in the course of interacting with us.

When you visit our Website, certain information is collected automatically through cookies, server logs, and similar technologies. This may include:

• your Internet Protocol (IP) address and approximate geographic location;
• your browser type, operating system, device type, and screen resolution;
• referring and exit URLs, and the pages you visit on our Website;
• the date, time, and duration of your visit;
• clickstream data and interactions with Website features; and

information collected by cookies and similar tracking technologies, as described further in Section 5 below and in our Cookie Notice.

We may receive limited information about you from third-party sources, such as business referral partners or publicly available directories, in the ordinary course of our commercial activities. Where we do so, we handle that information in accordance with this Policy and applicable law.

We collect, use, and disclose personal information for the following purposes, in each case limited to what a reasonable person would consider appropriate in the circumstances:

• Responding to Inquiries: to receive, process, and respond to inquiries, quote requests, and other communications submitted through the Website or by other means;

• Providing Products and Services: to manage customer and business relationships, process orders, fulfill contracts, and deliver our products and services;

• Website Operation and Improvement: to operate, maintain, secure, and improve the Website, including monitoring performance, diagnosing technical issues, and analyzing usage trends;

• Analytics: to understand how visitors use our Website through aggregated and, in some cases, individual-level analytics, in order to improve the user experience and the effectiveness of our online presence;
• Marketing Communications: to send you information about our products, services, promotions, or industry developments where you have consented to receive such communications or where we are otherwise permitted to do so under applicable law;

• Legal and Regulatory Compliance: to comply with applicable legal obligations, respond to lawful requests from public authorities, and establish, exercise, or defend legal claims; and

• Business Operations: to support our general business administration, including internal record-keeping, auditing, and quality assurance.

We will not use or disclose personal information for purposes materially different from those described above without first obtaining your consent or as otherwise permitted or required by law.

We rely on your consent as a basis for collecting, using, and disclosing your personal information, except where the law permits or requires us to act without consent. Consent may be express (for example, when you submit a form on our Website) or implied (for example, when you provide your business card in a commercial context), depending on the sensitivity of the information and the reasonable expectations of the individual in the circumstances.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent, please contact us using the information in Section 13 below. Please note that withdrawing consent may affect our ability to provide certain Services to you, and we will advise you of any such implications at the time of your request.

For individuals located in Québec, please see Section 11 for additional information regarding consent requirements under Québec Privacy Law.

Our Website uses cookies and similar technologies to support its functionality, analyze usage, and, where applicable, facilitate marketing activities. Cookies are small data files placed on your device by your web browser when you visit a website.

We use the following general categories of cookies:

• Essential Cookies, which are necessary for the basic operation of the Website and cannot be disabled without impairing core functionality;
• Analytics Cookies, which help us understand how visitors interact with the Website by collecting information about pages visited, session duration, and similar metrics; and
• Marketing Cookies, which may be used to deliver relevant content or advertisements and to measure the effectiveness of marketing campaigns.

Some cookies are placed by third-party service providers that operate on our behalf or that provide analytics or advertising services. We describe these practices in further detail in our Cookie Notice, which is available at [Insert Link to Cookie Notice] and forms part of this Privacy Policy. The Cookie Notice explains the specific categories of cookies in use, their purposes and durations, and how you may manage your cookie preferences.

We do not sell personal information. We may share personal information with third parties in the following limited circumstances:

• Service Providers: We engage third-party service providers to assist with website hosting, data analytics, customer relationship management, email communications, payment processing, and other operational functions. These providers are given access to personal information only as necessary to perform services on our behalf, and are contractually required to handle such information in accordance with applicable privacy laws and this Policy.

• Professional Advisors: We may disclose personal information to our legal, accounting, and other professional advisors in connection with the management of our business.

• Legal Requirements: We may disclose personal information where required or permitted by law, including in response to a court order, subpoena, or other lawful request by a public authority, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

• Business Transactions: In the event of a merger, acquisition, reorganization, sale of assets, or similar transaction, personal information may be disclosed or transferred to the acquiring entity or its advisors as part of the due diligence or closing process, subject to applicable legal requirements.

We do not disclose personal information to third parties for their own independent marketing purposes without your express consent.

Our operations are primarily based in Canada. However, in the course of our business activities, personal information may be transferred to, stored in, or accessed from jurisdictions outside of Canada, including the United States. Such transfers may occur, for example, where we use service providers or cloud-based platforms with infrastructure located outside of Canada.

Where personal information is transferred outside of Canada, it may be subject to the laws and disclosure requirements of the jurisdiction in which it is held, including lawful requests by courts, law enforcement, or national security authorities. We take reasonable steps, including contractual measures, to ensure that personal information transferred internationally continues to be protected in a manner consistent with Canadian privacy standards. However, we cannot guarantee that foreign jurisdictions will provide the same level of protection as Canada.

For individuals located in Québec, transfers of personal information outside of Québec are made in accordance with the requirements of the Québec Privacy Law, including conducting a privacy impact assessment where required.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required or permitted by applicable law. Retention periods vary depending on the nature of the information and the purpose of collection. For example:

• information submitted through a contact form may be retained for the duration of the commercial relationship and a reasonable period thereafter;
• transactional records may be retained in accordance with applicable statutory limitation periods and tax or commercial record-keeping requirements; and
• analytics data collected through cookies is retained in accordance with the retention settings of the applicable analytics platform, and may be aggregated or anonymized for longer-term use.

When personal information is no longer needed for any identified purpose and is not subject to a legal retention requirement, it will be securely destroyed, erased, or anonymized.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. These safeguards are proportionate to the sensitivity of the information and the context in which it is held.

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security. We are not responsible for circumvention of any privacy settings or security measures on the Website.

Subject to applicable law and certain exceptions, you have the following rights with respect to your personal information:

• Access: You may request access to the personal information we hold about you, subject to limited exceptions under applicable law.
• Correction: You may request correction of personal information that is inaccurate or incomplete.
• Withdrawal of Consent: You may withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice.
• Complaint: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority if you believe your privacy rights have been infringed.

To exercise any of these rights, please contact us using the information set out in Section 13 below. We will respond to your request within the timeframes required by applicable law. We may require you to verify your identity before processing your request.

Where the Québec Privacy Law applies, the following additional provisions are relevant:

• We will obtain express consent for the collection, use, or disclosure of sensitive personal information, unless an exception under the Québec Privacy Law applies.

• Personal information will not be used for purposes incompatible with those identified at the time of collection without obtaining fresh consent.

• We will conduct a privacy impact assessment before disclosing personal information outside Québec, where required by the Québec Privacy Law.

• Individuals in Québec may have additional rights, including the right to data portability and the right to be informed of automated decision-making, to the extent applicable to our operations. At present, our Website does not make decisions based solely on automated processing that produce legal effects concerning individuals. Should this change, we will update this Policy accordingly.

• The person responsible for the protection of personal information within the Company may be contacted using the information in Section 13 below.

This Section 11 supplements, and does not replace, the balance of this Privacy Policy. Where there is a conflict between this Section and the general provisions of this Policy, the provision affording greater protection to the individual will prevail to the extent required by the Québec Privacy Law.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. Where changes are material, we will post the revised Policy on our Website with an updated "Last Updated" date and, where appropriate, provide additional notice (such as a prominent website notice or direct communication).

Your continued use of the Website following the posting of a revised Policy constitutes your acceptance of the changes, to the extent permitted by applicable law. We encourage you to review this Policy periodically.

If you have questions or concerns about this Privacy Policy or our handling of personal information, or if you wish to exercise any of your rights described herein, please contact us at:

CANADA'S BEST STORE FIXTURES INC. Attn: Privacy Inquiries 100 King Street West, Suite 3400 Toronto, Ontario M5X 1A4 Canada

Email: [email protected] Telephone: 1-888-792-0109

You may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca for information about your privacy rights under PIPEDA, or the Commission d'accès à l'information du Québec at www.cai.gouv.qc.ca for matters relating to Québec Privacy Law.