PRIVACY POLICY
“Groupe BMR”, which designation includes all subsidiaries and corporate entities directly and indirectly wholly owned by Sollio Cooperative Group in its Retail Division (hereinafter “BMR”, “we”, “us”, “our”), values the privacy of individuals. We are committed to respecting and protecting the privacy of users of the website www.bmr.ca and of any individual who communicates with us by e-mail, telephone or any other means of communication (hereinafter collectively the “Users”, “you”, “your”).
Purpose
The purpose of this Privacy Policy (the “Policy”) is to inform individuals about:
- How BMR collects, holds, uses, communicates and protects Personal Information, including by telephone, by e-mail, and on our website;
- The types of information we collect;
- Your rights with respect to this information.
When we use the term “Personal Information,” this includes any information about a natural person that directly or indirectly allows that person to be identified, including, but not limited to, name, postal and e-mail addresses, contact information, geolocation data, age, IP address, etc.
Certain information that we consider to be Personal Information for the purposes of this Policy may not be protected by applicable law, and you may not have the same rights with respect to such personal information. For example, in many provinces, business contact information such as name, title, position, address, e-mail address and workplace telephone number are excluded from the protections afforded by law.
When we use the term “processing” in relation to personal information, this means any collection, storage, access, use, disclosure, transmission, communication, destruction and anonymization of Personal Information, whether on our computer systems or in traditional paper files.
Scope of this Policy
The Policy applies when we process Personal Information of website Users and more generally, of customers, suppliers, business partners or the general public in the course of our marketing, commercial and organizational activities. This means that it does not apply to the processing of our employees’ Personal Information, nor to our recruiting activities.
When applying for a job online, please refer to our Privacy Policy—Recruiting.
If the User has not already done so, we ask that he or she read this Policy before using our Website or providing us with any Personal Information. If the User does not accept the terms of this Policy, the User is requested to cease using our Website and not to provide us with any Personal Information. We also recommend that the User consult this Policy from time to time, as it may be modified or updated from time to time, at our sole discretion.
This Policy supplements the General Terms of Use of the Website and applies to our Website www.bmr.ca and to information collected via that site, over the telephone or by any other means of communication and does not apply to any other information or website not owned or operated by us.
This Policy does not apply to:
- Transactions and/or other activities or interactions with third parties or their affiliated websites that are linked to or accessible via our Website;
- BMR stores operated by independent merchants or by corporate Cooperative members of Sollio Cooperative Group (including any activities or communications of these merchants).
- Information communicated to Groupe Lefebvre & Benoit, Les équipements d’Érablière C.D.L. or any other affiliate not bearing the BMR brand image.
What Personal Information do we collect about you and for what purposes?
In the course of your interaction with us, we may collect various types of Personal Information. Table 1 illustrates the purposes for which we collect Personal Information, and examples of Personal Information collected for these purposes.
Table 1: Type of Personal Information collected
|
Purposes of collection (objectives) |
Means/collection point (commonly used) |
Type of Personal Information (collected, created or inferred) |
|
Customer service* · To identify you when you communicate with us voluntarily and thus prevent errors and cases of fraud; · To provide you with the services you request and answer your questions; · To process orders and ensure appropriate delivery; To monitor the quality of customer service and provide appropriate training to Groupe BMR Inc. employees; To respond to your requests for information about our products and services
|
When identification data are required to process your request:
· Telephone (which may involve recording the conversation); · E-mail or any other means by which you communicate with us; · Online form, when you request certain information about our products and services offered via the Website.
|
· Last, first names · E-mail address · Postal address · Postal code · Phone number · Content of the service request or content of the discussion withBMR.
|
|
Browsing our website* The information needed
*For more details on our practices see the “Online navigation” section (below)
|
By your browsing our website
|
The information that your browser regularly shares with our website, such as · IP address · Language · Postal code · Accessibility · Data relating to preferences and to use of the Website and other data.
|
|
Purchase and return transactions Information provided when you fill out one of the forms available on our website:
· To sell a product, a service, or any other merchandise offered through our website
|
When the User places an order online by completing the necessary information via the relevant form on the website or by contacting us by telephone or e-mail.
|
The information required to place an order online:
Note: The following information is required for credit card payments. This information is collected by a third party, responsible for the payment service, on behalf of Groupe BMR. Please note that Groupe BMR does not have access to this data. For further information: Please refer to the Moneris and the PayPal privacy policies
|
|
Creating and managing a user account on bmr.ca* The information provided when creating a BMR customer account on the website:
|
By completing the form or modifying the account profile in the appropriate section of the Website. |
The information needed to log in and to manage your BMR customer account:
|
|
Newsletters, surveys, contests and other initiatives The information provided when you complete one of the forms available on our website, for the following purposes: Newsletters
· To share content articles and videos related to our business sectors; · To invite you to events.
Surveys · To respond to satisfaction surveys in order to improve our service and your experience.
Contests · To participate in contests, compliant and registered with RACJ (Québec) and other Ontario regulatory requirements.
Other initiatives · To request a quote for any BMR product, renovation project or installation service available from participating dealers. *For more details on our practices, see the “Newsletters, surveys, contests and other optional initiatives” section below.) |
Newsletters When you subscribe to our newsletters, by giving your consent in accordance with the CASTL anti-spam law (Bill C-28, 2010) or completing the appropriate forms. Others When you complete the appropriate forms.
|
Depending on the form and context, these data may be collected:
|
A few more details about our data collection:
Online navigation
1.Use of cookies and other tracking technologies
As is common practice on websites, we use session cookies (1st and 3rd (or similar)) and similar technologies to track our Users. A cookie is a small text file containing alphanumeric characters that is stored on the User’s computer and identifies the User’s browser individually. We also sometimes use cookies in conjunction with web beacons to help us track how Users navigate our website.
Cookies, web beacons, and similar website tracking technologies keep track of Users’ visits to our website and their preferences. They enable us to find out how our website is used and how we can improve it. Table 2 gives details on the use of cookies.
Table 2: Cookie categories
|
Types of cookies |
Purposes of data collection |
Data types |
|
Functional cookies – Mandatory
These cookies cannot be disabled, but they do not contain sensitive Personal Information
|
· Ensure that the website functions properly
|
· Browser type · Browser language · IP address · Date and time of visit · Pages visited · Device used · Information that the web browser regularly shares with websites
For example, we may record browser settings and Users’ unique identification numbers.
|
|
Analytical cookies |
· Enable our website to offer additional features and personal settings. · Prevent errors and fraud · Obtain information about your browsing habits · Measure your use of the bmr.ca site · Improve your browsing experience · Display information specific to the selected BMR merchant, i.e., price and inventory data based on geographical location
|
Same as above |
|
Advertising cookies
|
· Optimize the relevance of advertisements based on your profile and interests · Measure, track and limit ad frequency · Measure the effectiveness of an advertising campaign · Share the information collected with third parties, such as advertisers and our partners · Remember which (third party) websites you visit · Enable us to use services provided by third-party platforms (such as social networking platforms, search engines and other third-party websites, programmatic) and thus deliver demographically targeted advertising on these platforms. (In general, your receipt of advertisements on these platforms is governed by the privacy policy, terms of use and preference options provided by the provider of the platform in question.
|
Same as above |
2.Pixel tags
We may arrange for partners to set and use marketing and retargeting cookies telling them about your preferences and interests so that they can show you tailored advertising content later. Retargeting is a marketing method for displaying relevant content to a User who has already shown an interest in a product or service.
3.Third-party cookies
We may use third-party providers such as Google Analytics to analyze our website services. This type of provider may install cookies on the device of a User visiting our website. These cookies are managed by these suppliers who have their own privacy policies to which we refer you. You can always disable the advertising features of Google Analytics, including via the ads settings, mobile app ads settings or any other available means, by visiting the following page.
If you are unable to accept this use and refuse to provide information to Google Analytics, please click on the following link to proceed to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=en.
4.Browser settings
If the User does not wish to accept cookies, the “help” section of their browser toolbar will help them find out how to prevent their browser from accepting cookies, how to have their browser alert them when they receive a new cookie, or how to disable cookies altogether. However, if the User disables cookies, the User may be unable to take advantage of all the features of our Website.
You can modify your browser settings to refuse all session cookies.
5.Links to other websites
The Website may contain links to other websites not affiliated with us. Also, the User may have been directed to one of these websites by another website that is not operated by us. We are not responsible for the operation of these other sites or the information they collect about their visitors. If the User wishes to know how another site collects and uses his/her information, he/she is asked to consult the privacy policy of that site (refer to table 3, in the “Communications with third parties” section).
Newsletters, surveys, contests and other optional initiatives
When the User visits our Website, we may offer the User the opportunity to register to receive our newsletter or other promotional materials, or to have the User’s information shared with our divisions or partners. We may also request the User’s Personal Information in connection with certain customizable tools and features, surveys or contests that we may conduct from time to time. Whether or not to participate in such contests or surveys, and whether or not to provide Personal Information in order to benefit from such features, will always be at the User’s discretion. If the User chooses to receive our newsletters or other e-mail communications, he or she may subsequently choose to stop receiving them by activating the unsubscribe link included in each commercial e-mail we send or by contacting us.
How do we protect Personal Information?
We act in strict compliance with the privacy legislation applicable to us, including, for the province of Québec, the Civil Code of Québec and the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1).
We have implemented reasonable technical, administrative and physical security measures to protect your Personal Information. These take particular account of the data’s sensitivity, the purpose for which it is used, its quantity, distribution and medium. For example, we have put in place policies and guidelines setting out the framework for information security. In particular, they establish a framework for the protection of Personal Information, including guidelines for the retention and destruction of Personal Information. Our security measures include intrusion testing, 24 × 7 monitoring, access management and review, and vulnerability and risk management.
We use suppliers who implement appropriate measures to manage and protect the Personal Information entrusted to them.
We use commercially reasonable means to protect the integrity of our website and the confidentiality of information collected by any means. We also limit access to the Personal Information we collect to those persons for whom such information is required to fulfil the purposes described above. However, despite the security measures taken by BMR to keep Personal Information secure, there is uncertainty related to an illegal cyberattack by a third party who could steal Personal Information without BMR’s consent.
We have a policy against unauthorized disclosure or use of Personal Information, and we train our employees on this policy. Employees who violate this policy are subject to discipline.
Where do we store your Personal Information?
Although our servers are generally located in Canada, including those offering cloud services, we may host data outside Canada. We follow the principles applicable under Québec law with respect to data retention by Third Parties. However, we use Third Party service providers who may have servers located outside Québec.
When your Personal Information is located outside Québec, it may be subject to laws that differ from Canadian law and that do not provide the same protections as Canadian law. However, we compensate for this by requiring that we sign contractual agreements with our service providers to ensure that your Personal Information is adequately protected, particularly with respect to generally accepted Personal Information privacy principles.
How long do we keep your Personal Information?
We retain your Personal Information only as long as necessary for the fulfilment of the purposes identified in the context and to comply with our legal and regulatory obligations. BMR also retains Personal Information as long as required by applicable laws. If you would like to know more about how long we keep your Personal Information, please contact the BMR Privacy Officer listed below in the “Contact Us” section.
Sharing your Personal Information with third parties
From time to time, we may share your Personal Information with third-party service providers that we have appointed to provide services on our behalf, at our direction.
In Table 3 below, we have categorized these third parties and included explanations of how Personal Information is shared.
Table 3: Communications with third parties
|
Categories of third parties |
Explanations (purposes of sharing) |
|
IT service providers offering technology platforms and services
|
To operate our website and to help us collect, analyze and evaluate information or to provide other support services. To host and support the site’s technological platform. To enable various in-store and online transactions. To support the application and hiring process for candidates and employees. To provide simplified management and access to information on human resources management, payroll and other benefits.
|
|
Business partners (marketing/information technology) |
To analyze the results of the raw data collected by web tracking tools and other related forms (e.g., Google Analytics) To recommend improvements to the support, maintenance and evolution of our systems and technology platforms. To enable us to offer various related and value-added services to our customers, candidates and employees.
|
|
Data processing and storage companies
|
To host operational data for managing customer, subscriber, employee and candidate information. |
|
Suppliers offering support in processing your online orders, including transport and delivery services
|
To communicate customer information to ensure the preparation and processing of the purchase transaction and the shipment of the online order. To ensure the security of the purchase transaction.
|
|
Other Sollio and BMR entities (other than Groupe BMR Inc.) |
We may share Personal Information with companies that are part of or owned by Sollio Cooperative Group (divisions, subsidiaries), if necessary for accountability purposes. |
|
Law enforcement agencies |
We may be required to share your Personal Information by applicable law or its administration, for example if we receive a court order requiring us to share your Personal Information. If we receive such a request, we will check with our lawyers to ensure that we are required to share your Personal Information, and, if necessary, we will inform you before sharing such Personal Information. Where permitted by law, we may also share your Personal Information with law enforcement agencies in order to prevent, detect or suppress crime or the violation of any law. As such, we reserve the right to report any crime you commit in the course of your relationship with BMR. |
|
Government agencies
|
We share your Personal Information with government agencies when we are required to do so by law or to enable the administration of the law, for example for tax purposes. Government agencies are not suppliers of BMR; they treat your Personal Information in accordance with their own privacy policies. |
|
Survey management firms |
To measure customer satisfaction via various surveys (in-store and online); please also refer to Lanla’s privacy policy, https://lanla.com/privacy-policy/ to learn more about their data protection policy.
|
|
External business partners, part of our industry
|
To offer value-added services to our customers: · For the RenoAssistance service, please also refer to the https://www.renoassistance.ca/en/privacy-policy/ privacy policy
· For heat pump installation service, please also refer to the xxxx policy |
|
Organizations providing administrative and support services
|
To ensure smooth operations and the management of human and financial resources |
|
BMR independent merchants and stores connected with a cooperative affiliated with the Sollio Cooperative Group network
|
To prepare and process online orders
To join the 360 loyalty program |
From time to time, we may also disclose aggregated or de-identified data to third parties that does not contain Personal Information or other information about identifiable individuals.
We transmit only the information that is necessary to perform the specific tasks entrusted to our third-party suppliers. If we do provide Personal Information, this will be done on terms that prevent our business partners from making any independent commercial use of this information and from sharing this data with third parties or otherwise making it public unless the third party adequately discloses to you the processing they intend to do with your Personal Information for their own purposes in which case we refer you to the third party’s privacy policy regarding such processing. Otherwise, we ensure that we enter into agreements with these suppliers so that they undertake, among other things, to implement adequate security measures and to use your Personal Information only for the purposes for which we have communicated it to them.
In this context, it is possible that information may be communicated outside Québec. In such cases, we limit the disclosure of your Personal Information to such third parties to that which is reasonably necessary for the purpose or service for which the third-party service provider is engaged. Our agreements with third parties require them to provide a level of protection comparable to that of BMR when your Personal Information is processed by such third parties.
BMR may also share your Personal Information with third parties if required or permitted by law.
In addition, we may choose to disclose Personal Information without notice in response to law enforcement or governmental requests:
- to respond to subpoenas, court orders or administrative requests for information;
- to enforce our contract or property rights;
- to protect ourselves or others; or,
- when required or otherwise permitted by law.
For example, we may share information to reduce the risk of fraud or when someone uses or attempts to use our Website for illegal purposes.
As part of a business transaction and in compliance with applicable regulatory requirements, we may disclose your Personal Information as necessary, without your prior consent, for the purposes of completing the transaction. Your Personal Information will then be used only for the purposes of completing the business transaction. In addition, third parties to whom Personal Information is disclosed as a result of the business transaction will not be permitted to disclose your information without your consent, will be required to take appropriate measures to protect the confidentiality of the Personal Information and will be required to destroy the Personal Information if the business transaction is not completed. If the business transaction is completed, we will ensure that you are informed of the transaction and of the transfer, if any, of the Personal Information.
BMR does not share, give, rent or otherwise sell your personal information to third parties, unless we obtain your additional consent to do so.
Social media
If the User communicates or interacts with us via social media (for example, Twitter, Facebook, Instagram, LinkedIn or YouTube), the User is advised that any Personal Information that the User publicly submits through shares of our content, posts or comments mentioning bmr.ca or the content we post on social media may be read, collected or otherwise used by anyone who accesses this forum or who visits the URL of the web page on which the User’s content, post or comment is posted. We are not responsible for any use of this information by any third party and we refer the User to the applicable privacy rules for each of these social media
Minors
We do not knowingly collect information from children or others under the age of 18. If you are a minor under the age of 18, please do not provide us with any Personal Information without the express consent of a parent or guardian. If BMR obtains Personal Information from a person under the age of 18, we ask that the guardian or parent contact us.
Principle of limiting collection and use
We use your Personal Information only for the purposes disclosed at the time of collection and identified in Table 1 above. We limit the type of information we collect and use to that Personal Information necessary for these purposes.
Who has access to your Personal Information?
We restrict access to Personal Information collected to those employees to whom it is necessary to provide access in order to fulfill the processing purposes set out in this Policy.
Accuracy of Personal Information
BMR is required to take reasonable steps to ensure that the Personal Information it collects is accurate, complete and up-to-date.
To ensure that our records are as complete and accurate as possible, you are responsible for informing us of any relevant changes to your Personal Information, such as a change of name or a change of address or other contact information.
Your consent
By using our Website, the User consents to our collection, use and disclosure of certain anonymous information combined with his or her IP address in accordance with this Policy.
By providing us with Personal Information, the User consents to our collection, use and disclosure of such information for the purposes described in this Policy.
Furthermore, in order to ensure that we obtain specific, valid and informed consent, it is possible that, depending on the context and the degree of sensitivity of the information collected or inferred by BMR, we may also ask you to express your consent by an affirmative action prior to any collection. For example, this could take the form of an “I accept” box to be ticked, next to which BMR will have attached a link to this policy and/or disclosed all information required by applicable laws. In some cases, this could also take the form of a paper form to be signed.
BMR may obtain such consent from third parties, such as partners or suppliers.
Finally, if we choose to use Personal Information already in our custody for a purpose not identified at the time we originally collected the information, we will seek the consent of the Users concerned before using the information for this new purpose, unless obtaining such consent is not required by law in these specific circumstances.
Your rights regarding your Personal Information
Your rights with respect to your Personal Information depend on the laws applicable to you, which are usually determined by where you live. Whether or not you can legally exercise your rights depends on the law and the circumstances, but we will do our best to help you wherever possible.
In order to exercise your rights with respect to your Personal Information, please contact BMR’s Privacy Officer using the contact information given indicated below in the “Contact Us” section in order to receive a form indicating the information you must provide in support of your request to exercise your rights.
Withdrawal of consent
With the exception of retaining Personal Information as required by law, Users may withdraw their consent to all or part of the collection, use and disclosure of their Personal Information for one or more purposes at any time by giving us reasonable prior notice. The User’s choice to withdraw consent may affect BMR’s ability to provide products or services in connection with our Website. If the User prefers that we do not collect, use or disclose his/her Personal Information or that we do not use his/her Personal Information to contact him/her to promote our products and services, the User is requested to contact us. We will carry out the User’s instructions as quickly as possible, subject to contractual and legal restrictions, but we may not be able to immediately cease certain uses of the User’s information. The User is advised that withdrawal of consent may prevent us from providing certain services. For example, we cannot process an online order without the information required for this purpose.
Access, correction and deindexing
You have the right to obtain confirmation that Personal Information is held, you have the right to access your Personal Information, and to rectify it when it is out of date, incomplete or inaccurate, depending on the circumstances. You have the right to request that we stop disseminating information about you, de-index it or re-index it under certain conditions, for example, when the dissemination of the information contravenes the law or a court order. You can help BMR maintain the accuracy of your information by notifying BMR of any necessary changes.
Complaints
You may also file complaints about how we handle your Personal Information, or any concerns about your privacy, directly with BMR’s Privacy Officer. We will treat your complaint seriously and take appropriate action.
To make a complaint, you may contact BMR’s Privacy Officer and indicate that you wish to file a complaint. The Officer will then send you a complaint form. The complaint will be handled by the Privacy Officer. Unless there are exceptional circumstances, a decision on your complaint will be made within a period provided for by law or within a reasonable time following the filing of the complaint. There will be no discrimination or retaliation against any individual who files a complaint. There will be no discrimination or retaliation against any employee who files a complaint.
Please note, however, that filing a complaint with the Privacy Officer does not suspend the time limits for exercising the remedies provided by law.
Moreover, you should know that you have the right to contest our decision or lodge a complaint with the competent authorities.
In Québec, you can contact the Commission d’accès à l’information through www.cai.gouv.qc.ca or directly at:
|
Québec |
Montréal |
Contact us
If the User has any questions or complaints about our Personal Information practices or about the practices of third-party service providers, or if the User wishes to have his or her information removed from our database, withdraw his or her consent to the collection, use and disclosure of his or her Personal Information, access or correct his or her Personal Information, or remove himself or herself from any future communication lists, the User is requested to inform us accordingly by contacting BMR’s Privacy Officer at one of the following addresses: [email protected] or at the following postal address
Postal address:
Attention: Privacy Officer
Groupe BMR Inc.
1501 rue Ampère, Suite 200
Boucherville QC J4B 5Z5
Updates
Our business and the laws that govern us change from time to time, and we reserve the right to modify the present Policy. If we change this Policy, we will post the revised version on this Website.
Last update: June 2023