About this Privacy Policy
At Community Natural Foods (“CNF”, “we”, “us”), we are committed to maintaining the accuracy, confidentiality, and security of your personal information. With that in mind, we have adopted the following practices to safeguard your personal information and ensure your privacy is maintained.
This Privacy Policy tells you about how we use, protect and disclose personal information that we have collected using both offline means (e.g. via phone, mail, in-person meetings and other correspondence) and online means, such as when our website is accessed or applications owned or operated by CNF are used, including communitynaturalfoods.com and its local sub-domains and mobile applications, including the CNF Mobile App (collectively, the “Websites and Applications”).
The Website and Applications may contain links to other third-party websites or applications. Please be aware that these third-party websites and applications may collect personal information and may have their own privacy notices or policies.
To the extent any linked websites or applications visited are not owned and operated by CNF, please be aware that we are not responsible or liable for the websites’ or applications’ content, and any use of the websites or applications would be subject to the privacy and security practices and policies of those websites or applications.
What is Personal Information?
For the purposes of this Privacy Policy, personal information is any information about an identifiable individual, and as defined by applicable privacy legislation.
Who Collects Personal Information on our Behalf?
What Personal Information do we Collect?
We may collect the following personal information. Please note that we may combine personal information collected from one source with personal information we have collected from other sources.
We collect personal information voluntarily provided to us directly or through our processors, such as when you apply for a membership online or in-person, register for an account on our Websites and Applications, or when purchasing products or services. This personal information may include:
Use of Websites and Applications
When you access our Websites and Applications, we may collect certain information about your activity such as IP address, browser type and language and access times during your visit. This may be through automatic data collection tools which may include cookies. For more information about cookies please see the section below titled “Cookies and Similar Technologies”.
Correspondence
We collect personal information when we engage in correspondence, and we will typically keep a record of such correspondence. This correspondence may include contacting us for support. This personal information may include name and contact information, service information, queries, and other personal information provided to us.
Credit and anti-fraud information
We may collect personal information relating to your financial situation, your credit worthiness or any criminal or fraudulent activities provided to us by you or third parties, including information which establishes your identity, information about transactions, credit ratings from credit reference agencies, fraud, offences, and suspicious transactions, where your details are included.
Social media information
We maintain presences on social media platforms including, but not limited to Facebook, Twitter, Instagram, YouTube, Pinterest and LinkedIn. We collect personal information when individuals interact with us on social media. Please note that these social media platforms may set cookies and other tracking technologies on a device when their pages are visited. The output of such information may be provided to us (i.e. for statistical purposes to see how users interact with our content on social medial platforms). Information about how the social media platforms collect and use personal information can usually be found in their respective privacy policies and cookies policies on their websites.
Survey and contest / sweepstake information
We collect personal information where you complete surveys that we may use for research purposes, and where you choose to enter into contests / sweepstakes that we run. This personal information may include your name and contact information and other personal information you may choose to provide us.
Employment
When applying for employment with CNF, we are provided with contact information, questions or comments about the job posting, as well as personal information set out in a resume, including educational and employment history. We use this information to review the application and suitability for current employment opportunities, as well as to contact individuals with respect to employment opportunities. We may also be provided with additional personal information through communications as part of the job application process.
Collection and use of public information
We may also collect, use, store, transfer, share, and disclose personal information that is publicly available for the purposes set out in this privacy policy, to the extent allowable by applicable privacy laws.
Why do we use personal information?
We may use your personal information for a variety of business purposes, which we have set out below.
To conduct our business and provide our services and access to our Websites and Applications
To conduct our business, including to enable use of our services and Websites and Applications, to respond to queries, to carry out our obligations arising from any agreements entered into, and to contact customers or potential customers in connection with the foregoing. This includes processing and fulfilling your purchases and orders, returns and exchanges and providing you with information and updates relating to your orders and your account.
To manage your membership and accounts
To establish, maintain and manage your membership with CNF, to establish, maintain and manage your account(s) on our Websites and Applications, and to fulfil your benefits that are associated with your use of our services.
To provide communications (about updates and changes) and provide customer support
To communicate about updates to our terms, services and Websites and Applications and to provide customer support and to respond to requests, comments, questions, or concerns, and to contact customers or potential customers if we have any issues with respect to same. Such communications are provided by various means, including emails, telephone and SMS. Calls may be recorded for training and monitoring purposes.
Where you subscribe to an online service, the accompanying emails similarly include a pixel. We track your interaction with these emails and our online services to validate attendance for accreditation purposes, to help determine which information is of interest to you and to customise the advertisements you see on our Websites and Applications. If you do not wish the pixel to be downloaded to your device, you may opt-out of email marketing or review emails in plain text format.
To facilitate payments
To take and process payment from you when you purchase products and services from us in-person or online on our Websites and Applications, and to provide you with refunds.
In relation to fraud prevention
To prevent fraud as may be required by applicable law and regulation and best practice at any given time. If false or inaccurate information is provided and fraud is identified or suspected, details may be passed to fraud prevention agencies and may be recorded by us or them.
To allow you to use interactive features of the Websites and Applications
To allow you to post a testimonial, review or comment. Please note that such testimonial, review or comment may be read, collected and used by anyone.
To ensure our Websites and Applications content is relevant and to maintain the security of our Websites and Applications
To ensure that content from our Websites and Applications is presented in the most effective and secure manner.
For research and development purposes
To analyse personal information in order to better understand our services and our customers’ services and marketing requirements, and to better understand our business and develop our services and Websites and Applications. In order to do this, we may apply profiles based on personal information and behavioural information. Such profiles may be used as part of our advertising, analytics, security and provision of support and we may also anonymise and aggregate such personal information.
To administer contests / sweepstakes
Where you have entered into contests / sweepstakes, we will use your personal information to manage and administer such contests / sweepstakes, including to award you with any applicable prizes.
To provide marketing materials
To provide updates and offers, where customers or potential customers have chosen to receive these. We may also use personal information for marketing our own and our selected business partners’ products and services by mail, email, SMS and phone and fax. We may also use personal information to market via social media. Where required by law, we will ask for consent at the time we collect the personal information to conduct these types of marketing and provide an option to unsubscribe or opt-out of further communication on any electronic marketing communication sent or you may opt-out by emailing CustomerCare@mycnf.com with a request to be removed.
Please also note that our marketing related emails may contain a campaign-unique “web beacon pixel” to tell us how you interact with our communications. We may use this information for purposes including determining which of our emails are more interesting to you and to query if you should continue receiving emails if you do not open them. The pixel will be deleted when you delete the email. If you do not wish the pixel to be downloaded to your device, you should opt-out of email marketing or review emails in plain text format.
Websites and Applications analytics
To understand and analyse online experiences and to determine what events, products and services are likely to be of interest, we may combine visitor session information or other information collected through tracking technologies with personal information.
Our Websites and Applications may use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Further information about Google’s privacy policy may be obtained from http://www.google.com/privacy.html.
To enforce our terms and in connection with legal or regulatory obligations
We may process personal information to enforce our terms and to comply with our legal and regulatory requirements or dialogue with regulators / judicial proceedings / court orders as applicable which may include disclosing personal information to third parties, the court service and / or regulators or law enforcement agencies in connection with enquiries, proceedings or investigations by such parties anywhere in the world or where compelled to do so.
To reorganise or make changes to our business
In the event that we: (i) are subject to negotiations for the sale of our business or part thereof to a third party; (ii) are sold to a third party; or (iii) undergo a re-organisation, we may need to transfer personal information to the relevant third party (or its advisors) as part of any due diligence process for the purpose of analysing any proposed sale or re-organisation. We may also need to transfer personal information to that re-organised entity or third party after the sale or reorganisation for them to use for the same purposes as set out in this policy.
We use browser tracking cookies (or “cookies”), which are small text files that are placed on the hard disk of a computer by a website. Cookies are uniquely assigned to you, and can only be read by a website or web server that issued the cookie to you. We also use browser “log files” which record certain information when you visit a website, including your IP address.
To improve your experience on our services, we use cookies and log files to: recognize you when you return to our Websites and Applications and use our services; keep track of activity on our services and remember what items you have clicked on or viewed; study how you navigate through our Websites and Applications and which you request in site searches so that we can improve the design, content and function of our services; and customize the message, content and delivery of online banner advertisements and e-mails that reflect how you navigate to and through our services based on your online behavior. We call this “Browsing Data”. We may hire third-party service providers to assist us in the collection and analysis of this Browsing Data collected through cookies.
You can refuse cookies by turning them off or blocking them in your Internet browser. If you decide to turn off or block cookies, our Websites and Applications might not function correctly.
Please note that not all tracking will stop even if you delete cookies.
Who do we share personal information with and why?
We may collect, share or disclose personal information for the purposes set out above via or to third parties. These third parties include:
Service providers and processors
Such third parties may include:
third-party companies to perform functions on our behalf, including:
CNF has engaged Moneris Solutions Corporation (“Moneris”) as its online payment processing solution provider. Moneris, on behalf of CNF, will collect personal information, including names and any credit or debit card information submitted through the Websites and Applications in order to purchases, or to make or receive other payments. Please review the Moneris Privacy Notice for more information about how Moneris collects, uses, stores, and discloses personal information at: [LINK]. By submitting personal information through the Websites and Applications, you acknowledge that you have reviewed and understand the Moneris Privacy Notice and consent to such collection, use, storage, and disclosure as set out in the Moneris Privacy Notice.
Advisors
Such advisors may include legal, financial, business or other advisors.
Other users of the Websites and Applications
Any personal information you make available publicly, such as by your reviews, comments or testimonials will be shared with other users of the Websites and Applications.
Affiliated companies
We may share your personal information we collect with our parent company, Calgary Co-op, CNF subsidiaries and affiliates.
As our business continues to evolve, we may acquire, establish, or sell business units or subsidiaries. Personal information is one of the business assets that would be transferred in these types of transactions. In such a situation, your personal information would only be used in a manner consistent with this Privacy Policy.
Third parties as required by law or regulation
We may disclose personal information as required by law or regulation, and when we believe that disclosure is necessary to protect our rights and / or comply with a judicial proceeding, court order, or legal process served on CNF.
How do we protect personal data?
CNF undertakes commercially reasonable efforts to protect the personal information under its control. CNF utilizes physical, electronic and administrative measures to secure personal information from accidental loss and from unauthorized access, use, alteration and disclosure. The nature of the safeguards will vary depending on the sensitivity of the information that has been collected, the amount, distribution and format of the information, and the method of storage.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect personal information, we cannot guarantee the security of it transmitted to our Websites and Applications or through communications.
Safeguarding account information
To ensure your username and password remain confidential, do not share this information with anyone.
International transfers of personal data
General overseas transfers
Our service providers / processors are located in Canada, United States, the United Kingdom and the European Union, and as a result, we may collect, process, store, share, and transfer your personal information within Canada, and to the United States, the United Kingdom and the European Union.
As such, personal information may be accessed, transferred to, and / or stored at, a destination outside Canada, including the United States, the United Kingdom and the European Union. As a result, your personal information may be accessible to law enforcement and national security authorities of the United States, the United Kingdom and the European Union.
These countries may not provide the same level of data protection as a home country; however, we will take steps to ensure that personal information that is transferred outside a home country is safeguarded as in line with this Privacy Policy and applicable laws.
Privacy of Minors
Our services and products are not intended for or directed to children or other persons who are under the age of 15 years old (“Minors”). We do not knowingly collect, access or process the personal information of Minors.
If you are between the ages of 15 and the age of majority in your jurisdiction of residence (“Under the Age of Majority”), you may only provide us with your personal information with the express consent of your parent or guardian.
If you are a parent or guardian, and you become aware that a Minor for whom you are responsible has provided us with their personal information or that an individual Under the Age of Majority for whom you are responsible for who has provided us with their personal information without your express consent, please contact us at CustomerCare@mycnf.com. If we learn that we have inadvertently collected the personal information of a Minor or an individual Under the Age of Majority who did not provide their personal information with the express consent of their parent or guardian, we will endeavour to securely and permanently delete that information.
How long do we keep your personal data?
Our retention periods for personal data are based on business needs and legal requirements.
We will retain personal data while we are using it, for purposes described in this Privacy Policy. We may continue to retain it after we have ceased such uses to meet our legal requirements.
The length of time for which we will retain personal data will depend on the purposes for which we need to retain it. After we no longer need to retain personal data, we will delete it or securely destroy it.
What are your rights?
When a request to exercise certain rights in relation to personal data is made, we will need to check the entitlement prior to answering a request.
In general, the following rights are available:
Your exercise of these rights may be subject to certain exemptions.
Updating Your Personal Information
It is important that the information contained in our records is both accurate and current. If your personal information happens to change during the course of our relationship, please keep us informed of such changes.
In some circumstances we may not agree with your request to change your personal information and will instead append an alternative text to the record in question.
Access to Your Personal Information
You can ask to see your personal information. If you want to review, verify, or correct your personal information, please contact us by email at CustomerCare@mycnf.com.
When requesting access to your personal information, please note that we may request specific information from you to enable us to confirm your identity and right to access, as well as to search for and provide you with the personal information that we hold about you. We may charge you a fee to access your personal information where allowable by applicable privacy laws; however, we will advise you of any fee in advance. If you require assistance in preparing your request, please contact us.
Your right to access the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide some or all the personal information that we hold about you. In addition, the personal information may have been destroyed, erased, or made anonymous in accordance with our record retention obligations and practices.
In the event that we cannot provide you with access to your personal information, we will endeavour to inform you of the reasons why, subject to any legal or regulatory restrictions.
Inquiries or Concerns?
If you have any questions about this Privacy Policy or concerns about how we manage your personal information, please contact us by telephone at 1-877-299-3970 or 403-984-9893 or email at CustomerCare@mycnf.com. We will endeavour to answer your questions and advise you of any steps taken to address the issues raised by you. If you are dissatisfied with our response, you may be entitled to make a written submission to the Privacy Commissioner in your jurisdiction.
Revisions to this Privacy Policy
From time to time, we may make changes to this Privacy Policy to reflect changes in its legal or regulatory obligations or in the manner in which we deal with your personal information. We will post any revised version of this Privacy Policy on our Websites and Applications and we encourage you to refer back to it on a regular basis. This Privacy Policy was last updated on DATE.
Interpretation of this Privacy Policy
This Privacy Policy includes examples but is not intended to be restricted in its application to such examples, therefore where the word ‘including’ is used, it shall mean ‘including without limitation’. Should there be, in a specific case, any inconsistency between this Privacy Policy and Canada’s federal and provincial privacy laws, as applicable, this Privacy Policy shall be interpreted, in respect of that case, to give effect to, and comply with, such privacy laws.
This Privacy Policy does not create or confer upon any individual any rights, or impose upon CNF any obligations outside of, or in addition to, any rights or obligations imposed by Canada’s federal and provincial privacy laws, as applicable.