Retail Media Group Ltd. and Air Miles Incentives (collectively “RMG”) take your privacy seriously. This privacy policy describes how we collect, use and disclose your personal information in connection with your use of www.rmgi.ca, www.rmgadvertising.com, www.airmilesincentives.ca or RewardBANK.ca (collectively our “Sites”).
By using our Sites, you consent to our collection, use, and disclosure of your personal information as outlined in this policy. Your consent is the legal basis for our use of your personal information. You can withdraw your consent at any time. However, if you withdraw your consent to certain uses, we may no longer be able to provide our services to you.
This policy is divided into three general areas: (i) how we process your information; (ii) your rights with respect to your personal data; and (iii) information third party sites, and security measures, and similar issues that may impact personal data.
Who We Collect Information From
Visitors to our Sites, individuals who establish a relationship with us by telephone, sign up to receive communications, or who sign up for RMG services and customers of our Partners who have engaged us to deliver services on their behalf.
Children
Our Sites are not intended for children. If we become aware that we have inadvertently received or collected personal information pertaining to a child under the age of consent in the country where the child is located without valid consent, we will delete such information from our records.
What Personal Information We Collect
Device Information
When you visit the Sites, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifer. For more information about cookies, and how to disable cookies, visit www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Loyalty Information
We may also receive personal information about you from our loyalty program partners (“Partners”) to the extent that you have given consent to the Partner to provide us with such personal information. This includes name, email, collector card number, and loyalty transaction information. We refer to this information as “Loyalty Information”.
Order Information
Additionally, when you request information, make a purchase, or attempt to make a purchase, we collect information input by you, which includes purchase and sale transaction information such as your credit card information and the details of your transaction. We refer to this information as “Order Information”.
General Information
Information contained in any email messages, questions, comments, complaints, or requests you send us. We refer to this information as “General Information”.
How We Use Personal Information
We will only collect and use your personal information for the following purposes, except as permitted or required by applicable law:
- processing transactions that have been submitted to us;
- acknowledging your comments and/or replying to your questions, complaints, and requests;
- communicating with you and providing you with information;
- direct marketing of special offers or promotions (including sweepstakes and contests) that we believe may be of interest to you;
- to serve advertisements to you in various marketing channels, including but not limited to social media, search engines, mobile apps, and various websites including our own Sites;
- for profiling and analytical purposes, including marketing and website analytics, in order to optimize and customize our online platform to your needs, as well as the products and services marketed to you, and to make the Sites easier to use;
- to provide customer service;
- improving the performance and utility of our services;
- generally managing and administering our business;
- preventing and prosecuting fraud and/or credit risk;
- meeting legal and regulatory requirements; and
- any other purpose to which you may consent in the future.
Limited to Disclosed Purposes
We limit the collection, use, and disclosure of personal information to that which is needed to achieve the above noted purposes.
Who We Disclose Personal Information To
We will only disclose your personal information in the following circumstances, except as permitted or required by applicable law:
- to LoyaltyOne and other third-party suppliers, as necessary to provide you with services that you have requested or to fulfill the transactions you have submitted;
- to third party companies and contractors that provide us with services in the conduct of our business (“service providers“), such as payment processing services, information technology services for our software applications, advertising and marketing, and other essential similar services, but only as necessary for those service providers to provide services to us;
- to third parties as we deem necessary or appropriate to prevent, limit, or otherwise prosecute fraud;
- as necessary to meet legal and regulatory requirements; and
- any other circumstance in which you provide consent to disclose.
Service Providers
All RMG service providers are contractually bound to keep your information secure. Our service providers can use, store, and disclose your personal information solely for purposes for which it is disclosed to them (to provide us with services).
Data Retention
We will retain your personal information for as long as:
- your personal information is needed to provide you services; or
- it is necessary to meet legal, regulatory, insurance, and audit requirements.
If you wish to cancel your account or request that we no longer use your information to provide you services, contact us at dpo@rmgi.ca
Your Rights with Respect to Your Personal Information
You are entitled to be informed or and have access to any of your personal information in our custody or control. Upon written request to our Privacy Officer as noted at the bottom of this page, we will provide you with your personal information under our custody or control, as well as information regarding how your personal information is being used and the identity of any third party(s) to whom that information has been disclosed. Please note that we may not be able to provide access to personal information in certain circumstances, such as if the personal information was collected for the purposes of an investigation, if disclosure would reveal the personal information of a third party, or if prohibited by law. To protect your privacy and security, we may take reasonable steps to verify your identity prior to providing such access.
Rights of European Data Subjects
In addition to rights with respect to your personal data already noted elsewhere in this policy, for those individuals residing in the European Economic Area, you have certain additional rights under the General Data Protection Regulation (GDPR):
Restrictions on Further Processing
You have the right, where there is a dispute in relation to the accuracy or basis of processing of your personal data, to request a restriction on further processing by us.
Erasure
You have the right to erasure of your personal data (“right to be forgotten”) in certain circumstances.
Data Portability
You have the right to request that personal data that you have provided to us be returned to you or be provided to another third party of your choice, in a structured, commonly-used, and machine-readable format.
Automated Decision-Making
You have the right not to be subject to a decision based solely on automated decision-making. In connection with such right, you may have the right to request human intervention with respect to such automated decision-making, as well as express your point of view or contest any such automated decision-making.
Opt-out of Direct Marketing / Profiling
You may elect to “opt out” of direct marketing activities, including any profiling we may conduct for direct marketing purposes. Accordingly, we may rely on your consent permitting us to process your information in accordance with this policy for direct marketing, including profiling for direct marketing, unless you take affirmative action to opt out of such processing. You may opt out at any time by contacting our Data Privacy Officer as provided further below.
Lodge Complaints with Supervisory Authorities
You have the right to lodge a complaint with a data protection supervisory authority in your country.
Links to Third Party Sites
We may provide links or references to third party sites whose privacy practices may differ from those of RMG. RMG assumes no responsibility for the content or the privacy policies of those Partner or third-party websites. Please be aware that when you follow any links to another site not owned or operated by RMG and submit personal information to any of those sites, you are subject to their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.
Social Media Features
Our Sites may include social media features, such as the Facebook button and widgets, among other things. These features may collect your IP address, track which page you visit on our Sites, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Sites. Your interactions with these features are governed by the privacy policy of the company providing it. We encourage you to carefully read the privacy policy of any company that provides the features you choose to interact with.
Security Measures
We take reasonable measures, including administrative, physical and technical safeguards, to protect your information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. personal information uploaded to our Sites is transmitted to us using industry standard encryption, which creates a private conversation between your computer and our Sites. We authenticate our Sites and enable TLS/SSL encryption to protect your sensitive data and transactions.
Nevertheless, RMG cannot absolutely guarantee that unauthorized third parties will never be able to defeat our security measures or use your personal information for improper purposes. In the event that your personal information in our possession or under our control is compromised as a result of a security breach, we will take reasonable steps to investigate the situation and, where appropriate, notify you and take other steps in accordance with applicable laws or regulations.
Remember that email sent over the Internet is generally unencrypted and transmitted in clear text. We recommend that you use caution when forwarding free-format email messages to us and that you do not include confidential information (such as unique user IDs, passwords, or personally identifiable information) in those messages. Confidential information should be transmitted to us through other secure methods such as by telephone.
Revision of Policy
This policy may be revised from time to time. We will notify you of material changes prior to such material change being effective, either by e-mail at the address you have provided to us in connection with your registration on our Sites or by a prominent notice on our Sites. Your continued use of our Sites or failure to cancel your account on our Sites following such notification shall constitute your acceptance of the revised policy. We encourage you to periodically review this page for the latest information on our privacy practices.
Contacting Us
The Data Privacy Officer is accountable for our compliance with this privacy policy and applicable privacy legislation.
If you have questions, comments, or complaints with respect to our privacy policy or if you wish to request access to, or correction or deletion of your personal information under RMG’s care and control, please contact the Data Privacy Officer at:
Data Privacy Officer
dpo@rmgi.ca
Retail Media Group
4521 Manhattan Rd SE,
Calgary, AB
Canada
(403) 217-4373 x 202
RMG will respond to your request for access in accordance with applicable privacy legislation.
This Privacy Policy was last updated on July 1, 2018.