Last Updated: June 2026 | Effective: June 2026

At White Duck Outdoors, we understand that you care how information about you is collected, used, and shared. This Privacy Statement describes information we may collect about you directly or indirectly; how and why we may collect, use, and share your information; and the choices you have regarding your information. As more fully described below, we collect, use and share your information to better serve you and to improve our own business processes.

This comprehensive Privacy Statement applies to all of our consumers in the United States and Canada, and it describes the ways we handle personal information in a variety of contexts, such as when consumers use our websites, buy our products, participate in our promotions and events, or provide information to us in other ways.

 

Canadian residents should pay particular attention to the "Notice to Canadian Residents" section below, which contains additional information about your rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), and Canada's Anti-Spam Legislation (CASL).

Categories of Information We Collect

In order to help us better understand you so that we can give you an excellent customer experience, we collect information that identifies you or that we can associate with you (your "personal information") as well as information that does not identify you (e.g., anonymous, de-identified, or aggregated data). We may also collect various categories of information directly (from you), or indirectly (from others), as more fully described below. The categories of personal information (including sensitive personal information) that we or our service providers collect (or have collected during the preceding 12 months) may include the following:

•     Identifiers (such as your name, nickname, account name, unique personal identifier, online identifier/screenname, IP address);

•     Contact Information (such as your physical or mailing address, telephone number, or email address);

•     Profile information that we collect or that is inferred (such as commercial information and inferences, including products or services purchased or considered, purchasing histories or tendencies, interactions with us, preferences, psychological traits/predispositions, behavior, attitudes, intelligence, or abilities/aptitudes, some of which may be assigned by probabilistic methods);

•     Employment information (such as your employment status or history, or your professional information);

•     Internet activity (such as browsing history, search history, clicks, interactions with websites, applications and advertisements, or social media information);

•     Demographic information (such as your age, date of birth, sex or gender, race, or ethnicity). Note for Canadian Residents: Under Quebec's Law 25, information about race, ethnic origin, and sex or gender is classified as sensitive personal information and is subject to heightened consent and protection requirements (see the "Notice to Canadian Residents" section below);

•     Financial information (such as your bank account number, credit card number, debit card number, other payment information);

•     Location data (such as the geographical location information indicated by your mobile device or computer); and

•     Sensitive Personal Information (such as your precise geolocation, race, ethnic origin, and sex or gender for Canadian residents).

How Information About You Is Collected

When you interact with us, we may collect information about you directly. Examples of direct interaction with us include when you visit our websites, communicate with our customer service representatives, attend our events, participate in our marketing efforts (including contests, sweepstakes and virtual events), participate in our customer loyalty programs, or any other way you interact directly with us.

When we collect information about you directly, we may ask you to affirmatively furnish the information to us (such as when we ask you for your telephone number), or we may collect the information from your electronic device (such as when you visit our websites). We and some of our service providers, contractors and advertising networks collect identifiers matched to your mobile or other devices, which can be used to deliver customized ads or content via the Internet, across different devices or browsers (sometimes called "cross-device tracking").

In some cases, we may engage service providers to help us operate our business, and they may collect data on our behalf in the course of the services they provide to us. In other cases, where permitted by applicable law, third parties may obtain information about you independently, and we may acquire that data (for example, by purchasing the data). With respect to Canadian residents, where we acquire personal information from data brokers or other third parties, we take steps to confirm that such data was collected with consent that covers the purposes for which we intend to use it, in accordance with PIPEDA and applicable provincial privacy laws.

The following list describes the sources from which we or our service providers may collect various categories of personal information directly (from consumers like you) or indirectly (from third parties):

•     Identifiers may be collected directly from consumers; public records; consumer data resellers/brokers; advertising networks; operating systems and platforms; social networks/social media.

•     Contact information may be collected directly from consumers; public records; consumer data resellers/brokers; or social networks/social media.

•     Profile information may be collected directly from consumers; consumer data resellers/brokers; advertising networks; operating systems and platforms; or social networks/social media.

•     Employment information may be collected directly from consumers; or consumer data resellers/brokers.

•     Internet activity may be collected directly from consumers; consumer data resellers/brokers; advertising networks; internet service providers; operating systems and platforms; or social networks/social media.

•     Demographic information may be collected directly from consumers; or consumer data resellers/brokers.

•     Financial information may be collected directly from consumers.

•     Location data may be collected directly from consumers; consumer data resellers/brokers; advertising networks; internet service providers; operating systems and platforms; or social networks/social media.

 

Why Your Information Is Collected, Used and Shared

We use the personal information we collect directly and indirectly to conduct our business, to communicate with you, and to provide better products, services, and experiences, as further described below. The specific purposes for which we or our service providers may collect and use information about you are:

•     (1) to provide the products and services that you have ordered or requested, and to communicate about your orders;

•     (2) to enable and improve our customer service;

•     (3) to address your comments, questions or complaints;

•     (4) to personalize your experiences;

•     (5) to understand your opinions, preferences and shopping habits;

•     (6) to analyze trends and statistics;

•     (7) to administer and fulfill our contests and other promotions, including special discounts for professionals, military personnel, students and first responders;

•     (8) to analyze and improve our websites, facilities, products and services;

•     (9) to market our products and services to you, including by sending you marketing communications and other information regarding our products, services, or special events, and to improve our marketing efforts;

•     (10) to share reviews, testimonials, or other user-generated content;

•     (11) to secure and protect our information and technology systems, as well as information about you and other consumers;

•     (12) to facilitate internal audits, dispute resolution or investigations;

•     (13) to evaluate new technology for our businesses;

•     (14) to conduct market research;

•     (15) to formulate our business strategies;

•     (16) to analyze information about organizations to which you may belong;

•     (17) to enable us to monitor and evaluate our third-party service providers and their activities;

•     (18) to manage our gift card programs, loyalty programs, other stored value programs;

•     (19) to keep records of transactions;

•     (20) to comply with our contractual obligations;

•     (21) to detect and address actual or potential fraud;

•     (22) to establish and maintain data back-ups for our business continuity and disaster recovery; and

•     (23) to comply with various legal obligations or other rules to which we are subject.

What Information About You Is Shared and With Whom

We may share your personal information (including sensitive personal information) with service providers and contractors who provide services to us or conduct activities on our behalf. When we share your personal information with our service providers and contractors, we instruct them to only use or share your personal information for the intended purposes, which are limited to those listed above.

One example of our information sharing with a service provider is when we share your name, address, and similar contact information with a courier service for the purpose of delivering a product to you and notifying you of the status of the shipment. Our service providers and contractors include entities that perform the following activities on our behalf: marketing and advertising; order fulfillment; consumer or market research and analysis; account management; event or promotion management; fraud detection; security; customer service; payment processing; technical support; product creation.

We may also disclose consumers' personal information (including sensitive personal information) to third parties who are not our contractors or service providers to comply with various legal obligations or other rules to which we are subject.

We do not sell consumers' personal information for money. We do, however, share consumers' personal information (including sensitive personal information) with certain third parties in ways that might be considered a "sale" of personal information under the California Consumer Privacy Act, even though we do not receive any financial compensation from the third parties in exchange. For example, we allow third parties, such as Facebook® and Google®, to place technologies (such as cookies) on our websites for purposes of marketing to users of our websites.

For Canadian residents: The concept of "sale" of personal information as described above is a US law concept. Under Canadian law (PIPEDA and Quebec Law 25), what matters is whether your consent was obtained for any sharing of your personal information with third parties for marketing or advertising purposes. We obtain your consent before sharing your personal information with third parties for purposes beyond those directly necessary to fulfill your order or service request. You may withdraw that consent at any time (see "Your Options Regarding Personal Information" below).

Cross-Border Transfer of Personal Information

Notice to All Consumers: White Duck Outdoors is headquartered in New Jersey, USA. Personal information we collect may be stored, processed, or accessed on servers located in the United States or other jurisdictions outside your country of residence, including outside Canada.

Notice to Canadian Residents (Including Quebec Residents): When your personal information is transferred outside Canada (including to the United States), it may be subject to the laws of those foreign jurisdictions, which may provide different or lesser privacy protections than those available under PIPEDA, Quebec Law 25, or other Canadian provincial privacy laws. In particular, foreign governments, courts, law enforcement, or regulatory agencies may be able to access your personal information under the laws of those jurisdictions.

Before transferring personal information outside Quebec, we conduct a Privacy Impact Assessment (PIA) as required by Quebec Law 25, Article 17, to ensure that the level of protection afforded to your personal information is adequate. We have or will enter into appropriate contractual protections with recipients of your personal information in other jurisdictions.

By providing your personal information to us, you acknowledge that your personal information may be transferred to and processed in countries outside your country of residence, including the United States. You may contact our Canadian Privacy Officer (see contact details below) for more information about our cross-border transfer safeguards.

Data Retention

We retain each category of personal information about consumers for as long as reasonably necessary to fulfill the purposes for which it is collected and used, but not longer. In determining the period of time consumer personal information will be retained, we consider the frequency with which our consumers purchase from us, our consumer's experience, the utility of the information to our business objectives, warranty and recall issues, legal and contractual record retention requirements, and other factors. We do not retain any category of personal information for more than seven years following our last interaction with a consumer, unless required by law.

Our general retention schedule by category of personal information is as follows:

•     Transaction and order records: 7 years (to comply with tax and accounting obligations)

•     Customer account and profile information: Duration of account plus 3 years following last activity

•     Marketing preferences and consent records: Duration of relationship plus 3 years

•     Security breach records: 24 months from the date of the breach (as required by PIPEDA)

•     Contest and promotion records: 1 year following the close of the promotion

•     Fraud detection data: Up to 6 years

At the end of the applicable retention period, we will securely destroy or anonymize your personal information in accordance with our data destruction protocols. Quebec residents may request a copy of our retention policy schedule by contacting our Canadian Privacy Officer.

Children's Privacy

We do not intend to collect personal information from anyone under the age of 16. If you are under the age of 16 you should not provide any personal information to us. If you are a parent or guardian of a child under the age of 16 and suspect they have provided personal information to us, you may contact us using one of the Communication Methods described in this Privacy Statement to notify us so that we may delete the information. We do not knowingly share or sell the personal information of consumers under 16 years of age.

For Canadian Residents: In Canada, children under the age of 13 are generally not considered capable of providing meaningful consent, and those between the ages of 13 and 18 require age-appropriate consent processes. We do not collect personal information from children under 13 without verifiable parental or guardian consent. If you believe a child under 13 has provided us with personal information without parental consent, please contact our Canadian Privacy Officer immediately so we can take prompt remedial action.

Keeping Your Personal Information Secure

We store personal information on our servers or those of our service providers (including "cloud" servers), and it is accessible by authorized employees, representatives and agents who require access for the purposes described in this Privacy Statement. We have implemented reasonable security procedures and measures that are intended to protect personal information and our information technology systems that store personal information.

Unfortunately, no transmission of information over the Internet nor storage of information electronically can be guaranteed to be 100% secure. In order to help protect personal information you provide to us, you: (i) should not share your password or account information with others; (ii) should use a secure internet connection and web browser; (iii) should select a unique, complex, secure password; (iv) should change your password frequently; and (v) should not use the same password elsewhere. If you become aware of any loss, theft, or unauthorized use of a password, please contact us immediately using the contact information below.

Security Breach Notification

In the event of a security breach involving your personal information that creates a real risk of significant harm to you, we will notify you promptly using your most recent contact information on file. Providing your email address to us constitutes consent to receive such electronic notices.

For Canadian Residents: In addition to notifying, you directly, we are required under PIPEDA's breach of security safeguards regulations to report any breach that poses a real risk of significant harm to the Office of the Privacy Commissioner of Canada (OPC). We maintain records of all security breaches for a minimum of 24 months as required by law. Notification to you will be made directly and without unreasonable delay once we have determined that a breach poses a real risk of significant harm. "Real risk of significant harm" includes bodily harm, humiliation, damage to reputation or relationships, loss of employment, business or professional opportunities, financial loss, identity theft, negative effects on your credit record, or damage to or loss of property. We will not require your consent as a condition of receiving breach notifications; such notifications are a legal obligation, not a contractual arrangement.

Automated Decision-Making and Profiling

We may use automated tools and profiling to analyze your personal information, for example to personalize product recommendations, assess fraud risk, or determine eligibility for certain promotions. Some of these processes involve automated decision-making, meaning decisions are made with limited or no human review.

For Canadian Residents (including Quebec Residents): Under Quebec Law 25 (Article 12.1), if a decision is made about you exclusively by automated means and that decision has a significant effect on you, you have the right to: (i) be informed that such a decision has been made about you; (ii) be informed of the personal information used to make the decision and the principal factors and parameters that led to the decision; and (iii) request that a human being review the decision. If you wish to exercise any of these rights, please contact our Canadian Privacy Officer using the contact details provided below.

Links to Other Websites

Our website may contain links to third-party websites to which this Privacy Statement does not apply ("Linked Websites"). Your use of Linked Websites will be governed by the terms of use, privacy policies, and other terms, notices, and policies set forth on or referenced in those Linked Websites.

Your Options Regarding Personal Information

We have established processes by which you or an authorized agent can submit requests regarding your personal information. To exercise your options as described in this Privacy Statement, you may contact us in one of the following ways:

•     By completing the web form at https://whiteduckoutdoors.com/pages/contactus

•     By mail at: White Duck Outdoors, 1215 Livingston Ave, Ste 4, North Brunswick NJ 08902

Collectively, these are referred to as the "Communication Methods." To effectively exercise your privacy options or inquire about how we handle your personal information, you must use one of these Communication Methods.

The list below describes types of requests you may make to us regarding information we have collected from you:

•     Request to Know: You may ask us to furnish you with (i) the specific pieces of personal information we have collected about you; (ii) the categories of personal information we have collected about you; (iii) the categories of sources from which we collect information about you; (iv) the business or commercial purposes for collecting information about you; (v) the categories of third parties with whom we share or have shared personal information about you; (vi) the categories of personal information we have shared about you; or (vii) profiling or automated decision-making affecting you.

•     Request to Delete: You may ask us to delete any personal information that we have collected from you and to direct our service providers to delete your personal information from their records.

•     Request to Correct: You may ask us to correct or update your personal information that has been previously provided to us.

•     Request to Data Portability (Canadian and Quebec Residents): Under Quebec Law 25 (Article 27), you may request that we provide you with the personal information we hold about you in a structured, commonly used technological format. You may also request that we transmit that information directly to another organization where technically feasible.

•     Request to Opt-Out of Sale: You may request that we not sell your personal information.

•     Request to Opt-Out of Selling or Sharing of Personal Information: You may request that we not sell your personal information or share your personal information with third parties for certain purposes.

•     Request to Opt-Out of Targeted Advertising: You may ask us not to target advertisements to you based on your behavior across contexts.

•     Request to Opt-Out of Sharing for Third-Party Marketing: You may ask us not to share your personal information with unaffiliated third parties solely for their independent direct marketing purposes (under California's Shine the Light Law and equivalent Canadian law principles).

•     Request to Opt-Out of Profiling and Automated Decision-Making: You may ask us not to use your personal information in profiling or automated decision-making processes, or request human review of an automated decision.

•     Request to Opt-Out of the Use or Disclosure of Sensitive Personal Information: You may ask us not to use your sensitive personal information for certain purposes.

•     Right to Withdraw Consent (Canadian Residents): You have the right to withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawal of consent may mean we are unable to provide you with certain products or services. We will inform you of the implications of withdrawing your consent before you do so.

•     Request to Opt-In: After making an opt-out request listed above, you may choose to opt back in.

Response Timelines: We will respond to your Request to Know, Delete, or Correct within 30 days of receipt. If we require an extension, we will notify you in writing within the initial 30-day period and explain the reason for the delay, as required by PIPEDA and Quebec Law 25. We will make commercially reasonable efforts to accommodate your Request to Opt-Out within 15 days. We reserve the right to deny any request to the extent permitted by applicable law.

If you ask us to delete your information or limit the use of your information, we will comply with your request, but you may lose some or all of the benefits associated with the incentive program. (For example, if you ask us to delete your personal information, you will lose any accumulated loyalty program points.)

How Your Identity Will Be Verified

For your privacy and security, and to prevent fraud and other harmful activities, when we receive a request through one of the Communication Methods, we may need to ensure that the person submitting the request is the person they purport to be. Accordingly, we may take reasonable measures to verify the identity of the person submitting the request. If we ask you to verify your identity, you must promptly cooperate with our efforts so that we can fulfill your request.

Requests from Authorized Agents

If you submit a consumer privacy request on behalf of another person, you must verify your legal authority to act on behalf of that person, and your identity and the identity of the other person, to our satisfaction before we can fulfill your request.

How You Can Opt-Out of Online Advertising or Other Promotional Communications

In addition to the options described above, you can take other steps to limit the collection, use and sharing of your personal information. You can manage how your device, mobile browser and other devices share information with our websites and mobile apps, as well as how your browser handles cookies and other tracking technologies, by adjusting the privacy and security settings on your device.

Our websites currently do not have a mechanism to recognize an Internet browser's "Do Not Track" signals, and we cannot follow those signals. Several of the companies that utilize cookies or other tracking or monitoring mechanisms enable you to opt out of advertising through mechanisms established by trade groups. If you wish to reduce this type of third-party, interest-based advertising, you may opt out of advertising from members of the National Advertising Initiative, and from members of the Digital Advertising Alliance (for US) or the Digital Advertising Alliance of Canada (DAAC) (for Canada).

For Canadian Residents: In accordance with Quebec Law 25, we offer a clear and accessible mechanism for you to withdraw consent to the collection of your personal information through technological means (such as cookies and tracking technologies). You may use our cookie preference center accessible on our website, or contact our Canadian Privacy Officer, to manage or withdraw your consent to such technologies. Withdrawal of consent to non-essential cookies and tracking technologies will not affect your ability to use our core website functions.

You also will have an opportunity to opt-out of advertising email messages from us by clicking on an "unsubscribe" hyperlink contained in commercial e-mails those brands send you. If you receive a text message (SMS or MMS) from one of our brands and would like to opt out of receiving further text messages, you may do so by following the opt-out instructions within the text message.

Changes to This Privacy Statement

We will review our Privacy Statement periodically (at least annually), and we reserve the right, in our sole discretion, to revise, change or modify this Privacy Statement at any time. We will post any changes to this Privacy Statement on our websites and they will be effective as of the date of posting. We encourage you to visit this page periodically to review this information.

For Canadian Residents: Where we make material changes to this Privacy Statement that affect how we collect, use, or disclose your personal information, we will provide you with active notice of such changes — not merely a posting on our website. Active notice may be provided by email to the address in our records, by in-account notification, or by other appropriate means. Your continued use of our products or services after receiving such notice will constitute your acknowledgement of the updated Privacy Statement. We will not rely on implied consent through website visits alone as a basis for processing your personal information under Canadian law.

This Privacy Statement was last updated in June 2026.

Includes supplemental disclosures required by PIPEDA, Quebec Law 25, and CASL

This section applies to individuals in Canada (including Quebec) and supplements the information set out in the main body of this Privacy Statement. In the event of a conflict between this section and the main body of the Privacy Statement, this section will govern with respect to Canadian residents.

1.  Consent

We rely on meaningful consent as the legal basis for collecting, using, and disclosing your personal information, in accordance with PIPEDA Principle 3 and Quebec Law 25, Article 8. We obtain your consent in the following ways:

•     Express consent: Where we collect sensitive personal information (including precise geolocation, race, ethnic origin, sex or gender, or financial account information), we will seek your express, affirmative consent before or at the time of collection. Express consent may be obtained through a signature, a checked box, or another clear affirmative action.

•     Implied consent: For non-sensitive personal information that is necessary to provide you with a product or service you have requested, we may rely on implied consent — for example, using your shipping address to deliver your order.

We will explain the purposes for which your personal information will be collected, used, or disclosed at or before the time of collection, in clear and plain language. We will not use your personal information for a new purpose without obtaining your fresh consent for that new purpose.

Right to Withdraw Consent: You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our Canadian Privacy Officer (see below). We will inform you of the implications of withdrawing your consent before you do so. Withdrawal of consent may mean we cannot provide you with certain products or services. Your withdrawal of consent will not affect the lawfulness of any collection, use, or disclosure of your personal information that occurred before the withdrawal.

2.  Canadian Privacy Officer

Pursuant to Quebec Law 25 (Article 3.1) and PIPEDA's accountability principle, we have designated a Privacy Officer responsible for our compliance with Canadian privacy laws. Our Canadian Privacy Officer can be contacted as follows:

 

Canadian Privacy Officer — Contact Details

Organization: White Duck Outdoors

Mailing Address: White Duck Outdoors, 1215 Livingston Ave, Ste 4, North Brunswick NJ 08902

Email: info@whiteduckoutdoors.com (please include "Canadian Privacy Inquiry" in the subject line)

Phone: (888) 519-8368

Web Form: https://whiteduckoutdoors.com/pages/contactus

If you are a Quebec resident and wish to file a complaint with the provincial authority, you may contact the Commission d'acces a l'information (CAI) at: www.cai.gouv.qc.ca

 

3.  Right to Complain to the Office of the Privacy Commissioner of Canada

If you are not satisfied with our response to your privacy request or complaint, you have the right to complain to the Office of the Privacy Commissioner of Canada (OPC):

 

Office of the Privacy Commissioner of Canada

Website: www.priv.gc.ca

Toll-free: 1-800-282-1376

Address: 30 Victoria Street, Gatineau, Quebec K1A 1H3

Quebec residents may also contact the Commission d'acces a l'information (CAI) at www.cai.gouv.qc.ca

 

4.  Privacy Impact Assessments (Quebec Residents)

In compliance with Quebec Law 25 (Article 3.3), we conduct Privacy Impact Assessments (PIAs) before:

•     Acquiring, developing, or significantly overhauling an information system or electronic service delivery system involving personal information;

•     Communicating personal information outside Quebec to a person or organization not subject to Quebec Law 25.

The purpose of a PIA is to identify and mitigate privacy risks before they materialize. Our PIAs are conducted under the direction of our Canadian Privacy Officer. You may contact our Canadian Privacy Officer to inquire about PIAs relevant to how your personal information is processed.

 

5.  Canada's Anti-Spam Legislation (CASL)

Canada's Anti-Spam Legislation (CASL) governs the sending of commercial electronic messages (CEMs) — including marketing emails and SMS messages — to recipients in Canada. We comply with CASL in the following ways:

 

•     Express Consent: Before sending you marketing or promotional CEMs, we will obtain your express consent by asking you to affirmatively opt in (e.g., checking a box to join our mailing list). We maintain records of all express consents obtained, including the date, method of consent, and the name of the individual who consented.

•     Implied Consent: Where permitted by CASL, we may send you CEMs on the basis of implied consent — for example, if you have purchased a product from us within the preceding 24 months, or made an inquiry within the preceding 6 months. Implied consent is time-limited and expires as set out in CASL.

•     Sender Identification: All CEMs we send will clearly identify White Duck Outdoors as the sender, and will include our mailing address and a functional unsubscribe mechanism.

•     Unsubscribe: Every CEM we send to Canadian recipients will contain a clear and easy-to-use unsubscribe mechanism. We will process all unsubscribe requests within 10 business days of receipt.

•     Record Keeping: We maintain records of all consents for a minimum of 3 years from the date the consent was obtained or the relationship ended, whichever is later.

6.  Sensitive Personal Information (Quebec Residents)

Under Quebec Law 25, the following categories of personal information that we may collect are considered sensitive and are subject to heightened consent and protection requirements:

•     Precise geolocation data

•     Racial or ethnic origin

•     Sex or gender

•     Financial account information (bank account, credit card, or debit card numbers)

We will seek your express consent before collecting or using sensitive personal information except where collection is required by law or is necessary for a legitimate and urgent purpose. We apply additional technical and organizational safeguards to sensitive personal information, including access controls, encryption, and restricted use.

7.  Automated Decision-Making (Quebec Residents)

As described in the main body of this Privacy Statement, we may use automated tools that make or contribute to decisions about you. Where a decision is made exclusively by automated means and has a significant effect on you, you have the right under Quebec Law 25, Article 12.1 to:

•     Be informed that an automated decision has been made;

•     Be informed of the personal information used and the principal factors and parameters that led to the decision; and

•     Request that a human being review the automated decision.

To exercise these rights, please contact our Canadian Privacy Officer. We will acknowledge your request within 10 business days and provide a substantive response within 30 days.

8.  Right to Data Portability (Quebec Residents)

Under Quebec Law 25 (Article 27), if you are a Quebec resident, you have the right to request that we provide you with the personal information we hold about you in a structured, commonly used technological format. You may also request that we transmit that information directly to another organization or person authorized to collect personal information, where technically feasible.

To exercise your right to data portability, please contact our Canadian Privacy Officer using the contact details provided above. We will respond to your request within 30 days.

9.  Retention and Destruction of Personal Information

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our full retention schedule is summarized in the "Data Retention" section of this Privacy Statement.

At the end of the applicable retention period, we will securely destroy or anonymize your personal information using methods appropriate to the sensitivity of the information (e.g., secure deletion of electronic files, shredding of paper records). Quebec residents may request information about our destruction protocols by contacting our Canadian Privacy Officer.

10. Notice of Material Changes

Where we intend to make material changes to how we collect, use, or disclose the personal information of Canadian residents, we will provide active, direct notice to affected individuals prior to or at the time such changes take effect. Such notice will be provided by email, in-account notification, or another appropriate direct means — not solely by posting on our website.