If this Policy changes in the future, we will post an updated version on our website at www.bioenterprise.ca (the “Website”). We recommend that you check this Website periodically in order to review our current Policy. You can tell if this Policy has changed by checking the effective date that appears at the bottom of this Policy. Depending on the circumstances, we may also decide to send you a notice (in other ways in our discretion, such as via email or other contact information you have provided) that the Policy was changed. If you continue to use our Services after the Policy changed or notice of the change has been given, you will be deemed to have accepted such changes.
You may withdraw your consent at any time, unless such consent would frustrate the performance of a legal obligation. Your withdrawal may restrict our ability to provide the Services.
There are limited circumstances in which we may collect, use or disclose personal information without your consent. They are:
- when the collection, use or disclosure of personal information is permitted or required by law;
- in an emergency that threatens an individual’s life, health or personal security;
- when the personal information is available from a public source;
- when we require legal advice from a lawyer;
- for the purposes of collecting debt;
- to protect ourselves from fraud; or
- to investigate an anticipated breach of an agreement or a contravention of law.
How We Collect Personal Information
Like most website operators, we collect personal information about you from a variety of sources. We only collect information by lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used. We collect information from you in the following ways:
- directly from you (when you sign up for or use our Services);
- from our business partners including members of the Agri-Technology Commercialization Centre, Oilseed Innovation Partners and Ontario Agri-Food Technologies, goverment offices, and third party services providers and sources; and
- automatically from devices that you use to connect to our website and apps.
Types of Personal Information We Collect
We may ask you for personal information. This is information that is considered “identifying information”, as it can personally identify you. We only request personal information relevant to providing you with a service, and only use it to help provide or improve the Services. Depending on the service being offered, this information may include:
- contact information (for example, when you sign up, request information from us, submit opinions, or otherwise contact us, we collect information such as your name, email address, address, date of birth, phone numbers, work address, gender and identification as minorities;
- social media profiles;
- authentication information;
- Canada Revenue Agency business number;
- communications with us;
- payment information (which is used to process any payments of fees for the Services);
- transaction information and information/details related thereto;
- third party services (if you link to or connect with third party services, they may send us information, all of which will be controlled by such third party);
- usage information (we collect information about your interactions with the Services, such as searches, engagement, language preferences, and location information);
- log data (this information includes details about how you use the Services, IP addresses, access times (time and date of your visit), time spent on the page, your browser type and version, device information, pages you view before and after using the Services, links to third party applications, and hardware and software information);
- quality assurance and customer service (your customer service emails with us may be logged, for quality assurance and customer service purposes such as to assist in addressing your inquiries, troubleshooting, training and analytics to identify trends and make improvements to our Services and customer service. As part of the logging of the emails, we will collect information like the identity of the sender of email, the date and time of the email, and the subject and resolution of the issue); and
- other sources (to the extent permitted by applicable law we may receive additional information about you, such as demographic data or fraud detection information and warnings, or other information about you from partner networks).
When you visit our websites, our servers may automatically log the standard data provided by your web browser as provided for above. This data is considered “non-identifying information”, as it does not personally identify you on its own. We may also collect data about the device you are using to access our websites. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.
Some of this information would not by itself identify you to us or be personally identifiable and is therefore considered non-personal information. If we combine any such non-personal information with other personal information available to us, the combined information will be treated as personal information in accordance with this Policy.
Use of Information
- verifying identity and authenticating information;
- payment processing;
- to provide the Services and operate our business;
- to understand and meet your needs and preferences, and/or to provide you with our Services, for example:
- for purposes related to the billing, activation, provision, maintenance, support, trouble shooting, resolving of disputes, deactivation, upgrade, or update of Services;
- to process and fulfill your order, send you emails to confirm your order status and shipment, send you Services or goods you order, and allow you to pay for Services and goods you order;
- to ensure Services are technically functioning as intended and to help identify and troubleshoot issues;
- to fulfill or enforce any agreements or notices we provide and are associated with a particular Services (“Notices”);
- to manage or respond to your inquiries or complaints;
- to develop new and enhance existing Services including to communicate with you about them using various means, for example to make available or send to you upgrades or updates, or notices of upgrades or updates of Services; to send email notifications and reminders related to the Services, including updates about Bioenterprise Corporation, our activities, services and program offerings and news that may be made available to you (which you may opt out of);
- sending newsletters or other marketing information and from time-to-time, promotional content that we believe may be of interest to you – if you wish to opt out of receiving any of this content, you can follow the “unsubscribe” instructions provided at the bottom of the email correspondence from us;
- establishing and maintaining relationships with our users;
- optimizing experiences by performing analytics and conducting research;
- detecting fraud, abuse, security breaches and other harmful activity;
- conducting investigations;
- resolving disputes and enforcing agreements and our policies; and
- meeting and complying with legal and regulatory requirements:
- to respond to court orders, warrants or other lawful requests or legal processes;
- to provide emergency assistance in situations that may threaten the life or physical safety of you or others; or
- for any other purposes for which you have consented, such as those that may be set out in Notices, and other purposes as permitted or required by any applicable law.
How We Disclose Personal Information
- within our organization;
- with any other of our business partners who carry out tasks on our behalf (each provider has its own rules and privacy policies and we encourage you to review these rules and policies);
- at your request or with your consent;
- with third parties involved in providing funding to ATCC which may include Agriculture and Agri-Food Canada (AAFC) and Ontario Ministry of Agriculture and Rural Affairs (OMAFRA) (third party providers have their own rules and privacy policies and we encourage you to review these rules and policies);
- with other third party services providers such a Google Analytics and third party service providers (we may use third party service providers to provide the Services and we share your information with them so they may carry out tasks on our behalf, each provider has its own rules and privacy policies and we encourage you to review these rules and policies);
- certain information may be shared with third parties or published when you follow links to third party websites, we do not own or control these third parties and when you interact with them you may be providing information to them directly – such parties will have their own rules and policies in respect of the collection, use and disclosure of personal information and we encourage you to review these rules and policies;
- certain aggregated and anonymized information may be shared publically – we do not disclose the specifics of personal information publicly, but we may share aggregated and anonymous versions of this information, for example, in website and customer usage trend reports;
- publically, for example, information you choose to share may be visible to the public and may be indexed through third party search engines – we do not control the practices of third party search engines;
- with any other of our business partners who carry out tasks on our behalf (each provider has its own rules and privacy policies and we encourage you to review these rules and policies);
- with your employer, if your employer has provided you with access to the Services (we may share any and all information about your use of the Services with your employer or its agents);
- as necessary to complete any transactions while using our Services;
- to respond to a subpoena, order, legal process, or government request;
- to protect, establish or exercise our legal rights or defend against legal claims;
- to investigate, detect, suppress, prevent or take action regarding illegal or prohibited activities, suspected fraud, situations involving potential threats to the reputation or physical safety of any person;
- as otherwise required by law, for example and without limitation, pursuant to an access to information request; or
- if we are to be sold, merged, or amalgamated or substantially all of our assets are to be sold or disposed of, your personal information may be transferred to a potential purchaser if, and to the extent necessary, it is required for the purposes of deciding whether to proceed with the proposed transaction and completing it. If such a sale, merger, acquisition, or disposal is completed, we will use reasonable efforts to direct the transferee to use personal information you have provided to us in a manner that is consistent with this Policy. Following such a sale or transfer, you may contact the entity to which we transferred your personal information with any inquiries concerning the processing of that information.
Aggregated and Anonymized/De-Identified Information
Notwithstanding anything to the contrary contained in this Policy, as provided for above, we may remove personal identifiers from your information and maintain and use it in a de-identified form that may be combined with other information to generate aggregated information. Such de-identified and/or aggregated information will be deemed to be owned by us and we shall have unrestricted title, rights, and interest to the de-identified and/or aggregated information which may include, without limitation, the right to use, distribute, transmit, transfer, license, trade, rent, share, assign, and sell the de-identified and/or aggregated information. We will retain your personal information as long as necessary for the fulfillment of the identified purposes or as otherwise necessary to comply with applicable laws.
Third-party Access to Information
As mentioned above, we use third party services for analytics tracking, user authentication, marketing and promotion of our services, content marketing, and email marketing. These services may access our data solely for the purpose of performing specific tasks on our behalf. We do not share any personally identifying information with them without your explicit consent. We do not give them permission to disclose or use any of our data for any other purpose.
We may, from time to time, allow limited access to our data by external consultants and agencies for the purpose of analysis and service improvement. This access is only permitted for as long as necessary to perform a specific function. We only work with external agencies whose privacy policies align with ours.
We will refuse government and law enforcement requests for data if we believe a request is too broad or unrelated to its stated purpose. However, we may cooperate if we believe the requested information is necessary and appropriate to comply with legal process, to protect our own rights and property, to protect the safety of the public and any person, to prevent a crime, or to prevent what we reasonably believe to be illegal, legally actionable, or unethical activity.
We do not otherwise share or supply personal information to third parties. We will never sell, rent or otherwise distribute your personal information to marketers or third parties.
You may update your communication preferences anytime by writing us at email@example.com.
The Website and Services are not intended for use by children under 18 years of age. We do not knowingly collect or use any personal information from any children under 13 years of age. If we become aware that we have unknowingly collected personal information from a child under the age of 13, we will make commercially reasonably efforts to delete such personal information from our database.
Data Processing, Storage and Access
The personal information we collect is stored and processed in Canada, or where we or our partners, affiliates and third-party providers maintain facilities. We only transfer data within jurisdictions subject to data protection laws that reflect our commitment to protecting the privacy of our users.
For customers and subscribers from the European Union, please note that personal information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area.
We only retain personal information for as long as necessary to provide a service, or to improve our Services in future. While we retain this data, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.
You may request access to your personal information or request to know how we use it or to whom it has been disclosed, subject to limited exceptions prescribed by law. Requests should be made in writing. We will respond to requests within 30 days or provide notice if we require longer. Fees may be charged to access information, but you will be notified of such in advance so you can choose whether or not to proceed. If you request your personal information be deleted, or where your personal information becomes no longer relevant to our operations, we will erase it from our system within a reasonable timeframe. If a request is refused, you will be notified of the refusal in writing and provided with reasons for the refusal.
Security of Personal Information
We aim to provide you with a safe experience. We have in place certain physical, technical, and administrative safeguards designed to appropriately protect the security and privacy of your personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. Please note, however, that we cannot guarantee that the measures we maintain will guarantee the security of the information.
We only retain personal information for as long as necessary to provide a service, or to improve our Services in future.
We limit access to your personal information within Bioenterprise to individuals with a need to know.
Your Decisions About Your Personal Information
At any time you can contact us to: stop receiving emails from us; review the personal information held by us in connection with your account; withdraw your consent for our use and disclosure of your information; request a list of third parties to which we may have provided your personal information; close your account; and amend your personal information, by writing to us at Bioenterprise Corporation, Suite 200, 120 Research Lane, Guelph ON N1O 0B4. You can always unsubscribe from receiving promotional emails from us by simply clicking the “unsubscribe” link provided at the bottom of every promotional email from us. If you contact us to do any of the things listed above, we may require you to provide sufficient personal information to allow us to identify you and tell you about the existence, use and disclosure of your personal information and this personal information will only be used for this purpose. If you contact us about your personal information, we will respond to your request within a reasonable time and at minimal cost or no cost to you in accordance with applicable laws. If a request is refused, you will be notified of the refusal in writing and provided with reasons for the refusal.
Generally, you may withdraw at any time your consent for us to collect, use, and disclose your personal information in accordance with this Policy, subject to legal or contractual restrictions and reasonable notice. As such, we may continue to collect, use, and disclose your personal information as may be required to provide you with our Services, and to the extent that we are contractually obligated to do so or as necessary to enforce any contractual obligations you may have with us. If you refuse to provide us with the information we require or later contact us to withdraw your consent for us to use and disclose your personal information, we may no longer be able to provide you with our Services.
Links to Other Sites
Limits of our Policy
Our websites may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices. We recommend that you take steps to review all privacy and other terms and policies of any third party.
Changes to this Policy
Your Rights and Responsibilities
As our customer or subscriber, you have the right to be informed about how your data is collected and used. You are entitled to know what data we collect about you, and how it is processed. You are entitled to correct and update any personal information about you, and to request this information be deleted. You may amend or remove your account information at any time, by using the tools provided in your account control panel.
You are entitled to restrict or object to our use of your data, while retaining the right to use your personal information for your own purposes. You have the right to opt out of data about you being used in decisions based solely on automated processing.
Feel free to contact us at firstname.lastname@example.org if you wish to exercise any of these rights or have any concerns or questions about how we handle your data and personal information.
Effective April 1, 2018