Canada Privacy Rights

Effective Date: August 15, 2025

This section supplements the information provided in the generally applicable portion of our Privacy Policy and applies solely to individuals that are residents of Canada or are otherwise covered under any applicable Canadian federal or provincial privacy laws or regulations, including but not limited to the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”), Alberta’s Personal Information Protection Act, and British Columbia’s Personal Information Protection Act. PAR is committed to collecting, using, and disclosing your personal information in accordance with applicable laws and regulations. Terms in this section are to be understood in a manner consistent with applicable Canadian privacy laws including the definitions of such terms in the PIPEDA. Such terms may have a different definition or meaning in other portions of the Privacy Policy because Canadian privacy laws may not apply to those sections.

CONSENT

By using our Sites and/or Products and Services, you accept the terms of the Privacy Policy and consent to the collection, use, processing, disclosure and retention of your information as described in the Privacy Policy. Typically, we will provide notice of the purpose for collecting your personal information and/or seek your consent (which may be express or implied, depending on the nature and sensitivity of the personal information) in line with applicable law at the time that we collect your personal information. In certain circumstances, we may collect non-sensitive personal information automatically. In general, you may change or withdraw your consent at any time subject to legal or contractual obligations and providing reasonable notice. Your withdrawal of consent may impact the ability of PAR to provide you with some or all of the Products and Services. Upon receiving notice that you would like to withdraw your consent, we will inform you of the likely consequences of your withdrawal of consent.

PAR will not collect, use, or disclose your personal information except for the purposes we have identified for collection (including those listed in “HOW WE USE YOUR PERSONAL INFORMATION” section of the Privacy Policy and/or identified at the time of collection), unless we have received your consent (which may be express or implied, depending on the nature and sensitivity of the personal information) or the processing is authorized without consent.

ACCESSING AND CORRECTING PERSONAL INFORMATION

If you are located in Canada, you have the right to request access to and to correct the personal information that we hold about you, subject to certain conditions and limitations. Subject to the applicable law and the nature of your relationship with PAR, this may include a right to review, correct, update, suppress, delete or otherwise limit our use of your personal information that has been previously provided to us. You may also have the right to access information about the ways in which your personal information is or has been used and the names of individuals and/or organizations to which your information has been disclosed. To submit individual rights requests, please refer to the “CONTACT INFORMATION” section of the Privacy Policy and specify what information you would like to access or have corrected. We will respond to your request as soon as reasonably practicable, and within the time period required by law. If we correct your information, we will also send the corrected information to organizations to which we disclosed the information during the year before the date the correction was made.

Please note that in certain circumstances, we may refuse to act or impose limitations on your rights, as permitted by the applicable law. If we cannot provide you with access to your personal information or are unable to correct your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions, and outline further steps available to you. If we refuse to act on a request to correct your personal information, we will nonetheless annotate the information, noting the correction that was requested but not made.

In certain cases, depending on the nature of your request, there may also be residual information that will remain within our databases and other records, which, due to applicable law or as part of our Products and Services that are in the process of being carried out, will not be removed or changed. We will also retain information relating to your request for recordkeeping and compliance purposes.

VERIFICATION

In order for you to exercise your privacy rights, we will need to obtain certain information from you to verify your identity. For a report of the specific personal information we have collected about you, you must provide us with three of the following pieces of information in order for us to verify your identity:

full name;
email address;
loyalty club number with our Business Customer;
zip code; or
mobile telephone number.

You also must provide us with a signed declaration, under penalty of perjury, that you are who you say you are.

For a report of the categories of personal information we have collected about you, for a request to delete your personal information, or for a request to opt out of the sale of your personal information, you must provide us with two of the above-referenced pieces of information in order for us to verify your identity.

Where necessary, we may request additional information about you so that we can verify your identity. Where we did not already hold that information, we will use it only for the purpose of verifying your identity and to process your request.

INTERNATIONAL TRANSFERS

We may process, store, and transfer your personal information in and to a foreign country, with different privacy laws that may or may not be as comprehensive as Canadian law. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of that country may be able to obtain access to your personal information through the laws of the foreign country.

Specifically, the personal information collected as part of the Products and Services or as otherwise contemplated by our Privacy Policy is primarily processed and stored in the United States. However, as PAR is an international organization with business processes, offices and third parties around the world, your information may be sent to any other country in the world where we do business or maintain third-party relationships. When you provide personal information to us through the Products and Services and as part of our Privacy Policy, you consent to the transfer of your information and the processing of your information in this manner. Any international transfers made will be in accordance with our Privacy Policy and the applicable law.

We also impose appropriate safeguards for the transfer of personal information among our affiliates and to third-party service providers in various jurisdictions and have implemented appropriate contractual arrangements or other measures for such purposes.

To obtain a current list of the countries where personal information subject to our Privacy Policy is collected, used, disclosed and/or stored, including with our service providers, as well as the purposes for which our service providers outside Canada have been authorized to collect, use or disclose personal information for or on behalf of PAR, please refer to the “CONTACT INFORMATION” section of our Privacy Policy.

FILE A COMPLAINT

If you believe any privacy laws relating to the protection of your personal information or the practices described in this section have not been respected, you may file a complaint with our Assistant General Counsel, Privacy by email at privacy@partech.com.

We will investigate all complaints. If, after an investigation, your complaint is deemed justified, PAR will take appropriate steps to correct the situation, including, if necessary, amending our policies and practices. If you are not satisfied with the results of the investigation or the corrective measures taken by PAR, you may exercise the remedies available under law by contacting the Office of the Privacy Commissioner of Canada at the address below:

Office of the Privacy Commissioner of Canada

30 Victoria Street

Gatineau, Quebec

K1A 1H3

https://www.priv.gc.ca

If you reside in the Province of Alberta, you may also contact the Office of the Information and Privacy Commissioner of Alberta at the address below:

Office of the Information and Privacy Commissioner of Alberta

#410, 9925 – 109 Street NW

Edmonton, Alberta

T5K 2J8

https://www.oipc.ab.ca/

If you reside in the Province of British Columbia, you may also contact the Office of the Information and Privacy Commissioner for British Columbia at the address below:

Office of the Information and Privacy Commissioner for British Columbia

PO Box 9038 Stn. Prov. Govt.

Victoria B.C.

V8W 9A4

https://www.oipc.bc.ca/

We will retain personal information used to make a decision that directly affects you for at least one year after we make that decision.

Search PAR

Canada Privacy Rights

Tiffany Disher