What is Personal Information?
The Personal Information We Collect
We collect and maintain different types of personal information about you including:
- Contact and identification information, such as name, address, telephone number, e-mail address and date of birth;
- Information about the products and services that we provide to you;
- Credit and financial information, such as payment card or other banking information, including, credit or debit card number and expiration date, bank routing and account number, and other billing, credit and payment history information;
- Customer relationship information, such as customer service requests; and,
- Digital information of the nature described below in “How We Collect Personal Information”.
How We Collect Personal Information
As a general rule, we collect personal information directly from you; however, we may use third parties to collect personal information on our behalf and may otherwise collect personal information from third parties (see “Notification Respecting Third Party Service Providers” below).
We may also collect additional information from your web browsers each time you visit one of our websites. We may collect information about the pages that you visit and the time you spend on each web page or area of the websites, and other actions that you take while using our website. This information may include your Internet Protocol (“IP”) address, the type of browser, the time that your browser was used to access our websites, and the referring website’s address.
Our Internet service providers may also use other standard web-based technologies to analyze the movements of you while accessing our websites. These technologies help us ascertain the effectiveness of our product and service campaigns and marketing programs, allow us to customize the services offered on or through our websites, and help determine the best use for website content, and product and service offerings. Some of this information, including the IP address, may be stored on our Internet service provider’s server logs for extended periods of time.
Notification Respecting Third Party Service Providers
To ask questions or to obtain written information about our policies and practices regarding third party service providers that we use, you may write to our Privacy Officer at the address listed below in the “Contacting Us” section.
The Purposes for Collecting, Using and Disclosing Personal Information
We collect, use and disclose personal information to allow us to manage and develop our business and operations, including to:
- Establish, manage and terminate business relations with you;
- Review the products and services that we provide to you;
- Inform you of our products and services in addition to those that you may have specifically requested;
- Protect us against error, fraud, theft and damage to our goods and property;
- Enable us to comply with applicable law and regulatory requirements;
- Assess the creditworthiness of you if you are requesting or receiving service from us;
- Undertake market research;
- Enforce and otherwise protect our rights and property, such as collecting a debt; and,
Personal information may be used during emergency situations or where necessary to protect the safety of a person or group of persons and may otherwise be disclosed to:
- employees, contractors, consultants and others (including between entities within GFL) who require the information to assist us in establishing, maintaining and managing our business relationship with you, including, for example, third parties that provide services to us or on our behalf or third parties that collaborate with us in the provision of services to you, and
We may also use or disclose personal information without your knowledge or consent where we are permitted or required by applicable law and regulatory requirements to do so. When we collect personal information, the purpose(s) for collecting the information will be communicated before or at the time of collection as required by applicable law and regulatory requirements.
It is important to us that we collect, use and disclose personal information only where we have consent to do so to the extent such consent is required under applicable law and regulatory requirements.
Consent may be express, implied or deemed. Express consent can be given orally, electronically or in writing. Implied consent is consent that can reasonably be inferred from your action or inaction. For example, when you accept our products or services, we are entitled to assume you consent to the collection, use and disclosure of your personal information for purposes related to your acceptance and use of those products or services, or for other purposes identified at the relevant time. Deemed consent is consent we are entitled to assume in the event that you do not exercise an opt-out mechanism you are offered.
We may collect, use or disclose personal information without your knowledge or consent where we are permitted or required to do so by applicable law and regulatory requirements.
You may change or withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting the office of our Privacy Officer using the contact information set out below in under “Contacting Us” or via other means and methods used in accordance with applicable law and regulatory requirements. You should know that in some circumstances, a change in or withdrawal of consent may limit our ability to provide products or services to, or acquire products or services from, you.
Safeguarding Personal Information
We will endeavor to safeguard personal information using methods that are appropriate to the sensitivity of the information and in accordance with applicable law and regulatory requirements.
Accuracy of Personal Information
It is important that the personal information we hold is accurate and current. We require you to keep us informed of changes to any personal information. We will endeavor to ensure that all personal information obtained from third parties is accurate; however, we accept no responsibility for any such inaccuracy.
Retaining Personal Information
Except as otherwise permitted or required by applicable law and regulatory requirements, we will endeavor to retain personal information only for as long as is necessary to fulfill the purposes for which the personal information was collected.
Accessing Your Personal Information
You can ask to see the personal information that we hold about you. If you want to review, verify or correct your personal information you should contact our Privacy Officer using the contact information set out below. Please note that any such communications must be in writing.
When making an access request, we require specific information to confirm identity and right to access, as well as to search for and provide the personal information that we hold. We may charge you a fee to access your personal information; but we will advise of any fee in advance. If help is needed to prepare your request, please contact the office of our Privacy Officer (see “Contacting Us” below).
We may not be able to provide access to personal information, where such refusal is permitted or required by applicable law and regulatory requirements. We will inform you of reasons why, subject to any legal or regulatory restrictions, access has been denied.
Privacy Officer (c/o Legal Department)
GFL Environmental Inc.
100 New Park Place #500
Vaughan, ON, L4K 0H9