Privacy Policy

This Privacy Policy (the "Privacy Policy") sets out the statement that Flexifloor.ca ("Flexifloor") has implemented to protect the personal information of users and customers of its website (collectively the "Users" or "you"). Flexifloor is a site owned and operated by Distribution BASD. This Privacy Policy aims to inform every User about the handling of personal information that may be collected and used by Flexifloor or third parties. This Privacy Policy also details our commitment and the measures we take to ensure the security of the information collected.

Browsing the Website, simply activating any of the hyperlinks, or making a purchase constitutes acceptance of this Privacy Policy and implies your understanding of its scope.

WITHOUT LIMITING THE GENERALITY OF THE ABOVE, THE USER CONSENTS THAT FLEXIFLOOR MAY COLLECT, USE, PROCESS, AND DISCLOSE THEIR PERSONAL INFORMATION IN ACCORDANCE WITH THIS PRIVACY POLICY.

As Flexifloor reserves the right to revise the terms of this Privacy Policy at any time without prior notice, you are invited to periodically consult this Privacy Policy. Use of the Website and/or purchase following the posting of a modified version of the Privacy Policy will constitute acceptance of the changes made.

This Privacy Policy is subject to the applicable provincial and federal laws in the province of Quebec (Canada).

SUMMARY

• What? : We only collect the necessary personal information that identifies you for the purposes provided in this Privacy Policy.
• Means? : When you browse our Website, complete a transaction, or contact us, we collect certain personal information about you.
• Why? : To identify you and provide products and services, enable you to benefit from our online services, allow you to receive newsletters, and improve our products, services, and operations.
• Third parties with access? : Your personal information may be disclosed to our web hosting and transactional service providers, shipping and delivery providers, payment solution providers, financing providers, third-party cookie providers for our Websites, Flexifloor’s manufacturers and partners for warranty services for certain products, and nonprofit organizations affiliated with or partnered with Flexifloor for fundraising activities.
• Where? : Your personal information is stored on our servers or those of our providers in Quebec, but some of our providers operating outside Quebec may have access to your personal information.
• Your rights? : You have the right to withdraw your consent and request access to or correction of your personal information that we hold, subject to your legal or contractual obligations.

We only collect the personal information described below for the purposes mentioned in this Privacy Policy.

Automatic Collection
When you access one of our Websites, ourservers may automatically collect personal information about your onlineactivities, such as your browsing history on our Website, your search history,and other information obtained when you interact with our Website andadvertisements, which are collected via cookies (See the Other ImportantConsiderations section).

We also collect certain non-personal information related to your interaction with our website through Google Analytics. This data does not contain any sensitive information and does not allow us to identify you. This includes the following data:

• IP address and corresponding location
• Hardware details of the device used to visit the site and operating software
• Content that the user views on our site
• Links clicked on by users while browsing our site

We do not collect any personal information automatically.

Non-Automatic Collection
All personal data is collected only when our users voluntarily provide it to us. When you create an account and/or complete a purchase and/or contact us by any means, we may collect the following personal information:

• Identification: first name, last name, title, billing address, shipping address, phone number, email address, age, IP address, and ID for certain types of transactions.
• Transaction: credit card numbers or a signature may be collected, used, and disclosed to the payment solution provider as well as the financing provider.
• Geolocation: when you enable these features, we collect certain data about your location through our Website. This data is collected to provide you with relevant information or promotions related to your location, and we may compare your geolocation data with the IP address collected when you visit our Website to estimate the general geographic area where you are located.

Under 13 Years of Age
If you are under 13 years of age, you may browse our Website, but you may not make purchases. You also cannot register as a user or use a service that requires you to provide personal information. We do not wish to collect personal information about minors under 13 years of age.
If you register, and we learn you are under 13, we will delete your registration information and notify you via email.

Identification, Profiling, and Location
With your consent and if you enable these features, we may use some of your personal information for identification, profiling, and location purposes. Their collection and use are disabled by default. They can be enabled by approving the option in the cookie pop-up presented when you access our Website. You may also authorize this function in the privacy settings in your customer space.

Please note that we only collect data that helps us achieve the purpose stated in this Privacy Policy. We will not collect additional data without informing you beforehand.

Products and Services
We use this data for statistical analysis to improve the Website and its online visibility. When consent is obtained, we send promotional offers and targeted communications.
We also use your personal information to provide you with products and services, including:

• Providing and delivering products and services, fulfilling your orders and transactions, and managing returns and exchanges;
• Processing and tracking your purchases, payments, financing, returns, warranties, and discounts;
• Creating and managing your customer space and providing the benefits associated with creating your customer space;
• Organizing contests and promotions.

We may use your personal information to improve our products, services, and operations, including:

• Market research, developing new products and services, analyzing our product and service offerings;
• Efforts to improve customer experience and developing personalized offers;
• Effectively managing our advertising and marketing;
• Maintaining, developing, and optimizing the functionality and overall performance of the Website.

Newsletters
We may use your personal information to contact you by email with newsletters regarding contests, offers, promotions, and news from Flexifloor.

Other Purposes
We may use your personal information for the following purposes:

• Evaluating any application submitted to one of our job postings or by any person wishing to submit an unsolicited application;
• Complying with applicable legal and regulatory provisions.

Your personal information may be disclosed to the following entities:

• Our web and transactional service providers;
• Our shipping and delivery providers;
• Flexifloor’s manufacturers and partners for customer service and after-sales service, if applicable, for the execution of warranties for certain products, or with whom Flexifloor has direct shipping agreements;
• Our marketing service providers;
• Our payment solution provider (the "Secure Payment Platform Provider");
• Our financing provider when you choose to finance your purchase;
• Third-party cookie providers for our Websites

Additionally, for payments made through the Secure Payment Platform Provider’s system, which constitutes a separate and external database from the Site, you will need to provide your card number, expiration date (if applicable), registered cardholder's name, and any other information necessary to complete a product purchase order.

If Flexifloor permits it, you will have the option to save payment information in your account with the Secure Payment Platform Provider at your discretion. You acknowledge and agree that any information and personal information related to payment for an order, which may be entered and saved in your account on the Secure Payment Platform Provider’s secure transaction system, will then be held by the Secure Payment Platform Provider and not by Flexifloor.

We may disclose user data collected to any member of our organization reasonably needing it to achieve the goals outlined in this policy.

Disclosure Outside Quebec
It is possible that Flexifloor will disclose your personal information to third parties, belonging to the categories listed above, who operate outside Quebec. For this purpose, Flexifloor conducts a privacy impact assessment with each of these third parties and ensures that when your information is disclosed outside Quebec, it benefits from adequate protection, particularly in regard to generally recognized personal information protection principles. Therefore, your personal information will sometimes be disclosed outside Quebec.

Legally Permitted Disclosures
We may also disclose your personal information without consent in circumstances where permitted or required by applicable law.

Your data is stored in a secure, controlled environment. Flexifloor employs SSL protocols and robust security measures, including two-factor authentication, to prevent unauthorized access. We are committed to not selling or sharing the data collected with any third party, except where required by law or explicitly stated in this policy.
In line with our secure data retention and destruction procedures, we only retain personal information for the duration necessary for the purposes intended and to meet our legal obligations. Afterward, the personal information will be securely and confidentially destroyed.

We have implemented physical, technological, and administrative safeguards to protect your personal information according to its sensitivity and to mitigate the risk of unauthorized and/or illegal access, use, disclosure, and destruction. Without limiting the generality of the foregoing, we:

• Backups: Perform administrative, technical, and physical backups designed to protect personal information from accidental, illegal, or unauthorized destruction, loss, alteration, disclosure, or access, as well as any other incidents related to information protection;
• Minimization: Consciously limit the personal information we collect. We only collect the personal information necessary to fulfill the purposes stated in this Privacy Policy;
• Retention Schedule: Maintain a retention schedule to ensure that your personal information will be promptly destroyed upon completion of its purpose or the expiration of any applicable legal retention period;
• Privacy Incident Register: Maintain a register of privacy incidents in compliance with applicable legislation. In the event of a privacy incident that presents a risk of serious harm to you, we will take necessary steps to notify you, in accordance with applicable legislation;
• Access Logging: Monitor digital access to your personal information through logging of operations performed regarding them;
• Access Limitation: Restrict access to your personal information to employees who need it to pursue any of the purposes listed in this Privacy Policy;
• Technical Measures: Deploy technical measures such as encryption, firewalls, passwords, and anti-virus software to protect the personal information collected, used, or stored in electronic format;
• Framework and Policies: Have adopted and monitor the application of a framework governing the protection of personal information throughout its life cycle, as well as internal policies and procedures that define the role and responsibilities of Flexifloor personnel regarding the management of personal information;
• Security Appendices and Confidentiality Commitments: Require security appendices including strict security measures from our service providers to protect your personal information and require each of our employees and representatives with access to your personal information to sign a confidentiality agreement.

However, no method of Internet transmission or electronic storage is 100% secure. Therefore, we cannot assure or guarantee the security of the personal information you transmit to us.

There will always be risks associated with any transmission of personal information. We cannot guarantee that such information will not be accessed, obtained, disclosed, altered, or destroyed as a result of a breach of our physical, technical, or administrative safeguards.

If you have reason to believe that your personal information has been compromised, please contact us at the contact details provided in the "CONTACT" section of this Privacy Policy.

In the event of a breach of your personal data, we commit to informing you and the Commission d'Accès à l'Information du Québec.

If you are a resident of Quebec, in accordance with Law 25, you have specific rights regarding your personal data, including, but not limited to:

• Right to be informed
• Right of access
• Right to rectification
• Right to data portability
• Right to withdraw or modify your consent

You have the right to object to the use of your data and to withdraw it. To exercise these rights, contact our Data Protection Officer through the CONTACT section of this policy.
When submitting a request to withdraw consent, you will be asked to provide appropriate identification or otherwise identify yourself. However, if you withdraw your consent to certain uses or communications of your personal information, we may no longer be able to provide certain products and/or services, or the quality of our products and/or services may be affected. We will inform you of the consequences of your choice before accepting your request to withdraw consent.

Right of Access
You have the right to access your personal information. As such, you can request us to:

• Inform you of the existence of personal information that concerns you;
• Provide you with communication of the personal information concerning you;
• Allow you to consult the personal information we hold about you by allowing you to view it on-site during normal business hours or remotely and obtain a copy; and
• Communicate to you any information collected from you in a structured, commonly used technological format. You can also ask us to communicate your personal information to any person or organization authorized by law to collect personal information.

Reasonable fees may be charged for the transcription, reproduction, or transmission of your personal information. We will inform you of these fees before proceeding with the transcription, reproduction, or transmission of the personal information.

If you are a registered user of our Website, you can view or update your registration information by logging into your client area. You can also make a written request to our Data Protection Officer at the address provided in the CONTACT section of this Privacy Policy. When submitting a request to access your personal information, you will be asked to provide appropriate identification or otherwise identify yourself.

Modification or Withdrawal of Your Personal Information
You can also send us a request to modify your personal information to ask us to correct your personal information in the following circumstances:

• Your personal information is inaccurate;
• Your personal information is incomplete;
• Your personal information is ambiguous;T
• The collection, communication, or retention of your personal information was not authorized by law.

You can also ask us, in a request for rectification, to destroy any personal information collected or retained if their collection, communication, or retention of your personal information was not authorized by law.
If we grant your rectification request, you can ask us to provide you with a copy of any modified or added personal information, or, as the case may be, a certificate of the removal of personal information.

To make a rectification request, you must make a written request to our Data Protection Officer at the address provided in the CONTACT section of this Privacy Policy. When submitting a rectification request, you will be asked to provide appropriate identification or otherwise identify yourself.

Response Time
We have a legal obligation to respond (positively or negatively) to any access or rectification request within 30 days of receiving it and confirming your identity. We may refuse any request in accordance with applicable laws regarding the protection of personal information.

We and our service providers may use cookies or other technologies to facilitate navigation on our Website, perform analyses, present relevant advertisements, especially regarding products and/or services that may interest you (subject to certain restrictions described below), and remember certain information when you use our Website.

The information collected by cookies and other technologies may include your IP address, geolocation information, device information, browsing activities, and search engine referrals. When you enable these features, our advertising and analytics partners may collect precise geolocation information to provide targeted advertising and analysis services. Cookies are generally managed by third parties, and some of these cookies will communicate personal information outside Quebec.

You can manage the processing of your personal information by cookies by changing your browser settings. For more information on how to change your browser settings, you can refer to the information provided by them. However, refusing to accept cookies could impair or limit your access to certain features of our Website. Our Website includes a banner allowing the acceptance of your consent to cookies, the settings of which can be changed at any time by clicking on the "COOKIE SETTINGS" button.

For more information about our use of cookies, please see our Cookie Policy.

Third-Party Websites
Flexifloor may provide hyperlinks to third-party websites. These third-party websites may contain terms and conditions and privacy policies that differ from those of Flexifloor. Flexifloor is not responsible for the personal information and data collected, used, or disclosed by any third-party website and expressly disclaims any responsibility for such collection, use, disclosure, retention, access, correction, and deletion.

What is Shopify?
Our store is hosted on Shopify Inc., the online transactional platform that allows us to sell our products to you.

Your data is stored in Shopify’s data storage system, databases, and the general Shopify application. Your data is kept on a secure server protected by a firewall.

How are my payment data handled on Shopify?
If you make your purchase through a direct payment gateway, Shopify will store your credit card information. This information is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as necessary to complete your order. Once your order is finalized, your purchase transaction information is deleted. All direct payment gateways adhere to the PCI-DSS standard, managed by the PCI Security Standards Council, which is a joint effort of companies such as Visa, Mastercard, American Express, and Discover.

The PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more information, please refer to Shopify’s Terms of Service or Shopify’s Privacy Policy.

What data is collected by Shopify's third parties? In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to perform the services they provide to us.

However, some third-party service providers, such as payment gateways and other payment transaction processors, have their own Privacy Policies regarding the information we are required to provide to them for your purchase transactions. With respect to these suppliers, we recommend that you carefully read their Privacy Policies so that you can understand how they will treat your personal information.

Keep in mind that some suppliers may be located or have facilities located in a different jurisdiction than you or us. If you decide to proceed with a transaction that requires the services of a third-party supplier, then your information may be governed by the laws of the jurisdiction in which that supplier is located or the jurisdiction in which its facilities are located.

Once you leave our Website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Website's Terms and Conditions of Sale and Use.

What data is processed by third parties on our website?
We undertake not to market the personal data we collect about you. However, we may share your personal data with third parties in the following cases

- in the event that our Website requires the services of third parties for its technical maintenance. These third parties will only have access to personal data to the extent necessary to ensure such processing and to secure our Website. Our Web Site's technical service providers are chosen for their expertise and reliability, and are bound by the instructions we give them to protect the integrity and confidentiality of your personal data. In all cases, we authorize these service providers to use your personal data only to the extent necessary to provide our services and in compliance with applicable law;

- with the analytics solution service (Eg. Google Analytics), as described in this Policy;

- in the event of a change of control of Flexifloor;

- to comply with obligations conferred by law, including in connection with legal proceedings; to respond to a subpoena, warrant, court order or other legal process; to respond to an investigation or request from law enforcement authorities.

What about external links on our Web site?
You may leave our website by clicking oncertain links on our site. We assume no responsibility for the privacypractices of these other sites and recommend that you read their privacypolicies carefully.

What information from my social networks is shared?
You may have the opportunity to interact with our content or our team through external social networking websites, plug-ins and applications. When you do, you allow us access to certain information related to your social media accounts (name, username, email address, profile photo, gender, etc.) to offer you content or as part of the operation of the website or plug-in. When we obtain information from your social media accounts, we use it to personalize your experience on our Web Site and on social networking Web sites and plug-ins, in order to offer you other products or services you may request.

Sezzle is a payment platform that allows customers of our Website to purchase products today while paying for them later through an initial installment followed by staggered payments (the "Order"). To start using Sezzle, you must open a Sezzle account.

To become a User of Sezzle Services, you must create a Sezzle User Account ("Sezzle Account" or "your Account") and accept the terms and conditions of use of the Sezzle platform, which are available at the following link: https://legal.sezzle.com/user/en-ca/

By accepting the terms and conditions of use of the Sezzle platform and confirming the financing of any purchase made via our Website, you grant Sezzle the right to collect any unpaid portion of the financed purchase. All usage fees related to account reactivation and payment schedule modifications are solely intended to: (i) keep your Sezzle account active; and (ii) allow you to modify a payment schedule, none of these fees being required as part of your Promise to Pay. Sezzle does not charge fees for account reactivation and payment rescheduling where prohibited by law.

Before completing a transaction on your behalf via Sezzle Services, Sezzle will secure your Promise to Pay for each Order by displaying all applicable terms for that Order and obtaining your consent to said terms, including your promise to pay the amount of goods and services financed by the Sezzle authorized Merchant or Sezzle ("Promise to Pay"). When you submit an order and a Promise to Pay, these terms are not binding on Sezzle until they have been accepted by Sezzle. Sezzle's acceptance of your Promise to Pay will be evidenced by an email return from Sezzle to your email address indicating that your order and corresponding financing have been approved.

For any complaints or other questions regarding the User's personal information or the application and interpretation of this Privacy Policy, you can contact Flexifloor's Privacy Officer by mail, at the email address, and at the phone number below:

Privacy Officer
8837 Rue du Champ-d'Eau,
Saint-Léonard, QC, H1P 3A6
privacy@flexifloor.ca

Our privacy policy was updated on October 30, 2024.

For any questions regarding this privacy
policy, you can contact our Data Protection Officer.
We may amend this Privacy Policy from time to time, in accordance with applicable law.

We will notify you of any changes to this Privacy Policy by indicating at the beginning of the policy the date of the last modifications. If we have your email address, we will also notify you by email of any changes to this Privacy Policy.