Privacy Policy

OUR COMMITMENT TO PRIVACY

At Edge Imaging (“Edge”, “we”, “us”, “our”), we are firmly committed to protecting the privacy of our customers. Our pledge is to safeguard any personal information that customers provide to us or that we obtain when providing our services, and to make every reasonable effort to use this information only as customers choose. Edge complies with its obligations under Canada’s federal Personal Information Protection and Electronics Documents Act (PIPEDA) and substantially similar provincial privacy legislation with respect to the personal information it collects from its customers. When obtaining personal information indirectly in the course of providing services to schools and other institutions, Edge safeguards such personal information as required by its institutional clients in accordance with the laws that apply to its clients such as Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA).

SCOPE OF THIS NOTICE

This Privacy notice informs customers of our privacy practices as applied to accessing, browsing and using edgeimaging.ca and its sub-domains, as well as our broader personal information protection practices as an organization. By using our services, customers agree to the terms of this Privacy notice. The notice explains what information we collect from customers or indirectly from our institutional clients and how it is used to continue providing customers and clients with outstanding service. For more information, please contact us at the address listed in the How To Contact Us For More Information section below.

This Privacy Notice outlines in detail:

Consent
Personal information we collect
How we use personal information
How we share personal information
How to access and update your personal information or preferences
How we protect your personal information
Customer choices about receiving email
Privacy protection for children
How we make updates to this policy
How to contact us for more information

THE PRIVACY NOTICE

1. Consent

We are open about the personal information we collect and have implemented mechanisms to enable you to exercise any rights you might have with respect to your personal information. We only collect, use or disclose your personal information with your consent, which may be implied by your use of our services with knowledge of how we will use your personal information, unless we are required or permitted by law to obtain your personal information without consent. When we obtain your personal information indirectly from our institutional clients, we rely on their lawful authority to collect and use your personal information and provide it to us so that we can provide you with services on behalf of our client.

We will ask for your consent if we wish to use your personal information for purposes other than those listed in this Privacy notice or if we are required to expressly request your consent under applicable law, unless an exception to consent applies (e.g. in the event of a lawful government demand for information).

Deletion of Information/Withdrawal of Consent: You may at any time ask us to stop using or delete your personal information using the contact details set out below. We will consider and comply with your request, subject to certain legal and contractual requirements.

2. PERSONAL INFORMATION WE COLLECT

Personal information is information about an identifiable individual and may or may not include business contact information, depending on the jurisdiction.

Our first goal in obtaining personal information is to provide customers with a meaningful, enjoyable, and personal experience on our website and in the course of offering our services. Our second goal is to develop new products and services relevant to current and potential customers. In other words, personal information allows us to provide customers with more of what they prefer and less of what they don’t.

2.1 Information customers explicitly provide

In order to establish an account, purchase products, or to participate in various online programs offered through the Websites or third-party application or software, customers will be asked to provide the following personal information to us: their name, mailing address, e-mail address and phone number. If a customer chooses to purchase products or services, they will be asked to provide a valid credit card number and expiration date along with billing and shipping address information. Credit card and billing information is not held with Edge and is secured by Moneris Solutions. No credit card information is stored on any Edge system or sent electronically using Edge email. Customers can choose not to provide this information but then they might not be able to participate in some of our services or offerings.

On some pages, customers can submit information about other people. For example, if a customer orders a gift online and wants it sent directly to the recipient, a customer will need to submit information such as the recipient’s name, address and phone number. Customers are not permitted to provide us with such information unless they have been expressly authorized by the other person to provide this information to us.

2.2 Information we may collect during the provision of our services

During the provision of our services to schools, we may collect the following information about students from the school administration, for the purposes of providing our products or services:

Any identifying number, symbol or other particulars assigned to a student that may be provided to us by a school or a school board;
Address, telephone number, email address;
Homeroom, grade or teacher assignment; and or
The student’s image, whether individually or in a group format.

Edge will retain this information only for so long as is necessary to fulfill the purpose for which it was collected and to meet our legal and contractual obligations, to a maximum of 5 years to allow customers sufficient time to procure a copy of these irreplaceable memories.

2.3 Information we automatically collect

We use common internet technologies to customize parts of the website for customers.

Cookies: The Websites use “cookies”, a small string of text that is stored on a website user’s computer to permit the website to recognize future visits by that computer. Cookies enhance the convenience and use of the Websites. For example, a cookie would store customers’ user preferences, shopping cart contents and other information that may be used for account identification purposes.
Disabling 3^rd Party cookies: A customer may choose to decline “cookies” if the browser permits but doing so may affect your use of the Websites and ability to access certain features of the Websites.
IP Address: System administration may aggregate IP addresses for analysis and to gather broad demographic information. A computer’s User ID will only be linked to an IP address when customers place an order for the purpose of identifying fraudulent credit card use. Edge may share this information with the financial institution that issued the credit card within which an order was placed or with law enforcement authorities if we determine, or are notified, that the use of the credit card was fraudulent.

2.4 Information provided by third-parties, such as marketing partners and business partners

Sometimes we obtain additional information, from third-parties, such as our marketing partners or other business partners, where permitted or required by law. In addition, we may receive information you may have provided offline in the course of your communications with us. We use this information for the purposes listed below:

Creating photography schedules based on customers preferred appointment bookings.
Providing customers with information related to photo day, their account and product purchases.
Communicating with customers.

2.5 Retention of personal information

Unless specified in section 2.2 above, Edge will retain your personal information only for so long as is necessary to fulfill the purpose for which it was collected and to meet our legal and contractual obligations. Where personal information is no longer needed, it will be securely destroyed or permanently anonymized or de-identified.

3. HOW WE USE PERSONAL INFORMATION

3.1 Customer information usage

Customer information will be used to conduct business, such as:

providing our products and services
creating and maintaining accounts
processing, fulfilling and following up on orders
shipping and delivery of products
answering customer e-mails
communicating with customers

sending customer information to friends, families and colleagues on customers’ behalf (when expressed consent has been given)
sending surveys
notifying customers about promotions and other information regarding our products and services (see the section below entitled Customers choices about receiving e-mail)

3.2 To Improve Process and Experience

Customer Experience

We also use this personal information to provide customers with information related to their account, the products or services customers have purchased from us, to better understand their needs and interests, to improve our service and to personalize communications and a customer’s web experience. Note that we may also use de-identified or aggregate data to train or test third-party analytics software for the purposes of improving our services, customer offering and overall experience.

Improving Business Process

We may use your personal information in order to improve our production processes, including through the use of innovative technologies, such as facial recognition technology to enable event attendees to access only the photos in which they appear.

4. HOW WE SHARE PERSONAL INFORMATION

A customer’s personal information will not be rented or sold to any third-party. Edge may share this information with the following:

Companies who work on our behalf: We partner with other companies to: 1) perform business support and information systems management functions; 2) provide specialty print services (such as some yearbook formats, or specialty items such as mugs); 3) provide shipping and delivery services; 4) provide specialty software services such as yearbook creation; or 5) process payments. These companies may be involved with limited access to personal information of our customers. Prior to partnering with any third-party company, Edge ensures that their privacy and security practices are compliant and meet Edge’s privacy and security standards. Please contact us for a current list of the companies that we are partnering with. We contractually require these companies to use the information only to provide the contracted services; they are prohibited from transferring the information to another party except as needed to provide those services; and they are only to retain the data long enough to provide the services. Please see below section on Cross Border Transfer or storage to learn about our transfer of personal information outside of Ontario and Canada.
Law Enforcement: Edge may disclose personal information to third-parties without your consent for any of the following reasons: 1i) to comply with any law, regulation or order of a court, administrative agency or government tribunal; 2) to cooperate with Government investigations; 3) to help prevent fraud or to enforce or protect the rights of Edge or its subsidiaries and to pursue available remedies or limit any damages that we may sustain; or 4) where it is necessary to protect the rights, privacy, safety or property of an identifiable person or group.
Other Third-Parties: Edge may disclose personal information to other third-parties without your consent where required or permitted by law, including where: 1) the information is public as permitted by law; 2) it is necessary to proceed with or complete a “business transaction”, such as the purchase and sale of an organization or assets, a merger or amalgamation, making of a loan, charge, lease or licensing, or other prescribed business activity; 3) it is reasonable for the purposes of investigating a breach of an agreement, or actual or suspected illegal activity; or 4) it is necessary to identify an individual who is injured, ill or deceased, or 5) due to an emergency that threatens the life, health or security of an individual.

Where obliged or permitted to disclose information without consent, Edge will not disclose more information than is required.

5. HOW TO ACCESS AND UPDATE YOUR PERSONAL INFORMATION OR PREFERENCES

You have the right to access personal information under our control. As registered members of edgeimaging.ca customers can review and update their member profile using their username and password. Customers also have the option of sending an e-mail to the address noted in the How To Contact Us For More Information section below to request a change to their information or preferences. We will correct, update or delete any personal information we have about you, unless we are required to keep it by law. To protect the privacy of our customers, proof of identity is required.

You have the following choices:

Access and correction: You can access your personal information and ask us to update, correct or delete any information we have about you, subject to legal and contractual restrictions.
Cookies and other tracking technologies: You may disable cookies and other tracking technologies through the settings in your browser. However, doing so may affect your use of our Websites and your ability to access certain features of the Websites. However, disabling cookies will not prevent you from transacting with us.
Opt-outs: You may contact us to opt-out of further contact from us, including the provision of promotional communications, as well as certain other uses of your personal information, as explained in our full Privacy notice.
Customer choices about receiving e-mail: You may contact us to let us know your preference in terms of receiving promotional e-mails, such as special offers. You may opt-out of receiving such e-mails.

6. HOW WE PROTECT YOUR INFORMATION

Edge engages a number of security safeguards on its Websites to protect the data on Edge servers. However, no security system is impenetrable, and we cannot guarantee the security of our servers. It is possible that information supplied through the Websites may be intercepted during transmission.

Edge endeavours to maintain appropriate physical, procedural and technical security with respect to its offices and information storage facilities so as to prevent any loss, misuse, unauthorized access, disclosure, or modification of personal information. This also applies to our disposal or destruction of personal information. We further protect personal information by restricting access to it to those employees that require access to the information in order that we may provide our products or services. Edge has implemented robust IT Policies and Procedures in order to meet its obligations to safeguard your personal information, and we follow the NIST (National Institute of Standards and Technology) framework in designing and maintaining our security.

6.1 Security Safeguards

Authentication measures: All users are given unique and identifiable usernames and the sharing of passwords with others is unacceptable behaviour and is grounds for dismissal or loss of account privileges.
Computer systems: All computer systems used by Edge employees are solely managed and owned by Edge. Personal devices are not permitted for any form of work involving access to personal information at Edge, unless specifically approved, as outlined in our internal IT Policies and Procedures. At all times these systems are secured behind a strict and monitored firewall. All devices used for the collection and retention of data are encrypted and password protected as are all databases.
Credit card information: Edge does not collect credit card information through its website. No credit card information is sent electronically by email. See Moneris’ privacy policy here: https://www.moneris.com/en/Legal/Privacy-Notice. Credit card payments are also processed at some of our physical locations.
Cross-border transfer or storage of information: We may use service providers located outside of Canada, and, if applicable, your personal information may be processed and stored in a foreign jurisdiction, including the United States, and therefore may be subject to access by or disclosure to foreign law enforcement authorities under the laws of those jurisdictions. You may request information from Edge on the jurisdictions in which Edge and/or its service providers will process personal information.

6.2 Privacy or Security Breach

In case of a privacy or security breach: A “breach of security safeguards” is defined as the loss of, unauthorized access to or unauthorized disclosure of personal information resulting from a breach of an organization’s security safeguards or from a failure to establish those safeguards.

In case of a breach of security safeguards involving personal information under our control, we will notify the affected individual (parent or guardian), associated school Board and school and the Office of the Privacy Commissioner of Canada, as well as any provincial Information and Privacy Commissioner by email or other channels as appropriate. We will also notify any other organization or government institution that can reduce the risk or mitigate the harm from the breach. We will keep a record of any breach of security safeguards in accordance with our obligations under the applicable privacy legislation.

6.3 Leaving the Websites

Edgeimaging.ca may contain links to and from other websites. Edge has no control over such third-party websites and is not responsible for the privacy or security practices of those websites. When you follow a link to a third-party website, you are no longer protected by our Privacy notice, and we encourage customers to understand the privacy practices of those websites.

Edge cannot and does not guarantee, represent or warrant that the content or information contained in such third-party websites and resources is accurate, legal, non-infringing or inoffensive. Edge does not endorse the content or information of any third-party website or resource and, further, Edge does not warrant that such websites or resources will not contain viruses or other malicious code or will not otherwise affect your computer. By using any of our Websites to search for or link to a third-party website, you agree and understand that Edge shall not be responsible or liable, directly or indirectly, for any damages or losses caused or alleged to be caused by or in connection with your use of, or reliance on, Edge to obtain a link to a third- party website.

7. CUSTOMER CHOICES ABOUT RECEIVING EMAIL

Customers may receive e-mail regarding their orders or their account and in response to their questions. Edge may also send customers e-mail with information and/or special offers about products and services that may be of interest to customers, unless customers indicate they do not want to receive them. Edge complies with Canada’s Anti-Spam Legislation with respect to such communications.

Customer choices about receiving email: We give customers an opportunity to let us know their preference in terms of receiving promotional e-mail when customers register for a service, provide us with their personal information, or when we send customers e-mails. If customers choose not to accept this promotional e-mail, they may not receive special offers that may be of value. This option applies to promotional e-mail only, as we may find it necessary to send customers e-mail relating to the products customers have purchased, their account or their orders. Promotional e-mail that customers receive from Edge will tell customers how to decline receiving future promotional e-mail. Edge will never ask for your credit card or account information over e-mail.

8. PRIVACY PROTECTION FOR CHILDREN

Edge understands the special importance of protecting the privacy of children. We do not knowingly permit children under the age of 16 to become registered members of our sites, or to buy goods and services on our sites, without proven parental consent. Edge does not knowingly collect or solicit personal information about children under 16, except with their parent’s express consent.

9. HOW WE MAKE UPDATES TO THIS POLICY

Edge reserves the right to modify this Privacy and Security Policy from time to time at our discretion and without any prior notice unless required by applicable law. By continuing to use of the Websites, customers agree to accept the changes. We suggest you bookmark this page and periodically review this Privacy and Security Policy to ensure familiarity with the most current version. Affected registered members will be notified of any material changes to the Privacy notice via email. The e-mail will be sent to the address members have provided to Edge for their account.

This privacy notice was last amended on Oct 31, 2024.

10. HOW TO CONTACT US FOR MORE INFORMATION

If you would like further information about your privacy rights, opting-out of the collection or use of your information, accessing or correcting your information, registering a complaint, or for questions or concerns about customer privacy, please contact our Privacy Officer at privacyofficer@edgeimaging.ca or at:

Privacy Officer Edge Imaging

940 Gateway Drive Burlington, ON

L7L 5K7

Canada

RESOLVING PRIVACY CONCERNS

Edge will work with customers to resolve any concerns customers have about this Privacy notice. If we are unable to resolve your privacy concerns, you have the right to complain to the Office of the Privacy Commissioner of Canada or a provincial Information and Privacy Commissioner with jurisdiction.