We have designated a Privacy Officer who is responsible for our compliance with this Policy. The Privacy Officer may be contacted as described at the end of this Policy.

For the purposes of this Policy, “personal information” means any identifiable information about an individual, including an individual’s name, home address, telephone number, and email address. Personal information does not include any information otherwise exempted by the applicable laws of Canada and other jurisdictions (e.g., in Canada, personal information does not include any business contact information that is processed solely to communicate with that person about their employment or profession).

When you use our Services, we may collect the following personal information from you:

• Contact information, such as name, email address, phone number (including mobile), and billing and shipping address;
• Unique identifiers such as username, account number, and password;
• Order details and purchase history;
• IP address and device information; and
• Website usage and browsing data.

Your personal information may be collected when:

• You register for an account with us;
• You connect with us through social media;
• We use cookies and similar technologies; and
• We collect data from third parties or publicly available sources.

Collection from Third Parties

We do not knowingly collect your personal information from a third party unless you consent or we are otherwise required or permitted by applicable laws to do so.

If we collect your personal information from a third party, we will only process that information for the specific purpose for which it was provided to us in accordance with this Policy and the policy under which that information was collected.

Information about Minors

This site is intended solely for users who are not minors (19 years of age or older).

We do not knowingly collect personal information about any minor. No minor, nor any minor’s parent or guardian as it relates to a minor, should submit a minor’s personal information to us through the Services or otherwise for any reason and under any circumstances.

We may process your personal information for the following purposes (the “Purposes”):

• To verify and authenticate your identity;
• To process and fulfill sample and Product requests and orders;
• To ensure that the Services are optimized for your use and benefit;
• To analyze user experience and improve the Services;
• To operate, maintain and provide to you the Services, including the features and functionality of the Website;
• To communicate with you to provide you services, contacts, materials and/or recommendations for your needs as identified by you through phone, email, or the Services;
• To carry out our obligations arising from any contracts entered into between you and us;
• To comply with internal policies and procedures and other legal, accounting, or security requirements;
• To maintain accurate customer records;
• To collect debts owed to us;
• To comply with legal and regulatory requirements; and
• To share your personal information with our employees, contractors, consultants, financial institutions, payment processors, and other third-party service providers, as described in more detail below.

We will only process your personal information for the Purposes for which we intend to process such information. Otherwise, we will not process your personal information without your consent.

We may disclose or transfer your personal information for the Purposes in the following ways:

• To our employees and contractors;
• To our business partners;
• To our service providers including application hosting providers, advertising agencies, payment processors and customer service agencies; and
• To law enforcement, government or regulatory bodies, or other lawful authorities.

Your personal information may be stored and processed outside of of your jurisdiction of residence (including outside of Canada) but only in relation to the Purposes. Those jurisdictions may have different privacy laws than the laws in your jurisdiction of residence, and as a result governments, courts or law enforcement or regulatory agencies in those jurisdictions may be able to obtain disclosure of that personal information through the foreign jurisdiction’s laws.

We may disclose your personal information to a third party without your consent if permitted or required by applicable law. We may also disclose your personal information, in accordance with applicable law, in connection with a corporate re-organization, a merger or amalgamation with another entity, or a sale of all or a substantial portion of our assets or business provided that the information continues to be used for the Purposes the entity receiving the information

We will process your personal information only with your knowledge and consent, except where exempted, required, or permitted by applicable laws. The form of consent may vary depending on the circumstances and the type of information being requested. Your consent may be express with clear options to say “yes” or “no”, such as by being asked to check a box to indicate your consent, or implied, such as when you provide us with your address through a form or email seeking information and we use those means to respond to your request. Your consent can also be provided by your authorized representative.

Taking into account the sensitivity of your personal information, purposes of collection, and your reasonable expectations, we will obtain the form of consent that is appropriate to the personal information being processed. By using our Services, or otherwise by choosing to provide us with your personal information, you acknowledge and consent to the processing of your personal information in accordance with this Policy and as may be further identified when the personal information is collected. When we process your personal information for a new purpose, we will document that new purpose and, if required by applicable law, ask for your consent again.

If you do not consent to the processing of your personal information in accordance with this Policy, please do not access or continue to use any of the Services or otherwise provide any personal information to us.

You may refuse to provide consent or may notify us at any time that you wish to withdraw or change your consent to the processing of your personal information without penalty, subject to legal or contractual restrictions and reasonable notice by: (i) changing your privacy preferences through the Website; (ii) deleting your account with the Website and stopping use of the Website; or (iii) opting out of the use of your personal information by contacting our Privacy Officer (see Section 12 below). However, if you withdraw or change your consent, we may not be able to provide you with the Services.

Aside from consent, we may also process your personal information under other legal bases, as permitted by the applicable laws.

The security of your personal information is important to us. We protect personal information using reasonable physical, technological and organizational safeguards designed to prevent unauthorized access, collection, use, disclosure, copying, modification, disposal or similar risks. We regularly review our practices to ensure they align with reasonable industry practices appropriate to the personal information’s level of sensitivity.

However, no method of transmission over the Internet, or method of electronic storage, is completely secure. As such, despite our safeguards and protocols, we cannot fully guarantee the security of your personal information and you should always exercise caution when disclosing personal information over the Internet.

Applicable privacy laws allow, to varying degrees, individuals the right to access and request the correction of errors or omissions in personal information that is in our custody or under our control. Upon written request and authentication of your identity, we will provide you with your personal information under our control. We will also give you information about the ways in which that information is being used and a description of the individuals and organizations to whom that information has been disclosed. We may charge you a reasonable fee for doing so.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

In some situations, we may be required or permitted by applicable law to decline a request to provide access to certain personal information. If we refuse an access request, we will notify you in writing, document the reasons for refusal and outline further steps which are available to you.

You may request that we change or delete your personal information in our possession. We reserve the right not to change any personal information if we do not agree that it is inaccurate or outdated, but in that situation we will annotate the personal information under our control with a note that the correction was requested but not made.

We will not collect personal information indiscriminately but will limit collection of personal information to that which is reasonable and necessary. We will also collect personal information as authorized by law.

We will only use and disclose your personal information for the Purposes and as authorized by law.

We generally keep personal information for only as long as it is needed to accomplish the purposes for which it was collected, or as needed for authorized or legitimate purposes. More specifically, we retain personal information as long as necessary for to fulfil the identified Purposes or as otherwise to comply with applicable laws or protect our interests.

When personal information is no longer necessary or relevant for the identified purposes, or is no longer required to be retained by applicable laws, we will take steps to have it deleted, destroyed, erased, aggregated or made anonymous. We use reasonable industry practices to ensure we have adequate controls, schedules and practices for information and records retention and destruction which apply to personal information.

This Policy was last updated the date specified at the top of this Policy. We will occasionally update this Policy and revise the "latest revision" date.

If we make any material changes we will either (a) notify you by email (sent to the email address listed in your account), or (b) provide a notice on the Website or otherwise through the Services before the change becomes effective. Any change to this Policy will apply to existing information, as well as information collected onwards from the date that this Policy is posted or on the date as specified in the notification. We encourage you to periodically review this page for the latest information on our privacy practices to ensure you are aware of any changes. Your continued use of the Services signifies your acceptance of any changes to this Policy.

You can direct any questions or concerns regarding our compliance with this Policy and our processing of your personal information by emailing info@thecsigroup.net. Please enter “For Privacy Officer” in the subject line.

If you are not satisfied with our Privacy Officer’s response to your question or concern, you may be able to file a complaint under applicable privacy laws. Our Privacy Officer will provide you with the contact information to do so, if requested. We strive to offer an accessible and simple complaint procedure. We will promptly investigate all complaints received, and if a complaint is justified, we will take the necessary steps to resolve the issue in question.