PRIVACY POLICY ADDENDUM FOR UNITED STATES RESIDENTS

Last Updated November 9^th , 2023

This “Notice” supplements our Privacy Policy and further describes how we collect, use, and share personal information of residents of applicable US states, including California, Colorado, Utah, Virginia, Indiana, Iowa, Montana, Tennessee and Connecticut.

1. PRIVACY RIGHTS

Depending on your jurisdiction, you may be entitled to the following rights. These rights are not absolute, and in certain cases, we may decline your request as permitted by law. At the same time, we may choose to afford you these rights even if not required to do so. 

• Right to Know and Data Portability. You may request the following information about the collection, use and disclosure of your personal information over the previous 12 months, and ask that we provide a copy of the following in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the information to another entity without hindrance:
  • The categories of personal information that we collected, sold or shared about you.

• The categories of sources from which your personal information is collected.

• The purpose for collecting your personal information.

• The categories of third parties to whom we disclosed your personal information, the categories of such personal information that was disclosed (if applicable), and the purpose for disclosing such personal information.

• The specific types of personal information we collected, sold or shared about you.

• Right to Correct. You may request that we correct inaccurate personal information maintained about you.
• Right to Delete. You may request that we delete personal information about you, subject to certain exceptions.
• Right to limit use of sensitive personal information. Note that we do not collect, process or disclose sensitive personal information via this website as defined by the California Consumer Privacy Act (“CCPA”).
• Right to Opt-out of Selling or Sharing. While we do not sell or share personal information for cross context behavioral advertising, state privacy law provides an opt out right.
• Right to appeal. If you are not satisfied with the resolution of a rights request and would like to submit an appeal, please contact us as provided below.

If your appeal is denied, you may contact your attorney general via the methods provided below in order to submit a complaint. Such right of complaint is only available under privacy laws in certain jurisdictions, including in Indiana, Montana, Iowa and Tennessee: 

• Right to Non-Discrimination. You may not be discriminated against for exercising any of these rights.

Data solely retained for data backup purposes is generally excluded from these rights until it is restored to an active system or next accessed or used for a sale, disclosure, or commercial purpose.

Exercising your rights

If you wish to manage your cookie preferences, please visit our cookies consent manager available on the tab at the bottom of this webpage.

To make a request relating to your personal information or ask a question relating to this addendum, you can contact us at privacy.usa@saputo.com, by telephone at 1-(800)-824-3373, or via postal service at:

Saputo Privacy Office, Legal Affairs – US Division

6869 Metropolitain Blvd. East

Saint-Leonard, QC, H1P 1X8

Canada

If you or your duly authorized agent submits an access, deletion or correction request, we may require you to provide sufficient information for us to reasonably verify that you are the person about whom we collected personal information, and the same is true to authenticate the identity of your duly authorized agent. Before accepting such a request from an agent, we will require that the agent provide proof that you have authorized them to act on your behalf.

Please note that under applicable privacy law, we are only obligated to respond to personal information requests from the same individual up to two times in a 12-month period. In addition, under applicable privacy law, and for the protection of your personal information, we may be limited in what personal information we can disclose.

2. What types of personal information do we collect, where do we get it from and to whom do we disclose it?

The personal information about you that we collect includes information within the below categories of data. These categories also represent the categories of personal information that we have collected over the past 12 months. Note that the categories listed below are defined by California state law. Inclusion of a category in the list below indicates only that, depending on the services and products we provide you, we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category for all of our consumers, nor does it necessarily mean that California privacy law applies.

Sources of Personal Information

We collect personal information directly from you (e.g., when you visit our Websites, send us feedback forms or emails, complete surveys, etc.). We also collect personal information from third parties, such as consumer marketing databases/platforms or other data enrichment companies (which is used to better understand our base of potential customers), automatically from technologies when you visit our Websites, our Service Providers, Ad Partners and Marketing Partners (as such terms are defined below).

3. SELLING OR SHARING OF PERSONAL INFORMATION AND PROCESSING OF PERSONAL INFORMATION FOR TARGETED ADVERTISING

Unless expressly stated otherwise on any of our Websites, Saputo does not knowingly collect, sell or share Personal Information from children under the age of 13. Children are not permitted to use the Website or services, and Saputo requests that children under the age of 13 not submit any Personal Information to Saputo or the Website. If we learn we have collected or received Personal Information from a child under the age of 13, we will delete that information. If you are between 13 and 15 years old, we may only (1) share your information or (2) process your information for the purposes of targeted advertising, as described in this Notice, if you actively opt-in to that type of sharing or processing.

You can manage your preferences at any time by going to our cookies consent manager available on the tab at the bottom of this webpage or by making a request using one of the methods outlined above under the heading “Exercising your rights”. Please also visit our Cookies Policy [LINK].

4. DO NOT TRACK

On our Websites, we have implemented a cookie “door” to ensure your cookie preferences and any preferences entered through our applications are honoured, and thus we do not sell or share or sell your information derived from cookies or applications for cross context behavioural advertising without your consent. Please refer to our Cookies Policy and cookies consent manager available on the tab at the bottom of this webpage. We also have tools in place to better detect and honour requests made using the Global Privacy Control (“GPC”) signal as requests to opt-out of the sharing of personal information to the extent required by applicable law. If you wish to manage your cookie preferences, please go to our cookies consent manager or make a request using one of the methods outlined above under the heading “Exercising your rights”.

5. DATA RETENTION

We will only retain personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal or reporting requirements. For more details, please see our Privacy Policy.