Kangaroo Post - Privacy Policy

At Kangaroo Post, we are committed to protecting our customers’ privacy. We take all reasonable steps to ensure that the personal information in our care is safe and secure, and our privacy policies and procedures comply with applicable privacy laws and regulations. At Kangaroo Post, the foundation of privacy management relies on privacy law and ten (10) privacy principles.

The purpose of this Privacy Statement is to inform our customers, vendors and other third parties, of Kangaroo Post's practices relating to the collection, use and disclosure of personal information that we may receive in association with the use of our services and related products, access to or use of our websites, including mobile apps (hereafter “Sites”), or other interactions with us.

Meaning of “Commercial Electronic Message”, “Customer” and “Personal Information”

For the purposes of this Privacy Statement,

"Biometrics" refers to measurable physiological or behavioural characteristics that can be used to identify an individual. Examples of biometric identifiers include fingerprints, iris patterns, facial features, DNA, voice signatures, and even physical movements.

“Commercial Electronic Message” is a message encouraging the participation in a commercial activity, including surveys, invitations, market studies, and messages relating to Kangaroo Post’s new products, services, special offers, promotions, contests, and service tips.

“Customer” refers to anyone who uses Kangaroo Post’s products and services, whether as the shipper, receiver, arranger of the shipment or otherwise, anyone who uses Kangaroo Post’s Sites, and anyone who has opted to receive e-mail communications about Kangaroo Post’s products and services, special offers, promotions and service tips.

NOTE: It is the responsibility of the shipper to inform the receiver of the contents of this Privacy Statement and any subsequent updates to this Privacy Statement, as applicable.

"Personal information" means information about an identifiable individual, which includes information that can be used on its own, or with other information to identify, contact, or locate a person (including use of biometrics) but does not include business contact information including the name, title or business address or telephone number of an employee of an organization. Information that has been de-identified or anonymized is not considered personal information.

If you are a California resident, Personal Information also includes any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Applicable Law

Kangaroo Post is federally regulated and its commercial operation is subject to the Personal Information Protection and Electronic Documents Act (“PIPEDA”). Kangaroo Post relies on PIPEDA or any successor legislation of similar force and effect, or other privacy law where applicable to a limited extent.

Privacy Principles

Accountability

The President/CEO/senior executives understand the importance of privacy and the establishment of a governance framework for the privacy program and have designated a Privacy Officer and a Privacy Office has been established that is comprised of legal and business privacy experts who participate in annual privacy and Canada’s Anti-Spam Legislation (“CASL”) training. These privacy experts are embedded into the enterprise with representatives across the organization. The privacy program framework is agile and incorporates information governance standards, generally accepted record keeping principles, security guiding principles, risk assessments and National Standard of Canada Entitled Model Code for the Protection of Personal Information. These principles include: Privacy Principles

Kangaroo Post recognizes the importance of accountability. This means taking responsibility for the personal information under its control through the management of its Privacy Office that oversees privacy governance. The Privacy Officer works closely with the business to ensure proactive privacy management, regulatory compliance, providing privacy and CASL support to the business, handling privacy inquiries from the business and individuals, access requests, policy management and privacy risk mitigation support.

Identifying Purposes for Collection

What Personal Information We Collect Includes

We collect personal information about every shipment tendered to Kangaroo Post so that we can provide our Customers with the transportation and information services necessary to make shipping convenient, confirm provision of services, bill Customers accurately for the products and services we provide to them and comply with the law. Examples of the personal information we collect in relation to the above includes:

• Contact Information
• Name, address, phone number and email
• Proof of Identity
• Financial and Billing information
• Account Information
• Passive Information (i.e. IP address, device or user ID, access time stamps and device location).

The personal information we collect in relation to shipments is used for the following limited purposes.

• provide our Customers with timely and reliable products and services, including the pick- up and delivery of shipments, the performance of logistics services, the arrangement of customs brokerage services, and communication with our Customers about the status of their shipments (including through our online shipment tracking application, by telephone or by e-mail);
• track a shipment, verify the completion of a delivery and the placement of a shipment at receiver's location;
• bill our Customers for the products and services we provide them, including the verification of their credit, the authentication of their identities, and the production of detailed invoices that help them verify the charges billed to them;
• establish, maintain and develop relationships with our Customers, including the management of their accounts with Kangaroo Post; and
• develop, promote and manage our products and services, including the completion of market studies and the communication of new products and services, special offers, promotions, and service tips (see “E-mail Management - Anti-Spam” section below); and
• assist law enforcement agencies, collect debts owed to Kangaroo Post, notify credit agencies of delinquent accounts, protect Kangaroo Post’s business interests (including enforcing Kangaroo Post’s Terms and Conditions of Service), and generally meet requirements imposed by law.

The information must be accurate

Personal information collected must be as accurate, complete, and as up-to-date as possible in order to properly satisfy the purposes for which it is to be used. We rely on our Customers, employees and other third parties to update and correct personal information where it is inaccurate or outdated.

Consent

• How We Obtain Consent

We obtain informed consent for the use and disclosure of personal information prior to, or at the time it is collected, except where inappropriate. The consent we obtain from an individual, must be informed.

The form of consent, whether it is express or implied, will primarily depend on the relationship between Kangaroo Post and the individual, the sensitivity of the personal information and the reasonable expectations of the individual in the circumstances.

We will not, as a condition of the supply of our products and services, require any individual to consent to the collection, use or disclosure of their personal information beyond that which is required to fulfil the purposes described above or otherwise described at the time consent is sought.

When a Customer provides us with personal information relating to an individual other than themselves (such as the intended recipient of the shipment), we rely on the Customer who is providing us with the personal information to obtain that individual’s consent to our collection, use and disclosure of their personal information in the circumstances described above.

• Withdrawing Consent

Anyone may withdraw consent to Kangaroo Post’s further use, retention or disclosure of their personal information at any time, subject to legal or contractual restrictions, record retention requirements and reasonable notice. Consent may be withdrawn by contacting Kangaroo Post at 905-440-0000 or ship@kangaroopost.com. We will inform the person who is withdrawing their consent of the implications of doing so.

Limiting Use, Disclosure and Retention

The personal information collected is used to provide customers with requested products and services.

Kangaroo Post will not sell, transfer, license, trade or rent the personal information it receives, without required consent.

Kangaroo Post requires consent to share personal information and will not disclose Personal Information, subject to the following circumstances

• Internal
  Your personal information collected will be shared with employees who require the information to provide our products and services.
• Third Party Service Providers
  Kangaroo Post may transfer or disclose personal information to third parties contracted to provide products and services to our Customers, to administer our distribution lists, or to otherwise carry out one or more of the purposes described above. Such third parties may include, among others, other transportation companies or local pick-up and delivery agents involved in the pick-up, transportation and delivery of shipments, customs brokers and information services/technology service providers. When transferring personal information to third parties, we rely on applicable privacy laws and use contractual or other means to ensure such parties understand the required and appropriate safeguards to protect your information that is comparable to our own level of protection while the personal information is in the third party’s custody.
• Affiliates
  Kangaroo Post may share personal information with Kangaroo Post’s affiliates for the purpose of facilitating one or more of the purposes described above. Due to the location of some of these third parties and affiliates or the location of their computer servers, personal information is sometimes transferred, processed and held outside of Canada or on virtual servers. Third parties and affiliates with whom we do business with are required to comply with obligations applicable to Personal Information of California residents.
• Law enforcement
  Kangaroo Post reserves the right to co-operate fully with local, provincial, state and federal officials in any investigation relating to any personal information (including private electronic communications transmitted on any Kangaroo Post Site) or any purported unlawful activities.
• Merger and Acquisition
  Kangaroo Post reserves the right to disclose and/or transfer personal information to a third party in the event of a proposed or actual direct or indirect sale, merger or other transfer of the assets or shares of Kangaroo Post Inc. or a division thereof, provided that the third party agrees to adhere to the principles expressed in this Privacy Statement and the information does not constitute all or substantially all of the assets being transferred.

Kangaroo Post will retain personal information to fulfil the purposes for which it was collected, which may include internal analysis, marketing and product improvement, in compliance with our record retention policy and applicable laws.

Protection of Personal Information

• How We Protect Personal Information

We make all commercially reasonable efforts to safeguard the personal information collected and to protect it against loss and unauthorized access. Access to our Customers’ personal information is restricted to necessary and authorized Kangaroo Post employees and contractors. In addition, we employ generally accepted information security techniques, such as firewalls, access control procedures and cryptography, to protect personal information against loss and unauthorized access. While we use commercially reasonable efforts to limit access to our vehicles and premises to authorized personnel, we cannot guarantee the confidentiality of information that is displayed on any shipment package or shipment label.

NOTE: Unfortunately, no method of accessing, using, transmitting or storing data can be guaranteed to be 100% secure. It is your sole responsibility to use the appropriate level of care whenever communicating with us. For example, when you access our Site, you will do so through a login and password that you have created and is unique to you. For maximum security, you should never share your login and password with anyone else and you should always logout of our system and close your open Internet browser window to finish your session completely.

If you have reason to believe that your interaction with us is no longer secure (for example, you feel that the security of any account you might have with us has been compromised), you must immediately notify us using the contact information listed below.

Kangaroo Post recognizes the importance of accountability. This means taking responsibility for the personal information under its control through the management of its Privacy Office that oversees privacy governance.

Transparency

Kangaroo Post obligations are set out in laws and regulations, applicable standards and Customer Agreements. The contents of this Notice provide customers with the necessary transparency about Kangaroo Post’s approach to privacy management, policies and practices.

To request additional information or to submit an inquiry, you may contact Kangaroo Post’s Privacy Office who will review your request.

Access and Correction

You may contact us at 905-440-0000 or ship@kangaroopost.com to request access, review, correction, amendment, change, and/or deletion of your personal information. In addition, you may call Kangaroo Post's call centre at 1 888-SHIP-123 (1-888-744-7123) and request that your electronic signature or other personal information displayed in association with a specific waybill number be deleted from our online shipment tracking application. Transparency is important to privacy governance. Please contact us if you have any questions about this Privacy Statement or the use of your personal information.

Cookies

• A cookie is a small file containing information that is saved to your computer by websites you visit.. Cookies are commonly used to improve website performance and efficiency, and can track how and when a user visits a website and/or other websites. There are two common types of cookies: "session cookies" and "persistent cookies." Session cookies store information only for the length of time that the user is connected to a website -- they are not written onto the user’s hard drive. Session cookies are automatically deleted after the user leaves the website, at which point the originator of the cookie no longer has access to the information that was contained on that temporary cookie file.
• We also use session cookies to track our Customers’ visits to our Sites. We use that information to determine the type of information that our Customers are looking for on our Sites and to improve our Sites. We use information about the site our Customers visited immediately prior to our Site to assess the viability of links to our Site that we have created on third party sites. The information stored in "persistent cookies" is written onto our Customer’s hard drive and remains there until the expiry date of the cookie. From time to time, we use persistent cookies to store non-sensitive personal information.
• Currently, most browsers do not distinguish between session cookies and persistent cookies. For our Sites to operate, our Customer’s browser must be set to accept cookies. If a Customer is concerned about having their browser enabled to accept cookies while they are surfing other websites, we recommend that their browser be set enable notifications when a cookie is received. This gives the Customer the ability to accept or reject cookies presented by the web server they are visiting. We suggest contacting your browser’s technical support team for further instruction regarding how to configure your cookie setting preferences.

Links to Third-Party Sites

Our Site may offer links to third party online service, mobile apps and websites. You should be aware that operators of online services, mobile apps and linked websites may also collect your personal information (including information generated through the use of cookies) when you visit those sites. The fact that we offer a link to a third-party online service, mobile app or website is not an endorsement of their privacy policy or information security policies or practices.

If you use a third party online service, mobile app and website , you will be subject to the terms of use and permissions associated with the third party. We are not responsible for how such third parties collect, use or disclose your personal information, so it is important for you to familiarize yourself with the privacy policies of such third parties before providing them with personal information.

Anti-Spam

Kangaroo Post’s commercial operation is subject to An Act to Promote the Efficiency and Adaptability of the Canadian Economy by Regulating Certain Activities that Discourage Reliance on Electronic Means of Carrying out Commercial Activities, and to Amend the Canadian Radio-television and Telecommunications Commission Act, the Competition Act, the Personal Information Protection and Electronic Documents Act and the Telecommunications Act, otherwise known as CASL.

From time to time, Kangaroo Post sends commercial electronic messages (CEMs) to its Customers or other parties to encourage participation in commercial activities including surveys, invitations, market studies, and messages relating to its new products, services, special offers, promotions, contests, and service tips. Where required by law, Kangaroo Post obtains consent before sending these messages.

A readily performed option to unsubscribe can be found in all CEMs sent by Kangaroo Post, except where impracticable. Recipients who no longer wish to receive CEMs from us may unsubscribe from our mailing list using the unsubscribe feature in the message or any other appropriate electronic means to communicate this wish. Once a recipient has unsubscribed from our list (a request which may take up to 10 business days to take effect), Kangaroo Post will no longer send CEMs to the address that was used by the recipient to unsubscribe.

If a recipient has more than one electronic address, each address must be individually unsubscribed from our list. After an unsubscribe request is performed, a recipient may continue to receive other types of electronic messages from Kangaroo Post that do not fall within the definition of CEMs such as e-mails that are generated by our online shipping tool in connection with the creation of a shipment or those that relate to the management of a user’s account.

Customers may access their account at any time to update their email preferences. Click here to login to your account.

Kangaroo Post encourages Customers or other affected parties to bring forward any complaints about Kangaroo Post’s e-mail practices to the attention of Kangaroo Post’s Privacy Officer using the contact information provided below.

Artificial Intelligence

In some cases, Kangaroo Post may use artificial intelligence (AI) to enhance Services to Customers. Kangaroo Post is committed to complying with the principles of Accountability, Safety, Fairness and Equity, Transparency, Human Oversight and Monitoring, Validity and Robustness, set out in the Canadian federal government's Voluntary Code of Conduct on the Responsible Development and Management of Advanced Generative AI Systems.

Quebec Residents

If you are a resident of the province of Quebec, please read the following:

Quebec residents may have additional rights regarding collection, use and disclosure of your Personal Information. Kangaroo Post will comply with these requirements as applicable in law.

California Residents

If you are a California resident, please read the following:

California residents may have additional rights with regard to how we use your Personal Information.

Consistent with the “What Personal Information We Collect and How We Use it” section above, we collect information about individuals that is considered “Personal Information” in California. To the extent required or permitted by law, we may retain some of your Personal Information.

We may collect and disclose this Personal Information from you and other third parties for the stated business or commercial purposes described in the “We use the personal information we collect in relation to shipments so that we can:” and “When We Disclose Personal Information” sections above. You may request to know what types of your Personal Information is shared to third parties.

Kangaroo Post does not sell Personal Information. We may disclose all the categories of Personal Information described above to service providers for business purposes. California residents may ask to opt-out from sharing their Personal Information with third parties, but we may not be able to provide the services you requested where we rely on our service providers to fulfil them. We will tell you if the sharing is required for services, or if applicable law allows us to continue to share your Personal Information with certain third parties (for example, fraud investigations or lawsuits.)

Subject to certain exceptions, as a California consumer, you have the right to (I) access your Personal Information (including the Personal Information that is shared with third parties), (ii) obtain deletion of your Personal Information, as described in the “Access and Correction” section above, (iii) request correction of inaccurate Personal Information and (iv) request disclosure of information collected. We will not discriminate against you for choosing to exercise your rights, nor will the level of quality of service you receive be impacted unless your request prevents us from continuing to provide services. We will not offer you different pricing or provide different products or services.

California consumers may exercise their rights as outlined herein, or you may designate an authorized agent to exercise your rights on your behalf.

For further information about your rights, or to exercise such rights, please contact us at the e-mail and toll-free phone number listed below.

Changes to this Privacy Statement

We reserve the right to modify this Privacy Statement at anytime without notice. The Privacy Statement posted at anytime or from time to time via this Site shall be deemed to be the Privacy Statement then in effect.

You can determine when the Privacy Statement was revised by referring to the “Last Updated” legend on the top of this Statement. Any changes will become effective upon the posting of the revised Statement on the Site. By continuing to use our Site following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Statement, in whole or part, you can choose to not continue to use the Site.

Challenging Compliance

Questions or concerns about compliance with this Notice must be directed to Kangaroo Post’s Privacy Office. Please allow up to 72 hours for an initial response. Individuals who remain dissatisfied with the outcome of their inquiry, have the option of contacting the Office of the Privacy Commission for Canada. For Quebec residents, they can contact the Commission d'accès à l'information.

Contacting Us

Any questions about this Privacy Statement or concerns about our compliance with this Privacy Statement should be directed as follows:

Address

Kangaroo Post Inc.

201 - 6665 TOMKEN ROAD,

Mississauga (Northeast),

Ontario L5T2J6,

Canada

905-440-0000

Or send an e-mail to ship@kangaroopost.com. Please note that any comments, suggestions or materials provided to us shall be deemed to be of a non-confidential and non-proprietary nature (becoming the property of Kangaroo Post upon our receipt of same) and we shall be entitled to use and distribute such comments, suggestions or materials to any other parties and for any other purposes, including, but not limited to, developing and marketing products and/or services incorporating or based on any such comments, suggestions or materials.