Confidentiality Policy

At Doyle Group Inc. (“Doyle”, “we”), we attach great importance to protecting the privacy of our customers and users (“you”). The Personal Information that you entrust us with (as defined below) is essential to our business relationship, which is why we take all necessary steps to protect your Personal Information and to put it to good use. This Policy explains what types of Personal Information and personal data we collect; how we use, process, retain, communicate and disclose this Personal Information; and what security measures we put in place to protect it. This Policy concerns Personal Information collected by Doyle via various available means, whether in person (in-store), on our website (doyle.ca) (the “Website”), over the telephone or by any other means when you contact us (the “Means”).

We collect only the information we need to provide our services efficiently.

This information may be collected in various ways:

• Online, over the telephone or in our stores.
• When you browse our Website.
• When you create a customer account on our Website, make an appointment online, purchase a product or chat with a member of our team.
• When you subscribe to our services, open a customer file or purchase a product in-store.
• When you send, submit or interact on our sites and social networking applications (Facebook, LinkedIn, Instagram, YouTube, Google+, etc.). These sites or applications are also governed by their own policies regarding your Personal Information; these policies may be different from ours and may be applicable.

Data collected automatically
We collect certain types of information automatically when you connect to our Website. Automatically collected data includes certain types of information concerning your computer or mobile device, as well as data regarding your interaction with the Website, including your operating system, browser type, mobile device (brand/model), IP address and browsing data.

Our Website may use “cookies”, a technique that stores data on a Website user’s computer so the user is recognized during subsequent visits conducted from the same computer.

Automatically collected data is not matched to your identity by Doyle. Various types of data collected automatically by Doyle rely on processes that may be modified from your browser. You can modify your browser’s parameters to deactivate the recording of digital markers such as cookies or those from third-party websites. You can also use your browser’s “Do Not Track” setting to indicate that you do not wish to share any data.

By “Personal Information”, we mean any information that identifies you or that could reasonably be associated with you. The Personal Information that we collect may include the following:

• Information on your identity and contact information such as your first/last name, birthdate, home address, telephone number, email address, gender and health insurance number.
• Information on your health, such as your optometry file, consultation dates and prescriptions issued.
• Information on products and services you purchased at Doyle, whether in-store or online.
• Personal Information collected automatically whenever you visit our Website.

Personal Information that is aggregated and/or de-identified and cannot be associated with an identifiable individual is not considered to be Personal Information.

We will only share your Personal Information as described in this Policy or if we have obtained your consent. Your Personal Information may be disclosed to the following categories of entities and persons for the purposes specified below:

• External service providers who help us to provide our services more efficiently, including, without limitation, online payment, order shipping, advertising, IT system security or for statistical purposes.
• Other service providers such as support services, financial institutions, entities combating fraud, as well as providers of technological, logistical, transportation and delivery services.

We do not sell your Personal Information and we do not allow our service providers to use your Personal Information on an individual basis. Our suppliers are required to provide the same level of privacy that we do and they undertake in writing to preserve data confidentiality and to only use said data to provide us with services.

We may disclose the Personal Information we collected to third parties if required or expressly authorized to do so by law, or if we are required to disclose it by a competent authority, a law, a regulation, a warrant, a subpoena or a court order. We may disclose Personal Information in connection with legal proceedings if that proves necessary to protect our or our users’ rights.

By using our services, you consent to the collection, use and sharing of your Personal Information as described in this Policy.

a. Accessing and rectifying your data
In accordance with applicable laws governing Personal Information:

• You have the right to ask us if we hold any Personal Information concerning you and to obtain a copy of it, as applicable.
• You have the right to rectify any inaccurate, incomplete or erroneous Personal Information. If your Personal Information is not collected, disclosed or retained in accordance with or authorized under the Act Respecting the Protection of Personal Information in the Private Sector, CQLR, c. P39.1, you may ask for it to be rectified.

b. Withdrawal of consent
If you wish to withdraw your consent at any time with respect to the processing and retention of your Personal Information, please send written notice to the address indicated at the end of this Policy.
Upon receipt of your consent withdrawal notice, we will stop retaining your Personal Information within a reasonable length of time, which will vary depending on the type of Personal Information we collected and why we collected it.
Please note that if you continue to use our Website, it will not be possible to prevent your Personal Information from being processed. The only way to completely stop your Personal Information from being processed is to not visit our Website and to not contact Doyle.
Please note that, under certain circumstances, we may refuse a request to delete your Personal Information, e.g., if the Personal Information is needed to comply with the law or a contractual agreement or in connection with a claim.

c. Opposition
Under certain circumstances, you are entitled to oppose the processing of your Personal Information that we carry out for legitimate purposes. Your rights in this regard depend, among other things, on your place of residence. To oppose the processing of your Personal Information, you may write to us at the address indicated at the end of this Policy.

d. Deletion
Under certain circumstances, you may request the deletion of the Personal Information that we hold concerning you. To make such a request, please write to us at the address indicated at the end of this Policy. We will follow up without delay (within no more than 30 days of receipt) and will destroy your Personal Information in accordance with all applicable laws.
If you continue to visit our Website or if you contact Doyle again, we will collect certain types of Personal Information concerning you.

e. Right to be forgotten
If the disclosure of your Personal Information (i) violates the law or a court order, or (ii) seriously harms your reputation or privacy, you may send a written request to our Privacy Officer asking us to restrict the disclosure of your Personal Information or to de-index the links associated with your name providing access to your Personal Information (i.e., removing said links from search results). Our Privacy Officer will respond to your written request within 30 days of receipt unless the applicable government authorities extend the deadline by which we are required to provide our response.

f. Data portability
Upon receipt of your written request, we will disclose to you, in a structured and commonly used technological format, any computerized Personal Information that we collected from you. If you so request, this disclosure may also be made to individuals or organizations authorized to collect your Personal Information.

g. Right to information on processing
You are also entitled to request information from us on the processing of your Personal Information, including the type of Personal Information that we hold and how we process it.

h. Right to unsubscribe from our mailing list
You are entitled at any time to ask us to unsubscribe you from our mailing list if your name appears on it.

i. Verification
We reserve the right to verify the identity of individuals wishing to access the Personal Information concerning them. The information collected for to carry out this verification will not be used for any other purposes.

Our Website may contain links to other external websites. These links to third-party websites are provided for guidance and information purposes only. By clicking on them, you will be automatically directed to those websites. You are asked to carefully read and verify these websites’ privacy policies as they may be different from our Policy. Doyle does not approve and cannot in any event be held responsible for the content posted on other websites, for third-party websites, for their policies regarding the retention, use, processing and destruction of Personal Information or for any problems stemming from browsing said websites.