Privacy Statement

This Privacy Policy sets out the privacy policies and practices for the The TDL Group Corp. and its affiliates (“Tim Hortons”) with respect to our collection, use, and disclosure of personal information, including in respect of websites that we operate from time to time such as timhortons.com, rolluptherimtowin.com, shop.timhortons.com, shopus.timhortons.com, everycup.ca and everycup.com (collectively, the “Sites”). This Privacy Policy may be updated by Tim Hortons giving reasonable notice of the revised terms (including by e-mail or by posting on the Site), and this Privacy Policy may be supplemented or modified by agreements entered into between Tim Hortons and an individual from time to time.

In this Privacy Policy, “personal information” means any information about an identifiable individual, as further defined under applicable laws.

Collection and Use of Personal Information

Tim Hortons collects personal information from customers and others (an “Individual”) when an Individual subscribes for services or purchases products, enters contests, subscribes to or shares information on Sites, and may from time to time collect additional personal information in the course of providing such products and services. Tim Hortons uses such personal information as is reasonably required to provide the requested services, products, or information, and as is otherwise required or permitted by applicable laws, including as follows:

• Tim Hortons also collects personal information from an Individual where the Individual submits an application for programs operated from time-to-time by Tim Hortons, such as the Tim Hortons Scholarship Program (the “Programs”) or for an employment opportunity. Tim Hortons uses submitted personal information as is reasonably required to assess the Individual’s eligibility in the Programs and to advertise and promote the Programs or to assess the Individual’s suitability for employment at Tim Hortons.
• Depending on which services an Individual has subscribed to and which privacy preferences the Individual has indicated to Tim Hortons, Tim Hortons may use the Individual’s contact information to provide periodic newsletters or to provide notices regarding products and services. Personal Information, such as a contest winner’s name, city of residence, and prize winnings, may be published in connection with contests. Except as otherwise provided under this Privacy Policy or as consented to by an individual, Tim Hortons does not disclose any personal information to third parties for the purpose of marketing third party products or services.
• A Site may allow an Individual to make publicly available personal information about his or herself and others, including without limitation, photos and videos of himself or herself and of others. By making publicly available his or her personal information on the Site, the Individual consents to the publication of such personal information. By publishing personal information about another individual, the Individual represents that he or she has, where required by applicable privacy laws, obtained the consent of such individuals to publish such information.
• Tim Hortons collects demographic and profile data in connection with the Sites and uses such data to tailor each Individual's experience at the Sites and displaying the content according to the Individual’s preferences.

Tim Hortons may use customer information for additional purposes that may be identified at or before the time that the information is collected. Tim Hortons will retain the personal information only as long as necessary for the purposes outlined in this Privacy Policy or as required or permitted by law.

Disclosure of Personal Information

Tim Hortons may disclose personal information as follows:

• to third-party service providers or agents who provide services to or on behalf of Tim Hortons (which third parties are obligated to maintain confidentiality and security of the personal information and are restricted from using such information other than as authorized by Tim Hortons or as otherwise permitted by law)
• to law enforcement agencies for the purposes of investigating fraud or other offences, in connection with the prevention or investigation of suspected fraudulent activities or harm to individuals or property, to establish or exercise our legal rights or defend against legal claims, or in connection with an emergency that warrants use or disclosure of the information
• to legal, financial, insurance, and other advisors or in connection with the sale, reorganization, or management of all or part of its business or operations, and
• as consented to by an Individual from time to time, including to fulfill any other purposes that are identified when the personal information is collected. Tim Hortons will not use or disclose personal information for purposes other than those for which it was collected, except with an Individual’s consent or as required or permitted by law. Consent may be express or implied, and given in writing by using or not using a check-off box, electronically, orally, or by the Individual’s conduct, such as use of the services or products.

Cookies and IP Addresses

Tim Hortons uses an Individual’s IP address to help identify an Individual, gather broad demographic information about users of the Sites, diagnose problems with Tim Hortons’ systems, and administer the Sites. Depending on a user’s browser settings, the Sites may use cookies to deliver content according to the Individual’s preferences and to save the Individual’s password so that the Individual is not required to re-enter it while the Individual uses the Sites.

Security

Tim Hortons protects against the loss, misuse, and alteration of personal information with security measures appropriate to the sensitivity of the information, including through the use of physical, organizational, and technological measures and appropriate training of employees. Tim Hortons may engage third party service providers to provide hosting, data storage and data retention services. Either Tim Hortons of such third party service provider may use servers for such purposes located in the United States or another foreign country. The personal information of an Individual may be processed and stored in the United States or such other foreign country, and the governments, courts or law enforcement or regulatory agencies of that country may be able to obtain disclosure of personal information through the laws of the foreign country.

Opt-Out

When appropriate, Individuals are given the opportunity to (i) opt-out of receiving communications from Tim Hortons, (ii) remove their personal information from Tim Hortons’ records, or (iii) elect to no longer receive services from Tim Hortons. If an Individual wishes to opt-out of receiving further communications, please contact our Chief Privacy Officer (the “Privacy Officer”) using the contact information provided below.

Corrections/Contact

An Individual may contact the Privacy Officer to modify or correct any of his or her personal information that is under Tim Hortons’ control. An Individual may also direct a written complaint regarding compliance with this Privacy Policy to the Privacy Officer and, within a reasonable time upon receiving the written complaint, the Privacy Officer will conduct an investigation into the matter. Within a reasonable time of concluding the investigation, the Privacy Officer will respond to the complaint and, if appropriate, Tim Hortons will take appropriate measure necessary to rectify the source of the complaint.

Contact

If an Individual has any questions about this Privacy Policy or Tim Hortons’ collection, use, disclosure, or retention of the Individual’s personal information, please contact the Privacy Officer as follows:

The TDL Group Corp.