Privacy Policy

This is the privacy policy (“Policy”) of Mandy’s and/or its subsidiaries or affiliated entities under its direct or indirect control (individually or collectively referred to as “Mandy’s,” “we,” “us,” or “our”). It outlines the type of Personal Information we may collect from individuals, how we collect and use this Personal Information, and your choices regarding our use of this information. This includes information from individuals who:

Use our internal or external websites or web applications under Mandy’s control or management (collectively, the “Website”).
Purchase or consume products sold, supplied, or made by us, directly or indirectly.
Enter our consumer contests.
Interact with us online, offline, or in-person at our premises.

These individuals and their associated Personal Information may hereinafter be referred to as “you” or “your.”

This Policy also explains the nature of your rights under applicable privacy laws, including Quebec’s privacy legislation. If you have any questions or concerns about this Policy, including any requests to exercise your legal rights, please contact us using the information at the end of the Policy.

Personal Information Defined

For the purposes of this Policy:

“Personal Information” refers to any information that identifies you as an individual, such as your name, home address, telephone number, or email address. The scope of this term may vary according to the data protection laws in different jurisdictions.
“Sensitive Personal Information” includes categories of data that require additional protection, such as health information or information related to racial or ethnic origin, political opinions, or other attributes recognized by applicable privacy laws.

If you do not agree to the processing of your Personal Information as detailed in this Policy, please refrain from using the Website or Services. Note that your use of the Website is also subject to our posted Legal Notice.

Information Gathered by Mandy’s

We may collect, use, store, disclose, and transfer various types of Personal Information based on your interaction with us. These include:

Category	Details
Business Contact Data	Name, job title, business contact details, correspondence history, order and sales history, and preferences (including marketing).
CCTV Data	Video surveillance footage collected for security purposes, specifically in cases involving security incidents, theft prevention, or customer/staff safety. Subject to internal policy.
Contact & Identity Data	Name, gender, birthdate, personal email, telephone numbers, or social media contact information.
Contest Data	Information provided when entering a contest, such as name, address, and for winners, details like identification documents.
Correspondence Data	Records of your communications with us, such as email exchanges or messages via social media.
Health Data	Information about food allergies and/or dietary restrictions and relevant health details necessary for accommodations or legal compliance.
Profile Data	Interests, preferences, and survey responses.
Sales Data	Details related to purchases, such as billing, delivery, or transaction data.
Technical Data	IP address, browser type, operating system, and related technical details when using our Website.
Usage Data	Information about your interactions with our Website or social media pages.
Visitor Data	Information about visits to our premises, such as access card logs, health details for accomodation, and purpose of visit.

We may anonymize your Personal Information to create Anonymized Information, which no longer identifies you. This data may be used for research, statistical analysis, and Website optimization without further notice or consent.

Sensitive Personal Information

Sensitive Personal Information may be collected only where required by law or necessary for the specific services provided. When processing this information, Mandy’s adheres to all legal and organizational safeguards required under Quebec privacy law and other applicable legislation.

How is Your Personal Information Collected?

We may collect Personal Information about you through various interactions with us, including the following:

Direct Interactions

Voluntary Information: You may provide Personal Information directly, including Identity Data, Contact Data, Profile Data, Correspondence Data, Contest Data, Sales Data, and Health Data, when you contact us by mail, telephone, email, our Website, or social media.
On-Site Interactions: Personal Information may be collected during surveys, inquiries, contest submissions, or meetings at our premises or events.

Website Forms and Digital Engagements

We collect Personal Information through your interactions on our Website, notably in the following scenarios:

Subscribing to our newsletter.
Purchasing gift cards.
Placing orders via our Website.
Inquiring about franchise opportunities.
Applying for a job.
Participating in our online or mobile contests.
Creating online accounts for take-out or delivery services.
Joining our loyalty rewards programs.
Filing complaints, giving feedback, or asking questions via our Website or customer service platforms.

Third Parties or Publicly Available Sources

We may also receive Personal Information about you from various external sources, such as:

Identity, Contact, Profile, and Health Data: Provided by businesses or organizations you have interacted with, including stores or partners who may share your data to resolve issues.
Business Contact Data: Supplied by your employer or organizational representatives.
Technical Data: Collected from analytics services like Google.
Sales and Fraud Prevention Data: Gathered from payment providers, social media platforms, and fraud detection agencies.
Publicly Available Data: Accessed from sources like social media platforms, fraud detection agencies, and public records (e.g., voting registers).

Automated Technologies

With your consent, we collect Technical Data when you visit our Website or engage with us through digital platforms, such as social media. This includes information about your device, browsing actions, patterns, cookies, and server logs, as outlined in the Cookies, Web Beacons, and Analytical Services section.

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your browsing experience and gather information about how our services are used. Cookies are small data files stored on your device that help us remember certain preferences or settings while you visit our website.

Cookie Management

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as “Necessary” are stored on your browser as they are essential for enabling the basic functionalities of the site.

We also use third-party cookies that help us analyze how you use this website, store your preferences, and provide the content and advertisements that are relevant to you. These cookies will only be stored in your browser with your prior consent.

You can choose to enable or disable some or all of these cookies but disabling some of them may affect your browsing experience.

Do Not Track

We respect your privacy preferences related to tracking technologies. Our websites have been designed to recognize and honor your cookie preferences, ensuring that your settings are applied consistently across pages and sessions.

Cookie Preferences: If you wish to manage your cookie settings, you can use the Cookie Consent Manager available on our website. This tool allows you to selectively enable or disable different categories of cookies.
Do Not Sell/Share Information: We do not sell or share your personal information collected through cookies or similar technologies for cross-context behavioral advertising without your explicit consent. We ensure that your preferences are respected across applications on our website.

If you fail to provide Personal Information

Failure to provide required Personal Information in cases of inquiry, feedback, or a complaint may hinder our ability to assist you effectively or to investigate matters thoroughly. If such a situation arises, we will make reasonable efforts to inform you.

Purposes for Collecting Your Personal Information

We collect and use your Personal Information for a variety of purposes. Below is an overview of these purposes:

Addressing Inquiries, Complaints, or Feedback

To respond to complaints, questions, or feedback.
- Necessary to comply with legal obligations.
- Necessary for quality monitoring, investigations, appropriate actions, and providing meaningful responses.
- Necessary for the performance of contractual obligations.
- Necessary for the establishment, exercise, or defense of legal claims.

Improving Products and Services

To provide feedback to our business on product and staff performance and address product issues.
- Necessary for quality monitoring, product improvements, and new product development.
- Necessary for the establishment, exercise, or defense of legal claims.
To use analytics for improving our website, services, and customer experience.
- Necessary for ensuring relevance and updates to our offerings.

Fraud Prevention

To identify and prevent fraudulent or malicious claims.
- Necessary for the establishment, exercise, or defense of legal claims.

Relationship Management

To manage our relationship with you, including:
- Responding to questions or complaints.
- Notifying you of policy changes.
- Requesting reviews or survey participation.
- Necessary to comply with legal obligations.
- Necessary for marketing and studying consumer behavior.

Business Operations

To administer and protect our business, website, and services (e.g., troubleshooting, testing, reporting).
- Necessary for running our business, providing IT and administrative services, network security, and preventing fraud.
- Necessary to comply with legal obligations.

Legal Compliance

To comply with legal and regulatory obligations.
- Necessary to fulfill legal requirements.

Marketing and Promotions

To deliver newsletters, updates, and special offers via email or post.
- Necessary for business promotion and marketing.
To publish external-facing materials, such as marketing content and press releases.
- Necessary for business promotion.
To provide exclusive offers, discounts, and special benefits through loyalty programs.

Online Transactions and Accounts

To process gift card purchases, online orders, and facilitate online ordering and checkout experiences.
- Necessary for the performance of requested transactions.
To improve your experience with take-out, delivery, and loyalty programs.

Security and Enforcement

To enforce terms of use, prevent prohibited activities, and maintain security.
- Necessary to prevent misuse and ensure security.
- Necessary for the establishment, exercise, or defense of legal claims.
To enable access to our sites and premises and maintain security.
- Necessary to facilitate business operations and ensure safety.
- Necessary to comply with legal obligations.

Contest Administration

To manage contests, including contacting winners and coordinating prize delivery.
- Necessary for the performance of contracts.
- Necessary for promotional and engagement purposes.

Business Transactions

To conduct business with customers and suppliers.
- Necessary for purchasing essential products and services.
- Necessary for contractual performance.
- Necessary to comply with legal obligations.

Accommodation of Preferences

To meet health, dietary, or religious requirements.
- Necessary for accommodating food allergies or preferences.

Employment and Franchise Opportunities

To contact applicants regarding franchise or employment opportunities.
- Necessary for continuing the application process.

Retention of Personal Information

Your Personal Information will be kept only as long as required to fulfill its intended purposes and comply with applicable laws, including any legal reporting requirements.

How is your Personal Information disclosed?

We do not typically disclose Personal Information to third parties unless required for essential business operations, with your consent, or as required by law. Third parties may include:

Service providers, like marketing agencies, or IT services
Professional advisers (lawyers, auditors)
Financial institutions
Public authorities or law enforcement bodies when required by legal or regulatory obligations

Your data may also be shared within Mandy’s subsidiaries or affiliates in certain instances such as business restructuring.

Additionally, we may share personal information with our group of companies for purposes such as company performance reporting, business reorganizations, data hosting, or providing audit and legal services.

We also reserve the right to transfer or assign your personal information to our subsidiaries, affiliates, or to a successor entity following a merger, asset sale, or other similar business transactions.

Transferring Personal Information to other jurisdictions

We, and third parties handling your data, may process Personal Information outside your jurisdiction, including regions that may not have identical privacy standards. Measures to safeguard these transfers are in place, such as contracts or legal agreements that meet data protection standards.

Security and Data Protection

Mandy’s takes reasonable security measures to protect your Personal Information, although absolute security cannot be guaranteed. We implement privacy and information management procedures within our organization, such as access control, encryption where applicable, and staff training.

Children’s Privacy

Our Service is not designed for use by anyone under the age of 14. We do not intentionally gather personal information from individuals under this age. If you are a parent or guardian and discover that your child has shared personal information with us, please notify us right away. Should we learn that we have unintentionally obtained personal information from someone under 14, we will act quickly to remove it from our systems.

Data Subject Rights

As a user or data subject under Quebec’s privacy laws, you have several rights regarding your Personal Information, including:

Access and correction of your Personal Information
Deletion of Personal Information when there is no lawful reason to retain it
Objection to data processing on legitimate grounds
Withdrawal of consent (where applicable)
Transfer of your data to another party

To exercise these rights or for more information, please contact our privacy officer at privacy@mandys.ca or the address provided below.

Mandy’s Gourmet Salads
Attn: Privacy Officer
642 De Courcelle, Suite 304
Montréal, Québec H4C 3C5

Accessing your Private information

To access your private information gathered by Mandy’s please submit your request by email to privacy@mandys.ca. All legitimate requests should be treated within 10 business days.