Cookie Policy

"Strictly Necessary Cookies" means Cookies without which the Portal, or a service expressly requested by the User, cannot be provided as a matter of technical necessity, including Cookies that record session state, maintain authentication, preserve the contents of the shopping basket prior to checkout, carry security tokens, and protect the Portal against cross-site request forgery and other forms of abuse.

"Measurement Cookies" means Cookies and local storage entries used to collect aggregated, non-identifying statistics on page views, search usage and similar interaction data, for the exclusive purpose of operating and improving the Portal.

"Consent" means any freely given, specific, informed and unambiguous indication of the User's wishes by which the User accepts the processing of Cookies, expressed through the consent interface made available in the Portal footer and on first visit.

• Strictly Necessary: session management, sign-in state, basket storage between the addition of services and checkout, security and anti-fraud tokens. These Cookies are stored and processed on the basis of the Operator's legitimate interest in the secure and functional operation of the Portal and, where applicable, the performance of the service expressly requested by the User; they cannot be disabled through the consent interface, and disabling them in the User's browser settings will prevent sign-in, basket retention and checkout from functioning.
• Measurement: aggregate page-view and search-usage statistics collected by the Operator on infrastructure under its own control. Measurement Cookies are stored and processed only with the User's prior Consent, are not linked to the User's account or to any identified or identifiable natural person, are not disclosed to, shared with or made available to any advertising network, data broker or third-party analytics provider, and are not used to build behavioural or advertising profiles.

The Operator does not deploy advertising Cookies, cross-site tracking technologies, retargeting or re-marketing pixels, social-media plug-ins that set Cookies, or any comparable technology operated by or on behalf of third parties for advertising, profiling or behavioural purposes.

The Operator does not sell, rent, license or otherwise disclose information derived from Cookies to third parties for their own independent purposes, whether for consideration or otherwise.

Processing of personal information through Cookies is carried out in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial statutes. To the extent any User is subject to the laws of another jurisdiction, including the General Data Protection Regulation (EU) 2016/679 where applicable, the Operator processes Strictly Necessary Cookies on the basis of necessity for the provision of a service expressly requested by the User or of its legitimate interests, and Measurement Cookies on the basis of Consent, withdrawable at any time.

Prior to the storage of, or access to, any information through Measurement Cookies, the User is presented with a consent mechanism through which Consent may be granted, refused or tailored. Consent may be modified or withdrawn at any time with effect for the future, without detriment, by means of the cookie preferences control available in the footer of the Portal, or by clearing or blocking Cookies in the User's browser settings.

Withdrawal of Consent does not affect the lawfulness of processing carried out on the basis of Consent prior to its withdrawal, nor does it affect the storage of Strictly Necessary Cookies, which remain exempt from the Consent requirement.

The Operator does not condition access to any part of the Portal, other than such parts that are technically dependent on Strictly Necessary Cookies, on the User granting Consent to Measurement Cookies.

• Session Cookies: retained for the duration of the browser session and deleted upon its termination or upon sign-out, whichever occurs first.
• Basket storage: retained until the basket is cleared, checkout is completed, or a maximum of thirty (30) days has elapsed, whichever occurs first.
• Security tokens: retained for no longer than necessary to protect the form submission against replay and forgery, and in any event not exceeding the duration of the session.
• Consent record: the fact, content and timestamp of the User's choice are retained in local storage for as long as necessary to evidence the state of Consent, and are superseded upon each subsequent exercise of the choice.
• Measurement data: retained in aggregate form for a maximum of twenty-four (24) months, whereafter it is deleted or irreversibly anonymised.

Subject to applicable law, the User may request access to, rectification or erasure of personal information processed through Cookies, object to or request the restriction of such processing, and lodge a complaint with the competent supervisory authority. The Operator does not ordinarily identify Users from Cookies alone; where a request relates to an account, the Operator will verify the identity of the requester before acting upon it.

Requests, questions and complaints concerning this Policy should be directed to the Operator through the contact details published on the contact page of the Portal. The Operator will respond within the period required by applicable law.

The Operator may amend this Policy from time to time in order to reflect changes in the Cookies used, in applicable legislation, regulatory guidance or case law, or in the operation of the Portal. The version in force is the one published on the Portal on the date of the User's visit, as indicated by the date of last revision shown above. Material changes affecting the Consent previously obtained will be brought to the User's attention, and, where required, renewed Consent will be requested.