Issue Date: July 4, 2024

PRIVACY POLICY

ARROW’S COMMITMENT TO PROTECTING PRIVACY OF PERSONAL INFORMATION

At Arrow Group of Companies (Co) (“Arrow”, “us”, “we”, or “our”), we are dedicated to protecting your privacy and safeguarding all personal information you have entrusted to us.

We strive to become your first choice and hold ourselves to the highest standards to build trust. Our privacy policy and practices, including all of Arrow’s governance practices, are based on our mission and core values and are aligned with applicable laws and regulations.

This Privacy Policy describes the personal information that Arrow collects about you, and how we use and share that information. This applies to information we collect through our website, mobile applications, other online products and services and various off-line sales and marketing events we conduct and/or sponsor (collectively, the “Services”). 

ACCOUNTABILITY

At Arrow, we are dedicated to protecting the personal information entrusted to us and under our control. This commitment is fundamental to the way we do business and as a result Arrow has designated a Privacy Officer who is accountable for ensuring compliance with this policy, accessibility, and management of personal information.  

Contact Details

If you have questions regarding privacy, there are different ways for you to contact us:

If you need to escalate a privacy complaint, you may escalate to Arrow’s designated Privacy Officer by sending an email to social@arrow.ca. Alternatively, you can write to us:

Attention: Privacy Officer,
Arrow Group of Companies
400-970 McMaster Way
Kamloops, BC V2C 6K2

HOW ARROW COLLECTS PERSONAL INFORMATION

Arrow collects and uses personal information for the purposes reasonably required to carry on business. Most information is collected directly from customers and the other individuals with whom Arrow does business. With your consent, we may also obtain personal information from third parties This information is collected when you interact with us and will include, but not limited to the following:

It is not our practice to link IP addresses (or other technical or device information) to anything personally identifiable; that is, the visitor’s session will be logged, but the visitor remains anonymous to us. However, we reserve the right to use IP addresses to identify a visitor when we feel it is necessary to enforce compliance with our Services’ rules or to:

(a) fulfill a government request;

(b) conform with the requirements of the law or legal process;

(c) protect or defend our legal rights or property, our Services, or other users; or

(d) in an emergency to protect the health and safety of our Services’ users or the general public.

Personal information agents and other personal references: information may be collected from third parties provided by you.

PURPOSES/LIMITING COLLECTION & USE

We will identify the purposes for which we collect personal information before or at the time we request the information.  We will not collect personal information, which is not necessary and, except as specified below, will not use or disclose personal information for any purpose other than the purpose(s) for which it was collected without first obtaining your consent.  In addition to the purposes set out above (see: How Arrow Collects Personal Information), the purposes for which we collect personal information include:

Where personal information that has been collected is to be used for a purpose not previously identified, and for which consent cannot be reasonably implied, the new purpose will be identified and consent obtained prior to the use of that information for the new purpose unless otherwise permitted by law.

CONSENT

Except as expressly provided in this Privacy Policy or as otherwise permitted by law, consent is required for the collection of personal information and the subsequent use or disclosure of that information.  Consent may be expressed or implied. For consent to be meaningful, it must be informed consent and will only be valid if it is reasonable to expect that the individual understands the nature, purpose and consequences of the collection, use or disclosure of the personal information to which they are consenting.  Typically, we will seek consent in advance or at the time of collection and make reasonable efforts to ensure that you understand the purpose(s) for which we will use or disclose the information. In certain circumstances, we may seek consent regarding use or disclosure after the information has been collected, but before use, such as when we wish to use personal information already in our possession for a purpose that was not previously identified.

YOUR CHOICE

You are always in control of your personal information and providing us with your information is always your choice. By voluntarily submitting your personal information or otherwise using the Services, you signify your agreement to the terms and conditions of this Privacy Policy and to our collection, use and disclosure of your personal information as set out herein.  

You may change or withdraw your consent to the collection, use or disclosure of your personal information at any time and we will respect that choice in accordance with our legal obligations. Arrow will process and implement such requests within a reasonable amount of time. You can do so by contacting the Privacy Officer in writing at one of the addresses listed above (see: Accountability).

Arrow, however, may collect, use or disclose personal information without your knowledge or consent in limited circumstances, including:

NON-DISCRIMINATION

Arrow will never discriminate against you if you decide to exercise any of the rights related to your personal information, including but not limited to:

Note, however, that requests to restrict the use of your personal information may limit Arrow’s ability to provide you with the optimal level of service or any service. Arrow will advise you if this is the case.

ACCURACY & ACCESS TO YOUR PERSONAL INFORMATION

Arrow has a responsibility to ensure that all personal information contained in our records, or which is disclosed to third parties for the purposes described above is accurate, complete and up to date.  You may make a request in writing for access to your personal information. Except as permitted or required by law, we will inform you of your personal information held by us and provide an account of the use that has been made of the information, as well as identify any third parties to whom the information has been disclosed.  

You may have reasonable access to your personal information, and if you demonstrate the inaccuracy or incompleteness of personal information, the information will be amended as appropriate. You should advise us immediately if you discover inaccuracies in our data, if your personal information changes, or if you wish to have your information removed from our files.  All notices and requests should be in writing and sent to the Privacy Officer at the address listed above (see: Accountability).

DISCLOSURE TO THIRD PARTIES

In the course of providing the Services to you, we may delegate our authority to collect, use or disclose your information to third party subcontractors.  Third party subcontractors may include web hosts, payment processors, delivery and logistics providers and social network integrators. If we transfer any personal information to a third-party subcontractor, we will provide the subcontractors only with the information needed to perform the subcontracted service and will use appropriate contractual or other means to provide a comparable level of protection while the information is being used by them.

We may disclose your personal information without your knowledge or consent where we are permitted or required to do so by applicable law, government request, request of a law enforcement agency, search warrant, subpoena or court order, or based on our good faith belief that it is necessary to do so in order to comply with such law, request, warrant, subpoena or court order, or to protect our business or assets, users of the Services, or the public.

We may also use and disclose your personal information without your knowledge or consent where necessary in connection with a proposed or completed business transaction, such as a sale of any or all of our business or assets. In each such case, we and the other part(ies) to the transaction or proposed transaction will enter into an agreement limiting the purposes for which the personal information may be used and disclosed, ensuring its protection by means appropriate to the sensitivity of the information, and providing for the return or destruction of the information if the transaction does not proceed, or if the transaction does proceed, to notify you within a reasonable time that your personal information has been disclosed.

SAFEGUARDS

We maintain reasonable security safeguards to protect personal information in our possession or under our control from loss or theft, and from unauthorized access, disclosure, copying, use or modification, regardless of the format in which the information is held.  The safeguards applied will depend on the sensitivity of the personal information, with the highest level of protection given to the most sensitive personal information.

RETENTION OF PERSONAL INFORMATION

The personal information that you provide will be retained by Arrow in accordance with applicable laws and Arrow will take reasonable steps to destroy or permanently de-identify personal information it holds if it is no longer needed for Arrow’s business purposes.

When destroying personal information, we delete electronically stored personal information and shred any tangible materials containing personal information. While we will endeavour to destroy all copies of personal information, you acknowledge that deleted information may continue to exist on back-up media but will not be used unless permitted by law.

We will continually review and update our security policies and controls as technology evolves.  However, no security technology can be guaranteed to be failsafe. Using the Internet or other public means of communication to collect and process personal data may involve the transmission of data on an international basis and across networks not owned and/or operated by us.  Therefore, by using the Services and/or communicating electronically with us, you acknowledge and agree to our processing of personal information in this way and agree that we are not responsible for any personal information which is lost, or which is altered, intercepted or stored by a third party without authorization.

INTERNATIONAL TRANSFER AND STORAGE OF INFORMATION

You acknowledge and agree that your personal information may be transmitted, transferred, processed, and/or stored outside of your country of residence, and therefore may be available to governmental authorities under lawful orders and laws applicable in such foreign jurisdictions.  We will use reasonable means to ensure that your information is protected but cannot guarantee that the laws of any foreign jurisdiction will accord the same degree of protection as the laws of your country of residence.

THIRD PARTY CONTENT AND LINKS TO OTHER WEBSITES

The Services may contain optional links to third party Internet websites and services.  You acknowledge that these third parties may collect data from users or their computers.  The accessing and use of third-party websites or services is at your own risk, and we cannot assume responsibility for the privacy practices, policies or actions of the third parties who operate those websites or services.  This Privacy Policy applies only to the Arrow Services, and we encourage you to review the privacy policies of any third parties when using their websites or services.

OPENNESS

If you have any questions regarding our Privacy Policy, please contact us via email:

Arrow Group of Companies (Co)
Attention: Privacy Department
Email: social@arrow.ca

Or write to us:

Attention: Privacy Officer,
Arrow Group of Companies
Arrow Group of Companies
400-970 McMaster Way
Kamloops, BC V2C 6K2

UPDATES TO PRIVACY POLICY

We may modify this Privacy Policy from time to time. We will post an updated copy of the policy on our website. We may communicate the changes through our Services or by other means so that you may review the changes before continuing to use our Services.  Your continued use of the Services after we publish or communicate a notice about any changes to this Privacy Policy means that you are consenting to the changes.