Effective date: 06-05-2025

Date of last update: 06-05-2025

1.   General information

a)   Introduction

Policy objective. Privacy is important to UNIMAX LTÉE/UNIMAX LTD. (hereinafter the “Company”, “We”, “Us”, “Our”). That's why we have put in place safeguards and sound management practices for Your Personal Information in accordance with applicable laws in Quebec and Canada.

Complementary to Terms and Conditions. This privacy policy (the “Policy”), which should be read in conjunction with Our Terms and Conditions, describes Our practices with respect to the collection, use, processing, communication, retention and destruction of Personal Information of persons benefiting from Our Services, visitors to this Website and its users (hereinafter ”You”, “Your”).

Consent. By using Our website https://www.b2b.distributionstox.ca/, https://www.distributionstox.ca/, https://www.point-s.ca/, https://v1auto.ca/, https://otobox.ca/, https://pointscanada.ca/ and https://shop.pointscanada.ca/ (collectively the ”Website”) or one of Our Services, You agree that We may collect, use, disclose, communicate, disclose and retain (hereinafter “Process” or “Processing”) Your Personal Information in accordance with the conditions described herein. If You do not agree to abide and be bound by this Policy, You may not visit, access or use Our Website or Services, or share Your Personal Information with Us.

Policy limitations. This Policy does not apply to Personal Information of the Company’s employees, representatives and consultants, or any other person affiliated with the Company, or to any information that does not constitute Personal Information as defined by applicable laws in Quebec and Canada.

b)    Person in charge of the protection of personal information (“Privacy Officer”)

Privacy Officer contact information. All comments, questions and complaints regarding the Company’s Privacy Policy and practices may be addressed to Our Privacy Officer as follows:

Email: rprp@unimax.ca

Address: 235 J.-A.-Bombardier Street, Boucherville, QC, J4B 8P1

1.   Definitions

Definitions of certain concepts or expressions. The following notions and expressions, when they appear with a capitalized first letter in the Policy, have the meaning attributed to them hereinafter, unless otherwise implied or explicit in the text:

“Company”, “We”, “Us”, “Our”: UNIMAX LTÉE/UNIMAX LTD.

“Service providers”: any natural person or legal entity that processes Personal Information on behalf of the Company. This includes third-party companies or individuals employed by the Company to facilitate the Services, provide the Services on behalf of the Company, perform services related to the Services or assist the Company in analyzing the use of the Services.

“Cookie Banner”: pop-up window requesting Your consent to specific collection of Your Personal Information on the Website.

“Personal Information”: any information that relates to a natural person and allows that person to be identified, i.e. that directly or indirectly reveals something about that person’s identity, characteristics (e.g. abilities, preferences, psychological tendencies, predispositions, mental abilities, character and behaviour of the person concerned) or activities, regardless of the nature of the medium or the form in which the information is accessible (written, graphic, sound, visual, computerized or other).

“Person in charge of the protection of personal information (Privacy Officer)”: the person in charge of applying this Policy and whose contact information is provided in the  Person in charge of the protection of personal information (“Privacy Officer”) section of this Policy.

“Services”: Services refers to the applications of the Website, Our pages on social networks and all programs and services rendered to You therein.

“Website”: Collectively refers to the following Websites: https://www.b2b.distributionstox.ca/, https://www.distributionstox.ca/, https://www.point-s.ca/, https://v1auto.ca/, https://otobox.ca/, https://pointscanada.ca/ and https://shop.pointscanada.ca/.

“Cookie”: Cookies are text files that are installed on Your computer or mobile device. These Cookies may contain information about Your search history, the web pages you visit and Your web browser.

“Process”, “Processing”: Notion encompassing all operations that may affect or concern Personal Information, including collection, use, storage, destruction, communication or transmission.

“You”, “Your”: Persons benefiting from Our Services, visitors to the Website and all users having recourse to the Company’s Services.

2.   Processing of Personal Information

2.1.  Collection of Personal Information

2.1.1.   Collection methods

Various methods. We collect Your Personal Information through Our Website or other technological means in a variety of ways:

• Automatically. When You connect to Our Website, the device You use to connect will communicate Personal Information to Us;

• Electronic forms. By filling in and sending Us one of Our electronic forms;

• Email messages. By sending Us e-mails using one of the e-mail addresses available on Our Website;

• Cookies. By Cookies, including the Cookies identified in Our Cookies Policy; and

• Surveillance cameras. By surveillance cameras installed on Our property;

Profiling, identification or location. Our Website has features that allow it to profile Your activities on Our Website, identify You and locate You. These features are used by third parties identified in the Access, communication and transfer of Personal Information section through Cookies. We disable these functions by default. You can activate them through the Cookie Banner.

2.1.2.   Personal Information collected

Categories of collected information. In the course of Our activities, We may collect and process various types of Personal Information, including the information listed below:

• You identification and contact information, such as your first and last names, address, e-mail address and telephone number, vehicle registration number and vehicle identification number (VIN);

• transaction and payment information, such as the payment method used, date and time, payment amount, billing postal code, your address and other related information;

• technical or numerical information, including connection information and other information about Your activities on the Website, such as Your IP address, the pages You have visited, the time and date of Your visits, Your number of connections, Your domain name, the address of the referring site (if accessing the Website from another site), the type of browser You are using, the operating system of Your device and other hardware and software information;

• information necessary to the provision of Our Services, such as information concerning the Services We have rendered or are rendering to You and Your payment information, including Your billing address, the first and last names appearing on Your payment card, Your payment card number, Your payment card expiry date and Your payment method;

• information that You choose to provide or transmit to Us, for example, when You fill out an online form, respond to solicitations or surveys, or communicate with one of Our employees or representatives; and

• location information, such as Your IP address, a precise or approximate location determined from Your IP address or the GPS of Your mobile device (depending on Your device’s settings).

Limiting processing to necessary and legitimate purposes. In each case, such Personal Information is processed in accordance with the legitimate and necessary purposes listed in the Use of Personal Information section below.

2.2.  Refusing collection

Refusing to consent. Unless the Law or Your contractual obligations provide otherwise, You may refuse or withdraw Your consent to specific uses or communication of Your Personal Information:

• by not entering Your Personal Information in Our electronic or paper forms where the provision of such information is indicated as optional;

• by selecting “decline” in the Cookie Banner; or

• by sending a request to Our Privacy Officer, using the contact information identified in the  Person in charge of the protection of personal information (“Privacy Officer”) section of this policy.

Measures provided for refusing Personal Information collection methods. You may also communicate Your Personal Information to Us other than through technological means such as Our Website. You can communicate these to Us:

• By phone; or

• In person.

2.3.  Use of Personal Information

Personal Information purposes. We may use Your Personal Information for the purposes described below:

-      to operate, maintain, supervise, develop, improve and offer the functionalities of Our Website;

-      to protect Our personnel and property;

-      to introduce You to and provide You with Our Services;

-      to enable You to acquire Our Services and to carry out transactions in connection with Our Services;

-      to perform Our contractual obligations to You;

-      to carry out targeted advertising and deliver ads to You via the Internet, as well as to persons who have already visited Our Website;

-      to handle and resolve complaints and dissatisfactions;

-      to develop, improve and provide new Services;

-      for marketing and business development purposes, if You have previously consented to the processing of Your Personal Information for these purposes;

-      to collect opinions and comments regarding Our Services;

-      to send You messages, updates and security alerts;

-      to answer Your questions and provide You with assistance as required;

-      to conduct research, analysis and statistics in connection with Our Company and Our Services;

-      to detect and prevent fraud, errors, spam, abuse, security incidents and other harmful activities;

-      to provide a virtual communication interface (“chatbot”) to answer Your questions, confirm appointment dates and put you in touch with customer service;

-      to forward communications to You in accordance with the law; and

-      for any other purpose allowed or required by law.

2.4. Access, communication and transfer of Personal Information

Possible access and communication. We may transfer, communicate or otherwise make available Your Personal Information to Our employees and Our Service Providers, who need to know that information in order to operate Our Website, provide Our Services, conduct Our business or serve You.

2.4.1.  Access to Personal Information within the Company

Limiting access to Personal Information. Your Personal Information is only accessible to Our directors, employees or representatives who require access to Your Personal Information in order to perform their duties. As such, Your Information may be accessible to:

-        Our Privacy Officer;

-        Our IT (“Information Technologies”) services;

-        Our customer services;

-        Our sales services;

-        Our billing services; and

-        Our advertising services.

-        Our human resources (for job applications); and

-        Our delivery personnel.

-        Our merchants

-        Our marketing services

2.4.2.   Communication of Personal Information

Protection measures during third-party communication. We will only communicate Your Personal Information to Our Service Providers if they have previously agreed in writing to maintain the confidentiality of Your Personal Information in accordance with applicable laws and Our Information Governance Program through the implementation of various information protection and governance measures. These measures are proportionate to the sensitivity of the Personal Information processed or communicated. Without limitation, Our Service Providers may only use Your Personal Information in a confidential manner in accordance with Our instructions and solely for the purposes for which it was provided. Furthermore, We only provide Our Service Providers with the Personal Information that is necessary for the performance of their mandate or contract, and We require such Service Providers to destroy the Personal Information in an appropriate manner upon termination of the contract or as soon as its use is no longer necessary.  

Our service providers. Although We try to avoid sharing Your Personal Information with third parties, We may use Service Providers to perform various services on Our behalf, such as IT management and security, marketing, and data analysis, hosting and storage. We have defined below certain cases in which such sharing may take place:

• We use the Google Analytics Cookie to analyze Website traffic and compile statistics. For more information, see Google’s privacy policy and their table of advertising and measurement cookies (in English only);

Please note that this Cookie may collect Personal Information that could locate You and profile Your web activities (targeted advertising);

This Cookie communicates Personal Information to Google for the purposes identified in Our Cookies Policy;

• We use the services of developers, IT analysts and graphic designers to display Website content. Their privacy policies will be available upon request;

• We use YouTube to present our products and Services. For more information, see Google’s privacy policy;

• We use the services of Microsoft (Outlook and Microsoft Office suite) and Microsoft Azure to store and manage Our data, Our documents and Our emails and to host the Website. We also use Microsoft Dynamics AX as our ERP and Microsoft Exchanges (Office365) to store and communicate certain documents. For more information, see Microsoft’s privacy policy; 

• We use the services of marketing and web agencies, including Espresso Communications, Selligent, Triomphe Marketing 360 and Quatrecentquatre, to advertise Our products and Services and analyze the effectiveness of Our advertising campaigns. For more information, please consult their respective privacy policies.

• We use Lognet Inc. to store our documents. See their privacy policy.

• We use the services of SmartRecruiters to recruit Our employees and store certain documents. For more information, see their privacy policy (in English only);

• We share personal information with Salesforce to automate Our Customer Relationship Management (CRM) data. For more information, see their privacy statement;

• We use Google Ads to analyze the audience of Our Services, compile statistics and converse with customers and prospects. For more information, see Google’s privacy policy and their table of advertising and measurement cookies (in English only);

Please note that this Cookie may identify You and profile Your web activities to deliver ads to You that are tailored to Your interests (targeted advertising);

This Cookie communicates Personal Information to Google for the purposes identified in Our Cookies Policy;

• We use the services of the LinkedIn social network for advertising purposes and to converse with You and with candidates or prospects for recruitment purposes. For more information, see LinkedIn’s privacy policy;

• We use Paradoxe to store some of our documents. See their privacy policy;

• We use the services of Hotjar Ltd to compile statistic and reports on Website browsing in order to analyze Website traffic statistics. For more information, see Hotjar Ltd’s privacy policy.

• We use the services of Microsoft (Bing) Ads to collect and store data in order to create usage profiles using pseudonyms. For more information, see Microsoft’s privacy policy; 

• We use the services of Intuit Inc’s Mailchimp to manage our emails. For more information, see their privacy policy (in English only);

• We use the services of Stripe and Flexiti to make payments and pre-payments for our Services and products. For more information, see their respective privacy policies.

• We use X (formerly Twitter) to present Our products and Services. For more information, see X’s privacy policy;

• We use the social network services of the Meta group, which includes Facebook, to communicate about Our Services. For more information, see Meta’s privacy policy;

• We use Amazon Web Services (AWS) to store some of our documents. See their privacy policy;

• We use the services of resellers. In digital marketing, reselling (or retargeting) is the practice of delivering ads across the Internet to people who have already visited your website. It allows your company to leave the impression that your website visitors are following you across the Internet by presenting ads from Our Service on the Website and platforms they use most.

• We use the services of Meta (Facebook Pixel) to help understand and deliver ads, compile statistics and converse with customers and prospects. For more information, see Meta’s privacy policy; please note that this Cookie may identify You and profile Your web activities in order to deliver ads that are tailored to Your interests (targeted advertising);

This Cookie communicates Personal Information to Meta for the purposes identified in Our Cookies Policy;

• We use the services of TikTok to help understand and deliver ads, compile statistics and converse with customers and prospects. For more information, see TikTok’s privacy policy;

• We use the services of Spotify to help understand and deliver ads, compile statistics and converse with customers and prospects. For more information, see Spotify’s privacy policy;

• We use the services of Reddit to help understand and deliver ads, compile statistics and converse with customers and prospects. For more information, see Reddit’s privacy policy;

• We use Metatracer on Our digital systems to facilitate the detection and management of Your Personal Information, as well as that of Our employees, to ensure Our compliance with privacy laws.

With regard to Personal Information, Metatracer collects only identification information.

2.4.3.   Communication outside Quebec

Communication of Personal Information outside Quebec. We may communicate Your Personal Information outside of Quebec and mandate an entity located outside of Quebec to collect, use or retain Your Personal Information on Our behalf.

Protection when communicating outside Quebec. Before communicating Your Personal Information to third parties outside Quebec, We conduct a privacy impact assessment to evaluate the risks that may affect the security of Your Personal Information. This assessment also identifies appropriate security measures to reduce or eliminate these risks. The communication will then be subject to a written agreement binding these third parties to respect such measures.

2.4.4.   Compliance with legislation, responding to legal requests, preventing harm and protecting Our rights

Specific communication of Your Personal Information. We may communicate Your Personal Information when We believe such disclosure is authorized, necessary or appropriate, including:

-      to respond to requests from public and governmental authorities, including public and governmental authorities outside Your country of residence;

-      to protect Our activities;

-      to comply with legal proceedings;

-      to protect Our rights, the privacy of Our employees, officers and directors, Our security and Our property;

-      to protect Your privacy and Your rights, or the Privacy and rights of third parties;

-      to allow Us to pursue available remedies or limit the damages We may sustain; and

-      when consistent with or required by applicable laws, including laws outside Your country of residence.

Commercial transaction

Possibility of commercial transactions. We may share, transfer or communicate, strictly in accordance with this Policy and the provisions of the Act Respecting the Protection of Personal Information in the Private Sector, RLRQ c P-39.1 (“Quebec’s Private Sector Act”) and the Act to Modernize Legislation Provisions Respecting the Protection of Personal Information, LQ 2021, c 25 (“Law 25”, passed on September 22, 2021), Your Personal Information in the event of a sale, transfer or assignment, in whole or in part, of the Business or Our assets (for example, as a result of a merger, consolidation, change of control, reorganization, bankruptcy, liquidation or other business transaction, including in connection with the negotiation of such transactions). In such a case, We will inform You before Your Personal Information is transferred and is governed by another privacy policy.

2.5. Consent

Consent to collect, use or communicate Personal Information. Unless otherwise provided for by law, the Company obtains Your consent to collect, use and communicate Your Personal Information. However, if You provide Us with Personal Information about other persons, You must ensure that You have duly notified them that You are providing Us with their information in addition to having obtained their consent to such communication.

Consent requirements. We will seek Your express, free, informed and specific consent before using or communicating Your Personal Information for purposes other than those set out herein. We will also seek Your express consent whenever sensitive Personal Information is involved in any of the Company’s processing activities. We will ask for Your consent for each specific purpose in clear and simple terms, separate from any other information that may be communicated to You.

BY USING OUR WEBSITES, TRANSMITTING YOUR PERSONAL INFORMATION BY E-MAIL OR USING AN ONLINE FORM, YOU CONSENT TO THIS PRIVACY POLICY AND TO THE COLLECTION AND PROCESSING OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THE PRIVACY POLICY.

Refusal to use the website. If You do not consent, please stop using the Websites. Except where otherwise provided by law, You may withdraw Your consent at any time upon reasonable notice. Please note that if You choose to withdraw Your consent to the collection, use or communication of Your Personal Information, certain features of Our Website may no longer be available to You or We may no longer be able to offer You some of Our services.

2.6.  Retention of Personal Information

Retention of Personal Information. Subject to applicable law, We retain Your Personal Information only for as long as is necessary to fulfill the purposes for which it was collected, unless You consent to Your Personal Information being used or processed for another purpose.

Further information. For more information about the periods for which Your Personal Information is retained, please contact Our Privacy Officer by using the contact details provided in the Privacy Officer section of this Policy.

3.   Your rights

List of rights. As a person concerned, You may exercise the rights set out below by contacting Our Privacy Officer in writing using the contact information provided in the Privacy Officer section of the Policy. Please note that We may ask You to verify Your identity before responding to any of these requests. 

• You have the right to be informed of the Personal Information We hold about You, its use, communication, retention and destruction, subject to exceptions provided by applicable law;

• You have the right to access Your Personal Information, to request a copy of the documents containing Your Personal Information, subject to the exceptions provided for by applicable law, and to obtain, if applicable, additional details on how We use, communicate, retain and destroy it, by sending a written request to Our Privacy Officer identified in the Privacy Officer section of this Policy;

• You have the right to have the Personal Information We hold about You rectified, amended and updated if it is incomplete, ambiguous, out of date or inaccurate, by sending a written request to Our Privacy Officer identified in the Privacy Officer section of this Policy;

• You have the right to withdraw or modify Your consent to the collection, use and communication of certain details of Your Personal Information collected (as identified in the Collection of Personal Information section of this Policy) at any time, subject to applicable legal and contractual restrictions;

• You have the right to ask Us to stop disseminating Your Personal Information and to de-index any link attached to Your name that provides access to such information if such dissemination contravenes the law or a court order;

• You have the right to request that Your Personal Information be communicated to You or transferred to another organization in a structured and commonly used technological format;

• You have the right to be informed of any privacy incident concerning Your Personal Information that could cause You serious harm. To this end, we keep a register listing all privacy incidents, and we assess the harm they may cause; and

• You have the right to lodge a complaint with the Commission d’accès à l’information, subject to the conditions set out in the applicable law.

4.   Questions and Complaints

Complaints process. You may address any complaints regarding Our practices and policies for protecting Your Personal Information by contacting Our Privacy Officer, using the contact information identified in the Privacy Officer section.

Questions. You may also contact Our Privacy Officer with any questions regarding this Privacy Policy by using the contact information identified in the Privacy Officer section.

Need to identify You. In order to process Your request, You may be asked to provide appropriate identification or otherwise identify Yourself.

5.   Cookies and other similar technologies

Use of cookies. Cookies are small text files that are stored on Your device or browser. They enable Us to collect certain information during Your visit to the Website, including Your preferred language, the type and version of Your browser, the type of device You are using and Your device’s unique identifier. While some cookies are deleted after Your browser session ends, other cookies are retained on Your device or browser to enable Your browser to be recognized the next time You visit the Website. We use Cookies and other similar collection technologies such as Pixels (collectively “Cookies”) to help Us operate, protect and optimize the Website and the Services We offer. Cookies do not harm Your device and cannot be used to retrieve Your Personal Information.

Possible configuration of browser. You can set Your browser to notify You when Cookies are placed on your device during Your Website visit, so that You can decide in each case whether to accept or reject the use of some or all Cookies. Please note that disabling Cookies on Your browser may adversely affect Your browsing experience on the Website and prevent You from using some of its features.

Cookies Policy. To learn more about how We use Cookies, see Our “Cookies Policy”.

6.   Security measures

Objectives of Our security measures. We have implemented physical, technological and organizational security measures to adequately protect the confidentiality and security of Your Personal Information against loss, theft or any unauthorized access, infringement, disclosure, reproduction, communication, use or modification. These measures include:

• Administrative measures. On an administrative level, the adoption of a series of measures, policies and procedures as part of the implementation of Our information governance program, which:

  • govern the access, communication, retention and de-identification, including destruction or anonymization of Personal Information;

  • determine the roles and responsibilities of Our employees throughout the life cycle of Personal Information and documents;

  • establish procedures for intervention and response in the event of a privacy incident;

  • govern the process for requests and complaints relating to the protection and processing of Personal Information.

• Technical measures. On a technical level, we use a number of means, including:

  • the use of a secure server. All sensitive information provided is transmitted via Secure Socket Layer (SSL) technology, then encrypted in Our payment gateway providers’ database, only to be accessed by authorized persons with special access rights to these systems, and who are required to keep the information confidential; 

  • the use of backup systems, network monitoring software, etc.; and

  • the use of encryption and segregation of duties systems, access controls and internal audits.

Incomplete list of measures. Given the public nature of this Policy, we have not provided an exhaustive list of the measures We are implementing.

Impossibility of guaranteeing a complete absence of risk. Despite the measures described above, We cannot guarantee the absolute security of Your Personal Information. If You have reason to believe that Your Personal Information is no longer secure, please contact Our Privacy Officer immediately, using the contact details provided in the Privacy Officer section below.

7.   Modification of this Privacy Policy

Right to modify this Policy. We reserve the right to modify this Policy at any time in accordance with applicable law. In the event of a change, We will post the revised version of the Privacy Policy and change the update date in the footer of the Privacy Policy. We will notify You reasonably, prior to the effective date of the new version of Our Policy. If You do not agree to the new terms of the Privacy Policy, please do not continue to use Our Website and Services. If You continue to use Our Website or Services after the new version of Our Policy becomes effective, Your use of Our Website and Services will be governed by the new version of the Policy.

8.   Links to third-party websites

Responsibility for third-party websites. From time to time, We may include on Our Website references or links to websites, products or services provided by third parties (“Third-Party Services”). These Third-Party Services, which are not operated or controlled by the Company, are governed by privacy policies that are entirely separate from and independent of ours. We therefore assume no responsibility for the content and activities of these sites. This Policy applies only to the Website and the Services We offer. 

9.   Invisible reCAPTCHA

What reCAPTCHA does. Invisible reCAPTCHA analyzes activity on a web page function (e.g. mouse movements and typing patterns) to determine whether a user is a bot. The invisible reCAPTCHA service can collect information from Your device. Information collected by reCAPTCHA is stored in accordance with its privacy policy.

10.  Individuals under the age of 14

Consent of minors under the age of 14. If You are under the age of 14, You must not provide Us with Your Personal Information without the consent of Your parents or guardian. If You are a parent or guardian and You become aware that Your child has provided Us with Personal Information without consent, please contact Us by using the contact information provided in the Privacy Officer section below to request that We delete that child’s Personal Information from Our systems.

11.  Applicable laws

Laws of Quebec and Canada. The laws of Canada and Quebec, excluding its conflict of law rules, will govern this agreement and Your use of the Website. Your use of the Website may also be subject to other local, provincial, national or international laws.