PRIVACY POLICY AND PERSONAL INFORMATION PROTECTION

At Alipro, we place great importance on protecting the personal information of our customers, employees, and representatives. In accordance with the law on the protection of personal information in the private sector, we are committed to maintaining the confidentiality of personal information collected during our activities. Our privacy policy aims to inform you about our practices regarding the collection, use, disclosure, retention, and protection of your personal information. By providing us with your personal information, you agree to the terms of this policy and authorize us to process your information accordingly.

1. Consent

1.1 Commitment to Privacy

We are committed to protecting the privacy of our users. We collect and use personal information only with their explicit consent and in compliance with applicable laws.

1.2 Acceptance of Our Policy Terms

By accessing our website www.alipro-mistral.com or providing us with personal information, you accept the terms of our privacy policy. This includes your consent to the collection and use of your personal information in accordance with this policy.

1.3 Right to Withdraw Consent

You have the right to withdraw your consent at any time, subject to certain legal or contractual restrictions. We will inform you of the possible consequences of this withdrawal, such as the inability to provide certain products or process specific requests. Your withdrawal decision will be recorded in our records.

1.4 Exceptions to Consent Requirement

In certain exceptional circumstances, we may collect, use, or disclose personal information without obtaining your prior consent. This may occur in situations where legal, medical, or security imperatives make obtaining your consent impossible or impractical. Such situations include, but are not limited to, suspected contract breaches, fraud prevention or detection, or law enforcement needs.

2. Collection of Personal Information

2.1 We collect personal information through various means, such as:

• Emails and communications with our employees or customer service.
• Online request forms ("Information Request" section).
• Cookies and similar technologies on our website.

2.2 We may also collect information through third parties, such as:

• A technology service provider, such as an ordering platform or newsletter service.
• A recruitment portal allowing candidates to submit their resumes and personal data.
• Professional social networks like LinkedIn for recruitment or marketing purposes.
• A consultant providing some of the services we offer to our customers.
• A digital marketing company analyzing user behavior on our website.
• An IT security service provider monitoring threats and protecting data.

3. Types of Personal Information Collected

3.1 We collect various types of data, including but not limited to:

• Personal identifiers (name, mailing address, email, phone number).
• Technical or digital information (IP address, online activities).
• Financial information (salary, payment details, credit record).

3.2 Children's Privacy

We do not knowingly collect or solicit personal information from children under the age of 14. By using our website, you declare that you are at least 14 years old. If you are under 14, please do not attempt to send us personal information. If we discover that we have inadvertently collected personal information from a user under 14, we will attempt to delete such information immediately from our records. We encourage minors under 14 to obtain permission from their parents or guardians before submitting any personal information online.

If you believe a child under 14 has provided us with personal information, please contact us using the details in the next section.

4. Use of Personal Information

4.1 We use your personal information for essential activities such as:

• Responding to inquiries efficiently.
• Managing transactions, processing payments, and issuing receipts.
• Human resource management, including recruitment, employment contracts, and service agreements.
• Improving user experience by operating, maintaining, and enhancing our website, customizing online experiences, and providing requested services.

These uses are intended to enrich your experience with our services and to facilitate effective interaction with our organization.

4.2 COOKIES – How We Use Them

A cookie is a small file sent to your browser from a Web server to be stored on your computer. A cookie cannot give access to your computer or any information stored on your computer. We use cookies to allow the Site to respond to you as an individual by gathering and remembering information about your preferences when using the Site so when you next visit the Site your preferences for using the Site are already set. We also use them to improve our content via Google Analytics tool. Cookies are also used to personalize the content you view on the Site (such as your Update Feed). You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

4.3 Online Advertising We Use

We use Google AdWords and, in some advertisements, the Remarketing tool to trigger advertisements related to our business on the Internet. AdWords remarketing will display relevant ads tailored to you based on what parts of the website you have viewed by placing a cookie on your machine. THIS COOKIE DOES NOT IN ANYWAY IDENTIFY YOU OR GIVE ACCESS TO YOUR COMPUTER The cookie is used to say “This person visited this page, so show them ads relating to that page.” Google AdWords Remarketing allows us to tailor our marketing to better suit your needs and only display ads that are relevant to you.

If you do not wish to participate in our Google AdWords Remarketing, you can opt out by visiting Google’s Ads Preferences Manager.

4.4 Your Control Over Personal Information Collection

We offer various options to control and limit the collection of your personal data, including:

• Communication preferences: You can choose how we contact you (phone, SMS, email) or opt-out altogether.
• Cookie management: Our site allows you to refuse or customize cookie usage.
• Granular consent: You can consent to specific uses of your data.

Some options may limit your access to our full range of services. For example, by refusing certain cookies, some parts of our website may not function as intended.

5. Sharing and Disclosure of Personal Information

5.1 Our organization restricts access to personal information to specific categories of employees and trusted partners to effectively provide our products and services. These include:

• Customer service: Access contact information to respond to requests.
• IT department: Access data for technical support and maintenance.
• Marketing department: Use data for advertising campaigns and market studies.
• Payment service providers: Access data for transaction processing.
• Information security personnel: Access information to ensure data security and protection from unauthorized access or cyber attacks.
• Legal consultants: Use data for compliance verification.
• Cloud service providers: Host data on secure servers, allowing storage and retrieval of information.
• Research and development partners: Access certain data to collaborate on new product/service innovations or improvements.
• Collection agencies: In case of payment defaults.

We ensure that this information is used exclusively for the purposes stated and while respecting confidentiality.

6. Security of Personal Information

6.1 We implement strict security measures to protect personal information

To ensure the security and confidentiality of personal information, Alipro adopts rigorous security measures, including both physical and technological aspects. Here are some concrete examples:

• Physical security measures such as electronic locks and surveillance cameras.
• Restricted access to personal data.
• Employee training on data security best practices.
• Data encryption.
• Intrusion detection systems.
• Disaster recovery plans.

These measures are intended to protect personal information from unauthorized access, use or disclosure, and to maximize its integrity and confidentiality. Although we will do everything, we can to protect your personal information, it is important to remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot therefore guarantee their absolute security.

6.2 Staff and Board Engagement

Each employee, director, volunteer, independent contractor or ad hoc advisor working on our board committees agrees to respect the personal information we collect. In addition, these people undertake to maintain the confidentiality of information specific to our activities and not to disclose it or make personal use of it or for the benefit of others. This commitment exists from the moment the employee, director, volunteer, independent contractor or ad hoc advisor takes office and continues indefinitely.

7. Retention and Destruction of Personal Information

We retain personal data only for the necessary duration as outlined in this policy. We store and use data as required by legal obligations, dispute resolution, and policy enforcement.

We will also retain usage data for internal analysis purposes. This data is generally retained for a shorter period, unless it is used to strengthen the security or improve the functionality of our website, or we are legally obligated to retain it for longer periods.

8. Your Rights

8.1 Recognition and respect of your rights

We recognize and respect the rights of individuals regarding their personal data, including:

• Right to access and review collected data: Individuals have the right to view the personal information we hold about them. For example, a customer may request to see the data collected when their file was created.
• Right to request corrections of inaccurate information: If information is inaccurate or incomplete, individuals may request that it be updated. For example, an employee may request that an incorrect mailing address be corrected in our records.
• Right to request the removal of personal data from public access: Individuals may request that their personal information be removed from the dissemination or that any hyperlink associated with their name be de-indexed, if such dissemination causes them harm or is in violation of the law or a court order. This right to erasure or to be forgotten allows individuals to control the availability of their personal information on the internet.
• Right to file a complaint regarding data processing practices: If individuals have concerns about the processing of their data, they can file a complaint in accordance with our established process.

Subject to applicable laws, upon receipt of a written request from an individual and verification of their identity, we will inform the individual whether we hold personal information about them and provide them with that information.

We may refuse an individual access to their information in accordance with applicable laws, in which case we will provide reasons for our refusal.

To facilitate these rights, the contact information for our Privacy Officer is clearly indicated for any questions or concerns. These measures ensure that individuals can exercise their rights with confidence and transparency.

9. Policy Updates

This policy may be updated to reflect changes in our practices or legal requirements. Updates will be posted on our website. We encourage you to review this Privacy Policy periodically to stay informed of any changes.

10. Contact

Any requests or questions regarding this privacy policy may be sent to the Privacy Officer at the following address:

• Via e-mail: francine@alipro-mistral.com
• Via postal services:

Francine Plasse,
President – General Manager

Alipro-Mistral Ingrédients Inc.
135 Industrielle Street
Delson, Quebec, Canada J5B 1W2

Effective Date of this policy: July 2019

Last Updated: February 2025