Consumer Privacy Notice

Privacy summary

Here you will find an overview and summary of how we process your personal information (“Personal Data”), the purposes for which we process it, and how you benefit. Of course, if you want more details, you can read the full Privacy Notice.

What data do we collect? Find out more: What information do we collect?

The Personal Data that you give to us, e.g., when you create an account, make a purchase, login on our websites, contact us, provide feedback, fill in a form, send us an email, call us, engage with our sales representatives, share content on a Nestlé site or publicly share information about Nestlé on social media.
The data that we create (e.g., when you make a purchase), and data that is collected automatically when you access one of our websites or apps, e.g., IP address, device ID, what browser you use or how you interact with Nestlé sites before or after having a Nestlé account. You can see our Cookies Notice for more information on these technologies.
Data collected from other legitimate sources such as Nestlé promotional partners, from public sources, data from your interaction with our advertising, or Personal Data that is part of your profile on a social network and that you have made available to us.

Why do we process your Personal Data? Find out more: How do we use your personal information?

We process your Personal Data, including any sensitive personal data that you have provided to us with your consent, to:
- fulfill your purchase orders;
- answer your queries;
- improve our products, websites and applications and personalize them by collecting demographic information and consumer feedback;
- increase consumer engagement through collecting, using and publishing consumer content such as your profile information, promotional activity and engagement with website and digital content;
- administering contests, sweepstakes, giveaways, competitions and similar promotions; and
- provide you with communications about Nestlé and our products. We combine your Personal Data from all sources so that we can understand you better to improve and personalize your experience when interacting with us; and
- in order to help us comply with the law, to sell or transfer any relevant part of our business, to manage our systems and finances, to conduct investigations and to exercise legal rights.

Who can access your Personal Data and why? Find out more: Who do we disclose your personal information to and why?

We limit the disclosure of your Personal Data to others; however, we do need to disclose your Personal Data in certain instances and mainly to the following recipients:

Companies within the Nestlé Group;
Third parties engaged by us to provide services such as administering Nestlé websites, applications and services (e.g. features, programs, and promotions) available to you, subject to appropriate protections;
Partners for co-sponsored programs or promotions;
Aggregate demographic or summary information may be shared with third parties but the information shared is anonymous; and
Relevant public agencies and authorities, if required to do so by law or respond to claims, or protect the safety or rights of Nestlé, its customers or the public.

We may process your Personal Data outside of the country in which you are based for the purposes set out in our Privacy Notice. When we transfer your Personal Data to other countries, we take all necessary reasonable steps to ensure that applicable laws are being followed.

Nestlé respects your right with regards to data privacy and data protection when you communicate (online or offline) with us through our various websites, mobile applications, offline programs and events, and complies with all applicable laws and regulations. We have therefore developed this Privacy Notice to inform you how Nestlé Canada Inc., including third parties acting on our behalf (collectively, “Nestlé”, “we,” or “our”) collects, stores, uses, shares, processes and protects the personal information about our consumers (“you”). It also tells you how you can access and update your personal information and make certain choices about how your personal information is used.

By using our websites, applications or by otherwise giving us your personal information you are accepting the practices described in this Privacy Notice. If you do not agree to this Privacy Notice, you must not use our websites or applications or give us any of your personal information. We reserve the right to make changes to this Privacy Notice at any time. Any changes will be posted in this Privacy Notice and material changes will be prominently notified on the respective website or application this Privacy Notice applies to or will be otherwise communicated to you prior to the change becoming effective. We encourage you to regularly review this Privacy Notice to make sure you are aware of any changes and how your personal information may be used.

Please be informed that Nestlé Canada Inc. is the data controller of any personal information you submit to Nestlé.

If you have any requests concerning your personal information or any questions with regard to this Privacy Notice please Contact Us.

For a detailed description of our privacy practices, please click on any of the questions below.

1. What does this Privacy Notice apply to?

This Privacy Notice applies to personal information that we collect from or about our consumers through the methods described in this section.

This Privacy Notice does NOT apply to information collected by our affiliate companies, or joint venture partners.

Please note we may combine personal information that we collect via one method (e.g., a website) with personal information that we collect via another method (e.g., an offline event). We do this to get a more complete view of our consumers, which, in turn, allows us to serve you better and with more customization.

Nestlé websites

This refers to any consumer-directed websites operated by Nestlé, including websites that we operate under our own domains/URLs and websites that we run on third party social networks such as Facebook (e.g. Facebook fan page).

Nestlé mobile sites/applications

This refers to any consumer-directed mobile sites or applications operated by Nestlé, including our smartphone apps (e.g., iPhone apps).

Nestlé electronic messaging programs

This refers to any consumer-directed electronic messaging programs operated by Nestlé including e-mail, text and other electronic messages. These programs might be advertised on one of our websites or applications or in a print ad.

Offline registration cards

This refers to printed registration and similar cards that we may collect from consumers via, for example, postal mail, in-store demos, contests and other promotions or other offline events.

Call centers

This refers to personal information that we may collect from consumers through our call centres, for example if you call us with a question or comment or to sign up for marketing communications over the phone.

Advertising interactions.

Interactions with our advertisements (e.g., if you interact with on one of our ads on a third party website, we may receive information about that interaction).

Data We create.

In the course of our interactions with you, we may create Personal Data about you (e.g. records of your purchases from our websites).

Data from other sources

This refers to personal information we may obtain about you from other sources. For example, we may hire a third party data aggregator to provide us additional information about our existing consumers (this is known as “data appending”). We may also receive information from third party co-sponsors who we may occasionally partner with to run special contests or other promotions. We may also receive information about consumers when we acquire other companies, from public sources, from third party social networks and through market research (if feedback is not provided on an anonymous basis).

Telemetry Data

We may automatically collect data from Nestlé commercial coffee machines that are leased to enterprises. This information may include the machine Serial Number, machine alerts or errors, ingredient stock levels, and the number and type of coffees prepared by users, with the respective date and time. This information is associated with the enterprise customer but is not linked to any individual user of the machine. We use this information to determine usage trends and stock levels.

2. What information do we collect?

Depending on how you interact with us (online, offline, over the phone, etc.), we may collect from you various types of information (personal and aggregate), as described in this section.

Personal information (as used in this Privacy Notice) refers to such types of information that can be used to personally identify you, whether alone or in combination with other available information, whereas aggregate information does not allow for such identification.

In some instances (and unless we say otherwise below), we may combine/link one type of information with another type of information (e.g., personal contact information with account login and/or demographic information) and store them together in our records. In cases, where personal and aggregate information are combined, such information will always be considered as personal information. We strive to limit the amount of personal information we collect and store to that which is reasonably necessary to provide you the relevant services. We generally store your personal information for as long as your account is active with us or as needed to provide you the relevant services. We may store your personal information for a longer period of time to comply with legal or regulatory obligations, resolve disputes, enforce our agreements, or for records management purposes.

Personal contact information

This includes any information that would allow us to personally contact you, such as your name, home or mailing address, phone number (home, cell, etc.), or email address. In some cases, this could include personal information that you give us about someone else (for example, if you provide a friend’s email address for a tell-a-friend program). We typically collect personal contact information in connection with a variety of activities, including general website registration, newsletter sign-up, website and social community features, online purchases, consumer service inquiries, contests and other promotions, and consumer surveys. If you create an account with us, your personal contact information may be stored under your account profile.

Account login information

This refers to any information that is required for you to establish a unique account with us or for us to give you access to your specific account profile. Examples may include your login ID/email address, screen name, password, and/or security question and answer. We only collect unique login information for those activities that require an account, such as general website registration, newsletter sign-up, and website and social community features. Your login information, especially your password, should be kept confidential and never shared with anyone else. To change your login email address or password, log in to the relevant edit account section of our site (if available), use the “forgot password” feature of our site (if available), or contact Consumer Services.

Demographic information

This includes any information that describes your demographic or psychographic characteristics. Examples may include your date of birth, age or age range, gender, geographic location (e.g., zip code, city and state, mobile location), favourite products, hobbies and interests, and household or lifestyle information. This may include information about your health, medical conditions, nutrition, and exercise habits and goals. It may include information about your children’s genders, feeding styles, birthdates, or expected due dates. It may include information about work status or professional credentials. It may also include information about your pets and pet preferences. We may collect demographic information in connection with a variety of activities, including general website registration, newsletter sign-up, website and social community registration, contests and other promotions, and consumer surveys. If you create an account with us, you may be allowed to modify certain demographic information stored under your account. To do so, log in to the relevant edit account section of our site (if available) or contact Consumer Services. For demographic information stored under your profile on a third party social network (e.g., Facebook), see the separate paragraph on “Social network information.” below.

Health care practitioner information

If you are a health care practitioner, our sales representatives may collect information about you and your practice such as your name, language preference, profession, medical opinions, specialty, address, phone number and email address. We may collect this information directly from you or your colleagues, or from public sources such as business directories. We use this information to better understand your needs and preferences, personalize our interactions with you, and send business communications to you in order to keep you informed about the latest information about our products that may be of interest to you and/or your patients.

Technical computer information

This includes any information about the computer system or other technological device that you may be using to access one of our websites or applications. We typically collect this information through automated technologies such as cookies and web beacons. Examples of technical computer information may include your computer’s IP address, operating system type, and web browser type. If you access a Nestlé website or application via a mobile device such as a smartphone, the collected information may also include your phone’s unique device ID, geo-location and other similar mobile device data.

Website usage information

This includes information about how you use and navigate our websites and applications, including which links you click on, which pages or content you view and for how long, and other similar information and statistics about your interactions with a Nestlé website or application (e.g., date and time of visit, which site you came from, favourite recipes and site activities, high game scores, etc.). This information is captured using automated tracking technologies such as browser cookies, flash cookies, and web beacons, and may also be collected through the use of third party tracking services (such as Google Analytics) that collect data in aggregate (such as number of visits to a particular page, or the amount of time spent on a web site). We may also use these technologies, such as web beacons, to capture information about how users respond to certain email campaigns (e.g., time the email is opened, where user links to from the email, etc.). Please see Question 8 (“Tracking technologies – How and why do we use them?”).

Please note that “flash” cookies are different from "browser” cookies because of the way in which flash cookies capture and store data. Your browser’s cookie management tools will not remove flash cookies. To learn how to manage privacy and storage settings for Flash cookies click here: http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html#117118

We collect personal information about users over time and across different websites when you use this website or service. We also have third parties that collect personal information this way. We use tracking tools to serve you with interest-based advertising and to better understand your behaviours and browsing activities. We might permit third parties to gather information passively on our websites, including for behavioral advertising purposes. We partner with a third party ad network to either display advertising on our website or to manage our advertising on other sites. Our ad network partner uses cookies and web beacons to collect non-personally identifiable information about your activities on this and other websites to provide you targeted advertising based upon your interests. You can control tracking tools. In particular, your browser gives you the ability to delete or reject browser cookies. If you block cookies, certain features on our website may not work. Some browsers have a “Do Not Track” feature that lets you tell websites that you do not want to have your online activities tracked. These features are not yet uniform, so note that our systems may not recognize Do Not Track headers or signals from some or all browsers. If you block or delete cookies, not all of the tracking that we have described in this Privacy Notice will stop.

Consumer feedback

This includes information that you voluntarily share with us about your experience in using our products and services, including our websites and applications. Examples may include unsolicited comments and suggestions, testimonials, or other questions or feedback related to our products. We typically collect this information in the form of consumer surveys, consumer panels, contact forms, “Ask the Expert” forms, and email correspondence.

Consumer-generated content

This refers to any content that you create and then share with us (and perhaps others) by uploading it to one of our websites or applications, including one of our Facebook sites. Examples may include photos, videos, personal stories, or other similar media or content. We may collect and publish consumer-generated content in connection with a variety of activities, including contests and other promotions, website community features, consumer engagement, and third party social networking.

Social network information

This refers to any information that you share publicly on a third-party social network or is part of your profile on a third party social network (such as Facebook) and that you allow the third party social network to share with us. Examples include your basic account information (e.g. name, email address, gender, birthday, current city, profile picture, user ID, list of friends, etc.) and any other additional information or activities that you permit the third party social network to share with third party application developers. For example, we may receive your social network profile information (or parts of it) every time you download or interact with a Nestlé web application on a social network such as Facebook or every time you use a social networking feature that is integrated within a Nestlé website (such as Facebook Connect). To learn more about how your information from a third party social network may be obtained by us (or other third party application developers), please visit the website of the relevant social network. You further acknowledge that we may use your personal information to match information with a social network for advertising purposes (see “Marketing communications” under Question 3 of this Privacy Notice).

Payment information

This includes any information that you use to make a purchase, such as your credit card details (cardholder name, card number, expiration date, etc.) or other forms of payment (if such are made available). This also includes the billing name and address associated with your form of payment. If you create an account with us when making a purchase, your payment information may be stored under your account profile. To review or edit this information, log in to the relevant edit account section of our site (if one is available) or contact the consumer service department listed at the relevant store website.

Calls to Consumer Engagement Services.
Communications with a call centre can be recorded or listened into, in accordance with applicable laws, for local operational needs (e.g. for quality or training purposes) and verification purposes. Payment card details are not recorded. Where required by law, you will be informed about such recording at the beginning of your call.

Sensitive Personal Data. We process certain sensitive personal data that you provide to us for marketing purposes with your prior express consent. If we process your sensitive personal data for other purposes, we rely on the following legal bases: (i) detection and prevention of crime (including the prevention of fraud); and (ii) compliance with applicable law.

CCTV Information. Closed circuit video surveillance cameras (“CCTV”) may be installed at some of our retail locations to monitor building security and to ensure the health and safety of our staff and customers, and, where applicable, to assist in crime prevention, detection, and law enforcement investigation. We ensure that the ways in which any personal information is collected via our CCTV systems are compliant with all applicable privacy protection laws and are limited only to the extent that is necessary to ensure the safety of our staff and customers. If you have further questions pertaining to our collection of CCTV information, please contact our Chief Privacy Officer at [email protected].

DNA Data. Nestlé collects and analyzes your genetic information, including DNA information, when you choose to share it with us. You must share your www.23andMe.com or ANCESTRY.COM data file with Nestlé to take advantage of this service.

Other information (depending on context)

This refers to any other information that we might need to collect for a specific Nestlé form, feature, or other service that you use or request. What this information includes will vary depending on the method of collection and the specific purpose(s) for which the information is being collected. Please see Question 3 (“How do we use your information?”) for more specific examples.

3. How do we use your personal information?

The following paragraphs describe the various purposes and features for which we might collect and use your personal information, and the different types of information that might be collected from you through the different methods described in Question 1 above. Please note that not all of the uses below will be relevant to every consumer.

Account maintenance

We may use your personal information to maintain your accounts with us, including administering any consumer loyalty, rewards or membership programs that are associated with your account. This typically involves the use of personal information that was originally collected to set up your account (e.g., personal contact information, payment information, account login information, demographic information, etc.).

Consumer service

We may collect and use your personal information to provide you consumer service, including responses to your inquiries. This typically requires the collection and use of certain personal contact information (such as your name or email address) and information regarding the reason for your inquiry (e.g., order status, technical issue, product question/complaint, general question, etc.). Consumer service may be provided through various forms of communication, including email correspondence, call centre support, social communities and live online chat features.

Product improvement and customization

We may collect and use your personal information so we can constantly improve our products, tailor them to your needs, and come up with new product ideas. This mostly involves the collection and use of demographic information and consumer feedback.

Consumer engagement

We may collect and use your personal information to get you more actively engaged with our products and services (including our websites and applications), thereby increasing overall brand engagement and awareness. This mostly involves the collection, use, and publication of consumer-generated content, profile information, promotional activity, engagement with our websites & digital content.

Contests and other promotions

We may collect and use your personal information to administer a contest, sweepstakes, giveaway, competition, or other similar marketing campaign or promotion. These events typically require the collection and use of personal contact information (for prize fulfilment), demographic information (for eligibility determination), and, in some instances, consumer-generated content. Some of our promotions may be run on third party social networks such as Facebook (for example, on our Facebook fan pages). To comply with legal requirements, we may publish or share a limited amount of personal information (such as name and city of residence) about the winners of a particular promotion. For more information about our contests and other promotions, please see the official rules or details posted with each promotion.

Marketing communications

We may collect and use your personal information to send you marketing communications, such as email communications, SMS text messages, and postal mailings. Please note that if you choose to receive SMS text messages, your mobile service provider’s fees for messaging will apply. We may also show you marketing communications on other websites, including on social media sites where you are a member, by matching activities or information collected on our websites with those collected on third party sites (“Targeted Advertising”). These marketing communications will keep you up-to-date on the latest news, events, special offers, and promotions from our brands of interest to you. On occasion, these communications may also introduce you to other Nestlé brands and inform you about offers and promotions from other third party companies. Sending you marketing communications mostly requires the collection and use of certain personal contact information and demographic information. In some instances (such as for mobile apps and text messaging programs), this could involve the use of your precise geo-location, which may allow us to send you location-based offers and promotions. You can always opt-out from receiving marketing-related email communications or text messages by following the unsubscribe instructions provided in each such communication. If you have an account with us, you may be given the option to change your communication preferences under the relevant edit-account section of our site (if available) or by contacting Consumer Services. Changing these preferences would also remove you from our lists for future Targeted Advertising. You may also visit social media sites where you are a member to explore opt out options they may provide for Targeted Advertising. Please note that even if you opt out from receiving marketing communications, you may still receive administrative communications from us, such as order confirmations, notifications about your account activities (e.g., account confirmations, password changes, etc.), and other important announcements. You will also still see generic ads on other websites, including on social media sites where you are a member.

Also, please note that if you participated in a promotion that involved a third party company, and, as part of that promotion, you agreed to receive future marketing communications directly from that third party, you will need to contact the third party (not Nestlé) to opt-out from such communications. This process may be outlined in the third party’s privacy policy.

Third party social networking

We may collect and use your personal information when you interact with third party social networking features such as “Facebook Connect” or “Facebook Like”. These features may be integrated in our sites or applications for the purposes of running contests, allowing you to share content with friends, or other stated purposes. If you use these features, we may have the ability to obtain certain information about you from your social networking profile (see “Social network information” under Question 2 of this Privacy Notice). You can learn more about how these features work, and the profile data we may obtain about you, by visiting the website of the relevant third party social network.

Website improvement and personalization

We may collect and use your information to improve and personalize your experience on our websites and applications, to analyze your preferences and habits, to anticipate your needs based on our analysis of your profile, to improve and personalize your experience on our websites and apps, to ensure that content from our website/apps is optimized for you and for your computer or device and to participate in interactive features. This is typically done through automated tracking technologies (please also see Question 8) that collect and remember certain account login information, technical information, and/or previous website usage information. For example, we might remember your login ID/email address or screen name so you can quickly login the next time you visit our site or so you can easily retrieve the items you previously placed in your shopping cart. Based on this type of information, we may also show you specific Nestlé content or promotions that are tailored to your interests.

Website community features

We may collect and use your personal information to give you access to website community features, including features that may allow you to upload and share recipes, pictures, videos, artwork, or other messages or content. This typically involves the collection, use, and (in some instances) public display of certain personal contact information, account login information, demographic information, and/or consumer-generated content. Because these features are “communal” in nature, information or content that you post in these areas may be visible to others. Please use caution when using these features or uploading content to a Nestlé site. For some community features, we may give you the ability to control whether some parts of your profile can be seen by others. To access these settings, log in to the relevant edit account section of our site (if one is available) and access your community profile. For website community features that have social networking integration (such as “Facebook Connect”), see separate paragraph on “Third party social networking”.

Website viral features (e.g. tell-a-friend)

We may request and use your personal information so you can use website viral features, such as our tell-a-friend features. These features allow you to easily share certain news, product information, promotions, wish list items, or other content with family members and friends. These features typically require the collection and use of personal contact information (such as names and email addresses) so that the selected one-time message or content can be delivered to the proper recipients. In most cases, we do not retain the information provided. In some cases (for example, as part of a refer-a-friend program), we may store the information so we can track and reward consumers for their successful referrals. For tell-a-friend or other viral features administered by third party social networks (such as Facebook’s “Share” and “Like” features), please refer to the website of the relevant social network for additional information.

Order fulfilment

We may collect and use your personal information to process and ship your orders, to inform you about the status of your orders, correct addresses and conduct identity verification and other fraud-detection activities. This could involve the collection and use of certain personal contact information, payment information, account login information, and/or other information related to your purchase (such as products ordered). This could also involve the on-going storage of your payment information to allow for easier checkout on future purchases.

Please note that there are many independent e-commerce sites that sell Nestlé products but that are not controlled or operated by Nestlé. Because these sites may have different practices than we do, we recommend that you read their privacy policies before making any purchases on those sites.

Other general purposes (e.g., website security, internal research)

We may collect and use your information for other general business purposes, such as to maintain the day-to-day operation and security of our websites and applications, to conduct internal marketing and demographic studies (including using anonymized personal information in a statistical or aggregated form for research and marketing purposes) and to measure the effectiveness of advertising campaigns. These activities mostly require the collection and use of certain demographic information, technical computer information, website usage information, and consumer feedback.

Suppliers/Customers

We collect, hold, use and disclose personal information for the purposes of assessing and ensuring the credit worthiness of suppliers and customers and for the purpose of determining the continuing viability of such suppliers and customers when entering into or renewing contracts for supply of products to and from such suppliers or customers.

4. How do we protect your personal information?

We use a variety of standard methods (described below) to help keep consumer information confidential and secure. Please note, however, that these protections do not apply to information you choose to share in public areas such as our website and social community features or other social areas.

Secure operating environments

We store your information in secure operating environments that are protected from the public and that we only allow authorized Nestlé employees and agents/contractors to access on a need-to-know basis. We follow generally accepted industry standards to protect personal information; however, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.

Also, as part of our standard procedures, your personal information may be stored and processed in jurisdictions outside of your province of residence or outside the country such as the United State and Switzerland. In such cases, we continue to use generally accepted industry standards and secure operating environments to protect your information. However, regulatory authorities in those jurisdictions may be able to gain access to your information pursuant to the laws of those jurisdictions.

Encryption for payment info

We use industry-standard encryption to provide greater protection for sensitive financial information, such as credit card information, sent to us over the web. For example, encryption is used when you make payments through our online stores. Please note, however, that there are many independent e-commerce sites that sell Nestlé products but that are not controlled or operated by Nestlé. Because these sites may have different practices than we do, we recommend that you read their privacy policies before making any purchases.

Prior authentication for account access

We require our registered consumers to verify their identity (e.g., login ID/email address, password) before they can access or make changes to their account information. This helps prevent unauthorized access to your account.

Measures we expect you to take

It is important for you to also play a role in keeping your information safe and secure. When signing up for an online account, please be sure to choose an account password that is hard for others to guess and never reveal your password to anyone else. If you use a shared or public computer, never choose to have your login ID/email address or password remembered and make sure to log out of your account every time you leave the computer. You should also make use of any privacy settings or controls we may provide you in our website community areas.

5. What happens if you refuse to provide your personal information?

If you choose not to submit any personal information when requested, you may not be able to participate in certain activities and personalized features and you may limit the services and special offers we can provide you. For example, if you refuse to share your email address, you will not be able to receive any of our newsletters or otherwise register on our websites or use our applications. If you refuse to provide your credit card number, you will not be able to purchase products at a Nestlé online store. However, to simply browse our websites and learn more about our products, you do not need to give us any personal information.

6. Who do we disclose your personal information to and why?

Nestlé will not share your personal information with any third party that intends to use it for direct marketing purposes unless we have specifically informed you and you have given us specific permission to do this. Employees of Nestlé may have access to your personal information in the course of providing our services to you. Employee access to personal information will be restricted to those employees who have a legitimate need to know such information for the performance of their employment duties at Nestlé.

We may share your personal information with our subsidiary companies, companies in which Nestlé S.A. has control through either direct or indirect ownership (collectively “Nestlé Group”). Nestlé may also share your personal information with third parties, but only in the following circumstances:

Service Providers, Agents and Contractors

We may use third parties, like service providers, agents or contractors to provide support for the internal operations of our websites and applications and to assist us with administering our websites and applications or the various functions, programs and promotions available to you. Some of these third parties may be located outside the country where you accessed this website. These third parties and its employees may come into contact with your personal information in the course of providing their services to us. Any such third party must at all times provide the same levels of security for your personal information as Nestlé and, where required, are bound by a legal agreement to keep your personal information private, secure and to process it only on the specific instructions of Nestlé. We are part of the Nestlé global company. The server that makes this web site available is located outside the country from which you have accessed this web site. Our main hosting provider for most Nestlé Web sites is based in the United States. This provider is bound by a contract that ensures a high standard of privacy protection and requires (amongst other provisions) that it act only on Nestlé instructions and implements all technical measures necessary on an ongoing basis to keep your personal information secure.

Credit reporting agencies/debt collectors.
To the extent permitted by applicable law, credit reporting agencies and debt collectors are external companies that we use to help us to verify your creditworthiness (in particular for orders with invoice) or to collect outstanding invoices.

Partners and Joint Promotions

From time to time, we may run a joint or co-sponsored program or promotion on our website or application with another company, organization, or other reputable third party; and, as part of this event, collect and process personal information. If your personal information is being collected by (or is shared with) a company other than Nestlé as part of such promotion, we will let you know this at the time your personal information is collected. Periodically, we may run a promotion on our website or application that features the products or services of another company and will give you the opportunity to opt in to receive information directly from that third party company. When doing any promotion involving another company, we may provide a separate link to that company's privacy policy and we encourage you to read it before you share any personal information, as we cannot guarantee they adhere to the same privacy practices. If you do not want your information to be collected by or shared with a company other than ours, you can always choose not to opt in or participate in these events at the time the personal information is collected/requested.

Legal and Business Transfers

We may also disclose your personal information if we are required to do so by law, or if in our good faith judgment, such action is reasonably necessary to comply with legal processes, to respond to any claims, enforce the terms of any agreement or the terms of our website, or to protect the safety, property, privacy or rights of Nestlé, its customers, or the public.

In the event of a merger or acquisition of all or part of Nestlé by another company, or in the event that Nestlé were to sell or dispose of all or a part of the Nestlé business, the acquirer would have access to the information maintained by that Nestlé business, which could include personal information. Similarly, personal information may be transferred as part of a corporate reorganization, insolvency proceeding, or other similar event, if permitted by and done in accordance with applicable law.

Health Care Practitioner

When you register for an account on one of our websites based upon receiving an invitation to register from your practitioner, we will share your information, including your Genetic Data file, with your practitioner for the purposes of allowing them to make medical recommendations to you based on your Genetic Data.

Aggregate Information

We may share aggregated demographic or survey information with third parties, but this information is in anonymous form and does not contain any personal information. The aggregate information that we share may include anonymous information that is captured through the use of cookies and other similar tracking technology, as explained in the Question 8 below.

7. How can you access, modify, or make other choices regarding the use of your personal information?

The following outlines the choices you have with respect to the collection and use of your personal information by us.

1. You always have the option not to share any of your personal information with us. However, if you choose this option, you will be limited in the activities and features we can provide you, as mentioned in Question 5 above.

2. If you do not want to receive newsletters, announcements, or other communications and/or services from a Nestlé website or brand, please do not opt-in for those communications or services at the time of registration. If you have opted-in and, at a later time, wish to opt-out, please visit the appropriate "your account" or “your profile” section(s) on our website or application and amend your preferences.

3. Along with every e-mail marketing communication sent to you, we provide you the opportunity to discontinue receiving future marketing communications (i.e., unsubscribe). Simply follow the unsubscribe process or directions provided in the email. Please read our Marketing communications section for limitations on certain administrative communications, order confirmations, and account notifications.

4. Subject to our right to retain certain information (see Question 10) You can always review, update or withdraw consent to Nestlé’s processing of any personal information that we may have collected about you including for our general website and application registration. To do this, please visit the appropriate "your account" or “your profile” section(s) on our website or application (if available).

If any of the mechanisms set forth above is not available or you wish to make a different request such as accessing your information, please Contact Us. We will respond to all access requests within 30 days or we will notify you when more time is needed to respond.

In addition, if you participated in a promotion or program that involved a third party and, as part of that promotion, you agreed to receive future communications directly from that third party, you will need to contact the third party directly to opt-out from such communications. This process may be outlined in the third party’s privacy policy.

8. Tracking Technology – How and why do we use them?

Nestlé does make use of tracking technologies (“Cookies”, “IP Addresses”, Log Files”, “Web Beacons”) to gather certain information such as browser type and operating system, referring page, path through site, domain of ISP etc. for the purpose of improving the use and functionality of our websites and other purposes described below. Tracking technologies help us tailor our websites to your personal needs.

Cookies

We use Cookies to improve the use and functionality of our websites and to better understand how visitors use our websites and the tools and services offered on it and to communicate elsewhere on the web. The storage of Cookies on your computer provides an easy and convenient way for us to personalize or enhance your experience on our websites and to make your next visit more enjoyable. Nestlé makes use of third party cookies which are set by third parties for different services (for example, website analytics or advertising).

If you would like to learn more about Nestlé’s policy on Cookies and your rights, please visit the Nestlé Cookies Policy.

IP Addresses

We may keep track of Internet Protocol (IP) addresses to (among other things): (i) troubleshoot technical concerns, (ii) maintain website safety and security, (iii) restrict access to our websites to certain users, and, (iv) better understand how our websites are utilized. An IP address is a number that is used by computers on the network to identify your computer every time you log on to the Internet.

Log Files

We (or a third party on our behalf) may collect information in the form of logs files that record website activity and gather statistics about web users' browsing habits. These entries are generated anonymously, and help us gather (among other things) (i) a user’s browser type and operating system, (ii) information about a user’s session (such as the URL they came from, the date and time they visited our website, and which pages they've viewed on our website and for how long), and, (iii) other similar navigational or click-stream data. We also use information captured in log files for our internal marketing and demographic studies, so we can constantly improve and customize the online services we provide you. Log files are used internally only, and are not associated with any particular user.

Web Beacons

We may use web beacons (or clear GIFs) on our websites or include them in the e-mail messages we send you. Web beacons (also known as “web bugs”) are small strings of code that provide a method of delivering a graphic image on a web page or in an email message for the purpose of transferring data back to us. The information collected via web beacons may include some of the information described in the IP Address section directly above, as well as information about how a user responds to an email campaign (e.g., the time the email is opened, where does the user link to from the email, etc.). We use web beacon information for a variety of purposes, including but not limited to, site traffic reporting, unique visitor counts, advertising and email auditing and reporting, and personalization.

9. E Marketing - What is spamming and what is our position on spam e-mails?

Spamming is where unsolicited e-mails are sent to you containing advertisements or marketing related materials without your consent.

We do NOT send spam e-mails. Sending e-mails without consent is illegal in Canada. We will not use your personal information (including your e-mail address) for direct e-mail marketing or follow-up communications unless you give us your express opt-in permission or unless we are otherwise permitted to do so under the law.

Also, we do not share your personal information with any third party who will use your personal information for illegal spam mails.

Nestlé websites give you the opportunity to receive marketing information by e-mail. Every marketing e-mail sent by Nestlé will give you the opportunity at any time to stop receiving such e-mails.

If for some reason you believe you have received spam e-mail from a Nestlé Group company please Contact Us immediately.

10. How long do we keep your personal information?

We may store the personal information that you have provided us with through the various methods described in this Privacy Notice in our databases such as our Consumer Relationship Marketing database. We will only keep your personal information for as long as it is reasonably necessary taking into consideration our need to answer queries or resolve problems, provide improved and new services, respond to any claims, enforce the terms of any agreement or the terms of our website and comply with legal requirements under applicable law(s). This means that we may retain your personal information for a reasonable period after you stop using Nestlé services or stop using our websites or applications. After this period, your personal information will be deleted from all systems in the Nestlé Group.

We remind you that you have a right to have your personal information deleted as further set out in Question 7 above.

11. Do we collect personal information from children?

We do not knowingly solicit or collect personal information from children below the age of 13. If we discover that we’ve accidentally collected information from a child below 13, we will remove that child’s information from our records as soon as feasibly possible. However, we may collect personal information about children below the age of 13 from the parent or custodian directly and therefore with their explicit consent.

12. Do we link to other third party sites?

Our websites and applications may provide links to, or features from, other third party sites (such as independent e-commerce sites and third party social networks). If you link to or use such third party sites or features, you do so at your own risk. We do not control and are not responsible for the content or practices of any third party site, application, or feature.

13. Other important information

This section provides additional information that is important for you to know about this Privacy Notice or our practices.

This Privacy Notice applies to consumers only

This Privacy Notice applies only to our collection and use of information from consumers, using the methods described under Section 1 of this Policy. It does not apply to our business customers (e.g., retailers, distributors, etc.). It also does not apply to information we might collect and use for employment-related purposes (e.g., resumes, job applications, etc.) or business-to-business related purposes (e.g., media inquiries, investor relations, etc.).

14. How can you contact us?

We have designated one person as our Chief Privacy Officer (the "CPO"). The CPO is generally accountable for our compliance with this policy, and with applicable privacy laws.

If you have any questions, complaints, or comments regarding this Privacy Notice or our information collection practices, please our CPO at:

Nestlé Canada Inc.

ATTN: Chief Privacy Officer

25 Sheppard Ave W.

Toronto, ON

M2N 6S8

Email: [email protected]