California Consumer Privacy Act

This ANNUAL PRIVACY POLICY FOR CALIFORNIA RESIDENTS (“California Notice”) supplements the information contained in the main Privacy Policy applicable to the bookdepot.com and bookdepot.ca websites (“Sites”) of Book Depot Inc. (“Book Depot,” “we,” “us,” or “our”), and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). This California Notice sets out how we use and protect any personal information you may have provided to us through your use of our Sites, by computer or mobile device, social media, by phone via text message, in writing or otherwise (collectively with the Sites, the “Services”). We adopt this California Notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other applicable California privacy laws.

This California Notice explains how Book Depot Inc. collects, uses, shares, and stores your “personal information” (as defined under the CCPA) and certain other data when you use the Services, and how you may exercise certain rights you have in connection with your privacy and personal information. Personal information is generally defined under California law as information that, by itself or in combination with other information, identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household (“Personal Information”). Any Personal Information that Book Depot Inc. collects will be treated as set forth below and/or in Book Depot Inc.’s main Privacy Policy.

For ease of reference, you may click on any of the following links to jump to one of the sections addressed below:

  1. Scope of this California Notice
  2. Contact Information
  3. Personal Information Collection and Disclosures
  4. Your Rights and Choices
  5. Other California Privacy Laws

Scope of this California Notice

This California Notice covers only the Services identified above and is only applicable to consumers who reside in California. This California Notice does not apply to visitors, users, and others who provide information to us through our Services but do not reside in California, and this California Notice does not apply to information which you may send us by means other than through the Services. Other Book Depot Inc. websites, locations and certain products or services, whether online or offline, may have their own specific privacy policies or notices which apply instead of this California Notice, and you should consult those accordingly. Furthermore, the Sites may contain links to external websites and other online locations, including those embedded in third-party advertisements or sponsor information that are not controlled by Book Depot Inc.. Book Depot Inc. is not responsible for the privacy practices and data collection policies for such third-party services. You should consult the privacy policies or notices of those third-party services for details about how they handle your Personal Information.

Contact Information

If you believe there has been some violation of this California Notice, if you believe that Personal Information you supplied to Book Depot Inc. has been compromised or inappropriately accessed by a person outside of Book Depot Inc., or if you have any questions about this California Notice, please contact us using the contact details below:

PHONE:

800-801-7193

MAIL:

Book Depot Inc.,
Attention: Compliance
67 Front Street North
Thorold, Ontario, Canada L2V 1X3

If you do not agree to the collection and use of your Personal Information as described in this California Notice or in our Privacy Policy, please do not provide us with any information and cease using the Services.

Personal Information Collection and Disclosures

A requirement under the CCPA is to provide California residents with information on our data collection, use, disclosure, and retention (“processing“) activities related to Personal Information in the preceding 12 months.

Categories of Personal Information Collected and Their Sources

Please see the chart, below, which describes the categories of Personal Information we collected over the past 12 months, including the sources from which we obtained the Personal Information. Please note that not all categories or specific types of Personal Information described below will be collected or processed for every individual and our data collection practices may vary based on the nature of your relationship with us and what information you choose to provide to us.

Category Examples Do we Collect? Information Source
Identifiers A name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account username, screen name, password, or other similar identifiers YES From you directly or through your interaction with us and our Services
Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) A name, signature, address, telephone number, education or employment history, bank account number, credit card number, debit card number, or any other financial information YES From you directly when you sign up to recent content from us, register an account with us, purchase goods from our Sites, or apply for an open position on our Sites
Protected classification characteristics under California/federal law Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status NO We do not collect
Commercial information Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies NO We do not collect
Internet or other similar network activity Browsing history, search history, information on a consumer’s interaction with a websites, video, application, or advertisement, including user generated content YES From your interaction with us and our Services
Geolocation data Physical location or movements NO We do not collect
Sensory data Audio, electronic, visual, thermal, olfactory, or similar information NO We do not collect
Professional/ employment-related information Current or past job history or performance evaluations YES From you directly when you apply to an open position on our Sites
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99) (FERPA)) Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records NO We do not collect
Inferences drawn from other Personal Information Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes YES From your interaction with us and our Services
Sensitive Personal Information (1) social security, driver’s license, state ID card, or passport number
(2) account log-in, financial account, debit card/credit card number in combination with any required security or access code, password, or credentials allowing account access
(3) precise geolocation (within a radius of 1,850 feet)
(4) racial or ethnic origin, religious or philosophical beliefs, or union membership
(5) contents of mail, email, and text messages (unless we are the intended recipient)
(6) genetic and health data
(7) biometric information for identification purposes
(8) sex life or sexual orientation
NO We do not collect

Our Use of Your Personal Information

Over the last 12 months, we may have used your Personal Information for the following purposes:

Category Purpose
Identifiers & Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) - Register, administer, and secure your account on our Sites
- Maintain proper business records and other relevant records
- Respond to your questions, comments, or other messages
- Send you Book Depot Inc. emails and other updates with transactional information (i.e., order updates) or advertising relating to our products or other Services when you create an account with us and/or subscribe to our marketing emails
- Process payment method and other order information when you order a product or anything else through the Services
- Contact you if there are issues with information or content that you uploaded or posted through the Services (e.g., contacting you regarding any inappropriate user generated content on our social pages)
- Provide ongoing technical support related to the Services
- Communicate with you and/or obtain your consent regarding additional uses of your Personal Information beyond the scope of this list and Policy
- Deliver products ordered through the Services
- Improve the content and general administration of the Services
- Perform internal operations related to the Services (e.g., fraud prevention)
- Troubleshoot software issues and operational problems with the Services
- Conduct data analyses and testing based on your activity on our Site or through your use of the Services
- Monitor your usage of the Services for internal compliance and advertising/marketing purposes
- Provide you with targeted advertising or marketing communications that may be of interest to you
- Run our day-to-day business and facilitate corporate or other business transactions
Internet or other similar network activity - Maintain proper business records and other relevant records
- Communicate with you and/or obtain your consent regarding additional uses of your Personal Information beyond the scope of this California Notice
- Improve the content and general administration of the Services
- Perform internal operations related to the Services (e.g., fraud prevention)
- Troubleshoot software issues and operational problems with the Services
- Conduct data analyses and testing based on your activity on our Site or through your use of the Services
- Monitor your usage of the Services for internal compliance and advertising/ marketing purposes
- Provide you with targeted advertising or marketing communications that may be of interest to you
Professional/ employment-related information Determine your eligibility when you apply for an open position on our ‘Careers’ webpage
Inferences drawn from other Personal Information - Improve the content and general administration of the Sites or our other Services
- Market and provide Book Depot Inc. related advertising to you
- Understand and analyze aggregate demographic information about our customers to find better ways to cater to our customers
Commercial information & Geolocation data & Sensory data & Protected classification characteristics under California/ federal law & Non-public education information (per FERPA) & Sensitive Personal Information Not applicable, we do not collect

Sharing Your Personal Information

Over the last 12 months, we have shared your Personal Information with the following categories of third parties for the following purposes:

Category Types of Recipients and Our Purpose for Sharing the Information
Identifiers & Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) - Book Depot Inc. customer service, marketing, and mailing services vendors
- Book Depot Inc. subsidiaries, business partners and/or marketing affiliates to assist with a particular Book Depot Inc. promotional activity or to help us improve our products to better serve your needs
- Book Depot, Inc. vendors who provide data storage and hosting, customer service, marketing, and mailing services
- See the ‘General Third Parties’ section below
Internet or other similar network activity & Inferences drawn from other Personal Information - Analytics, advertising, and social media providers
- See the ‘General Third Parties’ section below
Professional/ employment-related information. - background check providers and HR related service providers
- See the ‘General Third Parties’ section below
Commercial information & Geolocation data & Sensory data & Protected classification characteristics under California/ federal law & Non-public education information (per FERPA) & Sensitive Personal Information Not applicable, we do not collect

General Third Parties

The following third parties may receive any of the categories of Personal Information described above, depending on the circumstances:

• Vendors who provide data storage and hosting;

• Governmental authorities and law enforcement (in response to legal requirements); and/or

• Third parties involved in a potential or actual merger, acquisition, consolidation, bankruptcy, or similar proceedings

Data Retention Period

Over the past 12 months we have retained your Personal Information in accordance with the retention timeframes noted in our main Policy.

Selling and/or Sharing Your Personal Information

Over the past 12 months, we did not engage in any direct sale of your Personal Information as a way to generate monetary revenue.

However, as described in our main Privacy Policy and further below in this California Notice, we have used certain third-party online analytics and advertising providers which may have access to your IP address, online ID, and online activity information. Such third-party access may cause you to receive targeted advertising based on your browsing behavior on our Sites and elsewhere online.

As a California resident, such access for targeted advertising purposes may be considered “Selling” or “Sharing” your Personal Information under the CCPA. Under the CCPA, you have the right to opt-out of any such “Sale” or “Sharing” of Personal Information for targeted advertising purposes by using our interactive request form, which is available through the “Do Not Sell or Share My Personal Information ” toggle within the cookies widget.

Selling and/or Sharing Personal Information of Minors

Over the past 12 months, we did not knowingly Sell or Share the Personal Information of minors under the age of 16 years old.

Sensitive Personal Information Processing Activities

Over the past 12 months, we did not knowingly collect or use your Sensitive Personal Information (as defined under the CCPA).

Profling / Automated Decisionmaking Activities

Over the past 12 months, other than as described above, we did not conduct profiling activities or make automated decisions about you based on your Personal Information.

California Notice of Financial Incentive

Over the past 12 months, we did provide financial incentives with respect to the collection of your Personal Information, which is further described below.

In the past 12 months, we provided a 10% off offer on our Sites if an individual signs up for our marketing emails.

Your Rights and Choices

The CCPA provides California consumers with specific rights regarding their Personal Information. More specifically, you have the following rights regarding Book Depot Inc.’s collection, use, and sharing of your Personal Information:

● The right to request that we disclose what Personal Information we collect, use, disclose or sell about you;

● The right to request the deletion of Personal Information we have collected or maintain about you;

● The right to opt-out of the sale of your Personal Information or the sharing of your Personal Information for cross contextual behavioral advertising purposes (targeted advertising);

● The right to limit any processing of your sensitive Personal Information for purposes of inferring characteristics about you (to the extent applicable);

● The right to opt-out of any profiling or automated decision-making activities that may be made with respect to your Personal Information; and

● The right not to receive discriminatory treatment by us, in terms of the services and prices offered on or through our Services, because you exercised these rights regarding the collection, use and sharing of your Personal Information.

If you would like to exercise any of the above rights, please contact us or visit the Manage Cookies Preferences in the footer to exercise your opt-out rights under the CCPA, including for example, the disclosure of your Personal Information for targeted advertising purposes. For further information on how to exercise your privacy request please go to the “Your Rights and Choices” section of our main Privacy Policy. Please note that in certain instances we may be able to reject your request if permitted under the CCPA. We will provide you with the reason if we reject your request. If the request relates to information that we need to make the Services function properly for you, you may no longer be able to use the Services.

As mentioned in the main Privacy Policy, the Sites may use cookies, pixel tags and related third-party tracking technologies and analytics services that are operated by third party service providers and/or social media platforms among other third parties (“Third-Party Services”) which may collect information pertaining to your device and how you may interact with our Sites. You may have the ability to exercise your rights under California law with respect to how your information is shared with or collected by these Third-Party Services on or through the Sites by communicating your choices directly with the Third-Party Services. Please see the below chart for further details on how to exercise your rights directly with such Third-Party Services.

Third Party Pixel Source How to Manage Privacy Settings More Information
Facebook and Instagram (Meta) Go to interest based ads settings for Facebook or Meta’s privacy center Meta’s Privacy Policy and Cookie Policy for Facebook
Google (Analytics and DoubleClick personalized ads) Download and install the Google Analytics Opt-out Browser Add-on to opt out of certain data sharing that occurs through Google Analytics Go to Google settings for personalized ads Google’s Privacy Policy
Microsoft (BING) Go to: https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads Microsoft’s Advertising Privacy Policy Main Privacy Statement

You can also generally opt-out of receiving targeted ads from third party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) by visiting the Network Advertising Initiative (NAI) opt out page. You may opt-out of receiving targeted advertisements from other companies that perform interest-based or targeted advertising services, including some that we may work with, via the Digital Advertising Alliance (DAA) opt out page. Please note that when using the ad industry opt-out tools described above, you may need to execute opt-outs for each browser or device that you use, and that other companies’ opt-outs may function differently than our opt-out.

Other California Privacy Laws

Shine the Light

Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to request from a business, with whom the California resident has an established business relationship, certain information with respect to the types of Personal Information the business shares with third parties for those third parties' direct marketing purposes and the identities of the third parties with whom the business has shared such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by contacting us.

Do Not Track

Some browsers also have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. We do not honor “do not track” signals.