BOWNESS COMMUNITY ASSOCIATION CUSTOMER PRIVACY POLICY – DECEMBER 2015

This Privacy Policy explains our privacy practices for customer information we collect, use or disclose, including at the Bowness Community Association office and through our web sites (including through www.mybowness.com and other Internet sites, mobile apps, and social media sites, which we will refer to collectively as “Sites”), as well as our customer service interactions with you. In this Privacy Policy, the terms “BCA”, “we” and “our” refer to the Bowness Community Association, unless otherwise indicated.

This Privacy Policy is incorporated into the Terms and Conditions of Use for our Sites and into the terms applicable to BCA members, customers, volunteers and persons applying for BCA membership or requesting information. By using our Sites, by applying for membership, or by using a membership, you are consenting to this Privacy Policy.

1. THE BCA’S COMMITMENT TO PRIVACY

The BCA is committed to protecting the privacy of our customers, volunteers, and members. We have and will take measures that protect the privacy of personal information held by us.

This Privacy Policy provides you with details regarding:

why we collect personal information;

what we do with that information;

what steps we take to ensure that the information is secure;

who you should contact if you have questions or concerns about our policies or practices.

Since we regularly review our policies and practices, your comments are always welcome. We reserve the right to change this Privacy Policy at any time.

We will alert you that changes have been made by indicating at the top of the Privacy Policy the date that it was last updated. This Privacy Policy came into effect on December 1, 2015. We encourage you to review our Privacy Policy carefully to make sure that you understand how information that you provide will be used or disclosed.

2. WHAT IS PERSONAL INFORMATION?

In general terms, personal information means any information about an identifiable individual. For example, this includes your name, postal and email address, telephone number, credit card number, demographic information and purchasing history.

Personal information does not include aggregate information, such as data about a group or category of products, services or customers, from which individual customer identities have been removed. For example, information about how you use a service may be collected and combined with information about how others use the same service, but no personal information will be included in the resulting data. Likewise, information about the products you purchase may be collected and combined with information about the products purchased by others.

We may also gather aggregate information about how BCA customers and members use our Sites. Aggregate information about product purchases helps us understand trends and customer needs, and assists us in product selection, product ordering and sizing and the introduction of new products and services.

We may automatically collect some information when you visit our Sites, such as your computer’s network address and operating system and the time and date of your visit and purchases. This information is not linked by us to personal information, but rather is only used to compile aggregate information. This information may be collected through the use of cookies (see our “Online privacy practices” in Section 9 below).

3. WHEN WE COLLECT PERSONAL INFORMATION.

We only collect such personal information as is strictly necessary for the purposes outlined in Section 5. We collect personal information when you:

apply for membership;

renew your membership;

contact us with questions, inquiries, comments, complaints or requests;

use our Sites;

participate in any of our programs;

place orders, make purchases, exchange items, or seek further information about our products and services;

enter into a contest or sweepstakes or respond to one of our surveys; and

ask us to remove you from our mailing list.

We may also take video footage on our properties to protect the rights, property or safety of BCA, its customers, employees, and the public.

4. HOW WE USE PERSONAL INFORMATION.

As part of our business operations, we hold and use certain personal information pertaining to you in order to process your requests, provide you with BCA Services, and to understand your needs so that we can serve you better. Specifically, we may use personal information for the following purposes:

Processing applications for new memberships;

Renewing existing memberships;

Managing the provision of goods, services and privileges to you, including monitoring your membership, processing exchanges;

Managing invoicing, accounting and information security services related to our transactions with you;

Monitoring your satisfaction with our programs and contacting you regarding the status of programs and services (for example, to inform you of changes to or the termination of particular BCA Services);

Protecting against harm to the rights, property or safety of the BCA, its customers, employees, and the public;

Internal management purposes, including planning, resource allocation, policy development, quality improvement, monitoring, audit, evaluation and reporting

As described in our “Online privacy practices” in Section 9 below; and

Using personal information to create aggregate information as described above in Section 2.

If you ask us to, we will also tell you about news, promotions, special offers and other information from the BCA and regarding the BCA, the community and selected partners. You may unsubscribe from these kinds of messages at any time by emailing iheartbowness@mybowness.com.

5. WHEN WE SHARE PERSONAL INFORMATION.

Personal information we collect in accordance with this Privacy Policy may be shared with BCA Affiliates for the purposes listed above, provided that such shared information is required for and is used and disclosed for such purposes only. Personal information may also be disclosed to unaffiliated third parties in connection with the sale, assignment or other transfer of our business, in which case we will require such third parties to adhere to the terms of this Privacy Policy. We will also disclose personal information in accordance with Section 9 below when the information is collected online at our Sites.

From time to time we engage unaffiliated third parties and their affiliates, agents and subcontractors (“Service Providers”) to perform certain technological or administrative services. For example, a Service Provider may be asked to run or repair a computer program. We may also use a Service Provider to host and administer one or more of our Sites, process and store data, and fulfill similar technology-related functions on our behalf. In these circumstances, the personal information that the Service Provider receives is limited to only the personal information held by us that they need in order to render their service to us.

We have engaged Service Providers to provide us with cloud computing services. Cloud computing is the provision of network-based services, located on remote computers, that allow individuals and businesses to use software and hardware operated by third parties. Examples of these services include online file storage, webmail and online business applications. Service Providers have policies and processes in place to ensure that the confidentiality of information in their care is properly safeguarded at all times.

As outlined above, BCA Services (such as the Membership Program, and other business and consumer services) may be provided by Service Providers. When you sign up for a BCA Membership or use BCA Services, we will share your name and such other personal information as is necessary with the Service Provider. We are not responsible for any additional information you provide directly to Service Providers, and we encourage you to become familiar with their privacy and security practices and policies before disclosing information to them. There may be instances when we provide information relating to our business customers to various suppliers so they can conduct market studies and other promotional activities.

We may disclose personal information without your knowledge or consent if a law, regulation, search warrant, subpoena or court order legally authorizes us or requires us to do so. We may also disclose personal information to protect the rights, property or personal safety of the BCA, its customers, employees or other members of the public.

Except as set out above, we do not sell, rent, share or disclose the personal information we hold or make our membership list available without your consent.

6. HOW LONG DO WE HOLD PERSONAL INFORMATION?

Personal information is retained only for so long as is necessary for the purposes set out above. When no longer required, we will destroy, erase or de-personalize the personal. Legal requirements may necessitate our retaining some or all of the personal information we hold for a period of time that is longer than we might otherwise hold it. However, the BCA will restrict access to such information to prevent it from being used except for the fulfillment of these legal requirements.

7. ACCURACY.

To ensure that the personal information you provided is accurate, complete and up-to-date, we urge you to provide us with updates regarding such information and to inform us of any errors affecting the personal information we hold. You may update, review or correct your BCA online account information at any time by accessing your password-protected registration page via http://central.ivrnet.com/bowness of the Sites. To update any other information, please visit the BCA office with your membership card to confirm your identity.

8. SECURITY MEASURES.

We will continue to keep in place security measures in an effort to protect personal information held by us from unauthorized use, access, disclosure, distribution, loss or alteration. We employ physical, administrative, contractual and technological safeguards to protect personal information, and insist that our Service Providers do the same. Access to personal information will be restricted to authorized personnel who require the information in order to perform their duties properly. In addition, access will be limited to only that information that is strictly necessary for the performance of those duties. Please also see our “Online privacy practices” in Section 9 below.

We periodically update our policies regarding information security measures in an effort to protect the personal information held by us in the most effective manner possible.

9. ONLINE PRIVACY PRACTICES.

Collection: We may collect personal information online when you visit our Sites as described in Section 4.

In addition, we may collect cookie and web beacon information when you browse the Sites. Cookies are small files that are stored on your computer, and web beacons are electronic images that allow us to count visitors visiting certain Web pages, to access cookies, and to analyze whether our site or other sites were effective. At www.mybowness.com, we may use cookies and beacons to help optimize your experience, to evaluate use of the Sites, and to support Site analytics and marketing campaigns. In doing so, we may collect technical information such as your IP address, your browser type, the addresses of referring Sites, and your path through the Sites.

Cookies help us to customize our home page for you and to better display pages according to your browser type. While cookies are optional for browsing www.mybowness.com, they are required for registering, logging on, purchasing or adding items to your cart. If you wish to purchase items or set up an account on http://central.ivrnet.com/bowness, you will need to accept a cookie. (In order to control the ability of website providers to place cookies on your computer, you should consult your browser’s “Options” and “Help” pages to learn how to adjust your settings to suit your privacy preferences.)

Use: We use personal information collected online as described in Section 4 above. In addition, we use personal information:

to facilitate and monitor certain features of the Sites that you choose to interact with;

to respond to your questions and concerns and to understand your needs and preferences;

to conduct surveys and other research;

to provide you with customized Site content and advertising;

to fulfill your online orders for products and services and to facilitate product pickups and exchanges;

to detect, prevent, or otherwise address fraud, security or technical issues; or

to protect against harm to the rights, property or safety of the BCA, its users or the public as required or permitted by law.

Sharing: We share personal information collected online as described in Section 5 above. In addition, we may provide Service Providers with certain information that is necessary to fulfill an order you have placed with us. We also may use Service Providers to host and administer the Sites, process and store data, and fulfill other technology-related functions on our behalf. However, we only give or permit access to vendors, suppliers and other Service Providers involved in Site administration and the commerce distribution chain the limited information needed to perform their duties and provide you with the products and services you order. We are not responsible for any additional information you provide directly to these parties.

Protection: Personal information we collect on our Sites is stored electronically, and may be combined with other off-line information. Personal information entered on our Sites is encrypted using a security protocol called SSL (Secure Sockets Layer). SSL encrypts information entered on our site before it is sent over the Internet. SSL also allows you to view securely your online account and registration information. Account information is accessible online only through the use of a password. To protect the confidentiality of personal information, you must keep your password confidential and not disclose it to any other person. You are responsible for all uses of our Sites by any person using your password. You are advised that, unlike communication within our Sites, we have no control over the privacy of your email communications with us while in transit. We recommend that you do not include confidential, proprietary, or personal information in emails, including credit card numbers, passwords, and other similar information. Also, if other people have access to your email account, they may be able to access your password and obtain personal information about you (such as your credit card information), or change information about your user profile. You should not use an email account operated by your employer because many employers have the legal right to access such email accounts. Please advise us immediately by email at iheartbowness@mybowness.com or by calling 403-288-8300 if you believe your password has been misused.

Online links to other sites: Through links provided on our Sites you can link to other sites of third parties. Any personal information you provide on the linked pages is provided directly to that third party and is subject to that third party’s privacy policy. Except as described above, we are not responsible for the content or privacy and security practices and policies of sites to which we provide links. Links from our Sites to third parties or to other sites are provided for your convenience. We encourage you to learn about their privacy and security practices and policies before providing them with personal information.

10. COMPLAINT PROCESS.

If you are not completely satisfied with or wish to submit comments concerning this Privacy Policy or its application by us, we invite you to convey your concerns or suggestions to the Bowness Community Association, 7904 43 Avenue NW, Calgary, Alberta, Canada T3B 4P9 Attention: Privacy Officer. We will reply as quickly as possible and inform you of the steps, if any, that have been or will be taken in order to address the concern or implement the suggestion. You can also file a complaint with the Privacy Commissioner in the province in which you reside or with the Office of the Privacy Commissioner in Ottawa.

11. CHOICE.

If you previously consented to the sharing of the personal information you provided, you can change your mind by:

Contacting us at the BCA office;

Calling us at 403-288-8300;

Emailing us at iheartbowness@mybowness.com ATTENTION: PRIVACY OFFICER in the subject line;

Writing us at: ATTENTION: PRIVACY OFFICER, 7904 43 Avenue NW, Calgary, Alberta T3B 4P9

If you wish to unsubscribe from electronic messages providing news and other information from the BCA or regarding the BCA, you may do so at any time by visiting the BCA office or by emailing iheartbowness@mybowness.com