Warrington PCI Management Privacy Statement – Canada Supplement
Last modified: 2025-09-18

1. Introduction

This Canada supplement (the “Supplement”) of Warrington PCI Management, Inc. (“Warrington PCI Management” or ‘’us’’) generally applies to personal information (as defined below) collected and processed by Warrington PCI Management from or about guests, tenants (which includes retailers and occupants of Royal Centre as managed by Warrington PCI Management (the “Property”), service providers or business partners (hereinafter “users”). Warrington PCI Management established this Supplement to add on to the Warrington PCI Management Privacy Statement (the “Statement”). The objective of the Supplement is to help you understand more Canadian-specific practices concerning the collection, use, sharing and retention of personal information and of the choices you can make in this regard.

The Supplement is an integral part of the Statement and is not meant as a standalone. By interacting and / or doing business with Warrington PCI Management and / or submitting information to Warrington PCI Management in connection with using Warrington PCI Management’s services (through our website, by email, in person, by telephone or by any other means), you are providing your consent to the collection, use and disclosure of personal information as set out in both the Statement and the Supplement. In the event of any discrepancies between the Supplement and the Statement, the Supplement shall prevail for any privacy matter related to Canada.

This Supplement does not apply to third-party websites or third-party services which may be accessed by clicking on links appearing on such websites, and Warrington PCI Management is not responsible for such third-party websites or services. If you follow a link to a third-party website, that third party will have its own privacy policies which you should review before submitting any personal information.

2. Definition of Personal Information

When used in this Supplement and in addition to any definition that may be found in the Statement, personal information means “any information about an identifiable individual”. This may include contact or demographic information, information relating to your communications with us or more technical information (such as users’ IP addresses, usernames,) but only when this information can directly or indirectly identify you as an individual. Warrington PCI Management may use and share information which is anonymized and/or aggregated in accordance with applicable laws.

3. What Personal Information Do We Collect and how?

In addition to the personal information listed in the Statement, for the purpose of the Supplement, Warrington PCI Management may collect the following personal information:

Information Collected from or about You.
In many cases, we collect personal information directly from you when you visit our premises, register to receive our newsletter or enter a contest or promotion. We may also collect personal information if there is an accident on our premises (i.e., car accident in our parking facilities that are not managed by third-party service providers, etc.). You will therefore know when we collect this information. In some other cases, we may collect personal information from third parties but at all times, with your prior consent and/or as authorized by law.

Learn more about what type of personal information we may collect about you and how by consulting the Statement.

In addition, for the purpose of the Supplement, we may collect personal information from you in the following situations:

Information Collected Automatically
In some cases, we may collect information automatically which may not necessarily identify you as an individual. This may include metadata (mobile phone number and date/time stamp) when you use our chat services, and profile information if you use a social media account when interacting with Warrington PCI Management.

Learn more about what type of personal information we may collect automatically by consulting the Statement.

In addition and for the purpose of the Supplement, we may collect the following type of information automatically:

SMS and Webchat
When you use our chat services, we may collect metadata, such as your mobile phone number and date/time stamps, linked to your interactions. We may also gather certain information automatically from electronic communications with you and store it in log files. This information may include IP addresses as well as browser, internet service provider, referring/exit pages, operating system, date/time stamp and click stream data.

Vehicle Information
If you park on one of the Property in facilities that are not managed by third parties, we may collect information about your vehicle for the purposes of enforcing our parking regulations, and documenting accident or other incidents.

4. Why Do We Collect Personal Information?

In addition to the purposes listed in the Statement, Warrington PCI Management may use your personal information for the following purposes or otherwise, with your consent or as permitted or required by law:

General business-related purposes
Warrington PCI Management collects personal information for general business related purposes such as to manage its business or when necessary for the safety of a product or service that we provide or deliver . We may also collect personal information as necessary to prevent or reduce our commercial risk (internal training and quality assurance, prevention of fraud, accidents, unauthorized activities, claims and other liabilities).

Learn more about the business-related purposes for which we collect personal information by consulting the Statement.

In addition and for the purpose of the Supplement, we may collect personal information from guests, and applicants for the following purposes:

Guests
We collect personal information from you as guests to administer the contest or promotion which you have entered, or to send you our newsletter if you have registered to receive a newsletter through one of our websites, or if we have your implied consent to send you such communications.

Suppliers and other business partners:
We collect personal information from suppliers and other business partners to evaluate and select them, and to establish and maintain responsible business relations with clients and partners.

Survey and marketing purposes and communications:
Subject to you providing consent, we may use your information to conduct surveys on the quality of our products, services or customer service, to tailor advertising content to your interests, and to understand the preferences and interests of our guests in order to customize how we promote our products and services on various channels and platforms, including social media channels. Subject to your consent, we may also send you newsletters, promotions or other commercial and marketing communications, or, upon your request only, call you to inform you about promotions, new products or services. To withdraw your consent from such use, see the section of this Supplement entitled Right to Withdraw Consent.

5. Right to Withdraw Consent

Consent may be withdrawn at any time; however, without such consent, Warrington PCI Management may in some cases limit the services it can offer you and/or Warrington PCI Management may be unable to enter into a business relationship, maintain such relationship and/or interact with you, but only to the extent that your personal information is necessary for those purposes. You may also withdraw your consent from the use or sharing of your personal information for marketing purposes or any collection of information from cookies.

Learn more about when and how you may withdraw consent for marketing purposes and collection of cookies by consulting the Statement.

In addition to the Statement, you may also withdraw your consent as follows:

Telephone communications:
You may decide that you prefer Warrington PCI Management not use your personal information to contact you via phone about new offers, and/or additional products and/or services which may be of interest to you. If this is the case, you may advise us during a call or reach us through the following link: Contact us.

Commercial Electronic Messages:
You can withdraw your consent for the marketing and commercial electronic communications that Warrington PCI Management sends to you, at any time. To opt-out of marketing and commercial communications, simply click on the link entitled “unsubscribe” or “opt-out” which can be found at the bottom of any commercial electronic communication we send to you. Please note that even if you opt-out of marketing and commercial communications, we may still contact you when required by law.

Option related to Cookies:
When visiting or using our websites, you can, at any time, block the use of cookies by activating the settings in your browser. The “Help” feature on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. If you choose to not accept cookies, or subsequently block cookies, you may not be able to access all or a part of the content of our websites. Additionally, you can disable or delete similar data used by browser add-ons, by changing the add-ons’ settings or visiting the website of its developer.

6. Sharing of Personal Information

Personal information about our users will not be sold or otherwise transferred to unaffiliated third parties without your consent. However, in accordance with the Statement, Warrington PCI Management may disclose personal information when authorized by law or share your personal information with CDPQ, Warrington PCI Management’s affiliates, subsidiaries and retailers (which may include our tenants) operating from the Property , for purposes related to service providers that are retained to perform work on our behalf, as well as in the context of a business transaction (for example in the context of a merger or sale of our business).

Learn more about when we can share your personal information by consulting the Statement.

In addition to the Statement, Warrington PCI Management may also share personal information, for the purpose of the Supplement, as follows:

Third-party service providers.
We may share your personal information with service providers, which may be affiliates, hired to perform services on our behalf. This may include, but is not limited to, an individual or organization retained by Warrington PCI Management to perform work on its behalf (e.g., provider of due diligence and financial crime prevention, provider of analysis and improvement of the customer experience, provider of cloud computing for data processing and storage, provider of surveys and electronic messaging, provider of it security solutions and services, provider of anonymous video analytics technology and provider of property management services). We provide them with a limited amount of information which is necessary in order for them to provide the services required and ensure that they have entered into contractual arrangements that provide adequate protection of your personal information. They are prohibited from using the information for purposes other than to carry out the services they have been engaged to provide. These service providers are not permitted to disclose your personal information to unauthorized parties.

As Permitted or Required by Law:
From time to time, Warrington PCI Management may disclose your personal information if such disclosure is necessary for the establishment, exercise or defense of legal claims, as part of the administration of our loss prevention program, or as otherwise permitted by law, for instance if Warrington PCI Management is compelled to disclose personal information in response to a law, regulation, court order, subpoena, valid summons, search warrant, government investigation, other legally valid request or investigation or if reasonably necessary to protect the rights, property and safety of others or ourselves. We may also disclose information to our accountants, auditors, agents and lawyers in connection with the enforcement or protection of our legal rights. We also reserve the right to report to law enforcement agencies any activities that we, in good faith, believe to be unlawful or to law enforcement and emergency services providers, in an emergency or where required or permitted by law.

Business Transactions:
We may disclose personal information to a third party in connection with a corporate merger, acquisition, consolidation, the sale of a portion of our business, business unit or property, or other fundamental corporate change, whatever form it may take. However, in the event the transaction is completed, your personal information will remain protected by applicable privacy laws. In the event the transaction is not completed, we will require the other party not to use or disclose your personal information in any manner whatsoever and to completely delete such information.

7. Retention of Personal Information

We have personal information retention processes and retention schedules designed so that we retain users’ personal information for no longer than reasonably necessary for the purposes stated in this Supplement or to meet our legal obligations. We are committed to making reasonable efforts to maintain personal information that is accurate, complete and up-to-date to the extent necessary to achieve the purposes for which it was collected and is to be used. We may, from time to time, ask you to confirm the accuracy of your personal information for this purpose.

8. Location, Storage and Cross-Border Transfer

Your personal information is stored in secured locations and on servers controlled by Warrington PCI Management or its service providers, located either at our facilities or at the facilities of our service providers. Notwithstanding the foregoing, Warrington PCI Management and its third-party service providers may process or store your personal information outside of your province of residence or Canada, including in the United States. In accordance with the laws of those countries, in certain circumstances and whether such information is located outside your country of residence or not, your personal information may be accessed by foreign law enforcement, regulatory bodies or other authorities. Organizations based outside of Canada may not be subject to privacy laws that provide you with the same rights and protections as in Canada. For more information about our practices and policies regarding the use of foreign service providers, please contact us as described in the section of this Supplement entitled Contacting Warrington PCI Management.

9. Children

Our services (including our websites) are not intended for children under the age of fourteen (14). No personal information is deliberately or knowingly collected from children under the age of fourteen (14) by Warrington PCI Management without parental consent. If you are under the age of fourteen (14) please do not use our services (including our websites), and if you are over the age of fourteen (14) but under the age of majority in the province in which you reside, you should use our services (including our websites) only with the involvement and permission of a parent or legal guardian.

10. Updating and Accessing Your Information

Despite the rights provided in the Statement, individuals located in Canada are entitled to the following rights:

Your right of access: you have the right to ask us if we are using or storing your personal information. You can also ask us for copies of such personal information.
Your right to rectification: you have the right to ask us to rectify personal information you deem inaccurate and to complete information you deem incomplete.
To exercise your rights, please contact our email address provided in the Contacting Warrington PCI Management section below.

11. Contacting Warrington PCI Management

If you have any questions about this Supplement or the privacy practices of Warrington PCI Management in respect of how we collect, use and share your personal information, please direct your inquiry to the Canadian privacy officer at PrivacyEnquiries@Warrington PCI Management.com.

12. Changes to the Supplement

Warrington PCI Management reserves the right to change this Supplement at any time by notifying you of the existence of a new Supplement. Such changes, modifications, additions or deletions shall be effective immediately upon notice thereof, which may be given by any means including, but not limited to, posting on our websites. If the changes are significant, we will provide a more visible notice or obtain consent when required by law. Your continued use of our services, websites after such modifications will constitute your acknowledgement of the modified Supplement and your agreement to abide and be bound by the modified Supplement.