Effective date : November 22^nd 2023

1. Scope and application

The Free 2 Play Limited Partnership (hereinafter referred to as "CF Montreal," the "Club," or "we") is committed to protecting the personal information of its supporters, partners, collaborators, and participants in its Academy. It is important for us to be transparent and provide you with information about the types of personal information we collect, how we use this information, to whom we disclose it, and the purposes and reasons for collecting, using, and disclosing it. We also want you to be informed about your rights regarding your privacy and its protection.

This policy applies to the personal information that CF Montreal collects from you, or from individuals acting on your behalf, when you attend an event at Saputo Stadium or the Nutrilait Centre, or any other location operated by CF Montreal, when you visit our website, when you interact with us on social media, when you use our mobile application, when you or your child participate in our Academy, when you apply for a career opportunity with us, or through any other interaction you may have with us.

This Privacy Policy does not apply to the collection, use, and disclosure of personal information by Major League Soccer, whose privacy policy is also available on our website, cfmontreal.com (the "Site"). This policy also does not apply to your use of the online store mlsstore.ca, which is linked to from the Site.

This policy also does not apply to the collection, use, and disclosure by CF Montreal of personal information about its employees.

2. What is considered « personal information » ?

"Personal information" refers to any information that identifies, concerns, describes, or can reasonably be associated with a particular individual. This includes information such as your name or the name of your parents if you are a minor, your contact details, date of birth, payment information, and personal health information (for example, details of your prescription for corrective lenses, relevant allergies, or other pertinent health information). It may also include more technical information, such as your IP address, web browser settings, and unique device identifier, but only when such information can identify you as an individual. Information that is anonymized and cannot be associated with an identifiable individual is not considered personal information if it is reasonably foreseeable in the circumstances that such information no longer allows the patient to be identified, directly or indirectly, in an irreversible manner.

3. What Categories of Personal Information do we collect ?

We limit the collection of personal information to what is reasonably necessary to achieve the purposes for which it is collected, as described in the section "How Do We Use Your Personal Information?" The information we collect varies depending on the type of interaction you have with us.

• Identification Information: Such as name, postal address, phone number, username, email address, IP addresses, and information on identification documents.

• Payment-related Information: Such as credit or debit card numbers and a record of your purchases when you make purchases on our website, via the CF Montreal Portal, or at Saputo Stadium.

• Online Activity Information: Including IP addresses, sections visited on our website, or language preferences. We generally collect this information when you visit our website using cookies or similar technologies. We treat this information as personal information when it can be used to identify you.

• Information from Social Media Networks: When you interact with us through social media platforms such as Facebook, LinkedIn, X (formerly Twitter), Instagram, and YouTube, these platforms may share certain information with us, such as your name, gender, profile picture, likes, comments, interests, demographic data, etc. This information is shared with us subject to the respective privacy policies of the social media platforms and is not governed by this Policy. You can control the information we receive by adjusting your privacy settings on each social media platform.

• Information Collected by Video Surveillance: For security purposes, we may use video surveillance at Saputo Stadium and the Nutrilait Centre. This collection is subject to applicable privacy laws, and this information can only be shared in limited circumstances.

• Professional Information: When you apply for a job offered by the Club or if you offer us your professional services through our website, email, phone, or in person, we collect information about your professional experience and education. We will collect personal information contained in your application file, such as your CV, cover letter, salary or fee preferences, as well as information generated in connection with your application, to evaluate your candidacy and determine whether to offer you a position or retain you for a job offer. In case your professional services are retained, we will collect and retain your contact information, as well as your bank account information, information about your passport, visa, or work permit, and any additional information provided by you in an application. We collect this information directly from you.

• Other Information: Such as spoken language, age, date of birth, gender, language and communication preferences, and any other information you provide directly when you communicate with us, in person, by phone, or by email.

4. How do we collect your personal information ?

We collect personal information in various ways, including directly from you, from third parties, through our websites, and more generally from the following sources:

a. Directly from you:

We may collect personal information directly from you, your parents, or your guardian in the case of a minor, in the following instances:

• When you purchase tickets for CF Montreal matches or subscribe to a season ticket;
• When you purchase tickets for matches other than CF Montreal but taking place at Saputo Stadium or the Nutrilait Centre (e.g., a match organized by Canada Soccer);
• When you purchase tickets for an event at Saputo Stadium or another location reserved for a CF Montreal event;
• When you create an account on the CF Montreal Portal;
• When you make purchases at the Saputo Stadium store or food concessions;
• When you register yourself or your child for the Academy, one of our soccer schools, or one of our development camps;
• When you interact with us on social media platforms;
• When you subscribe to our Newsletter;
• When you participate in an activity or contest of the Club, at Saputo Stadium, as part of Academy activities (including soccer schools and development camps), or elsewhere;
• When you participate in partner events organized by CF Montreal;
• When you provide us with your CV and the information it contains to apply for a job at the Club or to offer your services.

b. Automatically, through Our Website and Mobile Application:

We or our service providers, who assist us in maintaining and operating our website and mobile application, may also automatically collect the following information regarding your access and use of our website through cookies, authorization tokens, web beacons, and other technologies: your domain name; your browser type and operating system, computer or mobile device type, pages you visit, links you click on, your IP address, the duration of your visit or use of the service, and how you use the service.

We may use various technological methods to track the habits of users who access and use our websites, including the following methods:

Cookies: Cookies are small information files that are stored in your browser on your computer or mobile device. We use cookies to improve your experience on our websites. Users may have the option to configure their computer or device to accept all cookies, be notified when a cookie is generated, or not receive cookies at any time. If you configure your browser not to accept cookies, you may not be able to enjoy all the features of our websites.

Authorization Tokens: We may allow you to use certain third-party site accounts (e.g., LinkedIn, Google) to authenticate and log in to certain parts of our websites using these third-party site accounts. If you authorize the use of a third-party service to authenticate you, depending on the configuration of that third-party service, we may receive user login information or an anonymous identifier or token.

Web Beacons: Web beacons are small data elements embedded in the images of web pages. We may use these technical methods to analyze traffic trends on our websites and services. These technical methods may involve the transmission of information either directly to us or to another party authorized by us to collect information on our behalf. We may also use these technical methods in HTML emails we send to determine if you have opened these emails or clicked on links in the emails. Information from the use of these technical methods may be collected in an anonymized form.

Third-Party Web Analytics: We may use automated tools and applications, such as Google Analytics, to evaluate the use of our websites and services. We may also use other analytical means to evaluate our services. We use these tools to help us improve our services, performance, and user experiences. These entities may use cookies and other tracking technologies to perform their services.

Location Data: We may determine the approximate location of your computer or device from your IP address. We collect and use this information, for example, to calculate the number of people visiting our site from certain geographic regions.

c. Through Third-Party sources:

With your consent or as permitted by law, we collect personal information from third parties such as our business partners and service providers, including those operating the online store at mlsstore.ca or the registration platform for our Academy (including schools and development camps).

5. How do we use your personal informaition ?

We may use your personal information for the following purposes or otherwise with your consent or as permitted or required by law:

a. General Business Purposes:

We may use your personal information for general business purposes such as providing or delivering a product or service, managing our day-to-day business activities and websites, processing job applications, preventing or reducing business risks, and for information security, system, or network security purposes.

Specifically, we may use your personal information for the following purposes:

• Offering our products and services to you;
• Creating, administering, and managing your account on the CF Montreal Portal;
• Administering and managing Academy programs;
• Processing payments for our products and services;
• Communicating with you, responding to inquiries about our products and services, providing customer support;
• Complying with our legal, regulatory, and professional obligations;
• Protecting our business interests, recovering debts, and enforcing our legal rights and interests;
• Updating your personal information;
• Offering you special deals, contests, and promotions.

b. Processing Job Applications:

If you have applied for a job offer at the Club, we may use the personal information you have provided to us to process and evaluate your application, conduct interviews, and perform background checks.

c. Research and Development Purposes:

We may use your personal information to understand and assess your interests and needs in order to improve our products and services and develop new ones, as well as to evaluate potential enhancements or other modifications we could make to the functionality of our website or mobile application. For example, we may use third-party web analytics services, such as Google Analytics, to help us analyze how visitors use our websites. When required by law, we use anonymized information for these purposes.

d. Marketing Purposes:

We may use your personal information to provide you with personalized content and services, for example, to tailor our products and services, digital experience, and offers based on your preferences and profile analysis.

We may also use your personal information to communicate with you in various ways (e.g., by email, phone, text message, mail, or through our online patient support services) about our programs, products, services, special offers, promotions, contests, or events that may interest you.

If you no longer wish to receive our promotional offers or commercial emails, see the "What Are Your Privacy Choices?" section.

e. Other Purposes:

We may use the information collected to protect the security of this information and our website or to comply with a legal obligation if necessary.

6. When do we share your personal information with other organization?

CF Montreal is committed to not selling your personal information to third parties. We may share your personal information with the following categories of individuals or with others when permitted or required by law. We may also disclose your personal information to other third parties, in which case we will seek your prior consent.

• Our affiliated entities and MLS, when necessary for the purposes detailed in this Policy.
• Our business partners: When communication is necessary for the execution of a mandate or contract entrusted to them, or for example, for a contest.
• Our service providers: When communication is necessary for the execution of a mandate or contract entrusted to them. We may share personal information with providers who offer the following services:
  • Operating and maintaining our information technology systems and services, including the Site, CF Montreal portal, our online ticketing, and our mobile application;
  • Professional services such as legal or accounting services;
  • Insurance services;
  • Data hosting and archiving services;
  • Marketing services.

When required by law, we ensure to obtain a written commitment from our service providers to use your personal information only for the fulfillment of their mandate and to take reasonable security measures to protect your personal information.

In certain circumstances, we may share personal information without your consent when authorized by law, for example:

• In situations involving a medical emergency or a threat to individuals' safety.
• To comply with a warrant or other order of a court or regulatory authority.
• To protect the rights, property, or safety of the Club, its employees, or other individuals.
• To investigate a breach of an agreement or applicable law (e.g., investigate potential theft).
• To provide information requested by a person conducting an audit, reviewing an accreditation application, or verifying a granted accreditation.
• To detect, remove, or prevent fraud.
• When necessary in the context of a contemplated or completed business transaction, such as an asset or share transfer or a merger, in accordance with applicable legal requirements. For example, we may make your personal information available to advisors or (potential) buyers of our business if necessary to conclude the transaction and continue the operation of the business.

7. Personal information of minors

We do not knowingly collect personal information from children under the age of 14 without the consent of their parent or legal guardian. To purchase our products and services, including registering for our Academy, Soccer Schools, or Development Camps, we must obtain the consent of your parent or legal guardian if you have not reached the age of majority and if such consent is required under the laws applicable in your country of residence. If we learn that we have collected or received personal information from a child for whom parental confirmation was required, we will delete this information from our systems.

8. Third-Party websites

Browsing the Site may offer links to other third-party websites, including those of the MLS, other clubs, the mlsstore.ca shop, and the MLS Season Pass. However, we are not responsible for the content or practices employed by the organizations sponsoring these other websites. CF Montreal is not responsible for the practices, policies, or actions of these third parties regarding the protection of your personal information. Therefore, we recommend that you carefully read the privacy statement appearing on these websites to determine to what extent you wish to use these third-party websites given their practices regarding the protection of personal information.

9. What are your options towards privacy?

By using our services and/or providing us with information in the context of using our products and services, you consent to the collection, use, and disclosure of your personal information in accordance with this Privacy Policy. In some cases, your consent may be "implicit," meaning your agreement is presumed based on your action or inaction at the time of collection, use, or sharing of your personal information. We generally obtain your consent when we want to use personal information for a new purpose or for a purpose other than those stated at the time of collection in this Privacy Policy or in the terms and conditions of a specific service to which you have registered or agreed to participate, in accordance with applicable privacy laws.

You can choose how CF Montreal processes your personal information. Please note that withdrawing your consent may affect our ability to continue providing you with the products and services you receive or would like to receive when the use and disclosure of your personal information are necessary to make the product or service available to you.

a. Modify Your Communication and Marketing Preferences

You can always choose not to receive commercial or promotional messages from CF Montreal by email by clicking "unsubscribe" in any email you receive or by contacting us using the contact information provided in the Contact Us section of this Policy. Please note that even if you have indicated your choice not to receive commercial messages from us, we may still communicate with you as part of a service, in accordance with applicable law. Additionally, recording a change in communication preference in all our records may take up to ten (10) business days.

b. Modify Your Preferences for Advertisements on Social Media Platforms

You can also withdraw your consent to receive targeted ads on social media platforms by changing your preferences in your social media account settings or by contacting us at the contact information provided in the Contact Us section of this Policy. If you withdraw your consent for this use, you may still see some of our ads on social media platforms, but these ads will not have been targeted as a result of the use of your personal information.

c. Information Collected Using Cookies and Similar Technologies

To help us better serve you through websites and mobile applications, we may collect Device Identifiers via technologies such as "cookies" and "web beacons" (also known as clear GIFs, pixel tags, or pixels) or via Internet Protocol (IP) tracking.

Cookies operate in the background, and you can disable them by adjusting your internet browser settings, but this may make it difficult to use certain features of the websites, or these features may no longer be available. We may use cookies to facilitate your experience on the website, such as by remembering your preferences or keeping track of your login ID and password.

We may also use cookies, web beacons, and other activity tracking tools on the websites and through other services to collect your engagement metrics, including Personal Identifiers and Device Identifiers, related to your activity on the websites and services.

For more information about your choices regarding cookies, you can refer to the Access, Withdrawal, and Correction of Your Personal Information section below to learn how to opt out.

Your browser may offer you a "Do Not Track" option, which allows you to signal to website operators and applications and web services that you do not wish them to track your online activities. The websites and services currently do not support "Do Not Track" requests.

10. How do we protect your personal information ?

We implement internal policies and practices to ensure the protection of your personal information, including:

• Appointing a privacy officer responsible for ensuring compliance with applicable privacy laws.

• Policies and procedures defining the roles and responsibilities of our employees throughout the lifecycle of personal information, limiting access to such information on a "need-to-know" basis, and governing the retention and destruction of personal information.

• A process for handling complaints and inquiries regarding the protection of personal information, including any privacy incidents involving personal information.

• Technical security measures such as encryption, firewalls, antivirus software, and other similar measures if the information is collected or stored electronically.

• Contractual protections and other measures to ensure that service providers with whom we share personal information maintain adequate protections and security standards. For example, we typically require our service providers to limit their use and retention of personal information to what is necessary to provide their services and to inform us of any actual or suspected privacy incidents. We also attempt to monitor and verify their compliance with these requirements in various ways (e.g., on-site inspections if feasible, investigations and interviews, evidence of certification, etc.).

• Offering employee training on personal information protection and information security.

Our goal is to prevent unauthorized access, loss, misuse, sharing, or alteration of personal information in our possession. We also apply these protective measures when deleting or destroying your personal information.

11. How long do we retain your personal information?

We retain your personal information only for the reasonably necessary or relevant duration to achieve the identified purposes, or as permitted or required by law. Once they are no longer needed, your personal information will be securely destroyed or anonymized in accordance with applicable laws.

12. Cross-border transfers of personal information

Your personal information may be transferred, stored, accessed, or used in a jurisdiction other than your jurisdiction of residence (for example, outside of your province or Canada) as part of our use of service providers we have engaged. We engage these service providers for the purposes described in section 6 above.

We make every effort to ensure that all our service providers take reasonable security measures to protect your personal information (this includes technical, administrative, and physical protection measures for your personal information). We do everything in our power to ensure that our service providers only use your personal information for the authorized purposes we have communicated to you or otherwise permitted by applicable law.

When personal information is transferred outside of your province or Canada, it is subject to the laws of the foreign jurisdiction, which may differ from those of your jurisdiction, and any personal information transferred to another jurisdiction will be subject to the law enforcement, regulatory, and national security authorities of that jurisdiction. Subject to these laws, we will use contractual measures to the best of our abilities to maintain protections that ensure your personal information receives at least equivalent protection to that provided in Canada.

13. Access, withdrawal, and rectification of your personal information

You may have the right to access your personal information and request its rectification if it is inaccurate, incomplete, or outdated, subject to limited exceptions provided by applicable laws.

To access and rectify your personal information, please contact us in writing using the relevant contact details provided in the Contact Us section below.

You have the right to request that we do not process your personal data for targeted advertising, selling, or profiling purposes (i.e., automated processing of your personal data to evaluate, analyze, or predict personal aspects related to your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements).

If you have agreed to receive communications or solicitations from us (and/or have opened an account with us) and later change your mind, you can revise your preferences in the "Account" section of the websites, or please contact us in writing using the relevant contact details provided in the Contact Us section below.

You can also choose to no longer receive any further promotional emails from us by clicking on an unsubscribe link or "unsubscribe" in the promotional email you receive. You acknowledge that if you opt out of receiving promotional correspondence from us, we may still contact you as part of your other relationships, activities, transactions, and communications with us.

14. Changes to this Policy

We may make changes to this Privacy Policy from time to time. The modifications we make will take effect when we publish a revised version of the policy on our website and mobile application. If the changes we make are significant, we will provide a more prominent notice. By continuing to use our services or purchase our products after the publication of the modified version of the Privacy Policy or after being informed of this update, you agree to the changes made to it.

15. Contact us

If you have any questions or complaints regarding how we handle your personal information, please contact us at the following coordinates:

Privacy Officer
4750, rue Sherbrooke Est
Montreal, Québec H1V 3S8
vieprivee@cfmontreal.com