Privacy Policy

Last Updated: November 12, 2025

1. Introduction

Brinkman (“we,” “us,” “our”) is committed to protecting the privacy and security of personal
information in all aspects of our business. We value the trust placed in us by our customers,
partners, and the communities we serve, and we take our responsibility to safeguard personal
information seriously.

This Privacy Policy explains how we collect, use, disclose, and protect personal information
when you interact with Brinkman through our website, applications, digital platforms, and related services (collectively, the “Services”).

By using our Services, you consent to the practices described in this Policy. This Policy
complies with the Personal Information Protection and Electronic Documents Act (“PIPEDA”)
and any other applicable Canadian privacy legislation.

If you do not agree with this Policy, please do not access or use our Services.

2. Scope and Application

This Policy applies to all personal information collected by Brinkman in Canada, whether from
clients, partners, suppliers, or members of the public. It covers information obtained through our websites, digital portals, mobile tools, email or telephone correspondence, in-person
interactions, event registrations, project participation, and surveys, as well as through
collaborations with third parties or affiliates.

This Policy does not apply to aggregated or anonymized information that cannot reasonably be
used to identify an individual.

3. Definitions

For clarity:

  • “Personal Information” means information about an identifiable individual, such as a
    name, contact details, or other data that can be used to identify a person.
  • “Processing” means any operation performed on personal information (e.g., collection,
    storage, use, disclosure, or destruction).
  • “You” or “Your” refers to an individual whose personal information we collect.

4. Personal Information We Collect

We collect only the personal information necessary for our purposes. The types of information
we may collect include:

Category Examples Purpose / Use
Identity Information Name, organization, job title,project affiliation To identify individuals interacting with Brinkman
Contact Information Email address, phone number, mailing address To communicate, provide updates, and deliver services
Account Information Username, password, account credentials, profile preferences To manage user accounts, authentication, and access control
Transactional Information Payment method, billing address, order or donation history To process transactions, donations, or service agreements
Technical Data IP address, device type, browser, operating system, log files, session IDs To operate and secure our digital platforms
Usage Data Pages visited, duration of sessions, clicks, and interactions To analyze and improve performance and usability
Communications Data Messages, feedback, survey responses, or inquiries To respond to requests and improve engagement
Marketing Preferences Opt-in status, event participation, or newsletter subscriptions To send relevant communications (with consent)
Environmental or Project Data (if applicable) GIS coordinates, restoration project data, or field data tied to individuals To verify and report environmental project activities

5. How We Collect Information

We collect personal information in the following ways:

  • Directly from you: when you fill out forms, subscribe to newsletters, or contact us.
  • Automatically: when you visit our website or platforms, through cookies and analytics
    tools.
  • From third parties: such as payment processors, service providers, or partner
    organizations working with us on shared projects.

6. Purposes for Collection and Use

Brinkman collects personal information for purposes that are reasonable and directly connected to our business operations. This includes providing, maintaining, and improving our Services; verifying identity; managing user accounts; processing transactions; communicating updates, notices, and marketing materials; and conducting surveys or events.

We also use personal information to analyze performance, meet legal and contractual
obligations, prevent fraud or misuse, and protect our rights, property, and the safety of our users. We do not use personal information for purposes other than those identified at the time of collection unless we obtain additional consent or are required to do so by law.

7. Legal Basis for Processing (PIPEDA Principles)

We process personal information in accordance with the principles of PIPEDA. The legal bases
for processing include:

  • Consent, when you voluntarily provide information to use our Services;
  • Contractual necessity, when processing is required to fulfill an agreement or provide a
    service;
  • Legitimate interests, where processing supports operational improvements or security;
    and
  • Legal obligations, when processing is mandated by applicable law or regulation.
    You may withdraw your consent at any time by contacting us (see Section 17). Withdrawal may affect our ability to deliver certain Services.

8. Consent

Your consent to collect, use, or disclose personal information may be express or implied,
depending on the circumstances.

For example:

  • Express consent is obtained when you check a box, sign a form, or clearly agree to a
    policy.
  • Implied consent occurs when your actions suggest agreement — such as providing your
    email address to receive a report.

You may withdraw your consent at any time, subject to legal or contractual restrictions.
Withdrawal of consent may limit our ability to provide certain Services.

9. Cookies and Automated Data Collection

We use cookies, log files, and similar technologies to enhance your experience and analyze
usage patterns. These may collect:

  • Browser type and version
  • Device type and operating system
  • IP address and approximate location
  • Pages visited and duration
  • Referral links or campaign sources

We use this information to:

  • Operate, maintain, and improve website functionality;
  • Analyze traffic and performance metrics;
  • Secure our platforms from misuse or fraud;
  • Personalize content and user experience.

You can modify your browser settings to block cookies or notify you before they are stored.
However, disabling cookies may affect the functionality of our Services.

10. Disclosure of Personal Information

Brinkman does not sell or trade personal information. We disclose information only when
necessary and in accordance with this Policy. We may disclose it only as necessary to:

  1. Service Providers:
    Trusted partners who perform functions on our behalf, such as:
    • ‍Cloud hosting and IT support providers (e.g., AWS, Google Cloud)
    • Payment processors and accounting services
    • Customer support and analytics platforms
    • Marketing or email distribution tools

      These providers are contractually obligated to protect personal information and may only use it to provide services to Brinkman.
  2. Affiliated Entities and Business Partners:
    To facilitate collaborative projects, events, or research initiatives — with consent or when
    consistent with the original purpose of collection.
  3. Legal and Regulatory Authorities:
    When required by law, regulation, subpoena, or court order, or to protect our legal rights
    and safety.
  4. Business Transactions:
    In the event of a merger, acquisition, or asset transfer, personal information may be
    transferred to the acquiring entity, provided equivalent privacy protections are
    maintained.

11. Cross-Border Data Transfers

Your personal information may be stored and processed in Canada or other jurisdictions where
our service providers are located. While those jurisdictions may have different privacy laws, Brinkman ensures that contractual and technical safeguards are in place to maintain equivalent protection in compliance with PIPEDA.

By using our Services, you consent to the transfer of information to facilities located outside of
Canada as described above.

12. Data Retention and Destruction

We retain personal information only as long as necessary to fulfill the purposes for which it was
collected or to comply with legal obligations. Retention periods vary depending on the nature of the information:

  • Account data: retained while your account is active and for up to 12 months after
    closure;
  • Transaction records: retained for seven years to meet accounting requirements;
  • Log and security data: retained for 12 months unless required longer for investigation.

Once no longer needed, personal information is securely deleted, anonymized, or destroyed
using industry-standard methods.

13. Safeguards and Security

Brinkman maintains a comprehensive set of administrative, technical, and physical safeguards
to protect personal information against unauthorized access, loss, or misuse. These measures
include encryption of data in transit and at rest, secure servers, firewalls, controlled access
rights, and employee confidentiality training.

Although no system can guarantee absolute security, we continuously monitor, test, and update
our procedures to ensure that personal information remains protected.

14. Individual Access and Rights

Under Canadian privacy law, you have the right to access your personal information held by
Brinkman, request corrections if it is inaccurate or incomplete, and withdraw consent to its
processing where applicable. You may also request information about how your data is used or
disclosed, and in certain circumstances, request its deletion, subject to legal limitations.

To exercise your rights, please contact us (see Section 17). We will respond within 30 days, in accordance with PIPEDA. We may require proof of identity before granting access to protect your information from unauthorized disclosure.

15. Accuracy

We strive to ensure that personal information is accurate, complete, and up-to-date.
You can help by notifying us promptly of any changes to your contact information or
preferences.

We make reasonable efforts to ensure that personal information in our possession is accurate,
complete, and up to date. Individuals are encouraged to notify us promptly of any changes to
their contact details or other relevant information.

16. Links to Other Websites

Our website may contain links to external websites that are not owned or operated by the
Brinkman Group. We are not responsible for the content, accuracy, or privacy practices of any
third-party websites, and the inclusion of such links does not constitute an endorsement of those sites or their policies. We encourage users to review the privacy statements and terms of use of any third-party website before providing personal information, as their data collection and handling practices may differ from those of the Brinkman Group.

17. Children’s Privacy

Our Services are not directed toward children under the age of 13. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such data, we will delete it promptly.

18. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology,
or legal requirements. When updates are made, we will revise the “Last Updated” date above.
If the changes are material, we will provide notice through our website or by direct
communication. Your continued use of our Services following the posting of updates constitutes acceptance of the revised Policy.

19. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or Brinkman’s data
protection practices, please contact:

‍
Brinkman
Attn: Privacy Policy
website@brinkman.ca
2669 Hastings Street.
Vancouver, BC, V5K 1Z5

If you are not satisfied with our response, you may contact the Office of the Privacy
Commissioner of Canada (OPC) at: https://www.priv.gc.ca/en/ or 1-800-282-1376.

20. Summary of Your Rights under PIPEDA

Under the Personal Information Protection and Electronic Documents Act, you have the right to:

  1. Know why an organization collects, uses, or discloses your personal information.
  2. Expect organizations to handle your information responsibly and safeguard it.
  3. Access your personal information upon request.
  4. Challenge the accuracy or completeness of your data.
  5. Withdraw consent to the use of your information.
  6. File a complaint with the OPC if you believe your rights have been violated.

‍