Privacy Policy

1. INTRODUCTION

Respect for your privacy is of the utmost importance to BrandDo Marketplace Inc. (hereinafter referred to as “BrandDo,” “we,” “us,” or “our”), which is responsible for the operation of this website and for implementing this Privacy Policy (hereinafter the “Policy”). This Policy is intended to inform you of the practices adopted with respect to the personal or confidential information that relates to you or your business. In light of the rapid development of new communication technologies, it has become necessary to pay special attention to the protection of privacy. In order to provide you with quality services, we may need to access certain personal and account-related information. We ensure that our employees handle such information with the utmost discretion and diligence, in compliance with applicable legal and regulatory requirements.

1.1 Personal Information

Personal information means any information about an identifiable individual, or information that, either alone or when combined with other data, allows that individual to be identified. In general, personal information does not include work/business contact information, such as your name, title, work/business address, or work/business telephone number.

1.2 Legislative Framework

This Policy has been adopted in accordance with the requirements of the Act Respecting the Protection of Personal Information in the Private Sector (CQLR, c. P-39.1), which grant you rights concerning the use and management of personal information that is exchanged within the private sector. Our Policy is intended to inform you of these rights and to establish effective methods for protecting such information, all in compliance with the applicable legislation.

The Minister responsible for Access to Information and the Protection of Personal Information is responsible for the administration of the Act Respecting the Protection of Personal Information in the Private Sector.

2. CONSENT

By providing personal information to BrandDo or to our service providers and agents, you consent to the terms set forth in this Privacy Policy, as well as to the collection, use, retention, and destruction of such information in accordance with this Policy and as authorized or required by law. If you provide BrandDo or our service providers and agents with personal information about another individual, you represent that you have the authority to do so and/or that you have obtained all necessary consents from that individual to enable us to collect, use, and disclose such personal information for the purposes set out in this Policy.

2.1 Collection of Personal Information

BrandDo strives to implement the necessary and appropriate security measures to ensure the confidentiality of the personal information in its possession. To this end, we follow generally accepted industry standards. Accordingly, the personal information we hold is accessible only to individuals who are authorized to view it and who access it solely when necessary in the performance of their duties.

Appropriate physical, technical, and administrative safeguards have been implemented and are kept up to date to prevent any accidental or unlawful destruction, accidental loss, unauthorized disclosure or alteration, unauthorized access, or unlawful processing of personal information.

To achieve this, we ensure, among other things, that access to our offices and computer equipment is restricted, that our staff receives proper training, and that our agents and suppliers of goods and services who have access to personal information are required to sign confidentiality agreements and implement equivalent security measures.

The personal information we collect is obtained through various forms available on our website, including the contact form, the client account and the purchase form. Certain information is also collected through email exchanges between you and BrandDo.

We also use cookies to gather information about you. BrandDo retains such data for purposes of interactivity and to optimize communications and services. You may adjust your browser settings at any time to block cookies; however, doing so may prevent you from accessing certain functions offered on our website. A cookie is a small electronic file installed by your browser on your device when you visit a website. Cookies allow websites to remember certain information about you to facilitate your access to and navigation within our site. Cookies can only be read by the website that sends them to your computer. Please note that the use of cookies identifies you solely as a user and does not recognize you by name or address.

If you are using a public computer or sharing a computer with other users, please make sure to delete your browsing history before ending each session.

2.2 Data Collected

When you access this website, certain information is automatically exchanged between your computer and BrandDo’s server. No information directly identifying you is associated with your IP address; however, identification is possible through the intervention of your Internet service provider.

When you submit a request using the information request form available on our website, BrandDo collects the following personal information:

• (a) your first and last name;
• (b) your email address;
• (c) your telephone number; and
• (d) the reason for your inquiry and any other information you choose to share with us.

BrandDo may also collect various personal information when we communicate with you by email. In such cases, please note that we only retain the information necessary for the evaluation and processing of your file and your request. BrandDo is not and cannot be held responsible for any risks associated with your use of any email software or electronic communication system.

2.3 Purpose of Data Collection

The personal information provided to us is used solely for the purpose of carrying out the services you request, subject to the exceptions provided by law. We retain such information only for as long as necessary and make every effort to keep it secure.

The personal information collected by BrandDo is used solely within the scope of its professional activities and for specific, explicit, and legitimate purposes. In general, this information is collected in order to:

identify the client’s needs and preferences; process requests for information or services; create and manage the client account; prepare and execute sales or service agreements; ensure administrative, logistical, and financial follow-up (including invoicing and payments); communicate with the client regarding their inquiry, purchase, or our services; and improve the quality of our services, website, and overall user experience.

BrandDo may also use your email address to send you important updates or transactional communications related to your account. We use recognized security standards for all email exchanges; however, BrandDo cannot be held responsible for the risks associated with your use of email or other electronic communication tools.

2.4 Retention and Destruction of Collected Data

2.4.1 Retention

Personal information collected is retained only for the period necessary to complete the services requested. Your personal information is stored in secure locations and on servers controlled by BrandDo or its service providers. Each BrandDo employee is responsible for securely maintaining their files and your data.

2.4.2 Destruction

When the personal information collected is no longer required for the purposes for which it was collected, BrandDo undertakes to destroy or anonymize such information, as applicable.

2.5 Complaint Process

For the purposes of this Policy, any complaint regarding the protection of your personal data may be directed to the privacy officer (hereinafter the “Privacy Officer”), whose contact information is provided in Section 8 of this Policy.

Our complaint handling process generally follows the steps outlined below:

1. Receipt of the complaint via email or telephone;
2. Recording the complaint in BrandDo’s register of confidentiality incidents;
3. Review and analysis of the complaint by the Privacy Officer;
4. Implementation of reasonable measures to address the complaint; and
5. Communication and discussion with the complainant regarding the measures taken.

Additionally, it is possible to file a complaint with a data protection authority, particularly in the country, province, or state in which you normally reside, where BrandDo is located, or where an alleged violation of data protection laws has occurred.

2.6 Management of Confidentiality Incidents

A confidentiality incident refers to any unauthorized access, use, or disclosure of personal information as defined by law, as well as the loss of personal information or any other breach of its protection.

Any person who witnesses or becomes aware of a privacy incident must immediately notify the Privacy Officer. As soon as possible, BrandDo will take all necessary and reasonable measures to mitigate the risk of harm and to prevent the recurrence of similar incidents.

BrandDo maintains a register of confidentiality incidents involving personal information. All information contained in this register is retained for a minimum period of five (5) years from the date of the incident.

3. ROLES AND RESPONSIBILITIES

All BrandDo staff members, as well as the professionals practicing within BrandDo, work together to ensure the protection of your personal information.

The President of BrandDo also acts as the Privacy Officer and is responsible for ensuring compliance with, and the implementation of, all provisions relating to the protection of your personal information and this Policy.

3.1 Authorized Individuals

Only individuals authorized by law may have access to your personal information. Accordingly, our representatives, agents and employees may collect, use, and/or disclose your information solely to the extent permitted by law and/or when necessary to carry out the mandates entrusted to BrandDo.

4. YOUR RIGHTS

We are committed to recognizing your right to access and correct your personal information, subject to the exceptions provided by law. In certain circumstances, you may exercise the following rights:

• (a) Access: The right to request confirmation as to whether we process personal information about you and, where applicable, to request access to such information. Subject to applicable law and, where applicable, payment of a reasonable fee, you may obtain a copy of the personal information we hold about you as well as certain related details.
• (b) Accuracy: We are required to take reasonable steps to ensure that the personal information in our possession is accurate, complete, not misleading, and up to date.
• (c) Rectification: The right to request correction of any incomplete or inaccurate personal information we hold.
• (d) De-indexation: The right to request that we cease disseminating your personal information or de-index any hyperlink attached to your name that provides access to such information, if its continued dissemination causes you harm or contravenes the law or a court order (also known as the right to erasure or right to be forgotten).
• (e) Anonymization: We may, instead of destroying your personal information, anonymize it so that it may be used only for serious and legitimate purposes.
• (f) Automated Decision-Making: The right to be informed when a decision about you is based exclusively on automated processing.
• (g) Technological Identification, Localization or Profiling: The right to be informed when technologies involving identification, localization, or profiling are used, as well as the means available to activate or deactivate such functions.

To exercise any of these rights, please contact the Privacy Officer responsible for implementing this Policy, whose contact information is provided in Section 8.

5. SECURITY

The personal information we collect is stored in a secure environment. All BrandDo employees and partners are required to respect and maintain the confidentiality of your information.

To ensure the protection of your personal information, we are committed to maintaining a high level of security by integrating the latest technological innovations designed to safeguard the confidentiality of your transmissions and transactions.

Please note, however, that BrandDo cannot be held liable for your use of our website or for the inherent risks associated with the use of the Internet.

5.1 External Links

Our website may contain hyperlinks to other websites. When you follow these links, you leave our website, and any information then exchanged is no longer governed by this Policy. BrandDo assumes no responsibility in this regard. We therefore encourage you to review the privacy policy applicable to any website you visit. For more information, please consult the website of the Commission d’accès à l’information du Québec.

5.2 Third Parties

In order to provide our services, we may share the personal information we collect with certain third parties. However, please be assured that we will not disclose any personal information unless we have your authorization or are required to do so under applicable law or regulation.

In the course of its activities, BrandDo may disclose your information to third parties, including but not limited to:

• (a) Third-party subcontractors involved in the provision of our services;
• (b) Third-party service providers, including providers of website-related services (hosting, security, etc.). The personal information provided is limited to what is necessary for them to perform their services, and such providers are required to maintain the confidentiality of the information; and
• (c) Public authorities and law enforcement agencies where required by applicable law or where necessary for the provision of our services.

In addition, and more generally, BrandDo may disclose personal information to third parties in specific cases, including:

• (a) Where required for the application of the law or expressly provided by it;
• (b) Where necessary for public safety purposes or for the prosecution of an offence; and
• (c) Where necessary for the performance of a mandate or the execution of a service or business contract.

BrandDo will never sell or exchange your personal information for payment under any circumstances.

5.3 Technological Products and Services

As part of its activities, BrandDo uses certain software and technological products necessary for the management, processing, and protection of personal data. These tools may include, without limitation:

• (a) secure online payment software (such as PayPal, Stripe, or any other recognized payment service provider);
• (b) customer relationship management (CRM) tools for tracking requests and communications;
• (c) web hosting and site management solutions that comply with applicable security standards;
• (d) accounting and invoicing software; and
• (e) digital marketing and performance analysis tools (such as Google Analytics, Google Ads, etc.).

BrandDo ensures that all software and technological services used comply with applicable data protection standards and that personal information is used only for purposes necessary to the provision of our services. However, BrandDo cannot be held responsible for the data management practices, security measures, or privacy policies of third-party software or technological platforms used in connection with its services.

6. MODIFICATION

This Policy may be amended at any time. In the event of any changes to the Policy, BrandDo will post a notice to that effect on its website.

As a user, you are responsible for periodically reviewing this Policy in order to stay informed of any updates or modifications that may have been made.

7. TRAINING AND AWARENESS ACTIVITIES

To raise awareness among its employees and representatives regarding their obligations related to the protection of personal information, BrandDo provides its staff members with internal guidelines and policies that they are required to comply with.

8. PRIVACY OFFICER

The following individual is designated as the Privacy Officer responsible for the protection of personal information collected in accordance with applicable law and this Policy:

You may contact the Privacy Officer at any time to exercise your rights under BrandDo’s Policy.

It is understood that the Privacy Officer may, in writing, delegate all or part of this function to any person.

---

Effective Date: August 28 th , 2025