1. Information We Collect
Our primary purpose in collecting personal information from you is to provide you with a safe, smooth, efficient, and customized experience. This allows us to provide services and features that will meet your needs, and to customize our service to make your experience safer and easier. We only collect personal information about you that we consider necessary for achieving this purpose. In general, you can browse the Metrolinx service without telling us who you are or revealing any personal information about yourself. Once you give us your personal information, you are not anonymous to us. If you choose to use our Site, we may require you to provide contact and identity information, billing information, shipping information and other personal information as indicated on the forms throughout Metrolinx. Where possible, we indicate which fields are required and which fields are optional. You always have the option to not provide information by choosing not to use a particular service or feature.
Under some circumstances, we may require some additional financial information, such as but not limited to credit card information. We use your financial information, including credit card information, to verify the accuracy of your name, address, and other information, as well as to bill you for your use of our services.
We automatically track certain information about you based upon your behaviour on our Site. We use this information to do internal research on our users' demographics, interests, and behaviour to better understand, protect and serve you and our community. This information may include the URL that you just came from (whether this URL is on our Site or not), which URL you next go to (whether this URL is on our Site or not), your computer browser information, and your IP address.
Web Browsers set aside a small amount of space on your hard drive to keep these preferences, then every time you visit a website your browser checks to see if you have any predefined preferences (cookies) for that server. If you do, it sends the cookie to the server along with the request for a web page. Your browser will not give up its cookie data to any server except the one that set it.
We are working in collaboration with third-party service providers, including Google, who also use tracking tools in order to systematically collect anonymous data about the parameters of your visits to our Sites or other websites. Once again, such information is used to target advertisements and content that may be of interest to you, and also to provide statistical insight through features such as Google Analytics.
If you establish a credit account with us to pay the fees we charge, we collect some additional information, such as: a billing address, credit card number and credit card expiration date.
If you send us personal correspondence, such as emails or letters, we may collect such information into a file specific to you.
2. Our Use of Your Information
We use your personal information to facilitate the services you request. We use personal information in the file we maintain about you, and other information we obtain from your current and past activities on MERX to: resolve disputes; troubleshoot problems; bill your account; inform you about online and offline offers, products, services, and updates; customize your experience; detect and protect us against error, fraud and other criminal activity; enforce our User Agreement; and as otherwise described to you at the time of collection, use or disclosure. At times we look across multiple users to identify problems or resolve disputes, and in particular we may examine your personal information to identify users using multiple User IDs or aliases. We may compare and review your personal information for errors, omissions and for accuracy.
If you choose to open a Credit account, or otherwise provide us your financial information, we use your address and financial information to bill you and provide associated support.
You agree that we may use personal information about you to improve our marketing and promotional efforts, to analyze MERX usage, and to customize Metrolinx content, layout, and services. These uses improve MERX and better tailor it to meet your needs, so as to provide you with a smooth, efficient, safe and customized experience while using Metrolinx.
3. Our Disclosure of Your Information
As a matter of policy, we do not sell or rent any of your personal information to third parties for their marketing purposes.
- Metrolinx. We disclose your personal information to Metrolinx for the purpose of allowing Metrolinx and its clients engage in business with you. Metrolinx will collect, use or disclose such information for the purposes that it, or any of its clients, deems appropriate.
- External Service Providers. We do not disclose your personal information to external service providers unless you provide your explicit consent. With your consent we may provide some of your personal information to the external service provider offering such services, for your convenience. To prevent our disclosure of your personal information to an external service provider, you can decline such consent or simply not use their services. Because we do not control the privacy practices of these third parties, you should evaluate their practices before deciding to use their services.
- Internal Service Providers for Our Operations. We may use third parties that we refer to as internal service providers to facilitate or outsource one or more aspects of the business, product and service operations that we provide to you (e.g. payment collection) and therefore we may provide some of your personal information directly to these internal service providers. These internal service providers are subject to confidentiality agreements with us and other legal restrictions that prohibit their use of the personal information we provide them for any other purpose except to facilitate the specific outsourced MERX related operation.
- Other Corporate Entities. We may share our data, including personal information about you, with our subsidiaries and joint ventures or potential partners or assignors. To the extent that these entities may have access to your information, they will treat it at least as protectively as they treat information they obtain from their other users. Our subsidiaries, joint ventures, potential partners or assignors shall follow privacy practices no less protective of all users than our practices described in this document, to the extent allowed by applicable law.
- Legal Requests. MERX cooperates with law enforcement inquires, as well as other third parties to enforce laws such as: intellectual property rights, fraud and other rights, to help protect you and the MERX community from bad actors. Therefore, in response to a verified request by law enforcement or other government officials relating to a criminal investigation or alleged illegal activity, we can (and you authorized us to) disclose your name, city, province, telephone number, email address, User ID history, and order history without a subpoena. However, in an effort to balance your right to privacy and the ability to keep the community free from bad actors, we will not disclose additional information to law enforcement or other government officials without a subpoena, court order or substantially similar legal procedure, except when the additional disclosure of information is necessary to prevent imminent physical harm or financial loss.
4. Your Use of Other Users' Information
In order to facilitate interaction among all of the MERX User community members, MERX provides you, via a Document Request List, with limited access other users' contact and shipping information. As a subscriber you have access to this list as well as to any contact information provided by a jurisdiction in an Award Notice.
By entering into our User Agreement, you agree that, with respect to other user's personal information that you obtain through MERX or through a MERX-related communication or MERX-facilitated transaction, MERX hereby grants to you a license to use such information only for: (a) MERX-related communications that are not unsolicited commercial messages, and (b) any other purpose that such a user expressly agrees to, after you tell them the purpose you would like to use it for. In all cases, you must give users an opportunity to remove themselves from your database and a chance to review what information you have collected about them. In addition, under no circumstances, except as defined in this Section, can you disclose personal information about another user to any third party without our consent and the consent of that user. You agree that other users may use your personal information to communicate with you in accordance with this Section.
MERX and our users do not tolerate spam. Therefore, without limiting the foregoing, you are not licensed to add a MERX user to your mail list (email or physical mail) without their express consent.
5. Control of Your Password
6. Accessing, Reviewing and Changing Your Personal Information
We offer you the ability to automatically review and change the personal information you submit to us by logging into Metrolinx and entering the new information yourself. Generally, we prefer not to modify your personal information based upon your request but it is possible to do so. You can change your password, email address, contact information, financial information, shipping information and user preferences by going to My Account, followed by My Profile and selecting the Edit Information link. You must promptly update your information if it changes or is inaccurate. The change of information will not alter the historical information captured in the Document Request List. Only orders made after this change will be affected.
Subscribers may cancel their subscription on-line or upon written request. We will deactivate your account, contact information, billing information, shipping information and financial information from our active databases. To make this request, please contact us at Metrolinx@merx.com or call our MERX Customer Support at 1-800-964-MERX (6379).
We will retain in our files some personal information you have requested us to remove in order to prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations, enforce our User Agreement and comply with legal requirements as is permitted by law. Therefore, you should not expect that all of your personal information will be completely removed from our databases in response to your requests. However, such personal information will be deactivated from public and member viewing and will only be available to select MERX personnel.
7. Other Information Collectors
Your information is stored and processed on computers located in Canada. MERX uses procedural and technical safeguards to protect your personal information against loss or theft, as well as against unauthorized access or disclosure, to protect your privacy, including firewalls and encryption. We employ many different security techniques to protect such data from unauthorized access by users inside and outside the company. However, "perfect security" does not exist on the Internet.