Effective December 18, 2023
At DECATHLON CANADA INC. and its affiliated entities, including the DECATHLON GROUP* (hereinafter “DECATHLON”, “us”, “we” or “our”), your privacy is important to us. Accordingly, we are committed to regularly reviewing our practices to ensure that they are up to date and to ensure that effective controls are in place to protect the personal information you have entrusted us with. We will never sell or rent your personal information. *DECATHLON GROUP includes DECATHLON SE and its affiliated entities such as companies and subsidiaries owned directly or indirectly by DECATHLON GROUP, including DECATHLON CANADA INC.
In addition, the Policy describes the choices you can make in respect of how we use your personal information, and the different ways you can contact us should you wish to access, verify or update your contact information, change your privacy preferences, or ask us about our privacy practices.
This Policy and the personal information processed by DECATHLON are subject to Canadian, provincial and federal privacy laws as well as the General Data Protection Regulations of the European Union, as applicable.
By accessing our Websites or using our Products and Services, online or in-store, you consent to the collection, use and disclosure of your personal information in accordance with this Policy. In some cases, your consent may be “implied”, meaning that your permission is presumed based on your action or inaction at the time of collection, use or sharing of your personal information. If you do not agree with the Policy, please refrain from using our Websites or Products and Services. In addition, the collection of some of your personal information in accordance with the Policy is mandatory for us to provide you with the Products and Services you have requested, such as home delivery or the maintenance and repair of a sporting goods; therefore, if you elect not to provide us with the necessary personal information, we may not be able to offer you these Products and Services.
We never deliberately collect personal information from children under the age of 14 without the consent of their parent or guardian. To learn more about our information collection practices in respect of children under the age of 14, please contact us by way of the coordinates provided in the "How can you reach us?" section.
Personal information is information about you that can be used to identify you, directly or indirectly.
Information that is anonymized and that cannot be directly or indirectly associated with you is not considered personal information. When information is anonymized, it means that it has been irreversibly modified to ensure that it cannot identify you either directly or indirectly.
We collect only the personal information necessary to achieve the purposes set out in this Policy.
We primarily collect your personal information directly from you, but also from third parties, depending on the circumstances and the Products and Services you wish to obtain from DECATHLON. For example, we collect your personal information when:
when you voluntarily provide such information directly to us;
when personal information about you is automatically collected in connection with your use of our Websites or Products and Services;
when DECATHLON-affiliated entities provide us with personal information about you for the purposes described in the Policy;
when third parties provide us with personal information about you. Third parties who share your personal information with us include service providers or partners when, for example, having retained your prior consent, they provide us with your contact information for opening an account or managing registration to obtain one of our Products and Services.
When you visit our Websites, enter a contest, sweepstakes, promotion, event, complete a survey, create an account on our Websites, use our Products and Services, apply for our Products and Services, or otherwise communicate or interact with us, we may ask you to volunteer personal information (such as your name, email address, shipping and billing address, phone number, and date of birth) so that we can facilitate communication with you, respond to your request, and provide you with the Products and Services you have requested.
A cookie is a small data file containing a unique identification number that identifies the browser on a visitor's mobile device or computer each time the visitor accesses our Websites (but does not necessarily identify the visitor).
When you use a mobile device in a store by enabling the WiFi network access setting or when you access our free WiFi network, we may collect your Media Access Control (MAC) address and location data. We may then use this data to conduct analyzes that allow us to assess customer movement in our stores and maximize the efficiency of store layout. If you do not want your device to be detected or your data to be used for this purpose, please disable the mobile network access setting on your phone and any other electronic device.
When you interact with us by telephone, telephone conversations may be recorded for training and quality control purposes.
We will notify you in advance that a call may be recorded for these purposes.
For security reasons, our stores and warehouses have CCTV cameras. In particular, we use these cameras to monitor the movement of people and inventory in our stores and to prevent theft and loss. The images collected are kept, on average, for only 90 days, except in special circumstances.
We use personal information collected about you for the following purposes:
to respond to your requests pertaining to our Products and Services, and to any questions or comments that you send us in store, online, by mail or by phone;
to provide our Products and Services, including but not limited to:
to create and manage your account, profile or membership online;
to verify your identity
to manage the return or refund of a product;
to locate where a request for delivery is required;
to provide payment functionality, process payments, or to facilitate payments for our Products and Services; and
to perform internal operations that are necessary for delivering our Products and Services, including resolving software outages and operational issues.
to conduct recalls, quality assurance follow-ups and regulatory compliance for our products; When you use our in-store WiFi network;
to email you information about our Products and Services as well as those offered by affiliated entities and DECATHLON partners, and about promotional offers, contests, events, surveys, important updates and content on our Products and Services;
to personalize and display online advertising content (or other media), and to offer you Products and Services that may be of interest based on your preferences, interests or profile, subject to your activation of the relevant technologies or if applicable law permits such practices. To do so, we use information about your preferences, interests and profile, based on information you provide to us in connection with our Products and Services, and information generated when you interact with us or other affiliated entities or Decathlon third party partners. Rest assured that no sensitive information is being used for advertising or marketing purposes and, to the extent possible, your information will be de-identified before being used for such purposes;
to conduct analytics and statistics on our audience, customer base and use of our Websites and Products and Services to better understand customer interests and preferences;
to develop or design new Products or Services of interest to our customers;
to manage, review and improve our Products and Services, including customer service and internal business processes;
to analyze user data in an aggregated and anonymous manner.
to manage your interactions with DECATHLON on social media (when you mention our name, comment on our posts, or contact us directly);
to capture images through our surveillance cameras;
to detect security or privacy incidents and to protect against malicious, misleading, fraudulent or illegal activities;
for any other purpose described in this Policy or communicated to you at the time of collection of your personal information;
or such other purposes as the applicable laws permit or require. If you prefer that your personal information not be used by DECATHLON for advertising or marketing purposes or for other purposes that are not necessary for the provision of our Products and Services or the proper continuity of our operations, you may withdraw your consent at any time (subject to legal or contractual restrictions) by following the instructions provided in the section “What are your choices regarding the use of your personal information?”.
We may use de-identified user information, which does not directly identify users, to create general reports of information used to investigate trends and changes in user demographics of the Websites and our Products and Services. This de-identified information is used to administer the Websites, to better understand the interests of our users generally, and to improve the Websites.
If you provide your e-mail address or phone number, we may occasionally send you commercial emails or text messages, including to inform you of our promotions, contests, surveys, important updates, or to offer you a new product or service. At any time, you can unsubscribe by using the means indicated in the message or by changing your preferences in the settings of your DECATHLON account.
We may share your personal information with your consent or where required or permitted by applicable law. For example, we may share your personal information with our service providers for the purposes described in the Policy, with certain professionals when necessary to provide you with the Products and Services you have requested, and to facilitate the management of our activities and to provide you with better Products and Services, as described in more detail below.
We may share your personal information with DECATHLON's affiliated entities in order to comply with applicable laws, regulations and requirements, to ensure that your information is consistent, accurate and up-to-date, and to improve the quality and relevance of the Products and Services that you receive. In addition, with your consent, we may share your personal information within DECATHLON's affiliated entities for statistical and analytical purposes and for any other purpose described in the Policy. Please rest assured that each of DECATHLON's affiliated entities has appropriate controls in place to ensure the protection of your personal information, compliance with this Policy, and compliance with applicable privacy laws, regulations and requirements.
We may also share your information with third-party suppliers, consultants, and other providers of Products and Services that we employ to perform tasks or render Products and Services on our behalf. These third parties include our payment processors, website analytics companies, business intelligence service providers, messaging service providers, and advertising partners.
We may disclose your personal information to public bodies or governmental bodies that are authorized by law to obtain the information, or where we have reasonable grounds to believe that the information may be relevant to the investigation of an unlawful activity, or to comply with a subpoena, arrest warrant or order of a court, person or competent body requiring the production of information, or to comply with a court's rules regarding the production of records or information, or to protect our rights and property.
If necessary for the purpose of evaluating or concluding a commercial transaction, such as the sale or licensing of all or part of the business or its assets, or changing its legal structure by merger or otherwise, we may share personal information with the other party to the transaction and in accordance with applicable legal requirements.
We may disclose or transfer personal information to affiliated entities and may use service providers and partners outside of your province, territory or Canada to perform specific tasks or mandates in the normal course of our business. In these cases, we take into account the protections afforded by the laws of such other jurisdictions and use contractual measures to provide adequate protection to your personal information when we disclose or transfer it to these other jurisdictions. However, when your personal information is processed in a jurisdiction other than that in which you reside, it may be subject to the law of that foreign jurisdiction, including any law authorizing or requiring the disclosure of the information to government authorities, courts and law enforcement and national security agencies in that jurisdiction.
We have adopted DECATHLON’s rules pertaining to the governance of personal information to ensure that personal information is protected throughout its lifecycle. Depending on the volume and sensitivity of information, the purposes for which it is used, and the format in which it is stored, we implement a combination of measures to ensure its protection, including:
Designation of a Privacy Officer to ensure DECATHLON’s compliance with applicable privacy law;
Internal policies, directives, procedures, and guidelines that define the roles and responsibilities of our employees throughout the information lifecycle and ensure that only employees who need to access your information in the course of their work have access to it;
Training and awareness activities for our employees on privacy and information security;
If the information is collected or stored electronically, technical security measures such as encryption, firewalls, anti-virus software and other similar measures;
Procedures to receive, investigate and respond to complaints or requests relating to our information handling practices, including those relating to any privacy incident involving personal information;
A framework for the retention and destruction of personal information, as further described above in the section "How long is your personal information retained?";
Contractual and other measures to ensure that service providers with whom we share personal information maintain adequate security measures. For example, we generally require our service providers to limit their use and retention of personal information to what is necessary to provide their services, and to notify us of any breach or attempted breach of any obligation relating to the confidentiality of the information shared. We also try to monitor and verify their compliance with these requirements in various ways (e.g. on-site inspections (where possible), investigations and interviews, proof of certification);
Data protection agreements governing the sharing of personal information with DECATHLON’s affiliated entities. As such, your personal information is afforded a comparable level of protection when processed by our affiliated entities for the purposes described in the Policy.
No data security measures are absolute or fully guaranteed. If you have reason to believe that your interaction with us is no longer secure (for example, if you notice suspicious activity on your account), please contact us immediately by way of the coordinates provided in the “How can you reach us?” section below.
You have a number of rights related to the personal information we hold about you. You can exercise them at any time by contacting us by way of the coordinates provided in the section “How can you reach us?”
You may view and change your consent preferences regarding the collection, use and disclosure of your personal information at any time. Please note, however, that we will no longer be able to offer you Products and Services if you withdraw your consent for a purpose that is integral to our relationship with you as set out in the Policy.
You can ask us:
If we have personal information about you;
How your personal information was collected, used and disclosed;
If another person, supplier, partner, affiliated entity or third party holds your personal information for us.
You can ask us for access to the personal information we hold about you. In some cases, we may not be able to provide you with the requested information. For example, we cannot share information with you that would reveal information about another person.
You can ask us to correct your personal information if it is incomplete or inaccurate. You can also update it if it has changed.
You can ask us to delete your personal information. Our response will depend on the situation. If we have achieved the purposes associated with the collection of the personal information in question, we will delete it. However, we may retain information in order to comply with our legal, regulatory and contractual obligations, and to protect our rights in the event of recourse.
If we have not yet achieved the purposes associated with the collection of the personal information in question, we will delete information that is out of date, inaccurate, incomplete or no longer required. If you ask us to delete the rest of your personal information, we will no longer be able to offer you our Products and Services.
You can make a written request to exercise one of your rights in relation to your personal information by contacting us at the coordinates provided in the "How can you reach us?" section below.
You will receive our response in writing within 30 days. If we refuse your request in whole or in part, we will provide you with the following information:
Reasons for refusal;
The provisions of the applicable law(s) and regulation(s) that justify this refusal;
Your right to challenge this refusal before your provincial or territorial privacy regulator;
Time limits for challenging the refusal.
You can file a complaint if you feel we have mishandled your personal information. We invite you to contact us before you file a complaint. We will take the time to analyze your complaint and discuss how the situation can be resolved.
You can also file a complaint with your provincial or territorial privacy regulator.
By contacting us at the coordinates provided in the “How can you reach us?” section, you may withdraw or modify your consent to the use and disclosure of your personal information, or refuse to participate in certain uses and communications, subject to legal or contractual restrictions. If you refuse to provide us with your personal information or provide us with the required consent for its processing, we may not be able to provide you with our Products and Services.
At any time, you can have your name removed from our mailing lists for promotional or marketing electronic communications by clicking on the unsubscribe link in each message or by contacting us by email at coordinates provided in the “How can you reach us?” section.
If you choose not to receive any further promotional or marketing electronic communications, you may continue to receive messages from us for other purposes in accordance with applicable laws. For example, we may need to contact you to complete a transaction, answer your questions or provide you with the information you have requested.
If you no longer wish to receive personalized offers, you can withdraw your consent through the unsubscribe link included in each message, or you can contact us by email at the coordinates provided in the “How can you reach us?” section.
We have adopted policies and practices governing the retention and destruction of personal information in our possession or custody. We retain your personal information only for such a reasonable period of time as is necessary or relevant to the fulfillment of the purposes identified in the Policy, or as permitted or required by applicable law. Even if you've stopped doing business with us, we have to keep certain information because, among other reasons, the law requires it. When this information is no longer needed, it is destroyed or anonymized in accordance with applicable laws, so that it can no longer identify you, directly or indirectly. As part of the process of destroying information, we follow strict rules and also ensure that unauthorized persons do not have access to it.
We regularly update our practices to strengthen them and to reflect evolving privacy laws, regulations and standards. We will notify you on our Websites of any material changes to this Policy. When such changes are significant, you will receive notice in accordance with applicable laws.
You can use the coordinates below to contact our Privacy Officer in order to:
Make a request to view, correct or delete your personal information;
File a complaint related to the management of your personal information;
Ask for help, provide feedback or ask any questions related to the protection of your personal information.
Make sure you provide us with all the information we may need to follow up on your request.
By email: [email protected]
By post: Office of the Privacy Officer Decathlon Canada Inc. 2151 Lapinière Boulevard Brossard, Quebec J4W 2T5