EFFECTIVE DATE: OCTOBER 1, 2023

The privacy of your personal data/information is important to geoLOGIC systems ltd. CanOils is owned by geoLOGIC systems ltd. geoLOGIC systems ltd and its affiliates (“geoLOGIC”, “we”, “us” or “our”) are committed to maintaining the privacy and confidentiality of the personal information in our custody and control and protecting such personal information in accordance with applicable privacy laws. This geoLOGIC General Privacy Policy (the “Privacy Policy” or “Policy”) describes geoLOGIC’s privacy and cookie usage policy as it pertains to your use of the websites operated by us (each a “Website”) and our online and cloud-based applications (each a “Web App”), collectively known as the “Websites”, as well as to the personal information that geoLOGIC collects from you in the normal course of business, how we use such information and to whom such information may be disclosed.

Please read the Privacy Policy carefully to understand our views and practices regarding your personal information.

By using any of our Websites you are acknowledging and accepting this Policy.

By providing your Personal Data (as defined in this Policy) to us, you explicitly grant your consent for us to use your Personal Data as provided for within this Policy

1. Introduction

   This Privacy Policy provides guidance on how we collect and use any personal information received by geoLOGIC in connection with your use of the Websites operated by us, and our social media pages that link to this Privacy Policy. In addition, this Privacy Policy also covers personal information collected by geoLOGIC from sources other than the Website such as by phone, e-mail, SMS or made publicly available through social media (Facebook, LinkedIn, Twitter, Instagram, and other similar channels) or from third parties, your interactions with us during in-person meetings at our facilities or at our events, and in the context of other online or offline sales and marketing activities. This Privacy Policy provides information about how we will use and otherwise process information capable of identifying individuals (“Personal Data”) including current, past, and prospective clients, customers and suppliers. Where we refer in this Privacy Policy to “processing” Personal Data, we mean any operation we perform on it, such as collecting, organising, storing, updating, using, disclosing and erasing it. This Privacy Policy also explains the privacy rights you have in relation to these processing activities.

   Our use of your personal information is founded on:

   • The principles of lawfulness, fairness, and transparency.
   • Obtaining only minimal Personal Information needed for specified, explicit and legitimate purposes.
   • Retaining the Personal Information only for the period time required for those purposes.
   • Ensuring appropriate security and protection to the best of our abilities against unlawful processing or disclosure.

   This Privacy Policy, together with our Website Terms of Use and any other documents that we may provide about a particular use of Personal Data, sets out the basis on which we will process any Personal Data which geoLOGIC collects or receives about you. If there is any conflict between our Website Terms of Use and this Privacy Policy with respect to the use and handling of Personal Data, the provisions of this Privacy Policy will prevail.

2. What is Personal Data?

   geoLOGIC offers a range of products and services (the “Products”) to the energy industry and operates through a number of offices and websites.

   Personal Data means information about an identifiable individual. For example, this could include, among other things, that individual’s name, personal address, email address, business contact details, or information gathered through their interactions with us via our websites or at events.

   Personal Data that we collect about you is also referred to as “your data”.

   In general, geoLOGIC collects the Personal Data of people in the following categories in the course of and for the purposes of offering and delivering Products:

   • Individuals who are or are employed or engaged by active and prospective clients.
   • Supplier contacts to support our business including the delivery of Products.
   • Prospective candidates for permanent or temporary roles within geoLOGIC.
   • Individuals who are accessing our public websites (to the extent identified in Section 5 as detailed in “From our Websites”).

   For more detail about the types of Personal Data that we may process, please refer to Section 4 below.

3. Why do we collect Personal Data?

   We may need to collect and process Personal Data in order to provide the Products or other information to you. By providing your data to us you are granting us consent to use your data for the purpose of enabling us to provide services or information to you or because we are legally required to do so or for any of the following purposes:

   • Deliver requested products and services.
   • Provide product support including provisioning of product training.
   • To contact you:
     • To respond to your inquiries and fulfil your requests. For example, to confirm your attendance at an event we organize.
     • To send administrative information to you, for example, information regarding the Products and changes to our terms, conditions and policies.
     • To interact with you via social media.
     • To process an application for employment including checking references and verifying your qualifications and experience and your right to work in a particular jurisdiction, curriculum vitae (or career profile), photograph, and other data that may be available in the public domain e.g., LinkedIn, Twitter, business Facebook, or on a corporate website.
     • To inform you about our products and services, including by direct marketing.
   • For assessment and acceptance of a customer.
   • To execute any agreement(s) we may enter into with you.
   • To tailor our Website in a way that is most relevant to you based on your preferences (e.g. information you have voluntarily provided to us, or your previous visits to our Website).
   • For our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products, enhancing, improving or modifying our Products, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.
   • To operate, evaluate and improve our business and Products.
   • For maintaining network security, protect against, identify, investigate, and respond to fraud, illegal activity, claims and other liabilities.
   • For our internal administration.
   • For our proposed corporate activities, such as a sale or merger.
   • To operate a database of client data containing historical information as well as current resourcing requirements.
   • To operate a database of prospective client contacts.

4. What Personal Data do we collect?

   geoLOGIC may ask for, and collect from you, personally identifiable and other information at certain intervals throughout your access to and use of one or more of our Websites. Depending on the information and/or services you request, you may be asked to provide Personal Data and other information that is relevant to the Products and/or information you have requested. geoLOGIC may combine this personally identifiable and additional data with other information it collects. geoLOGIC may also collect any information you choose to provide in your communications with us. Please do not send us personally identifiable information or complete any web forms containing personally identifiable information that you do not wish us to receive and process.

   Basic Information:

   We collect and process your Personal Data when you or a third party knowingly provides it to us, such as your:

   • Name
   • Company name and type of business
   • Job Title
   • Postal address (including billing and shipping addresses)
   • Telephone number
   • Email address

   Applicant Information:

   We work with ADP, Inc. to recruit new employees. If you are applying for work as an employee, a consultant or contractor, in addition to the Personal Data above, we may also collect and process the Personal Data that you knowingly provide to us through ADP, such as:

   • Your prior employment history and CV.
   • Information required to satisfy regulatory requirements.
   • Background information as part of a pre-hire background check.

   You will find the ADP privacy notice here.

   Payment Data:

   We work with Stripe, Inc. to process your payment if you make purchases through any payment card. Your payment data, such as your payment card number, and the security code associated with your payment card, is stored by Stripe, Inc. and is not viewed, collected or retained by us. You will find their privacy notice link(s) here.

5. How do we collect your data?

   From you:

   You directly provide us with most of the data we collect. We collect data and process data when you:

   • Contact us for information about our products and services.
   • Register online or place an order for any of our products or services.
   • Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.
   • Use or view our website in which case limited data will be provided via your browser’s cookies.

   From your employer:

   We may also receive your data on your behalf from your employer if required for the provision of any of our services to you.

   From our Websites:

   When you visit our Websites, geoLOGIC and its service providers (such as Google Inc., Salesforce and Pardot), may also automatically collect the following information:

   • Technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, browser type and version, operating system and platform.
   • Information about your visit, including the full Uniform Resource Locators (URL) of each page visited, clickstream to and through our Website including date and time, subjects visited and searched for, download errors, length of visits to pages, and any information submitted through forms.
   • Cookies: our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a beneficial experience when you browse our Website and also allows us to improve our Website. By using our Website, you are agreeing to the use of cookies as described as more fully described in Section 11.

   geoLOGIC does not undertake automated decision making or profiling. We do use our computer systems to search and identify personal data in accordance with parameters set by a person. A person will always be involved in the decision-making process.

   From other sources:

   We work closely with third parties, including business partners, sub-contractors in technical, professional, payment and other services, advertising networks, analytics providers, search information providers, credit reference agencies, and professional advisors. We may receive information about you from them for the purposes of providing services and ancillary support services.

6. Marketing

   As outlined above, geoLOGIC would like to send you information about products and services of ours that we think you might like. geoLOGIC is compliant with the Canadian Anti-Spam Legislation (CASL) and you have the right at any time to stop us from contacting you for marketing purposes. If you prefer not to receive any further communications from us, you may selectively opt-out of marketing communications by choosing the appropriate option at the bottom of any marketing communication we send to you. Alternatively, you may email [email protected] to request that you no longer be sent marketing communications.

7. Where and how do we store your data?

   Once geoLOGIC has received your information, geoLOGIC will follow strict procedures and deploy security features to try to prevent unauthorised access. Because our servers are located in Canada and the USA, the data that geoLOGIC collects from you may be transferred to, and stored at, a destination outside the European Union and Great Britain (“EU/GB”). It may be transferred to third parties outside of the EU/GB for the purpose of our business services. It may also be processed by staff operating outside the EU/GB who work for us or for one of our suppliers. This may include staff engaged in, among other things, recruitment and the provision of support services. geoLOGIC will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. Many countries outside the EU/GB do not have the same data protection laws as the EU/GB. On occasion, such transfer is necessary to perform a contract. In other cases, we will ensure at least one of the following safeguards is implemented:

   • we will only transfer the Personal Data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission; or
   • where we transfer the data to third parties, we will use specific contracts between us and the recipient in a form approved by the European Commission; or
   • where the transfer is to the USA, the recipient is within the EU-US Privacy Shield; or
   • where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.
   • When we interact with you in a business context, we may store some of your data in our Salesforce cloud instance which is governed by their Privacy and Data Protection Policy.

   NOTE that if you do not wish any of your personal data or information to be stored or transferred outside the EU/GB, you may withdraw your consent to this at any time by notifying us at the e-mail address specified in Section 14 of this Policy. However, because our servers are located outside the EU/GB, if you withdraw your consent, we will no longer be able to keep your data, keep you informed of our services, or otherwise provide you with our Product. We understand the importance of using security safeguards to protect Personal Data against loss, theft or unauthorized access or disclosure. We make all reasonable efforts to ensure that all Personal Data is protected against such risks. All information you provide to us is stored on a secure server. We employ physical, administrative and technological measures to protect Personal Information regardless of the format in which it is held and in accordance with the sensitivity of the information. We also limit access to Personal Information only to those individuals that are required to have it for the purposes described in this Policy.

   Your Responsibilities:

   Where geoLOGIC has given you (or where you have chosen) a password which enables you to access certain parts of our Website, you are responsible for keeping this password confidential. You must not to share a password with anyone. Unfortunately, the transmission of information via the internet is not completely secure. Although geoLOGIC will do its best to protect your Personal Data, geoLOGIC cannot guarantee the security of your data transmitted to our Website. Any such transmission is at your own risk.

8. Retention of your data

   Personal Information is retained for only as long as needed to reasonably fulfil the purposes for which it was intended and for legal or business purposes. geoLOGIC segregates data so that we retain different types of data for different time periods. The criteria used to determine our retention periods include: (i) the nature of the Personal Data and its perceived accuracy; (ii) the length of time we have an ongoing relationship with you; (iii) whether there is a legal obligation to which we are subject; or (iv) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations). Based on the above, our policy is to retain Personal Data about you if we have had no contact with you for no more than two (2) years save where it relates to transactions or financial data in which case we retain it for seven (7) years after the last contact with you. Personal Information that is no longer required is destroyed using secure means, including shredding paper records and permanently deleting electronic records.

9. Sharing your data with third parties

   Our general policy is that geoLOGIC will not share or sell your Personal Data to any other companies. We may share elements of Personal Data with selected third parties who perform services for us (“Third Party Vendors”) and who require access to such information to do that work. We have contracts in place with our Third Party Vendors, which require that they treat your Personal Data as confidential and only use it for the specific purpose of providing the services to us. The Third Party Vendors will securely retain the Personal Data for as long as the information is required to perform the services, and will remove it upon our request. The Third Party Vendors fall under the following categories:

   • Cloud Computing and Data Storage Infrastructure Providers.
   • Data Analytics, Performance and Testing Services.
   • Payment Processors.
   • Website Hosting Service Providers.

   Other uses and disclosures:

   geoLOGIC may use or disclose Personal Data under the following conditions:

   • When we use Google Maps Platform APIs (e.g., Google Maps API, Places API), we may share your information. To find out more about Google’s Privacy Policy, please refer to this link.
   • Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice. Affiliates include our parent company and any subsidiaries, or other companies that we control or that are under common control with us.
   • When geoLOGIC sells any business or assets, in which case geoLOGIC may disclose your Personal Data to the prospective buyer of such business or assets in which case we will require the prospective buyer to honor this privacy notice.
   • If geoLOGIC is acquired, or substantially all of its assets are acquired, by a third party, in which case Personal Data held by it about its staff and customers will be one of the transferred assets.
   • If geoLOGIC is under a duty to disclose or share your Personal Data in order to comply with any legal obligation, including laws outside your country of residence.
   • If we believe it necessary or appropriate in order to enforce or apply our Website Terms of Use and other such agreements; or to protect the rights, property, or safety of geoLOGIC, its customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
   • If required in order to protect our operations or those of any of our affiliates; to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; or to allow us to pursue available remedies or limit the damages that we may sustain.

10. What are your data protection rights?

    While geoLOGIC and our affiliates websites are located in Canada, we are committed to providing data protection rights in line with accepted global standards including the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), the United Kingdom's Data Protection Act 2018 (UKDPA), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), and the Alberta Personal Information Protection Act (PIPA).

    UKDPA aligns with GDPR which aims to harmonise data protection legislation across EU member states, enhancing privacy rights for individuals and providing a strict framework within which commercial organisations can legally operate. PIPEDA, and by extension PIPA have been deemed to provide an adequate level of protection for personal data by the European Commission. Within this Policy every user is entitled to the following:

    • The right to access – You have the right to request that we provide copies of your Personal Data. We may charge you a fee for this service.
    • The right to correction – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
    • The right to erasure – You have the right to request that we erase your Personal Data, under certain conditions.

    We will endeavour to respond to any request for access or correction as soon as possible in accordance with applicable law. If access or correction is refused, we will provide reasons for the refusal, the name of the person who can answer questions about the request and advise of the right to have the decision reviewed by the applicable regulatory authority. If you would like to exercise any of these rights, please contact us using the information in the How to contact us section, below.

    In addition, should there be a data breach within geoLOGIC, we will notify the appropriate regulators within 72 hours. If your Personal Data has been exposed or affected then we will also notify you.

11. Cookies

    geoLOGIC and its service providers use “cookies”, pixel tags, and other digital markers on our websites. We also use pixel tags in our newsletters. A cookie is a very small piece of information in the form of a text file placed on your computer. A pixel tag is a small image file that allows us to know that you have visited one of our pages. These digital markers allow us and our service providers to recognize that you have previously visited one of our websites, as well as to recall any preferences you have set, assist your navigation between web pages on our sites, and generally improve your browsing experience. We use specific cookies to tell us whether you have clicked on a link in one of our newsletters. For further information, visit http://www.allaboutcookies.org .

    What types of cookies do we use?

    There are three general categories of cookies: “Necessary”, “Preference”, and “Performance”. geoLOGIC uses all three categories of cookies in connection with our Websites.

    • Necessary Cookies. These cookies are essential, as they enable you to navigate the Websites and use important features. All cookies used within our Web Apps are Necessary.
    • Preference Cookies. geoLOGIC and our third-party partners may use these types of cookies to deliver content that is relevant to your interests. These cookies can remember that your device has visited a site or service, and may also be able to track your device’s browsing activity on other sites or services other than on the geoLOGIC Websites. This information may be shared for the purpose of providing aggregate usage statistics and testing of the Website.
    • Performance Cookies. These cookies collect information about how you have used the Website, for example, these cookies be used to tell us to that you previously visited any of our Websites so we can make it easier to find content you viewed before. We also use cookies to track aggregate Website usage and experiment with new features and changes to a Website. The information collected is used to improve how the Websites work. These cookies allow us to remember how you are logged in, your preferences, and other information about your use of the Website. These cookies allow us to tailor the Website to provide you enhanced features and content. The information these cookies collect is not used to track your browsing activity on other sites or services.

    How do we use cookies?

    geoLOGIC uses cookies in a range of ways to improve your experience on our website. We use cookies to create aggregated statistics on visitors to our websites and their browsing behaviour. We use this information to understand what portions of our websites are relevant to you and to make improvements. Our websites use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help analyze how users use the websites. The information generated by the cookie about your use of the websites (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the websites, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. You can view Google’s privacy policy at: https://policies.google.com/privacy

    How do our service providers use cookies?

    Our service providers also use cookies and digital markers to assist us with our advertising programs. When you visit other websites you may see an advertisement for geoLOGIC or its products because you visited one of our websites. You may opt-out of network advertising programs that track your activities across multiple websites to deliver personalized advertising content to you. In the U.S., please visit the Digital Advertising Alliance Ad Choices Opt-Out page at https://optout.aboutads.info/ . In Canada, visit the Digital Advertising Alliance of Canada Opt-Out page at https://youradchoices.ca/en/learn . In the EU visit the Your Online Choices page at http://www.youronlinechoices.eu/ for guidance.

    How to manage cookies

    You can set your browser not to accept cookies. Cookie management is implemented differently in every browser, and you can acquaint yourself with this by visiting the appropriate “Help” information associated with your specific browser. Please note that by choosing to decline cookies, some of our website features may not be available, accessible, or may not function properly for you.

    Important Note. Our Web Apps will not function if your browser does not accept cookies. Disabling any cookies within our Web Apps will cause the Web App to not work for you.

12. Privacy policies of other websites

    Our website contains links to other websites. Our Privacy Policy applies only to our websites, so if you click on a link to another website, you should read their privacy policy.

13. Changes to our privacy policy

    geoLOGIC reviews this Privacy Policy on a regular basis. We reserve the right to amend this Policy at any time. Any changes to this Policy will be effective from the time that the revised version of the Policy is posted.

14. How to contact us

    If you have any questions about this Policy and compliance with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta Personal Information Protection Act (PIPA), the EU's General Data Protection Regulation (GDPR), or the United Kingdom's Data Protection Act 2018 (UKDPA) ; or about the data we hold on you; or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

    If you are not in UK or the EU:
    Email us at: [email protected]
    Call us:1 (403) 262-1992 (Canada)
    Or write to us at:
    geoLOGIC systems ltd
    1500, 401 – 9th Avenue SW
    Calgary, AB T2P 3C5 Canada
    Attn: Privacy Officer

    If you are in UK or the EU:
    Email us at: [email protected]
    Call us: +44 (0) 207 247 6120
    Or write to us at:
    Evaluate Energy
    1 Fore St Avenue, Moorgate
    London EC2Y 9DT, United Kingdom
    Attn: Data Protection Officer