Privacy Policy

Effective Date: July 28, 2026
Last Updated: August 28, 2026

CPP Distribution (“CPP Distribution,” “Company,” “we,” “our,” or “us”) is committed to protecting the privacy, confidentiality, integrity, and security of personal information entrusted to us. This Privacy Policy describes the manner in which CPP Distribution collects, receives, uses, stores, processes, transfers, discloses, retains, and safeguards personal information obtained through our websites, customer portals, electronic communications, products, services, applications, social media channels, marketing activities, business relationships, and other interactions conducted in Canada, the United States, and internationally.

This Privacy Policy applies to all individuals who interact with CPP Distribution, including customers, prospective customers, purchasers, suppliers, contractors, business partners, representatives, website visitors, and other individuals whose personal information may be collected by the Company. By accessing or using our websites, products, or services, communicating with us, submitting information to us, or otherwise engaging with CPP Distribution, you acknowledge and agree that your personal information may be collected, used, disclosed, processed, transferred, and retained in accordance with this Privacy Policy and all applicable laws.

CPP Distribution conducts business in multiple jurisdictions and endeavors to comply with applicable privacy and data protection requirements, including, where applicable, Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), Alberta’s Personal Information Protection Act (“PIPA”), the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the United Kingdom General Data Protection Regulation, applicable United States federal and state privacy laws, Australia’s Privacy Act, and other applicable privacy legislation in jurisdictions where we operate. Where local laws provide individuals with additional rights or protections, those rights shall apply to the extent required by such laws.

The personal information collected by CPP Distribution may include identifying information such as names, business affiliations, job titles, mailing addresses, billing addresses, shipping addresses, email addresses, telephone numbers, account credentials, customer records, transaction histories, payment-related information, communication preferences, and other information voluntarily provided by individuals in connection with business dealings or website use. We may also collect technical information relating to devices, browsers, operating systems, IP addresses, network information, website usage patterns, analytics data, cookies, session data, security logs, and other information generated through interactions with our digital properties. In certain circumstances, we may collect information from publicly available sources, business directories, referral sources, marketing partners, service providers, or other lawful third-party sources.

CPP Distribution collects and processes personal information for legitimate business purposes, including the provision of products and services, order processing, customer support, supplier management, account administration, technical assistance, product delivery, marketing communications, business development activities, website administration, fraud prevention, regulatory compliance, cybersecurity monitoring, contractual performance, risk management, dispute resolution, quality assurance, and other operational purposes reasonably related to our business activities. Personal information may also be used to improve our products, services, websites, technology systems, customer experience, and business operations.

Where permitted by applicable law, CPP Distribution may rely upon consent, contractual necessity, legitimate business interests, legal obligations, public interest considerations, or other lawful bases for the collection and processing of personal information. Individuals may withdraw consent in circumstances where consent forms the legal basis of processing, subject to legal, contractual, operational, or regulatory limitations.

CPP Distribution may disclose personal information to affiliates, subsidiaries, vendors, contractors, consultants, professional advisors, payment processors, technology providers, cloud hosting providers, logistics companies, marketing service providers, analytics providers, governmental authorities, regulators, law enforcement agencies, courts, insurers, auditors, and other third parties where such disclosure is necessary for business operations, legal compliance, contractual performance, protection of rights, or other lawful purposes. Personal information may also be disclosed in connection with a corporate transaction, merger, acquisition, financing, asset sale, reorganization, insolvency proceeding, or similar business event.

As part of our international operations, personal information may be transferred, stored, processed, or accessed in jurisdictions outside the country in which it was originally collected. Such jurisdictions may have privacy and data protection laws that differ from those applicable in an individual’s place of residence. By interacting with CPP Distribution, individuals acknowledge that their personal information may be transferred across provincial, national, or international borders where reasonably necessary for business operations. Where required by law, CPP Distribution will implement reasonable contractual, technical, organizational, and administrative safeguards designed to protect personal information during such transfers.

CPP Distribution utilizes a variety of technical, administrative, organizational, and physical safeguards intended to protect personal information against unauthorized access, acquisition, disclosure, misuse, alteration, loss, destruction, theft, or other unlawful processing activities. While we strive to maintain commercially reasonable security measures consistent with industry standards, no transmission of information over the internet, electronic storage system, or cybersecurity program can be guaranteed to be completely secure. Accordingly, CPP Distribution does not warrant or guarantee the absolute security of personal information and expressly disclaims liability arising from criminal acts, sophisticated cyberattacks, unauthorized third-party activities, government actions, force majeure events, or circumstances beyond our reasonable control, except where prohibited by applicable law.

CPP Distribution may employ artificial intelligence technologies, machine learning systems, automated decision-support tools, chat functions, analytics platforms, content-generation systems, and related technologies to enhance customer service, communications, operational efficiency, product information management, data analytics, marketing activities, and business processes. Information generated by artificial intelligence systems may contain errors, omissions, inaccuracies, or outdated information and should not be relied upon without independent verification. Users are solely responsible for validating information obtained through any automated system, and CPP Distribution assumes no responsibility for decisions made based upon AI-generated outputs, recommendations, summaries, analyses, or responses.

Personal information will be retained only for as long as reasonably necessary to fulfill the purposes for which such information was collected, to satisfy legal, regulatory, operational, accounting, contractual, insurance, taxation, dispute resolution, compliance, or legitimate business requirements, or as otherwise permitted or required by law. Upon expiration of applicable retention periods, information may be permanently deleted, anonymized, aggregated, archived, or otherwise disposed of in accordance with established records management practices and applicable legal requirements.

Subject to applicable law, individuals may have the right to request access to personal information, request correction of inaccurate information, request deletion of personal information, object to certain processing activities, request restrictions on processing, withdraw consent, obtain information regarding data portability, or exercise other rights granted by applicable privacy legislation. CPP Distribution reserves the right to verify the identity of any individual submitting a request and may deny or limit requests where permitted by law, including where disclosure would compromise the privacy rights of other individuals, reveal confidential business information, interfere with legal proceedings, or otherwise conflict with legal obligations.

Nothing contained within this Privacy Policy shall be interpreted as creating contractual rights beyond those required by applicable law. To the fullest extent permitted by law, CPP Distribution disclaims all representations, warranties, and guarantees relating to privacy, data processing, security, and website operation except as expressly required under applicable legislation. Any limitation of liability contained in this Policy shall be construed broadly and shall survive termination of any relationship between the individual and CPP Distribution. Where any provision of this Privacy Policy is deemed invalid, illegal, or unenforceable by a court or regulatory authority of competent jurisdiction, the remaining provisions shall remain in full force and effect.

CPP Distribution reserves the right to amend, modify, supplement, or update this Privacy Policy at any time. Any revisions will become effective upon publication unless otherwise required by applicable law. Continued use of our websites, products, services, or communications following publication of an updated Privacy Policy constitutes acknowledgment of the revised terms.

Where the processing of personal information is subject to the European Union General Data Protection Regulation (“GDPR”), individuals located within the European Economic Area (“EEA”) may possess certain rights regarding their personal information. Subject to applicable legal requirements and limitations, such individuals may have the right to request access to personal information maintained by CPP Distribution, request correction of inaccurate information, request deletion of personal information, restrict processing activities, object to processing performed on the basis of legitimate interests, request portability of information in a structured and commonly used electronic format, and withdraw consent where consent serves as the legal basis for processing.

CPP Distribution may refuse requests where doing so is permitted by law, including circumstances where compliance would adversely affect the rights of others, compromise confidential business information, interfere with legal obligations, or otherwise be prohibited under applicable regulations. Individuals may also have the right to lodge a complaint with a competent data protection authority within their jurisdiction.

United Kingdom Privacy Rights

Where personal information is processed under the United Kingdom General Data Protection Regulation and the Data Protection Act 2018, individuals located within the United Kingdom may exercise rights substantially similar to those available under the GDPR. CPP Distribution will process such requests in accordance with applicable legal requirements and may require verification of identity before responding to any request.

Where required by applicable law, CPP Distribution will implement appropriate safeguards designed to protect personal information transferred outside of the United Kingdom.

California Privacy Rights

Residents of California may possess rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and other applicable California privacy legislation.

Subject to applicable limitations and verification requirements, California residents may have the right to know the categories of personal information collected, the categories of sources from which information is collected, the business purposes for collection and disclosure, the categories of third parties receiving information, and the specific pieces of personal information maintained by CPP Distribution concerning the individual.

California residents may also have the right to request deletion of personal information, request correction of inaccurate personal information, limit certain uses of sensitive personal information where applicable, and exercise rights without discrimination or retaliation.

CPP Distribution does not sell personal information in exchange for monetary compensation. To the extent applicable law defines certain data-sharing activities as a “sale” or “sharing,” individuals may exercise available opt-out rights as required under applicable legislation.

Canadian Privacy Rights

For individuals located in Canada, CPP Distribution collects, uses, discloses, stores, and safeguards personal information in accordance with applicable privacy legislation, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”), Alberta’s Personal Information Protection Act (“PIPA”), and other applicable provincial privacy laws.

Individuals may request access to personal information in our custody or control and request correction of inaccuracies, subject to legal limitations. Requests shall be submitted in writing to CPP Distribution’s Privacy Officer. CPP Distribution reserves the right to verify identity before responding to any request.

Where required by law, informed consent will be obtained before collecting, using, or disclosing personal information, except where exempted by applicable legislation.

International Transfers of Personal Information

Given the global nature of our operations, personal information may be transferred between countries in which CPP Distribution, its affiliates, contractors, service providers, technology vendors, or business partners operate.

By interacting with CPP Distribution, individuals acknowledge that their personal information may be transferred to, stored in, processed within, or accessed from countries outside their province, state, territory, or country of residence.

Such jurisdictions may have privacy laws that differ from those of the originating jurisdiction and may permit governmental, regulatory, or judicial authorities to access personal information in certain circumstances.

Where required by law, CPP Distribution shall implement commercially reasonable contractual, organizational, administrative, and technical safeguards designed to facilitate lawful cross-border transfers of personal information.

Cookies and Tracking Technologies

CPP Distribution and its service providers may utilize cookies, pixels, web beacons, local storage technologies, session tracking tools, analytics technologies, advertising technologies, and similar mechanisms to enhance website functionality, improve user experience, analyze website performance, maintain security, conduct business analytics, personalize content, and support marketing efforts.

Information collected through these technologies may include IP addresses, browser identifiers, device information, geolocation data, referral information, session activity, pages visited, interactions with website content, and related technical information.

Individuals may configure browser settings to reject or delete certain cookies. However, doing so may affect website functionality and user experience. Continued use of our websites may constitute consent to the use of cookies and similar technologies to the extent permitted by applicable law.

Electronic Communications and CASL Compliance

CPP Distribution may send commercial electronic messages, newsletters, product updates, technical bulletins, promotional materials, event invitations, transactional communications, and customer service communications where permitted by law.

Recipients may withdraw consent and unsubscribe from marketing communications at any time by following applicable unsubscribe instructions or by contacting CPP Distribution directly.

Nothing within this Privacy Policy shall limit CPP Distribution’s ability to send communications necessary to complete transactions, administer accounts, fulfill contractual obligations, respond to inquiries, maintain security, provide service notifications, or comply with legal requirements.

For individuals located in Canada, commercial electronic messages shall be sent in accordance with applicable provisions of Canada’s Anti-Spam Legislation (“CASL”).

SMS and Mobile Messaging Communications

By voluntarily providing a mobile telephone number and opting into SMS communications, individuals consent to receive text messages from CPP Distribution concerning accounts, orders, deliveries, service updates, appointment reminders, support matters, promotions, marketing programs, and business communications.

Message frequency may vary. Standard message and data rates may apply. Consent to receive marketing-related SMS messages is not a condition of purchase.

Individuals may withdraw consent at any time by following the opt-out instructions provided within the message or by contacting CPP Distribution directly.

CPP Distribution is not responsible for delays in message delivery caused by telecommunications providers, mobile carriers, technical malfunctions, network failures, or circumstances beyond its reasonable control.

AI, Automated Processing, and Emerging Technologies

CPP Distribution may utilize artificial intelligence systems, machine learning technologies, generative AI platforms, analytics solutions, automated decision-support tools, conversational agents, recommendation engines, and other emerging technologies to support business operations and customer engagement.

Information generated or analyzed by such systems may be inaccurate, incomplete, outdated, biased, or otherwise unsuitable for reliance without independent verification.

Users acknowledge that AI-generated content, recommendations, specifications, interpretations, technical analysis, summaries, and guidance are provided for informational purposes only and do not constitute professional, engineering, legal, financial, compliance, safety, regulatory, operational, or technical advice.

Individuals should refrain from submitting confidential, sensitive, regulated, export-controlled, proprietary, trade secret, health-related, or otherwise protected information through AI-enabled systems unless expressly authorized by CPP Distribution.

Information Security and Incident Response

CPP Distribution maintains commercially reasonable administrative, technical, physical, and organizational safeguards designed to protect personal information from unauthorized access, acquisition, disclosure, alteration, destruction, misuse, or loss.

Such safeguards may include access controls, encryption technologies, network monitoring, cybersecurity testing, staff training, vendor oversight, authentication procedures, business continuity measures, and incident response programs.

Notwithstanding the foregoing, no information security program, hardware environment, software platform, internet transmission, cloud service, or telecommunications network can be guaranteed to be completely secure.

To the fullest extent permitted by law, CPP Distribution disclaims liability arising from cyberattacks, ransomware incidents, phishing attacks, unauthorized third-party access, data breaches, telecommunications failures, force majeure events, nation-state attacks, criminal conduct, or other circumstances beyond its reasonable control.

Automated Decision-Making

Except where expressly disclosed, CPP Distribution does not make decisions that produce legal or similarly significant effects solely through automated processing.

Where applicable laws provide rights relating to automated decision-making, profiling, or algorithmic processing, individuals may contact CPP Distribution to request additional information regarding such activities.

Data Retention and Destruction

CPP Distribution retains personal information only for so long as necessary to fulfill the purposes for which the information was collected, to meet regulatory requirements, to satisfy contractual obligations, to resolve disputes, to enforce agreements, to defend legal claims, and to meet legitimate business objectives.

Upon expiration of applicable retention periods, information may be deleted, anonymized, aggregated, archived, destroyed, or otherwise disposed of in accordance with established records-management practices and applicable legal requirements.

Questions regarding this Privacy Policy or privacy-related matters may be directed to CPP Distribution’s administration team at admin@cppdist.com.