The purpose of the Policy is to inform Customers how Metro collects, uses, discloses, retains and protects Personal Information provided by its Customers when they visit one of our Sites; register for one of our programs promotions, surveys or contests; register for a specific service, including any e-commerce service; and in the context of their interactions in Establishments.

The Policy applies to Metro's activities in Quebec, Ontario and New Brunswick, including activities on the Sites and any loyalty or reward program offered by Metro or one of its partners, where Metro, or its suppliers on Metro's behalf, collect, use or disclose Personal Information about its Customers.

The Policy applies, in particular, to the following companies:

• Metro Richelieu Inc.
• Metro Ontario Inc.
• Adonis Group Inc.
• Phoenicia Group Inc.
• Première Moisson Group Inc.
• Metro Ontario Pharmacies Limited
• The Jean Coutu Group (PJC) Inc.
• McMahon Distributeur pharmaceutique Inc.
• Pro Doc Ltée
• RX Information Centre Ltd.
• RX Centre Development Inc.

Metro collects Personal Information from a variety of sources, including directly from Customers, from its Sites, from other sources or through various technologies used in its Establishments.

Metro identifies the purposes for which Personal Information is collected prior to Collection and limits Collection to that which is necessary for the identified purposes.

Metro uses and discloses Personal Information for the purposes identified at the time of Collection or as permitted or required by applicable law. Metro does not use or disclose Personal Information for purposes other than those for which it was collected, except with the Customer's consent or as permitted by law.

Metro will obtain the Customer's Consent at the time of Collection of the Personal Information, subject to exceptions provided by law, that exempt Metro from notifying or obtaining the Consent of persons concerned by the Collection, Use or Disclosure.

Metro will make reasonable efforts to ensure that the Customer is duly advised, before consenting to the Collection of Personal Information, of the purposes for which the Personal Information will be used or disclosed.

For the purposes of the Policy, the purchase of products or the use of services, the Sites and the loyalty programs offered by Metro or its partners, constitutes implicit Consent to the Collection, Use and Disclosure of relevant Personal Information, for the purposes identified by Metro.

When the Customer submits Personal Information to Metro, through a Site, by telephone, e-mail, in person or by any other means, the Customer consents to the Collection, Disclosure and Use of Personal Information in accordance with the terms of the Policy.

Customers may withdraw their consent at any time, subject to the legal or contractual restrictions. A withdrawal of Consent may affect the optimization or availability of certain services and programs offered by Metro.

Metro does not sell the Personal Information from their Customers' personal information to any person or organisation.

In some cases, Metro may disclose and communicate Personal Information about a Customer to another Metro entity, to Third Parties, to service providers and partners, without the Customer's knowledge or consent, where permitted by law.

To the extent that Metro discloses Personal Information to third parties and service providers, such providers act as subcontractors of Metro and use such information only in the performance of their mandate or contract.

Metro uses contractual means and other measures to ensure that Personal Information about a Customer is used for specific purposes to render the required services and will not be retained after a reasonable period of time following the expiration of their mandate or contract.

Metro will take reasonable steps to protect Personal Information from loss or theft, unauthorized access, Disclosure, copying, Use, modification, destruction and other breaches of security.

Only persons authorized by Metro and whose duties so require for a specific purpose shall have access to Personal Information, and they must respect the confidentiality of said information.

Metro retains Personal Information only as long as necessary for fulfil the purposes for which it was collected or as required by law.

As permitted by law, Metro reserves the right to destroy or anonymize Personal Information to use it for serious and legitimate purposes. Personal Information shall be anonymized according to generally accepted practices and the criteria and terms determined by laws and regulations.

As a general rule, Personal Information is stored by Metro in Canada. If Personal Information must be communicated and processed outside Quebec and Canada for the purpose of providing services, Metro ensures that the necessary safeguards are in place to protect Customer Personal Information.

Metro has developed various directives and practices for the effective application of its Personal Information management program including the implementation of procedures to protect Personal Information and ensure compliance with the Policy regarding to the retention, destruction, information security and data governance; procedures for receiving and handling inquiries and complaints, conducting privacy impact assessments and the prevention of and potential response to privacy incidents.

Customers are responsible for updating their Personal Information by contacting Metro as soon as possible after any change.

The Customer shall be entitled to contest the accuracy and completeness of the information and request that any necessary corrections be made.

Customers have the right to access the Personal Information that Metro holds about them except where the law permits the refusal of access in whole or in part depending on the circumstances.

Metro is responsible for Personal Information in its possession or custody, including Personal Information entrusted to a Third Party for processing.

The Chief Privacy Officer is responsible for ensuring compliance with and application of the Policy and providing any Customer with the necessary support in the event of question, complaint or request relating to the protection of Personal Information.

All comments, questions, concerns or complaints regarding your Personal Information, the Policy or our privacy practices should be addressed to the Chief Privacy Officer at the following coordinates:

Activities in Quebec and New Brunswick:

by mail:

Metro Inc. and its affiliates

Attention: Chief Privacy Officer

1055, la Pinière Boulevard West

Terrebonne, Quebec

J6Y 0J5

-or-

by e-mail:

rprp@metro.ca

Activities in Ontario:

by mail:

Metro Inc. and its affiliates

Attention: Chief Privacy Officer

5559 Dundas Street West

Etobicoke, Ontario

M9B 1B9

-or-

by e-mail:

privacy@metro.ca

Metro is not responsible for the content, access and privacy practices of other Internet sites not owned or controlled by Metro but that are accessible through links or hyperlinks from Metro Sites.

The Policy may be modified at any time at Metro's sole discretion without prior notice.

Effective date of the Policy: September 22, 2023.