Privacy Policy

CANADA PRIVACY POLICY ANNEX

This Annex was last updated on September 8, 2026. (updated every 12 months)

This Annex applies to individuals located in Canada who use or interact with Burns & Wilcox Canada ULC (“Company”) websites, applications, products, and services. This Annex provides you with details about the personal data we collect from you, how we use it, and the rights you have to control the personal data we maintain about you.

“We,” “our,” “us” means Company; “you” means an individual in Canada who uses or interacts with our websites, applications, products, or services. This Annex supplements the U.S. Privacy Policy. If there is any conflict between the U.S. Policy and this Annex for individuals located in Canada, this Annex shall control only to the extent necessary to comply with Canadian law.

This Canada Privacy Annex (the “Annex”) supplements Company’s U.S. Privacy Policy to address requirements under Canada’s federal private sector privacy law (PIPEDA) and substantially similar provincial laws (Québec’s Act respecting the protection of personal information in the private sector (as modernized by Law 25), British Columbia PIPA, and Alberta PIPA), and Canada’s Anti Spam Legislation (CASL). Where an activity falls within the scope of a substantially similar provincial law, that law governs; otherwise, PIPEDA applies.

We collect only the personal information necessary for the identified purposes below, and we inform you at or before the time of collection in accordance with Canadian law. Through your use of our website, we may request the following personal information:

Identifiers and Contact Details

• First name, last name, postal address, email address, phone number and any other contact or other information that you choose to provide by using the “contact us” portion of the website.
• Internet Protocol (“IP”) address, date and time of connection, pages visited, actions taken on a website.
• Demographic information including product preferences and interests.
• Usage information, through the use of cookies, such as the name of the web page from which you entered our website, time spent on each of our pages, number of clicks on each web page, and the methods by which you found our website (for more information about our use of cookies, please read our Cookie Policy).
• Records of inquiries and support requests (email, phone, web forms, chat box).
• Language and region preference (including French for Québec users).
• Marketing preferences (opt‑in/opt‑out status; unsubscribe history)
• Any information you provide to us directly.

When you create an account or complete a transaction through our website, we will collect the following information:

Login and Account Information:

• First name, last name, postal address, email address, phone number.
• Login credentials, including username and password.
• Transaction type
• Transaction amount, payment, and billing information as well as the nature, quantity and price of the goods or services you exchange and the individuals or entities with whom you communicate or transact business.

When you attend an Event or request Marketing information, we collect the following:

Marketing & Event Interaction

• Newsletter sign‑ups (name, email, region).
• Event/webinar registrations (name, email, company, role).
• Campaign engagement (opens, clicks) and unsubscribe requests.

We may ask you to provide personal information to allow you to use our website, applications, services, and products. We only use the personal information we collect for the purpose identified below and, where applicable, for the purposes stated at the time of collection.

• To process transactions. We use contact information to engage in interactions with you, including contacting you about your transactions on the website.
• To process payments. We use financial/credit card and payment information to process your order. We may need to share some of this information with delivery services, credit card clearing houses, and other third parties to complete the transaction
• To provide support or other services. We may also use personal information to respond directly to your requests for information, including registrations for newsletters, promotional materials, webinars, events, customer support-related issues, or other specific requests.
• To provide information based on your needs and respond to your requests. We use your personal information to provide you with notices of service developments.
• To select content, improve quality, and facilitate use of our Services. With your permission, we may use your personal data, including the information gathered through website cookies as a result of your navigation across our website (that may include third-party cookies), to help create and personalize the services that may interest you, track marketing campaign responsiveness, evaluate page response rates, conduct usability testing, and facilitate your use of our website or services (for example, to facilitate navigation and enhance security).
• To engage with third parties. We share personal information with service providers who perform services on our behalf (for example, hosting databases, processing data, or mailing requested information). These service providers are contractually restricted from using personal information for any purpose other than providing services to us and are required to maintain appropriate security measures. From time to time, and only with your prior consent, we may share your personal information with third parties that offer content, products, or services that may interest you. In Québec, this consent will be requested separately and expressly. If any such third party is located outside Canada (or outside Québec for Québec residents), we will disclose this fact at or before collection and implement required safeguards, including transfer impact assessments and written agreements where applicable.
• To serve personalized advertising to you. We do not share your personal information with advertisers. With your consent, we may provide special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.
• To assess usage of our products and services. We track usage to understand engagement and improve functionality. Where tracking involves cookies or similar technologies, we obtain consent as required by law. In Québec, non-essential cookies and profiling technologies are off by default and require express opt-in. Usage statistics may be shared in aggregated form with licensors and, where applicable, your organization.
• To communicate with you about events. We use your information to provide details about events we host or sponsor, including logistics, tickets, and updates. With your consent, we may also send follow-up communications about related events. Event organizers and co-sponsors may request your information directly, provided it is optional and subject to their privacy policies
• To update you on relevant benefits, programs, and opportunities. We may send you information about benefits, programs, and opportunities available to you, subject to your consent and applicable anti-spam laws. In Québec, this purpose requires separate express consent.
• To protect our content and services. We use personal information to prevent fraud, spam, and other potentially illegal activities, and to maintain the security and integrity of our services. We employ technological measures to detect and address anomalous activity and to screen content to prevent abuse. These measures may, in rare cases, result in temporary or permanent suspension of certain functions. We may access, retain, and disclose personal information where required by applicable law or legal process, or where reasonably necessary to: (a) comply with legal obligations; (b) enforce this Privacy Policy or other agreements with you; (c) investigate potential violations; (d) respond to claims of rights infringement; (e) provide customer service; or (f) protect the rights, property, or safety of Company, its affiliates, users, or the public. Where we share information with other organizations for fraud protection or security purposes, we do so under contractual safeguards and, if such organizations are located outside Canada (or outside Québec for Québec residents), we comply with applicable cross-border transfer requirements, including Québec’s transfer impact assessments and Alberta’s notice obligations.
• To get feedback or input from you. We may invite you to participate in surveys, usability studies, or focus groups to help us improve our products and services. Participation is voluntary, and we will explain what information we collect and how it will be used at the time of collection. If feedback involves sensitive information or profiling, we will request separate express consent. Where third-party platforms are used, we ensure contractual safeguards and, if data is processed outside Canada (or outside Québec for Québec residents), we comply with applicable cross-border transfer requirements.
• To protect our assets as well as your own personal information. Our Information Security Program protects the confidentiality, integrity, and availability of our information assets by following a risk management approach based on policies, standards, guidelines, and procedures to meet security objectives while supporting business and operational goals.
• Cross Border Processing. To enable secure processing by service providers outside Canada (and outside Québec, subject to transfer impact assessments and written agreements).

We may collect certain demographic information (such as age range, region, or industry) to analyze trends and improve our products and services. If demographic information includes sensitive data, we will request separate express consent. We do not use demographic information for marketing unless we have a legal basis, such as your consent or a contract. You may withdraw consent at any time by emailing [email protected].

To operate and secure our website. When you browse our website, we collect technical information such as your IP address, time of request, requested URL, and other HTTP header details. We use this information to ensure the website functions correctly, maintains security, and improves performance.

Service providers acting on our behalf

We share personal information with service providers and affiliated entities that perform services on our behalf (e.g., hosting, data processing, customer support, payment processing, mailing requested information, conference/event operations). We require these recipients to: (i) use personal information only to provide the contracted services to us; (ii) implement appropriate security measures, and (iii) delete or return the information at the end of the engagement.

Transfers outside your province, Canada, or (for Québec residents) outside Québec

Some service providers may be located outside your province or outside Canada (and, for Québec residents, outside Québec).

Alberta residents: In accordance with Alberta PIPA, you may obtain written information about our policies and practices with respect to service providers outside Canada and contact our Privacy Officer with any questions using the details below.

Québec residents: Before communicating personal information outside Québec, we conduct a transfer impact assessment and enter into a written agreement with the recipient containing appropriate safeguards. We also notify you at the point of collection of the possibility that your information may be communicated outside Québec.

We share your personal information with the following categories of third parties:

Except for the recipients acting on our behalf and as otherwise explained in this Policy, we do not disclose personal information to unrelated third parties without your consent unless permitted or required by law. We may disclose personal information where necessary to comply with lawful process or legal obligations, to enforce our agreements, to address fraud or security threats, or to protect the rights, property or safety of Company, our users, or the public. We limit such disclosures to what is reasonably necessary in the circumstances.

Security of Personal Information

We are committed to protecting the security of your personal information. Depending on the circumstances, we may hold your information in hard copy and/or electronic form. Within our Company, we limit access to personal information on a need-to-know basis. We implement physical, organizational, and technical safeguards appropriate to the sensitivity of personal information to protect against loss, theft, and unauthorized access, disclosure, or use. We limit access to personal information on a need to know basis, encrypt data in transit (HTTPS/TLS) and at rest where appropriate, apply role based access controls and least privilege principles, and conduct regular security testing (audits, vulnerability scans, penetration tests). We maintain policies, procedures, and training on data protection and confidentiality, and we review and update our security program to reflect legal requirements, technological changes, and business needs.

Where applicable to card payments, we align with PCI DSS v4.0 for cardholder data; for all other personal information we apply safeguards consistent with Canadian privacy laws and guidance

Retention of Personal Information

We retain personal information only for as long as necessary to provide the services you request and to meet legal or business requirements (e.g., tax, dispute resolution, enforcement of agreements). Once the purposes for collection have been achieved, we destroy the personal information or anonymize it for serious and legitimate purposes, in accordance with applicable law. We apply safeguards to anonymized data to reduce the risk of re identification. If you would like to know more about our data transfer practices, please contact [email protected].

We respect your right to access and control your personal information. You have choices about the information we collect. When you are asked to provide personal information that is not necessary for the purposes of providing you with our Sites, products or services, you may decline. However, if you choose not to provide data that is necessary to provide a service, you may not have access to certain features, Sites, products, or services.

We aim to keep all personal information that we hold accurate, complete and up-to-date. While we will use our best efforts to do so, we encourage you to tell us if you change your contact details.

Access to personal information:In some jurisdictions, you have the right to request access to your personal information. In these cases, we will comply, subject to any relevant legal requirements and exemptions, including identity verification procedures. Before providing data to you, we will ask for proof of identity and sufficient information about your interaction with us so that we can locate any relevant data.

Right to Rectification: You have the right to correct or amend your personal information if it is inaccurate or requires updating. You may also have the right to request deletion of your personal information in some circumstances. Please note that such a request could be refused because your personal information is required to provide you with the products or services you requested, e.g. to deliver a product or send an invoice to your email address, or that it is required by the applicable law.

Withdrawing Consent: In some jurisdictions, you may request to withdraw your consent to the use, disclosure and retention of your personal information. How this request is handled depends on the situation and the purpose for which it is made. Depending on the case:

• you will be able to withdraw your consent, but we will no longer be able to offer you a service that depends on it;
• you will not be able to withdraw your consent because the processing of your personal information is necessary or compulsory.

In all cases, we may be required to retain certain personal information to comply with our legal obligations.

Marketing preferences: If you have provided us with your contact information, we may, subject to any applicable Spam Act or similar regulation, contact you via email, postal mail or telephone about our products, services and events that may be of interest to you, including newsletters.

To exercise your privacy rights or if you believe that the information we hold about you is incorrect, incomplete or out-of-date, please contact our privacy officer at [email protected].

You can also opt out of our marketing emails at any time by contacting us at [email protected] or by sending us a post card to “OPT OUT”, 30833 Northwestern Highway, Farmington Hills, MI 48390, Attn: Marketing.

Under Quebec Private Sector Act, an individual has the following additional rights:

Right to Erasure: You have the right to require an organization to:

• cease disseminating personal information about you;
• de-index any hyperlink that provides access to that information, if the dissemination violates the law or a court order; and
• re-index any hyperlink that provides access to that information.

Such a request may be made when the following conditions are met:

• the dissemination of such information would cause you serious harm in relation to your right to respect regarding your reputation or privacy;
• the harm is clearly greater than the public’s interest in knowing the information or the right to freedom of expression (the balance of convenience criterion); and
• the relief sought does not exceed what is necessary to prevent the continuation of the injury.

Right to data portability: Effective September 22, 2024, you have the right to request a copy of computerized personal information in the form of a written and intelligible transcript.

Since Company sends marketing emails/SMS in Canada, we comply with Canada’s Anti‑Spam Legislation (CASL).

Commercial Electronic Messages (CEMs)

We will not send Commercial Electronic Messages (CEMs) unless we have a lawful basis under CASL—either express consent or valid implied consent, and we provide required transparency in every CEM.

Express consent

Obtained by a clear, affirmative action (no pre‑checked boxes). Our request for consent identifies \ Burns & Wilcox Canada ULC, the purpose(s), and provides our mailing address plus at least one of: telephone number, email address, or web address; it also includes a free, easy unsubscribe method.

Valid implied consent (time‑limited)

May arise from an existing business relationship (e.g., a purchase) or an inquiry/application; it is time‑limited under CASL (e.g., up to 24 months after a purchase; 6 months after an inquiry), unless the recipient gives express consent sooner.

We will not rely on implied consent where the context involves sensitive personal information or where reasonable expectations are not met; instead, we will obtain express consent.

Each CEM we send will:

• Identify the sender (and, if different, the entity on whose behalf it is sent) and include our mailing address plus at least one of: phone, email, or web address;
• Include a functional unsubscribe mechanism that is readily performed, no‑cost, and always available; and
• Ensure unsubscribe requests are processed without delay and no later than 10 business days.

Transactional/service messages

CASL allows certain non‑marketing messages (e.g., warranty, safety/security notices, service updates) without consent; however, such messages must still include the required sender identification and, where feasible, an unsubscribe mechanism.

Record‑keeping

We maintain records of the consent we rely upon (who, when, how, and scope), identification details we include in CEMs, and the timely processing of unsubscribes.

Installation of Computer Programs

If we install a computer program on your device in the course of commercial activity, we will obtain express consent and clearly disclose the program’s function/purpose, including any additional disclosures if the program performs invasive functions (e.g., collecting personal information without your knowledge, interfering with control of the device, or changing settings).

Consent requests will identify \ Burns & Wilcox Canada ULC, provide contact information, describe what the program does, and explain how to withdraw consent/uninstall.

How to withdraw consent / contact us

You can withdraw consent at any time by using the unsubscribe in our messages or contacting [email protected]. We will process your request no later than 10 business days.

We will promptly assess, contain, and mitigate any privacy incident and will follow all applicable reporting, notification, and record keeping requirements in Canada.

PIPEDA (federal)

If a breach of security safeguards creates a real risk of significant harm to an individual, we will report the breach to the Office of the Privacy Commissioner of Canada (OPC), notify affected individuals, and maintain records of all breaches, including those that do not meet the reporting threshold. The OPC provides an online breach reporting form and guidance on assessing real risk of significant harm.

Québec (Law 25)

If a confidentiality incident presents a risk of serious injury, we will promptly notify the Commission d’accès à l’information (CAI) and the affected individuals, and we will maintain a register of confidentiality incidents that can be provided to the CAI upon request.

Alberta PIPA

Where a breach presents a real risk of significant harm, we will notify the Office of the Information and Privacy Commissioner of Alberta (OIPC). The Commissioner may require notification to affected individuals. We follow the OIPC’s revised breach process and use the prescribed breach notification form.

British Columbia PIPA (private sector)

British Columbia’s private sector law does not impose statutory mandatory breach reporting at this time. However, the Office of the Information and Privacy Commissioner for BC provides breach readiness guidance. We remain breach ready and may notify affected individuals where appropriate.

We understand the importance of protecting the privacy of all individuals, especially minors. Our services are intended for Canadian audiences over the age of 18, and we do not knowingly collect personal information from children without appropriate consent.

Our website and its services are not directed to children under 14. In Québec, minors under 14 cannot consent on their own; a parent or legal guardian must provide consent if we collect personal information for their benefit. Minors aged 14 or older may consent themselves, provided they understand the nature and consequences of the consent. You must also be old enough to consent to the processing of your personal information under the laws of your province or territory. For certain features, such as website forums or applications, you must be at least 16 years old. Subscribing to our services is restricted to adults who are 18 years of age or older, as a company policy.

If you click on a link and go to another site, you will be subject to that website’s privacy policy. We encourage you to read the posted privacy policy statement at any website before submitting any personal information at all.

We may on occasion update our Privacy Policy. If we make any changes to our Privacy Policy, we will post a notice about the change at a prominent location on our website or notify you by appropriate means. Any changes to this Privacy Policy will be effective from the time they are posted. Your acceptance of any changes to this Privacy Policy is indicated by your continued use of our services. We encourage you to periodically review our Site and this Privacy Policy for any changes.

For any questions or concerns about our personal information policies or practices, please contact our privacy counsel:

Attn: Legal Department
Burns & Wilcox Ltd.
30833 Northwestern Highway
Farmington Hills, MI 48334
[email protected]

We acknowledge Québec’s language requirements for commercial publications and websites. While this Annex is provided in English, Burns & Wilcox Canada ULC will make privacy disclosures and interfaces available in French for Québec users under conditions no less favorable (equal or greater prominence and functionality).