Terms and Conditions and Privacy Notice

INTERAC^® VERIFICATION SERVICE – TERMS AND CONDITIONS

LAST UPDATED: June 29, 2022

Please carefully read this Agreement before agreeing to use the Interac verification service(the “Service”). The Service allows you to authorize Identity & Data Providers to provide certain User Information about you to Relying Parties chosen by you. This Agreement is between you and 2859824 ONTARIO LIMITED (“Interac”, “us”, “we” or “our”), a subsidiary of Interac Corp.

By clicking “Agree”,

you are agreeing to be bound by this Agreement; and

you are confirming either that you have reached the age of majority in the province in which you reside or that you are a minor and your parent or legal guardian has had an opportunity to review this Agreement and has consented to your use of the Service.

This Agreement takes effect on the date that you click “Agree”.

If you do not agree to this Agreement, click “Cancel” and you may not use the Service.

DEFINITIONS:

“Agreement” means these Interac verification service Terms and Conditions and the Interac verification service Privacy Notice, which is incorporated into this Agreement, as may be amended by Interac from time to time upon notice to you in accordance with section 12.

“Credentials” means the credentials that you use for authentication purposes to access services at your Financial Institution or which are otherwise required by your Financial Institution to access the Service, such as username, password, card number, biometric identifiers (including fingerprints, voice patterns and facial recognition), one-time passcode or other information.

“Electronic Access Device” means a cell phone, smart phone, mobile device, desktop or personal computer, tablet or other electronic device that you may use to access the Service.

“Financial Institution” or “FI” means the financial institution in Canada with which you have a current banking relationship that has agreed to be an Identity & Data Provider and that you have chosen to act as your first Identity & Data Provider.

“Identity & Data Provider” (which may sometimes be referred to as a ‘connection’) means an eligible organization in Canada that participates in the Service and that generates or holds User Information, including a financial institution, credit bureau, telecommunications provider, government departments and agencies and other eligible third parties.

“Modification” has the meaning set out in section 4.

“Personal Information” means information about an identifiable individual, including: name, email address, mobile or home phone number(s), mailing address, date of birth and certain of your account, profile or other information.

“Privacy Notice”means the privacy notice located at https://www.interac.ca/en/verification-service/terms-and-conditions-and-privacy-notice/#privacy-notice or any successor URL.

“Released Parties” means Interac, your Financial Institution and all other Identity & Data Providers and Relying Parties that participate in the Service, and, as applicable, their respective affiliates, subsidiaries, divisions, suppliers and service providers, and all of their respective directors, officers, employees and agents, and “Released Party” means any one of them.

“Relying Party” means an eligible organization in Canada that participates in the Service and that asks you to provide User Information through the Service to facilitate its interactions with you, for example, to help verify your identity or eligibility for Third Party Offerings. When adding a new Identity & Data Provider as a connection, you may be asked to share User Information with that new Identity & Data Provider; for the purposes of that sharing transaction, that Identity & Data Provider will be deemed to be a Relying Party.

“Third Party Offerings” has the meaning set out in section 7.

“Third Party Terms” has the meaning set out in section 7.

“User Information” means all Personal Information and other information about you, that is generated or held by Identity & Data Providers and that is available to be shared through the Service.

“you” or “your” means the person who wishes to use the Service, and whose Credentials have been used to register for the Service.

SERVICE CLAUSES:

1. THE SERVICE

The Service is provided and operated by Interac. Interac will not charge you a fee to use the Service.

In order to register to use the Service, you will be required to select a financial institution with which you have an online banking relationship to create your Interac verification service account.

During your initial registration to use the Service and prior to each use of the Service, your Financial Institution will authenticate you using your Credentials. The use of your Credentials to authenticate you is subject to and governed by the terms of your agreement with your Financial Institution.

This Financial Institution will then, for the purposes of the Service, become your first Identity & Data Provider. The Personal Information your Financial Institution has about you and which may be shown as part of the registration process will be your initial User Information for the Service. If any of your displayed initial User Information is incorrect, you must discontinue the registration process and contact your Financial Institution to update your information. After updating your information, you may attempt to register for the Service again.

After registration, (1) you will have an opportunity to add additional Identity & Data Providers as connections, and (2) additional User Information from your Identity & Data Providers, including your Financial Institution, may be added to your Interac verification service account.

Except (1) in connection with a specific transaction where you expressly agree, (2) where the identity of the Identity & Data Provider or Relying Party is evident due to the nature of the transaction, the User Information that you agree to share or the then current participants in the Service, (3) as required by law, or (4) if an investigation is required (for example, as a result of an actual (or suspected) unauthorized transaction):

an Identity & Data Provider will not know which Relying Party receives your User Information, and

a Relying Party will not know which Identity & Data Provider(s) provide your User Information.

Certain aspects of the Service may differ depending on whether you use the Interac verification service mobile app or the Interac verification service web application. Certain features or functionality may also be limited or not available in the web application. For example, your list of connections and activity log will not be accessible via the web application.

If you subsequently use the Interac verification service mobile app after registering for or using the Service via the web application, your profile information, including any of your connections and activity log, will be accessible to you in the Interac verification service mobile app.

If you register for or use the Service using the Interac verification service mobile app, and subsequently try to use the web application, you will be redirected to the mobile app and will not be able to complete transactions using the web application.

2. YOUR RESPONSIBILITY FOR USE OF YOUR ELECTRONIC ACCESS DEVICE, YOUR CREDENTIALS AND THE ACCURACY OF YOUR USER INFORMATION

Your obligation to protect your Electronic Access Device, your Credentials, and the other information that you use to access and use your Electronic Access Device may be governed by your agreement with your Financial Institution. You will not be able to access the Service if your Financial Institution suspends or revokes your Credentials. If you suspect unauthorized use of your Credentials to access the Service, you should immediately notify your Financial Institution. Once the Service has been accessed using your Credentials, you are responsible for any instruction or consent given regarding your User Information, including any sharing transaction where your User Information has been provided to a Relying Party or another Identity & Data Provider.You must close the browser session of the Interac verification service web application upon completion of an Interac verification service transaction.

You will have an opportunity to review certain of your User Information maintained by the applicable Identity & Data Provider(s) that the Relying Party has requested be shared before you agree to share information with that Relying Party. You are responsible for ensuring that any such User Information is accurate and up to date. You are also responsible for ensuring the accuracy of your User Information in the systems of the applicable Identity & Data Provider(s) before you share it. If any User Information is inaccurate, you agree to notify the Identity & Data Provider that maintains such User Information before you agree to share that User Information through the Service. In addition, you agree that you will not knowingly use the Service to share any inaccurate User Information.

3. PERSONAL INFORMATION

When you agree to share User Information from your Identity & Data Provider(s) with a Relying Party through the Service, you are providing express consent to share all Personal Information that is included in such User Information. Although your User Information was originally collected by or on behalf of your Identity & Data Provider(s) under their respective terms and privacy policies, when you authorize your User Information to be shared with a Relying Party through the Service, you consent to the handling of all User Information shared through the Service (including all Personal Information) in accordance with this Agreement, including, for greater certainty, the Privacy Notice.

For more information about the collection, use and disclosure of your Personal Information as part of the Service, please see the Privacy Notice.

Once your User Information has been sent to a Relying Party through the Service with your consent (other than to another Identity & Data Provider for the purposes of adding them as a connection), it is handled in accordance with the Relying Party’s privacy policy, its agreements with you, and all applicable laws.

When you share your User Information with a Relying Party that is another Identity & Data Provider for the purposes of adding them as a connection, that Identity & Data Provider is only entitled to use and handle that User Information for the purposes of attempting to match that information with information about you in its or its service provider’s systems or records to facilitate their addition as a connection and for no other purpose. Subject to this agreed limited use, your User Information is collected, used, disclosed and retained by the Identity & Data Provider in accordance with its privacy policy, any agreements it has with you and all applicable laws.

Neither Interac, nor any Identity & Data Provider is responsible or liable for any use or disclosure by any Relying Party of User Information provided to that Relying Party through the Service.

4. MODIFICATION OF SERVICE OR TERMINATION OF SERVICE BY US

Modification

We reserve the right at any time to modify the Service, including the addition, modification or removal of Service features or functionality (collectively, a “Modification”). Information on Modifications will be made available at

https://www.interac.ca/en/verification-service/ and/or through the Interac verification service application. All Modifications will be subject to this Agreement. Subject to section 12, if applicable, your continued use of the Service after implementation of a Modification will mean that you agree to that Modification and its applicability to you.

Suspension or Termination

We reserve the right to interrupt, restrict or limit your use of the Service (or any part thereof), or to temporarily or permanently suspend, discontinue or terminate the Service or your participation in it, at any time.

5. DISCONTINUING THE USE OF THE SERVICE BY YOU

You may discontinue your use of the Service at any time by closing your Interac verification service account.

You can close your Interac verification service account in the mobile application by following the steps listed in the ‘Delete Interac verification service Account’ section of the Interac verification service mobile application. If you are using the Interac verification service web application, please follow the steps outlined here: How to Close your Interac verification service Account . You may also be able to close your Interac verification service account through your Financial Institution.

Closing your Interac verification service account will mean that you no longer have an active Interac verification service account, you will not be able to initiate new transactions to share User Information with Relying Parties, sharing transactions that you previously authorized may not be completed, and you will not have access to any transaction records that summarize previous Interac verification service account activities. However, closing your Interac verification service account will not affect (1) any of the User Information held by your Identity & Data Providers or shared with your Relying Parties, or (2) any transaction records maintained by the Service.

If you wish to use the Service in the future after closing your Interac verification service account, you will need to complete the Service registration process again and set up a new Interac verification service account. You can use your existing Credentials to open your new Interac verification service account.

Deleting the Service’s mobile application from your Electronic Access Device will not close your Interac verification service account and will not affect any sharing transaction that you previously authorized. You will be able to access your Interac verification service account in the future by reinstalling the Interac verification service mobile application on your Electronic Access Device and re-entering your Credentials for your Financial Institution.

6. INTELLECTUAL PROPERTY OWNERSHIP, RESERVATION OF RIGHTS

The Service is the intellectual property of Interac and its suppliers and licensors, and is protected by law, including the intellectual property laws of Canada, the United States and other countries, and by international treaty provisions. Except as expressly stated in this Agreement, this Agreement does not grant you any ownership rights in or to the intellectual property in the Service. All rights in the Service not expressly granted are reserved by Interac and its suppliers and licensors.

7. THIRD PARTY OFFERINGS

The Service is designed to facilitate your interaction with various online services, websites and applications offered by Relying Parties (or, in certain instances, one of your Identity & Data Providers), including your access to or purchase of any products, services or information from them (“Third Party Offerings”). Third Party Offerings are provided by the applicable third party, and are not provided as part of the Service.

Your access to and use of any Third Party Offering, is governed by the terms and conditions respecting such Third Party Offering found on or through the applicable website, application or elsewhere (“Third Party Terms”). This Agreement does not change any Third Party Terms. You are solely responsible for fulfilling any commitments you make to the third party making the Third Party Offering available to you.

No Released Party endorses or makes any representations, warranties or guarantees with respect to any Third Party Offering, or is liable to you in any way with respect to any Third Party Offering (except if it is also the provider of the Third Party Offering, in which case the Third Party Terms apply to such Third Party Offering).

LIMITATIONS AND WARRANTIES CLAUSES:

8. No Warranties or Conditions

You agree that your use of and access to the Service is at your sole risk. The Service is provided on an “as is” and an “as available” basis.

No Released Party warrants the performance or results you may obtain by using the Service or that the Service will be error-free or uninterrupted, except to the extent any warranty, condition, representation or term cannot or may not be excluded or limited by law applicable to you in your jurisdiction.

Without limiting the foregoing, no Released Party makes any representations, warranties or conditions (express, implied or collateral whether by statute, common law, custom, course of dealing, usage of trade or otherwise) as to the Service including non-infringement of third party rights, merchantability, title, integration, security, accessibility, availability, accuracy, reliability, quiet enjoyment, satisfactory quality, or fitness for any particular or general purpose.

9. Limitation of Liability

If you are a consumer within the meaning of applicable provincial or territorial consumer protection legislation, this section does not limit any legal rights that such legislation does not allow you as a consumer to waive. In particular, the limitation of Interac’s liability for the consequences of its acts will not apply if (1) the Consumer Protection Act (Quebec) applies to this Agreement, and (2) you are a consumer within the meaning of that Act and you reside or are domiciled in the Province of Quebec. The liability of each Released Party will be limited to the fullest extent permitted by applicable law.

Interac is not charging you for the Service based, in part, on the allocation of liability between you and each Released Party as set out in this section.

No Released Party will be responsible for lost profits, revenues, business or data; loss of privacy; damage to reputation; indirect, incidental, special, consequential, exemplary or punitive or other similar damages; or, to the extent permitted by law, direct losses or damages; in each case, relating to, arising out of, or in any way in connection with this Agreement or your use of or inability to use the Service, regardless of the cause of action (for example, contract, tort or otherwise), even if any Released Party has been advised of the possibility of such damages.

This Agreement sets forth the entire liability of the Released Parties and your exclusive remedy with respect to the Service and its use.

GENERAL CLAUSES:

10. Assignment

You may not assign this Agreement. We may assign this Agreement to any successor provider of the Service by providing notice to you.

11. Entire Agreement

This Agreement represents the entire agreement between you and us concerning the Service.

12. Amendment and Termination of the Agreement

Amendment

We reserve the right at any time to amend this Agreement by notifying you of such amendment at https://www.interac.ca/en/verification-service/terms-and-conditions-and-privacy-notice/#terms-and-conditions

and/or through the Interac verification Service when you next use it. Your continued use of the Service after being notified of an amendment will mean that you agree to the new form of this Agreement, as amended.

If you do not agree to an amendment, you must close your Interac verification service account as contemplated in section 5. You may not amend this Agreement.

Termination

You may terminate this Agreement at any time for any reason by closing your Interac verification service account as contemplated in section 5.

This Agreement will terminate immediately without notice from us if you fail to comply with any provision of this Agreement, if we permanently terminate the Service or your participation in the Service or if your Interac verification service account is permanently closed for any reason.

Upon the termination of this Agreement, you will no longer be able to access the Service.

13. Governing Law and Jurisdiction

If you reside or are domiciled in the Province of Quebec, this Agreement is governed by the laws of the Province of Quebec, and any dispute relating to this Agreement will be subject to the exclusive jurisdiction of the Courts of the Province of Quebec.

Otherwise, you agree that this Agreement is governed by the laws of the Province of Ontario, and that any dispute relating to this Agreement will be subject to the exclusive jurisdiction of the Courts of the Province of Ontario, in the City of Toronto.

14. Additional Provisions

If any part of this Agreement is found to be void or invalid and unenforceable, it will not affect the validity of the remaining provisions of this Agreement, which will remain valid and enforceable according to its terms. The failure to enforce any term of this Agreement on one occasion will not prevent enforcement on any other occasion or the enforcement of any other term. Headings and captions will not be considered included for purposes of interpretation or application hereof, but are for convenience only.

Unless otherwise required by applicable law (1) you agree that you may not bring a legal action, regardless of form, for any claim arising out of or related to this Agreement more than two years after the cause of action arose, and (2) upon the expiration of such time limit, any such claim and all respective rights related to the claim lapse.

Except as expressly stated in this Agreement, there are no third party beneficiaries to this Agreement. The parties expressly acknowledge and agree that the Released Parties are third party beneficiaries of this Agreement, and it is agreed that we are acting as agent and trustee for them in respect of their rights under this Agreement.

15. Survival

Sections 2, 3, 5, 6, 8, 9, 10, 11, 13, 14 and this section 15, and such other provisions that by their nature should survive termination will survive the termination of this Agreement for any reason.

16. Contact Information

If you have any questions, suggestions or feedback (collectively, “feedback”) about the Service or this Agreement, please submit such feedback to feedback@interac.ca.By submitting feedback to us, you agree that we may use such feedback for any purpose related to the Service without any obligation to compensate you.

17. Copies of These Terms

A copy of this Agreement will be available through our mobile application and on our website at https://www.interac.ca/en/verification-service/legal

If you wish to retain a copy of this Agreement, you may print it from our website, email it to yourself through the mobile application, or download or print it from the web application.

Interac and the Interac logo are trademarks of Interac Corp.

Interac® verification service– PRIVACY NOTICE

The Interac® verification service is an information management and sharing service provided by 2859824 Ontario Limited (“Interac”, “us”, “we” or “our”), a subsidiary of Interac Corp. Interac is committed to respecting and protecting your privacy and the security of your Personal Information. This Privacy Notice explains how information about an identifiable individual (“Personal Information”) is collected, used, disclosed, stored, retained, processed and safeguarded in connection with use of the Interac verification service and the Interac verification service mobile and web applications (collectively, the “Service”). By using the Service, you agree and consent to the collection, use, disclosure, storage, retention, processing and safeguarding of your Personal Information in accordance with this Privacy Notice.

About the Service

The Service allows you to authorize your selected Identity & Data Providers to share certain of your information with Relying Parties.

Activity Data means Personal Information and other information that is collected or generated by Interac and its authorized service providers for the purposes of operating and maintaining the Service. Activity Data collected for these purposes includes general information about your transactions, such as the type of Relying Party with which you consented to share your User Information, as well as the type and the sensitivity level of the information you are sharing.

Identity & Data Provider (which may sometimes be referred to as a ‘connection’) means an eligible organization in Canada that participates in the Service and that generates or holds certain information about you. Examples of Identity & Data Providers include financial institutions, credit bureaus, telecommunications providers, government departments and agencies and other eligible third parties.

Relying Party means an eligible organization in Canada that participates in the Service and that asks you to provide certain of your User Information through the Service to facilitate its interactions with you, for example, to help verify your identity or eligibility for product or service offerings. Examples of potential Relying Parties include financial institutions (e.g., for online bank account applications), telecommunications service providers (e.g., for account opening and service or device eligibility), online merchants (e.g., for hotel bookings), government departments and agencies (e.g., for program eligibility) and other eligible third parties. When adding a new Identity & Data Provider as a connection, you may be asked to share certain User Information with that new Identity & Data Provider. For the purposes of that sharing of User Information, that Identity & Data Provider will be deemed to be a Relying Party.

User Information means Personal Information that is generated or held by Identity & Data Providers and that is available to be shared through the Service.

You, you or your means the person who wishes to use the Service, and whose Credentials (as defined below) have been used to register for the Service.

How we collect and use your information

REGISTRATION

The Service registration process requires you to select the financial institution in Canada that is participating in the Service (“Financial Institution” or “FI”) that you have an active and existing business relationship with to create your Interac verification service profile, which will form the basis of your Canadian Interac verification service account (the “Interac® verification service”). This FI will become your first Identity & Data Provider.

As part of the registration process, and prior to each use of the Service, your FI will authenticate you using your existing banking credentials that you use for authentication purposes to access services at your FI or which are otherwise required by your FI to access the Service, such as username, password, card number, biometric identifiers (including fingerprints, voice patterns and facial recognition), one-time passcode or other information (collectively, “Credentials”). Once you are initially authenticated by your FI, your FI will create and store an individualized Interac verification service account identifier for you which is distinct from your Credentials and will register this identifier with the Service.

Following your successful authentication using your Credentials during the registration process, your selected FI will provide a summary of your User Information available for you to share with Relying Parties. If any of your User Information displayed during registration is incorrect, you must discontinue the registration process and contact your FI to update your User Information in its files, to the extent required.

CONSENT TO SHARE YOUR INFORMATION

The Service allows you to authorize your selected Identity & Data Providers to share certain of your User Information with a Relying Party to facilitate your interactions with the Relying Party (or if that Relying Party is another Identity & Data Provider, to facilitate its addition as a connection) with your express consent. Although your User Information was collected by or on behalf of your FI and other Identity & Data Providers under their respective terms and privacy policies, when you authorize your User Information to be shared with a Relying Party (including a Relying Party that is another Identity & Data Provider solely for the purposes of adding them as a connection through the Service), it is collected, used, disclosed, stored, retained, processed and safeguarded by the Service under the terms of this Privacy Notice and, as noted above, only with your express consent. Once the information is received by the Relying Party (other than another Identity & Data Provider for the purposes of adding them as a connection), it is used, disclosed and retained in accordance with the privacy policy of the Relying Party, its agreement with you and all applicable laws.

When you share your User Information with a Relying Party that is another Identity & Data Provider for the purposes of adding them as a connection, that Identity & Data Provider is only entitled to use and handle that User Information for the purposes of attempting to match that information with information about you in the Identity & Data Provider’s system to facilitate their addition as a connection and for no other purpose. Subject to this agreed limited use, your User Information is collected, used, disclosed, retained, stored, processed and safeguarded by the Identity & Data Provider in accordance with its privacy policy, any agreements it has with you and all applicable laws.

In addition, Interac may have access to your Credentials, or to other Personal Information that you have provided, to facilitate the Service and/or other services that you may agree to use in connection with the Service. Any Personal Information provided for use with other services will be collected, used, disclosed and retained in accordance with the privacy policies applicable to those other services and will not be subject to this Privacy Notice.

GENERAL

Interac may, but is not obligated to, monitor the Service in an effort to identify unauthorized use and to protect users and Service participants (namely, FIs and other Identity & Data Providers and Relying Parties).

Activity Data collected or generated by the Service also includes information about activities that occur with your Interac verification service account, including, for example, your registration with the Service, successful and failed logins from your electronic access device (as defined below), information about your electronic access device, such as its model, operating system, device ID and MAC address, connections established with new Identity & Data Providers, and consents to share your User Information. (For the purposes of this Privacy Notice, “electronic access device” includes your cell phone, smart phone, mobile device, desktop or personal computer, tablet or other electronic device that you may use to access the Service.) Certain details about these activities are stored and viewable in your Interac verification service mobile application activity log (which is not viewable in the web application). This activity log does not contain your Credentials or any of your User Information that you have agreed to have an Identity & Data Provider send to a Relying Party through the Service.

MOBILE PHONE NUMBER COLLECTION AND USE BY RELYING PARTY IN RELATION TO THE Interac® verification service

A Relying Party may collect and use your mobile phone number to send you a link (via text message) to engage with the Service. The mobile phone number that you provide for this purpose is collected by the Relying Party (not by Interac) and is subject to the Relying Party’s privacy policy and any other agreement it may have with you.

Protecting your information

All of your User Information that you authorize an Identity & Data Provider to share with a Relying Party through the Service will be protected with security mechanisms intended to prevent your User Information from being identified, accessed or misused when it is sent through the Service.

Your Activity Data is stored in protected form. Only authorized personnel will have the ability to retrieve Activity Data from the Service’s audit systems. Details of certain activities are available to you through the activity log in your Interac verification service mobile application (which is not available in the web application).

Disclosing your information

Interac may report suspected fraudulent activity to Service participants, including the FI you selected when first registering for the Service, or other parties as permitted or required by law, and certain of your Personal Information may be included in those reports to assist with fraud prevention, detection, investigation and remediation.

In connection with providing the Service, Interac may transfer or provide access to your Personal Informationto outside agents or service providers that perform services on our behalf (e.g., data hosting or processing services), or that otherwise collect, use, disclose, store, retain, process or safeguard information on our behalf for the purposes described in this Privacy Notice. Interac requires such service providers to maintain comparable protections over Personal Information shared with them.

We may also disclose Personal Information: (a) to any governmental authority where required by law, (b) in response to a court order, subpoena, discovery rule, or other lawful request, (c) as otherwise required under any applicable law, rule, or regulation, (d) in good faith, if an investigation is required (for example, as a result of a potential privacy breach or unauthorized transaction(s)), or (e) to protect or defend our rights or property or those of other persons.

If we sell our business or any part thereof that operates any portion of the Service, we may transfer Activity Data to prospective purchasers to the extent necessary to enable consideration of the transaction. We may also transfer any Personal Information in our control at the time of such a transaction to the purchaser so that the purchaser can continue to operate the Service after the transaction has been completed.

Storing and retaining your information

When you consent to the sharing of your User Information from an Identity & Data Provider to a Relying Party through the Service, your User Information is temporarily held in our networks to facilitate the successful transfer. Information is purged from the network in accordance with our record retention policies.

User Information that is made available on your electronic access device for your review before you consent to having it shared with a Relying Party by the applicable Identity & Data Provider(s) is maintained within the Identity & Data Provider’s systems and is not stored locally on your electronic access device.

Other information that we generate or collect in order to provide the Service, such as account identifiers and other Activity Data, is only retained for as long as necessary to administer the Service.

Activity Data is stored by the Service for legal, regulatory, suspected fraudulent activity investigations and dispute resolution purposes in accordance with our record retention rules.

Personal Information that is stored by the Service is maintained on our servers, or those of our service providers, and is accessible only by our authorized employees, representatives and service providers who require access in connection with their responsibilities.

Suspending or closing your Interac® verification service account

Authorized personnel of Interac or its service providers supporting the operation of the Service have the ability to suspend or delete (close) your Interac verification service account in accordance with the Interac verification service Terms and Conditions governing your use of the Service. In the event your Interac verification service account is suspended and you wish to have it re-activated, you can obtain information at https://www.interac.ca/en/consumers/support/faq-consumers/#faq-interac-verification-service . You may also wish to contact your FI’s Customer Support team to obtain additional details and required steps in order to reactivate your Interac verification service account.

You may discontinue your use of the Service at any time by closing your Interac verification service account.

You may close your Interac verification service account in the mobile application by following the steps listed in the ‘Delete Interac® verification service Account’ section of the Interac verification service mobile application. If you are using the Interac verification service web application, please follow the steps outlined here: How to Close your Interac® verification service Account. You may also be able to close your Interac verification service account through your FI.

Closing your Interac verification service account will mean that you no longer have an active Interac verification service account, you will not be able to initiate new transactions to share your User Information with Relying Parties, sharing transactions that you previously authorized may not be completed, and you will not have access to any transaction records that summarize previous Interac verification service account activities. However, closing your Interac verification service account will not affect (1) any of your User Information held by your Identity & Data Providers or previously shared with your Relying Parties, (2) any transaction records or other Activity Data maintained by the Service; or (3) any Personal Information which you have provided for use with other services.

Deleting the Interac verification service mobile application from your electronic access device will not close your Interac verification service account and will not affect any sharing transaction that you previously authorized. You will be able to access your Interac verification service account in the future by reinstalling the Interac verification service mobile application on your electronic access device and re-entering your then current Credentials for your FI.

Accessing and correcting your information

Your User Information resides with your applicable Identity & Data Providers and with Relying Parties with which you have chosen to share it. Although your User Information may be shared with Relying Parties (with your consent) via the Service, Interac is not an Identity & Data Provider. Requests for access to your User Information, including requests to correct or modify it, must therefore be made by you directly to your Identity & Data Providers or Relying Parties.

In connection with sharing transactions, you will have an opportunity to view a summary of certain of your User Information within the Interac verification service application before you authorize your User Information to be shared with a Relying Party. The viewable User Information will be displayed within the Interac verification service application. For mobile app users, even when you are not engaged in a sharing transaction, you may have an opportunity to view certain of your User Information that is maintained by Identity & Data Providers that you have connected to. The Identity & Data Providers may provide you with details on how to update or correct your User Information within the Identity & Data Provider’s files, or you may have to contact them to update or correct your User Information.

You may access your activity log information through your Interac verification service mobile application (which is not accessible in the Interac verification service web application).

You can obtain additional information on how to access or correct your Personal Information by visiting our Support Centre at https://www.interac.ca/en/consumers/support/faq-consumers/#faq_98665.

Notifications

Depending on the FI you select to associate your Interac verification service account with, you may receive notifications of some of your Service activities from your FI, such as registration completion and on authentication events occurring within your Interac verification service account. These notifications are intended to provide you with information on Service usage so that you may act upon notifications that you do not recognize as yours. None of the Relying Parties or Identity & Data Providers that participate in the Service are permitted to send you unprompted emails or text messages asking for personal details through the Service.

Dispute resolution, questions or concerns

In the event you identify transaction(s) that you have not authorized or receive a notification from your FI regarding (or otherwise become aware of) unauthorized activity with your Interac verification service account, please contact customer support of your FI with which you associated your Interac verification service account. Upon your authorization, your FI’s customer support personnel will be able to retrieve your Interac verification service activity information and work with you to report unauthorized transactions to Interac and/or its service providers.

General queries or concerns on the privacy aspects of the Service may be directed to the Interac Privacy Officer. Contact details are provided below.

Third party participants

This Privacy Notice applies to the collection, use, disclosure, storage and retention of Personal Information in connection with the operation of the Service by Interac and its service providers, including third parties that host and operate certain components of the Service on behalf of Interac. This Privacy Notice does not apply to your FI or any of the Identity & Data Providers and Relying Parties that use, handle, disclose or retain your Personal Information in connection with your dealings with them that are distinct from the Service, and such parties will be governed by their own privacy policies and agreements with you when they collect, use, disclose, store, retain, process or safeguard your User Information in the ordinary course of their dealings with you outside of the Service.

Privacy Notice changes

This Privacy Notice is effective as of the date shown above and may be revised from time to time. We encourage you to review this Privacy Notice frequently to obtain the current version. Your continued use of the Service following any changes to this Privacy Notice constitutes your acceptance of any such changes.

For more information

If you require clarification about this Privacy Notice, or would like to request more information about the Service, including who to contact to request access for your Interac verification service account information, please contact our Privacy Office at privacy@interac.ca or by phone at 416-362-8550 or in writing to:

Interac Privacy Office

200 Bay Street, Suite 2400

P.O. Box 45, Toronto, Ontario M5J 2J1

Canada

Interac is a trademark of Interac Corp.