General Privacy Notice

Table of Contents

I.   Information We Collect
II.  Information Collected Automatically
III. Information We Collect from Other Sources
IV. How We Use Your Personal Information
V.  Information We Disclose to Third Parties
VI. Third-Party Content, Third-Party Services, Social Features, Advertising and Analytics
VII.Choices: Tracking and Communications Options
VII.Security of Your Personal Information
IX. Retention of Your Personal Information
X.  Children
XI. Changes to This Privacy Policy
XII.Residents of the European Economic Area / UK / Switzerland
XIII. Residents of Canada
XIV. Questions About This Privacy Notice

I. INFORMATION WE COLLECT

Personal data is generally any information, alone or in combination with other information, that relates to an identified or identifiable person or can be used to identify, contact or locate a person.

To the extent required by applicable law, whenever Cintas collects personal data, we will:

• provide timely and appropriate notice to you about our data practices through this Privacy Notice;
• collect your personal data only for specified and legitimate purposes. The personal data we collect will be relevant, adequate, and not excessive for the purposes for which it is collected;
• process your personal data in a manner consistent with the purposes for which it was originally collected or to which you have subsequently consented; and
• not use your personal data for direct marketing purposes without giving you an opportunity to opt-out.
  

Cintas, and/or its Service Providers (defined below), may collect information that you provide directly to Cintas and/or its Service Providers via the Services. For example, Cintas collects information when you use or register for the Services, subscribe to notifications, contact us via the Contact Us form, participate in promotional activities, or communicate or transact through the Services. Cintas may also collect personal data about you from our customers (for example, your employer) to enable us to provide services to you or Cintas’ Customer. In addition, when you interact with Third-Party Services (defined below), you may be able to provide information to those third parties. For more information on Third-Party Services’ data collection and practices please refer to the   Third-Party Content, Third-Party Services, Social Features, Advertising and Analytics section. For more information on Service Provider data collection practices please refer to the Information We Disclose to Third Parties section.

Information that Cintas, its Service Providers, and/or Third-Party Services may collect includes personal data you provide us, which may include:  

(i) contact information, such as your name, company name, job title, address, e-mail address, and phone number;

(ii) username and password for any accounts you may establish (or established on your behalf);

(iii) additional information about how you use our products or services;

(iv) comments, questions, requests, and orders you may make;

(v) financial information needed to process payments if you make purchases, such as business or personal credit card, account information, or tax identification number; and

(vi) information about your preferences, such as your preferred methods of communication, and the types of products and services in which you are interested. 

II. INFORMATION COLLECTED AUTOMATICALLY

Cintas, its Service Providers, and/or Third-Party Services may also automatically collect certain information about you when you access or use the Service, including as follows:

Device and Browser Information:

• Cintas may collect technical information about your device, such as device type, browser type, IP address, operating system, and device identifier. Cintas collects this information automatically from your device and web browser through cookies and similar technologies.

Information About How You Interact with Us:

• Cintas may collect technical data about your usage of the Website and how you interact with our digital advertisements and promotions, such as content viewed or downloaded, features used, links clicked, Cintas promotional e-mails opened, and dates and times of interactions. Cintas collects this information using cookies and similar technologies.

Location Information:

• Cintas may collect location information from your device and imprecise location information derived from, for example, your IP address or postal code.

For information on choices some of these third parties may offer you regarding automated data collection, please refer to the Choices: Tracking and Communications section.

The methods we use to automatically collect your information (“Tracking Technologies”) include:

Cookies

A cookie is a small text file that is stored on a user’s device, which may be session ID cookies or tracking cookies. Session cookies make it easier for you to navigate the Service and expire when you close your browser. Tracking cookies remain longer and help in understanding how you use the Service and enhance your user experience. Cookies may remain on your hard drive for an extended period. If you use your browser’s method of blocking or removing cookies, some but not all types of cookies may be deleted and/or blocked and as a result some features, and functionalities of the Service may not work. You also may not receive advertising or other offers from us that are relevant to your interests and needs. For information on how to do this on the browser of your mobile phone or tablet you will need to refer to your device manual. Please note that you will not be able to opt out of receiving certain cookies that are strictly necessary for the delivery of a service requested by you.

Our Websites use “session cookies.” A session cookie does not identify you personally and expires after you close your browser. The Websites also uses “persistent cookies.” These cookies do not expire when you close your browser. Persistent cookies stay on your computer until you delete them or they expire. By assigning your computer a unique identifier, we are able to create a database of your previous choices and preferences which can be provided by us automatically, saving you time and effort on future visits.

We use the information collected through cookies for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience. We also gather statistical information about use of the Services in order to continually improve their design and functionality, understand how they are used, and assist us with resolving questions regarding them. Cookies further allow us to select which of our advertisements or offers are most likely to appeal to you and display them while you are on the Services. We may also use cookies or other technologies in online advertising to track responses to our ads.

Web Beacons (“Tracking Pixels”)

Web beacons are small graphic images, also known as “Internet tags” or “clear gifs,” embedded in web pages and e-mail messages. Web beacons may capture information including your IP address, web browser type, mobile network information, pages viewed, pages visited before navigating to our Services (i.e., referrer URLs), time spent on pages, links clicked, and conversion information. Web beacons may be used, without limitation, to count the number of visitors to our Services, to monitor how users navigate the Services, and to count content views.

Embedded Scripts

An embedded script is programming code designed to collect information about your interactions with the Services. It is temporarily downloaded onto your computer from Cintas’ web server or from a third party with which Cintas works and is active only while you are connected to the Services and deleted or deactivated thereafter.

Device Recognition Technologies

Technologies that include the application of statistical probability to data sets or linking a common unique identifier to different device use (e.g., Facebook ID), which attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user or household) (“Cross-device Data”).

Device and Activity Monitoring and Session Replay

Technologies that monitor, and may record, certain of your interactions with the Services, and/or collect and analyze information from your device, such as, without limitation, your operating system, plug-ins, system fonts, and other data, for purposes such as identification, security, fraud prevention, troubleshooting, tracking and/or improving the Services, and customizing or optimizing your experience on the Services. This may also include technologies that monitor and record usage sessions to help us better understand, track, analyze and improve the usage and quality of our Services. These technologies use cookies that may collect information such as session duration, engagement rate, pages visited, mouse movements and clicks, keystrokes and other traffic data. We also use such technologies to debug, identify, and repair errors that impair the intended functionality of our Services.

Information from Customers, Business Partners, and Other Third Parties

Cintas also collects personal data through our Customers and Business Partners. This information may include contact information, such as name, company name, job title, address, e-mail address, and phone number. Cintas may also obtain personal data from other third-party sources, including publicly and commercially available sources. We may combine the information we receive from our Customers, Business Partners, and other third-party sources with information that we collect from you or your device, as described above.

Some information about your use of the Services and certain other online services may be collected using Tracking Technologies across time and services, which may be used by Cintas and third parties for purposes such as to associate different devices you use and deliver relevant ads and/or other content to you on the Services and certain other online services. Please refer to the  Choices: Tracking and Communications section for more information regarding certain choices regarding these activities.

You have choices about the personal data you provide Cintas. You may choose not to provide information that we request, but if you do so, we may not be able to provide you a relevant product or Service or a particular feature of our Websites.

III. INFORMATION WE COLLECT FROM OTHER SOURCES

We may also obtain information about you from other sources, including Service Providers and Third-Party Services.

IV. HOW WE USE YOUR PERSONAL INFORMATION

Cintas may use your personal data for any purpose consistent with Cintas’ statements under this Privacy Notice or otherwise made by us in writing at the point of collection or to which you have consented, and not prohibited by applicable law, including without limitation, to

DEVELOP AND MANAGE OUR RELATIONSHIPS WITH YOU AND OUR CUSTOMERS

• This may include: (i) delivering services or carrying out transactions that you or our Customers have requested; (ii) providing information about Cintas’ products, services, transactions, and advertisements, that may be of interest to you; (iii) providing you and our Customers a more consistent experience in interacting with Cintas, including by learning more about you and how you use and interact with our Websites, Services, and products and other services; and (iv) planning, managing, and performing under our contractual relationships with our Customers.

COMMUNICATE WITH YOU OR OUR CUSTOMERS

• This may include: (i) informing you of Cintas’ products, services, and promotional activities that may be of interest to you or our Customers; (ii) providing information about our relevant products, services, and transactions, including, for example, pricing information, technical data, invoice, shipping, or production information, warranty or recall information, or information about product or service improvements; (iii) responding to questions or inquiries that you make, including customer service requests; and (iv) inviting you to participate in, or informing you of the results of, customer satisfaction or market research surveys.

PROVIDE AND IMPROVE OUR WEBSITE, PRODUCTS, AND SERVICES

• This may include: (i) customizing them to your preferences or interests, making them more compatible with your technology, or otherwise making them easier to use; (ii) maintaining the security of and otherwise protecting our Services; and (iii) developing new Websites, products, and services.

ADDRESS LEGAL ISSUES

• This may include: (i) complying with our obligations to retain certain business records for minimum retention periods; (ii) establishing, exercising, or defending legal claims; (iii) complying with laws, regulations, court orders, or other legal process; (iv) detecting, preventing, and responding to fraud, intellectual property infringement, violation of our contracts or agreements, violations of law, or other misuse of our Websites, Services, or products or other services; and (v) protecting our rights or property, or yours or others’ health, safety, welfare, rights, or property.

To the extent permitted by law, we may anonymize or aggregate any of the information we collect and use it for any purpose, including for research and product-development purposes.

V. INFORMATION WE DISCLOSE TO THIRD PARTIES

Generally, we may disclose information about you for any purposes consistent with our statements under this Privacy Notice, or otherwise made by us in writing at the point of collection or to which you have consented, and not prohibited by applicable law, including, without limitation, as described below.

• We may disclose your personal data to other Cintas entities and our agents, vendors, consultants, and other service providers that provide services such as website hosting, data analysis, payment processing, information technology and related infrastructure provision, customer service or related benefits, email delivery, marketing, auditing, and other services (“Service Providers”). We may also disclose your personal data to Service Providers we hire to perform support services for us and to help us use your personal data as described above.
• Cintas may disclose your personal data to third parties who partner with us to provide products and services to our customers, such as distributors and shipping partners.
• Cintas may disclose your personal data to other third parties when we have a good faith belief that disclosure is necessary: (i) to comply with a law, regulation, court order, or other legal process; (ii) to detect, prevent, and respond to fraud, intellectual property infringement, violation of our contracts or agreements, violation of law, or other misuse of the Website, products or services; (iii) to protect Cintas’ rights or property or yours or others’ health, safety, welfare, rights, or property; (iv) if Cintas believes your actions are inconsistent with our terms of use, user agreements, applicable terms or policies; or (v) under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal data.
• Cintas will not disclose your personal data to third parties for their own direct marketing purposes except in connection with corporate transactions, as set forth in the next bullet, absent your consent (which may be by means of third-party interaction described in the last bullet point).
• Cintas may disclose your personal data to third parties in connection with the sale, purchase, merger, reorganization, liquidation, or dissolution of Cintas, or under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal data.
• Cintas may disclose your personal data with your permission or at your request. As more fully described in the Third-Party Content, Third-Party Services, Social Features, Advertising and Analytics section, section, your activities on the Services may, by their nature, result in the sharing of your personal data with third parties, and by engaging in these activities you consent to that and further sharing and disclosure to third parties. Such third-party data receipt and collection is subject to the privacy and business practices of that third party, not Cintas.

Cintas may disclose anonymized or aggregated information internally and to third parties for any purpose, to the extent permitted by law.

VI. THIRD-PARTY CONTENT, THIRD-PARTY SERVICES, SOCIAL FEATURES, ADVERTISING AND ANALYTICS

The Services may contain links to websites or mobile apps that are not operated by Cintas and plugins from social media platforms and other third parties (“Third-Party Services”). Some examples of links to third-party websites include those websites operated by our Business Partners, suppliers, advertisers, sponsors, licensors, and other third parties. Examples of social media plugins are the Facebook “Like” button and the option to “Share” our Websites through your e-mail, Facebook, Twitter, LinkedIn, and YouTube (“Social Features”). The inclusion of these Social Features on the Services does not imply any endorsement of the activities or content of the related websites, apps, or social media platforms, nor any association with their operators. To learn about the information collected by these third-party websites, apps, and plugins, please review their privacy notices. We encourage you to review the privacy notices for the websites, apps, and social media platforms you visit before using them or providing personal data.

If you use Social Features, and potentially other Third-Party Services, information you post or provide access to may be publicly displayed on the Services or by the Third-Party Service that you use. Similarly, if you post information on a Third-Party Service that references Cintas (e.g., by using a hashtag associated with Cintas in a tweet or status update), your post may be used on or in connection with the Services or otherwise by Cintas. Also, both Cintas and the third party may have access to certain information about you and your use of the Services and any Third-Party Service.

Cintas may engage and work with Service Providers and other third parties to serve advertisements on our Services and/or on other online services. Some of these ads may be tailored to your interests based on your activities on the Services and elsewhere on the Internet, which may include use of precise location and/or Cross-device Data, sometimes referred to as “interest-based advertising” and “online behavioral advertising” (“Interest-based Advertising”), which may include sending you an ad on another online service after you have left the Service (i.e., “retargeting”). You may receive advertisements based on information relating to your access to and use of the Services and other websites or online services on any of your devices, as well as on information received from third parties. We may use Microsoft and Google for analytics and advertising services. These companies and similar third parties may place or recognize a unique cookie on your browser (including through the use of pixel tags). They also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop. Please refer to the Choices: Tracking and Communications Options section for more information about your choices regarding certain personalized advertising. 

Cintas may use Google Analytics or other Service Providers for analytics services. These analytics services may use cookies and other Tracking Technologies to help Cintas analyze Service users and how they use the Service. Information generated by these analytics services (e.g., your IP address and other usage information) may be transmitted to and stored by these Service Providers on servers in the U.S. (or elsewhere) and these Service Providers may use this information for purposes such as evaluating your use of the Services, compiling statistic reports on the Services’ activity, and providing other services relating to Service activity and other Internet usage.

Please refer to the  Choices: Tracking and Communications Options section for more on certain choices offered by some third parties regarding their data collection and use, including regarding Interest-based Advertising and analytics.

VII. CHOICES: TRACKING AND COMMUNICATIONS OPTIONS

A. Tracking Technologies Generally

Regular cookies may generally be disabled or removed by tools available as part of most commercial browsers, and in some instances blocked in the future by selecting certain settings. Browsers offer different functionalities and options, so you may need to set them separately. Please be aware that if you disable or remove these technologies, some parts of our Services may not work and that when you revisit the Services your ability to limit browser-based Tracking Technologies is subject to your browser settings and limitations.

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no consensus among industry participants as to what “Do Not Track” means in this context. Cintas currently does not alter its practices when Cintas receives a “Do Not Track” signal from a visitor’s browser. To learn more about “Do Not Track,” you can visit  http://www.allaboutdnt.com, but Cintas is not responsible for the completeness or accuracy of this third-party information. 

B. Analytics and Advertising Tracking Technologies

As described above, we use your personal data to provide you with targeted advertisements or marketing communications we believe may be of interest to you. You may choose whether to receive some Interest-based Advertising by submitting opt-outs. Some of the advertisers and Service Providers that perform advertising-related services for us and third parties may participate in the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. To learn more about how you can exercise certain choices regarding Interest-based Advertising, including use of Cross-device Data for serving ads, visit  http://www.aboutads.info/choices/. /. Some of these companies may also be members of the Network Advertising Initiative’s (“NAI”). To learn more about the NAI and your opt-out options for their members, please refer to their educational page  https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work/ and http://www.networkadvertising.org/choices/.

Please be aware that even if you are able to opt out of certain kinds of Interest-based Advertising, you may continue to receive other types of ads. Opting out only means that those selected members should no longer deliver certain Interest-based Advertising to you but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). Also, if your browsers are configured to reject cookies when you visit these opt-out webpages, or you subsequently erase your cookies, use a different device or web browser, or use a non-browser-based method of access (e.g., mobile app), your NAI / DAA browser-based opt-out may not, or may no longer, be effective. Cintas supports the ad industry’s  Self-regulatory Principles for Online Behavioral Advertising and expects that ad networks Cintas directly engages to serve you Interest-based Advertising will do so as well, though Cintas cannot guarantee their compliance.

We may also use Microsoft Advertising Services and/or Google Ad Services. To learn more about the data Microsoft collects and how your data is used by it and to opt-out of certain Microsoft browser Interest-based Advertising, please visit here. To learn more about the data Google collects and how your data is used by it and to opt out of certain Google browser Interest-Based Advertising, please visit here.You may exercise choices regarding the use of cookies from Google Analytics by going to  https://tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on.

In addition, we may serve ads on other online services that are targeted to reach people on those services that are also identified on one of more of our databases (“Matched List Ads”). This is done by using Tracking Technologies or by matching common factors between our databases and the databases of the other online services. For instance, we may use such ad services offered by Facebook, Twitter, and other Third-Party Services. We are not responsible for these Third-Party Services, including without limitation the security of the data. If we use Facebook to serve Matched List Ads on Facebook services, you should be able to hover over the box in the right corner of such a Facebook ad, or go to your account settings, and find out what options Facebook offers you to control such ads. If we use Twitter Matched List Ads, you should be able to review your ad options in account settings on Twitter. We are not responsible for such third parties’ failure to comply with your or our opt-out instructions, they may not give us notice of opt-outs to our ads that you give to them, and they may change their options without notice to us or you.

Cintas is not responsible for effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

C. Communications

You can opt out of receiving certain promotional communications (e-mails) from Cintas at any time by following the instructions provided in e-mails to click on the unsubscribe link or, if available, by changing your communication preferences by logging onto your account. Please note that your opt-out is limited to the e-mail address used and will not affect subsequent subscriptions. If you opt out of only certain communications, other subscription communications may continue. Even if you opt out of receiving promotional communications, Cintas may, subject to applicable law, continue to send you non-promotional communications, such as those about your account, transactions, servicing, or Cintas’ ongoing business relations. If you believe our opt-out mechanism is not working, please email us at [email protected]. 

VIII. SECURITY OF YOUR PERSONAL DATA

Cintas maintains reasonable and appropriate administrative, physical, and technological safeguards to protect the confidentiality, security, and integrity of your personal data. We also have a data incident response plan to ensure our personnel understand what to do in the event of a data incident or security breach. Although we use security measures to help protect your personal data against unauthorized disclosure, misuse, or alteration, as is the case with all computer networks linked to the Internet, we cannot guarantee the security of information provided over the Internet and will not be responsible for breaches of security beyond our reasonable control.

IX. RETENTION OF YOUR PERSONAL DATA

How long we keep your personal data will vary and will depend on the purpose and use of the personal data collected. There are legal requirements that we keep some types of data for specific periods. Otherwise, we will retain it for no longer than is necessary for the purposes for which the personal data was collected.

X. CHILDREN

Our Services are not intended for children under 16 years of age. If we obtain knowledge that we have collected information regarding children under 16, we will remove such data to the extent required by applicable law.

XI. CHANGES TO THIS PRIVACY POLICY

We reserve the right to change this Privacy Notice. Any changes will become effective when we post the revised Privacy Notice on the Services. In some cases, we may provide additional notice by adding a statement to our Websites or sending you a notification by email or through a Website portal. Please make sure your contact information is up to date so that we can communicate changes to our Privacy Notice. Cintas reserves the right to update or modify this Privacy Notice at any time and without prior notice. The “Last Updated” legend at the top of this Privacy Notice indicates when this Privacy Notice was last revised. To the extent any provision of this Privacy Notice is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.

XII. RESIDENTS OF THE EUROPEAN ECONOMIC AREA / UK

A. THE COMPANY'S LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA

The lawful basis for Cintas’ processing of your personal data will depend on the purposes of the processing. For most personal data processing activities covered by this Privacy Notice, the lawful basis is that the processing is necessary for Cintas’ legitimate business interests referred to below. Where we process personal data in relation to a contract, or a potential contract, with you, the lawful basis is that the processing is necessary for the performance of our contract with you or to take steps at your request prior to entering into a contract. When we are required to disclose personal data to EEA or UK law enforcement agencies or other governmental bodies, we do so on the basis that we are under a legal obligation to do so. We will also use consent as the legal basis where we deem appropriate or to the extent required by applicable law, for example, before we collect precise location data from your mobile device.

B. ADDITIONAL INFORMATION ABOUT THE RETENTION OF YOUR PERSONAL DATA

To determine the period for which your personal data will be retained in accordance with this Privacy Notice, Cintas considers criteria such as: (i) any applicable legal requirements to retain data for a certain period of time; (ii) any retention obligations related to actual or potential litigation or government investigations; (iii) any retention requirements in relevant agreements with our Customers or Business Partners; (iv) the date of your last interaction with Cintas; (v) the length of time between your interactions with Cintas; (vi) the sensitivity of the data; and (vii) the purposes for which the data was collected.

Your personal data may also be retained in light of the statute of limitations of personal actions that could be lodged against the company or of the infringements of the legal obligations applicable to Cintas.

C. INTERNATIONAL TRANSFERS OF PERSONAL DATA

Cintas is based in the U.S. If you are accessing the Service from outside of the U.S., please be aware that personal data collected through the Service may be transferred to, processed, stored, and used in the U.S. Data protection laws in the U.S. may be different from those of your country of residence.

Some countries outside of the EEA/UK are recognized by the European Commission and/or the UK government as providing an adequate level of data protection according to EEA/UK standards: the list of the EEA’s adequate jurisdictions is available here, and the list of the UK’s adequate jurisdictions is available here. For transfers from the EEA or the UK to countries not considered adequate by the European Commission or the UK government (as applicable), we have put in place adequate measures, such as the standard contractual clauses adopted by the relevant authority to protect your personal data. You may obtain a copy of these measures by contacting us in accordance with the “Questions About This Privacy Notice” section below.

D. YOUR INDIVIDUAL RIGHTS

If you would like to request to access, correct, update, suppress, restrict, or delete personal data, object to or opt out of the processing of personal data, or if you would like to request to receive a copy of your personal data for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), you may contact us in accordance with the “Questions About This Privacy Notice” section below. We will respond to your request consistent with applicable law.

In your request, please make clear what personal data you would like to have changed or whether you would like to have your personal data suppressed from our database. For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion.

E. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY:

Cintas will use its best efforts to address and settle any requests or complaints brought to its attention. In addition, you have the right to approach the competent data protection authority with requests or complaints. This can be the supervisory authority in the country or federal state where you live.

XIII. RESIDENTS OF CANADA

This Privacy Notice explains the purposes for our collection, use, and disclosure (“process(ing)”) of personal data, or we will disclose additional purposes at or before we collect your personal data.

A. CONSENT

To the extent required by applicable Canadian law, we will obtain your consent to process your personal data, except we are authorized or required by law to do so without your consent. Your consent may be implied or express, depending on the nature and sensitivity of the personal data. For express consent, it may be obtained orally, in writing, or electronically, and will not be required beyond what is required for use to provide you access to the Websites, Services, products, or other services.

You may withdraw consent at any time by giving us reasonable notice, unless withdrawing consent would frustrate our performance of a legal obligation. If you withdraw consent, you may not be able to fully use our Website or Services, or we may not be able to fulfill your requests or provide you products or services.

B. ACCURACY AND RIGHT TO RECTIFICATION

We will make reasonable arrangements to ensure that your personal data we process is as accurate and complete as necessary for its intended use. You may request that we correct any errors or omissions in the personal data we process about you. If we determine that your request is reasonable, we will correct the personal data and send the corrected personal data to the third parties with whom we shared that personal data, where required. If we determine that your request is not reasonable, we will annotate the personal data, noting that the correction was not requested but not made.

C. RIGHT TO ACCESS

You also have the right to request access to your personal data, information about the ways in which your personal data is or has been used, and the names of the third parties with whom we have shared your personal data. You may exercise these rights by making your request in writing and being able to prove your identity before we honor your request. We will provide the requested information within the time period required by law, or if we are authorized to refuse access, we will tell you in writing, stating our reasons and outlining further steps you can take.

D. INTERNATIONAL TRANSFERS

Please be aware that personal data collected through the Service may be transferred to, processed, stored, and used outside of your province of residence, including in the U.S. Data protection laws in the U.S. may be different from those of your province or country of residence. See Information We Disclose to Third Parties for information on the purposes for the transfer of your personal data to third parties, including Service Providers, in the U.S. You may obtain written information about our policies and practices with respect to Service Providers outside Canada by contacting our Chief Compliance officer or their team by emailing us at [email protected].

Under such circumstances, we comply with all applicable global privacy and data protection requirements. All cross-border transfers of your personal data will comply with the local privacy laws of the jurisdiction from which we are transferring the data or as otherwise applicable, as well as with the terms of this Privacy Notice. We will provide appropriate safeguards for cross-border transfers in accordance with our legal obligations under applicable data protection laws. However, your personal data may be accessible by government, law enforcement, or other authorities in the U.S.

E. INTERNAL POLICIES

In addition to the measures to protect personal data described in this notice, we have internal procedures and policies regarding our handling of personal data to facilitate our compliance with this Privacy Policy and applicable laws, including with respect to retention of personal data, access to personal data (including limiting access to personal data to those of our personnel, such as personnel in our customer service, billing, and fulfillment departments, who require access for the purposes described in this notice), and complaints. If you would like additional information about these procedures and policies, please contact us as described below.

F. COMPLAINTS

Please contact us at the address, email, or phone number below if you would like to make a complaint or ask questions about our processing of your personal data. You may be required to prove your identity before we can discuss any complaint or request involving personal data.

XIV. QUESTIONS ABOUT THIS PRIVACY NOTICE

If you have any questions about this Privacy Notice or our use of your personal data or otherwise would like to register a complaint, please contact:

Chief Compliance Officer
Cintas Corporation
6800 Cintas Boulevard
P.O. Box 625737
Cincinnati, Ohio 45262-5737
[email protected]
1-844-378-7411