Privacy Policy

JOHNNY AIR RETAIL CORP. (Parent company of Johnny Air Cargo Canada) is committed to protect and respect your personal data privacy. We are at the forefront of not only implementing but also complying with Relevant Data Privacy Laws.

This PRIVACY POLICY applies only to our online activities and for our visitors in our website with regard to the information that they share. This policy is not applicable  to any information collected offline.

 

1. SERVICE DESCRIPTION

 

What services does our organization provide?

We carry on the business, either as principal or broker, of private express and/or messengerial services,delivering, international freight forwarding, storing and warehousing of goods, wares, parcels, letters, packages, freight, documents, and merchandise of any kind or description, and to do any and all acts necessary or incidental thereto, by means of air, land, and sea transport.

 

1. PERSONAL INFORMATION THAT ARE COLLECTED

 

What are the actual personal information we collect?

In line with our corporate policies in relation to data subjects, it is important that we collect, use, store, and retain your personal information such as full name, home address/billing address,/shipping address, including photos as proof of delivery, e-mail address, credit card information, telephone number, and other personal contact numbers.

In some instances, sensitive personal information may also be collected but only limited to the data subject’s date of birth, nationality, marital status, and gender, and only as is reasonable and necessary for a prescribed legitimate purpose stated in this Privacy Policy and accomplished order and consent forms.

 

1. COLLECTION METHOD AND TIMING OF COLLECTION

 

How and when do we collect personal information?

Personal data is collected when:

1. Filling out our forms such as online registration forms, order forms, supplier accreditation forms, release forms, feedback forms, contracts, and client conforme letter;

2. Disclosing your personal information through email, chat, phone calls, or in-person verbal communication with authorized representatives;

3. Communicating through any of our social media accredited accounts; and

4. Signing up for our digital services such as on-site POSand other digital media interfaces requiring digital sign-up process.

What are Log Files?

We follow a standard procedure of using log files. These files log visitors when they visit a website and all hosting companies do this as part of hosting services analytics. The information collected by log files includes internet protocol (IP) addresses, browser type, internet service provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.

What are Cookies and Web Beacons?

Like any other website, we use “cookies” to store information including visitors’ preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and/or other browser information. Similarly, these are not linked to any information that is personally identifiable to any data subject. You can choose to disable cookies through your browser options.

Do we collect children’s information?

Another part of our priority is by adding protection for children while using the internet. We do not knowingly collect any personal information or any sensitive personal information from children under the age of thirteen (13) years. If you think your child provided any personal information on our website, we strongly encourage you to contact us immediately and we will do our best to promptly remove such information from our data base.

 

1. PURPOSE OF COLLECTED PERSONAL INFORMATION

 

Why do we collect personal information?

Overall, we use the collected data for any of the following purposes , and only as is reasonable and necessary for a prescribed legitimate purpose stated below:

1. Appraise and carry out the specific transactions and inquiries with us;

2. To give timely, reliable, and value-added service to clients and customers, including but not limited to shipment tracking, delivery, transportation, account management, billing, supply-chain management, technical support, and related services;

3. To improve customer service experience by conducting appropriate research and analysis through surveys and polls;

4. To enable, develop, implement, and manage services including but not limited to direct marketing and advertising materials and polls that help us enhance our services;

5. For vendors, contractors, and third-party services, to carry out due diligence and screening activities in accordance with legal, regulatory obligations or company policy, as well as to track and measure performance or quality of goods or services received or rendered, and processing of payments;

6. For employment, to consider and evaluate candidates and to process data necessary for the employment including but not limited to payroll, benefits, allowances, refunds, reimbursements, and other purposes that demand the processing of personal data;

7. To comply with legal obligations and regulatory requirements as provided under the law and as required by government agencies and instrumentalities; and

8. To perform and comply with other processing or disclosure directly related to any of the above purposes.

 

1. STORAGE AND TRANSMISSION OF PERSONAL INFORMATION

 

How do we store, protect, and transmit personal data?

All data are stored and preserved in accordance with the policy of Johnny Airand/or as required by industry standards, laws, rules, and regulations. Reasonable steps are taken to ensure that the modes that personal data we collect, use, or disclose to affiliates are accurate, complete, timely and up-to-date in terms of technological and organizational innovation. This Privacy Policy is strictly enforced within the entire organization ofJohnny Air and has implemented technological, organizational,  and physical security measures to safeguard the data from loss, misuse, unauthorized or accidental access or disclosure, modification, alteration, destruction, and other unlawful processing.

Employees and agents of Johnny Air are authorized to access personal data collected and stored only upon request of the data subject or his/her agent. Employees and agents are bound by a strict confidentiality and ethical code in accessing personal information and are subject to disciplinary actions upon showing that he/she failed to follow the aforesaid code. 

 

 

1. METHOD OF USE

 

Will personal information be subject to additional processing before it is used for the stated purposes?

Personal information shall be used as it is and will no longer be subjected to any additional processing other than those listed services and purposes above.

 

Do we perform profiling?

No, we don’t. “Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person.

 

1. LOCATION OF PERSONAL INFORMATION

 

Where do we store personal information collected and processed?

Secured Data Rooms are established and constantly monitored to continuously protect stored collected data. Using a secured connection, onlyauthorized personnel and agents can access and download your personal data from the security systems in place. Upon request, clients or their duly authorized agents, may be given to access their own personal data, for any purpose, except for those purposes contrary to law, morals, public policy, or public order. Whenever applicable, the Data Protection Officer may refuse to grant access following applicable laws, rules, or regulations, or orders from a competent court, tribunal, agency, or instrumentality. Such refusal shall be communicated to the requesting individual or data subject through written notice that sets out the reason for the refusal

Johnny AirRetail Corp have implemented technical security measures to make sure that there are appropriate and sufficient safeguards to secure the processing of personal data, particularly the computer network in place, including encryption and authentication processes that control and limit access. They include the following, among others:

1. We use an intrusion detection system to monitor security breaches and alert the organization of any attempt to interrupt or disturb the system.

2. Johnny Air Retail Corp shall first review and evaluate software applications before the installation thereof in computers and devices of the organization to ensure the compatibility of security features with overall operations.

3. We also review security policies, conduct vulnerability assessments and perform penetration testing within the company on a regular schedule to be prescribed by the appropriate department or unit.

4. Each personnel with access to personal data shall verify his or her identity using a secure encrypted link and multi-level authentication.

 

1. THIRD PARTY TRANSFER

 

Do we transfer personal information to third parties for further processing?

Personal data under the custody of Johnny Airmay be disclosed only pursuant to a lawful purpose, and only to authorized recipient of such data. All employees, personnel, and affiliates of Johnny Air shall maintain strict confidentiality and secrecy of all personal data that come to their knowledge and possession, even after resignation, termination of contract, or other contractual relations.

We may share information about our clients and customers to complete their transactions and provide them with personalized products and services with carefully selected affiliates and sub-contractors such as trucking, forwarding, and courier services, that perform services on our behalf. We work with these companies for specific and lawful purposes and maintain strict confidentiality agreements.

Johnny Air Retail Corp may also share collected information whenever required or permitted by applicable laws, rules and regulations, including laws, rules, and regulations of the United States of America and other countries where affiliates are located, and only when such disclosure and sharing of data is necessary to:

1. Comply with a legal obligation or in response to a request from law enforcement or public authorities pursuant to the usual conduct of the business of Johnny Air;

2. Protect and defend property rights of Johnny Air;

3. Act in urgent circumstances to protect the personal safety of Johnny Air’s employees, agents, contractors, and affiliates; or

4. Protect against any legal actions and liabilities.

Johnny Air may also share personal data with United States regulators and with other self-regulatory bodies where we conduct business.

 

1. RETENTION PERIOD

 

How long do we keep collected personal information and how they are disposed?

JohnnyAir processes personal data in accordance with the parameters and periods provided by Relevant Data Privacy Laws. Further, all information gathered for the purposes it was collected and processed, shall be retained for a period not longer than Five (5) years from collection.

Retention of data may exceed said period when the data subject or any competent court or competent government agency, tribunal, or instrumentality requests or orders specific data to be retained longer thanFive (5) years. The retention period may also exceed when the law, related rules, regulations, and recognized practices require a specified period of retention. Similarly, upon written notice to the data subject and after getting its consent, the retention period may exceed the period, provided that written notice shall expressly apprise the data subject of the purpose of the extension and shall set another period upon which the data shall be deleted.

After the lapse of the period of retention, all hard and soft copies of the personal information shall be disposed and destroyed, through secured means and within industry standards and in a manner that prevents reconstruction or retrieval of the data, including but not limited to the shredding of documents, permanent deletion of soft copies, and permanent destruction of back-up files. Once deleted, any personal data will no longer be searchable or included in anonymous searches and will be completely removed from the filing system and the secured data rooms.

 

1. PARTICIPATION OF DATA SUBJECT

 

What can the data subjects do in order to exercise their rights?

Every data subject has the right to reasonable access to his or her personal data being processed by Johnny Air. Other available rights include: (1) right to dispute the inaccuracy or error in the personal data; (2) right to request the suspension, withdrawal, blocking, removal or destruction of personal data; and (3) right to complain and be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal data. Accordingly, procedures were set for inquiries and complaints that will specify the means through which concerns, documents, or forms submitted to Johnny Air shall be received and acted upon.

 

1. INQUIRY

 

How can you reach us?

Through our Data Protection Officer (DPO).

Office Address: 306 Wilson Avenue, Toronto, Ontario M3H 1S8 Canada

Contact Number :(416) 551-0252

Email Address: dpo@johnnyaircargopadala.com

Any action to a request for correction, erasure, and/or objection to processing your personal data as it appears in our records is subject to applicable laws, rules, and regulations under Relevant Data Privacy Laws.

 

1. EFFECTIVITY

 

Effectivity

The provisions of this Privacy Manual are effective this 22nd day of February 2023, until revoked or amended by this company, through a Board Resolution. Johnny Air Cargo and Delivery Services Inc., reserve the right to revise or amend this Manual at any time with or without notice. Changes in the Privacy Manual become effective thirty (30) days after the first posting of any revised or amended version at our website, company premises, or the submission of the revised or amended copy with the National Privacy Commission whenever required.

 

1. CONSENT

 

Consent

I have read this Privacy Policy, understood its contents and consent to the processing of my personal data. I understand that my consent does not preclude the existence of other criteria for lawful processing of personal data, and does not waive any of my rights underany Data Privacy Law, and other applicable laws.