Privacy Statement -
City Delivery

What personal information do we collect and use?

• Delivery Information: If you purchase products from a retailer who uses our City Delivery service, they may provide us with your delivery address details (e.g., street address and postal code). We use this information to deliver the requested goods to the delivery recipient using our SDVs.
• Sensor Data: Our SDVs are equipped with various sensors (such as Radars, video cameras and light detection and ranging sensors called LiDAR) that record the surrounding environment. If you are within the surrounding environment of a SDV, your personal information may be collected by the SDV, including an image of your face, general location information, and vehicle license plate number. For more information about our collection and use of information through our SDVs, see our City Delivery Self-Driving Delivery Vehicles Privacy Notice.

How do we share personal information?

• Service Providers: Your personal information may be transferred or otherwise made available to third parties (including affiliates) that provide services to us. For example, we may use service providers to provide services such as IT support, storing data, conducting analytics, providing navigational service and customer support services.
• Legal and Compliance: We and our Canadian, United States and other foreign service providers may provide your personal information in response to a search warrant or other legally valid inquiry or order, or to another organization for the purposes of investigating a breach of an agreement or contravention of law or detecting, suppressing or preventing fraud, or as otherwise may be required or permitted by applicable Canadian, U.S. or other law or legal process, which may include lawful access by U.S. or foreign courts, law enforcement or other government authorities. Your personal information may also be disclosed where necessary for the establishment, exercise or defense of legal claims and to investigate or prevent actual or suspected loss or harm to persons or property.
• Sale of Business: We may transfer any personal information we have about you as an asset in connection with a proposed or completed merger, acquisition or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of City Delivery or as part of a corporate reorganization or other change in corporate control.

Where is personal information stored?

We and our service providers may access, store and otherwise process personal information outside of Canada, including in the United States or other foreign jurisdictions.

How is personal information safeguarded?

We have implemented appropriate technical and organizational security measures in accordance with applicable law to protect your data against manipulation, loss, destruction and access by unauthorized persons. We have controls in place that are designed to restrict access to personal information to employees and authorized service providers who require access to fulfil their job requirements. We are constantly improving our security measures in line with technological developments.

How long is personal information retained?

We retain delivery addresses received from our retailer customers for as long as necessary to fulfil the delivery.

Information that is collected through the SDVs will be retained as long as necessary in order to (a) develop and validate new technology, including safety and security features for the SDVs; (b) improve the SDV experience, including safety and security features; (c) to verify software or hardware updates; (d) resolve any legal disputes, and (e) allow us to meet our legal requirements around retaining records in accordance with established retention periods and policy.

When we no longer need to use your personal data to comply with contractual, statutory, regulatory, or other legal obligations, we will remove it from our systems, and/or take steps to properly anonymize or de-identify it so that individuals can no longer be identified from it.

How to exercise your privacy rights

If we receive a request to access, correct or delete personal information we hold on behalf of one of our customers, we will direct you to the relevant retailer customer and assist our retailer customer in responding, where possible.

You may have the right request to access, correct or delete other personal information in our records, subject to applicable law. You may make such a request by emailing us using the contact information provided in the “Contact Us” section below. We may request certain personal information for the purpose of verifying your identity.

Updates to this Privacy Statement

We may update this privacy statement periodically to reflect changes to our privacy practices. We encourage you to periodically review this page to ensure you are familiar with those changes. We will indicate at the top of this privacy statement when it was most recently updated.

Contact Us

If you have any questions or comments about the delivery of your goods, including the treatment of personal information by the retailer you have made a purchase from, we encourage you to first contact the retailer customer directly or review their applicable privacy policy. If you have any questions or comments about this privacy statement or the manner in which we treat your personal information, please contact our Privacy Lead via email to dataprivacy@magna.com. You may also use our online link for your inquiry by selecting “Magna City Delivery” as the addressee.

Last Update: April 21, 2025