• Registration Information. When you register for a visit, you will be asked for your first and last name, mobile phone number, and/or email address. This information is used to register you for your arrival time and to communicate to you about your visit. Visit Information. To register for a place in line, you will be asked to provide the time and building you wish to visit. This information includes the date and time of your visit and building location you are visiting.

• Line Updates. CF Guest List records communications with you by SMS and email about your use of CF Guest List and your place in a line. Line Management Information. CF Guest List records your place in a line and the length of time you waited in a line.

• Support Requests. If you contact us to ask us a question about CF Guest List or communicate with us via email or text message, we will collect contact information from you such as your name and email address or mobile phone number in order to respond to your request. We will also collect information about your request and how we responded. If you are seeking technical support, we may also collect additional technical information from you to respond to your request.

• Technical Information. When you use CF Guest List to register and monitor your wait time, CF Guest List automatically collects information from your device or session. This information can include (among other things) usage data, referring/exit pages and URLs, device type and operating system, browser type and version, date and time of use, IP address, mobile network (if applicable). This information is used to provide the functionality of CF Guest List including to properly format information for your device.

• Analytics. We combine Visit Information, Line Management Information, Support Requests and Technical Information to develop analytics information for research and operational planning. For example, we may aggregate and create statistical information in order to understand traffic patterns for our buildings, number of visitors, occupancy levels, busy periods, wait times, CF Guest List usage, CF Guest List effectiveness and for business planning purposes.

Your personal information is retained for as long as necessary to assist you with your visit and for backups for business continuity and disaster recovery purposes. In general, we initiate deletion of your data within two business days after your visit or less. Certain service providers, such as for SMS and email communications, may keep this information for longer until deleted in accordance with their established retention schedules.

CF Guest List is powered by Waitwhile, Inc., 548 Market St., Suite 45862, San Francisco, CA 94104 and its service providers, which include email and SMS service providers.

Waitwhile may use Visit Information and Line Management Information for the purposes of measuring and enhancing the functionality and operation of their services.

Cadillac Fairview uses the services of third parties to manage the security of our buildings and the occupancy of our elevators and buildings. These third parties will have access to CF Guest List to facilitate your visit.

• Analytics and Insights. We may disclose non-identifiable information such as aggregated information and statistics about how users use CF Guest List, number of visitors, wait times, and user experiences to third parties.

• Legal purposes. We may also disclose your personal information if we are permitted or required to do so by law. For example, these circumstances include: (a) if such disclosure is necessary for us to receive legal advice; (b) if we are required to disclose your personal information in order to comply with any legal obligation or the decision of a judicial authority; (c) if disclosure is requested by an investigatory body, law enforcement official or governmental authority which has lawful authority to request the disclosure of the information in respect of an investigation; (d) if we have reasonable grounds to believe that the information relates to a breach of an agreement or contravention of a law; (e) to detect, prevent or investigate fraud; and (f) other purposes described in the Cadillac Fairview Privacy Policy. We also share personal information about incidents in our buildings to investigate the incident, file an insurance claim, report to or assist police in an investigation, and to respond to or prevent a danger to health, life or property.

• Business transactions. We may disclose or transfer information to a third party as part of a business transaction, such as the sale of all or a portion of our assets.

Our third party service providers also have access to and will use your personal information. Please see Third Party Service Providers above.

If you are under the age of majority in the province in which you are using CF Guest List, you may only use CF Guest List under the supervision of your parent or legal guardian who agrees to this CF Guest List Privacy Notice. If you are a parent or legal guardian of a minor using CF Guest List, you must monitor and supervise the use of CF Guest List by the minor and you are responsible for all actions of the minor.

You have the right to request access to personal information that we have collected about you. These rights may be limited by law - for example, access rights may be limited if the information is subject to solicitor-client privilege or consists of references to other persons or proprietary information that cannot be severed. You have the right to correct or update any information that we have collected about you. In some cases, if we disagree with your requested correction, we may retain the original information and note your disagreement. You also have the right to withdraw consent to our use of personal information that we have collected about you. In some cases, you may have the right to request that we delete information if it is no longer required for the purposes for which that information was collected or for the purposes of fulfilling legal requirements or protecting our interests or the interests of our building occupants and service providers. You should be aware that it is not always possible to completely remove or delete all of your personal information from our databases without some residual copies of data because of backups, archival systems and other reasons. We will not, however, continue to use your personal information for active purposes once you have requested us not to do so. For assistance in exercising your right to access, correction, deletion or opt-out rights, please make your request in writing to Cadillac Fairview, Attention: Chief Privacy Officer, 20 Queen Street West, Suite 500, Toronto, ON M5H 3R4 or cfprivacy@cadillacfairview.com. Please note that we may request personal information from you in order to authenticate your identity before providing you with access to your personal information or complying with any request to correct or update your personal information.

We maintain physical, technical and administrative safeguards to protect the confidentiality and security of any personal information transmitted to us using CF Guest List. You have a shared responsibility to keep information that is collected or created through CF Guest List safe. You should use a device password and install the latest security updates and anti-virus software on your device.

CF Guest List is powered by services that store and process information in the United States and Canada. We may add or change services that rely on service providers who store and process personal information in other countries.

If you have questions or concerns regarding our handling of your personal information or you wish to verify, correct, or update any of your personal information, you may also write to us at cfprivacy@cadillacfairview.com. Cadillac Fairview has appointed a Chief Privacy Officer. If you wish to contact the Chief Privacy Officer please write to The Cadillac Fairview Corporation Limited., Attention: Chief Privacy Officer, 20 Queen Street West, Suite 500, Toronto, ON M5H 3R4.

We may amend, update and revise this CF Guest List Privacy Notice and apply any changes to information previously collected, as permitted by law. If there are material changes to this policy or our information practices change in the future, we will notify you by posting a notice of our new CF Guest List Privacy Notice on CF Guest List.