PIPEDA requires private-sector organizations to collect, use or disclose your personal information by fair and lawful means, with your consent, and only for purposes that are stated and reasonable.
An enterprise may only collect personal information that is essential to the business transaction. If further information is requested, you are entitled to ask why, and to decline to provide it if you are dissatisfied with the answer. You should still be able to complete the transaction, even if you refuse to give out more personal information than is warranted.
https://www.priv.gc.ca/en/abou