Privacy policy

Purpose of this privacy policy

The purpose of this privacy policy is to inform users of our site of the personal data we will collect, as well as the following information, where applicable:

• The personal data we will collect;
• The use of the data collected;
• Who has access to the data collected;
• The rights of site users;
• The site’s cookie policy.

This privacy policy operates alongside our site’s general terms of use.

Applicable laws

Onyx M3 inc. is a business established in Québec. This policy is governed by the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1), as modernized by Law 25, which is administered by Québec’s Commission d’accès à l’information (CAI).

To the extent it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA) is also respected. Commercial electronic messages are governed by Canada’s Anti-Spam Legislation (CASL).

Person in charge of the protection of personal information

In accordance with Law 25, Onyx M3 inc. has designated a person in charge of the protection of personal information, who ensures compliance with this policy and handles your requests:

Frédérik Lavoie — President, Onyx M3 inc.

Email: [email protected] · Phone: (418) 410-3592

Consent

In accordance with Law 25, your consent to the collection and use of your personal information is clear, free, informed and given for specific purposes. By using our site and providing us with your information, you consent to:

• the terms set out in this privacy policy; and
• the collection, use and retention of the information listed in this policy.

You may withdraw your consent at any time by contacting our person in charge of the protection of personal information.

Personal data we collect

Data collected automatically

We do not collect any data for audience analytics, statistics or advertising, and we use no automated tracking tools. Only strictly technical cookies (security, proper operation) may be set by our host.

Data collected non-automatically

We may also collect the following data when you perform certain functions on our site:

• First and last name;
• Email;
• Phone number;
• Company name;
• The content of your message and, depending on the form, the number of training participants.

This data may be collected through the following methods:

• Contact form;
• Appointment booking;
• Quote request;
• Training registration.

Please note that we only collect data that helps us achieve the objective set out in this privacy policy. We will not collect any additional data without informing you beforehand.

How we use personal data

The personal data collected on our site will be used solely for the purposes specified in this policy or indicated on the relevant pages of our site. We will not use your data beyond what we disclose.

The data we collect when the user performs certain functions may be used for the following purposes:

• Communications;
• Appointment scheduling;
• Marketing.

Commercial communications

If we send you commercial electronic messages (for example a newsletter), we do so in accordance with Canada’s Anti-Spam Legislation (CASL): with your consent, by identifying ourselves clearly and by including a simple, free unsubscribe mechanism in every message. You may unsubscribe at any time.

With whom we share personal data

Employees

We may disclose to any member of our organization the user data they reasonably need in order to achieve the objectives set out in this policy.

Third parties

We may share user data with third parties. These third parties will not be able to access user data beyond what is reasonably necessary to achieve the given objective.

We use the following service providers, which may process or host certain data on our behalf: Microsoft (Bookings appointment scheduling and Office 365), Cloudflare (website hosting and email delivery) and Web3Forms (processing of certain forms). Some of these services host data outside Québec (notably in the United States); data is transmitted there only to the extent necessary to provide the service.

Other disclosures

We undertake not to sell or share your data with third parties, except in the following cases:

• if required by law;
• if required for any legal proceedings;
• to establish or protect our legal rights;
• to buyers or potential buyers of this company in the event that we seek to sell it.

If you follow hyperlinks from our site to another site, please note that we are not responsible for, and have no control over, their privacy policies and practices.

Prohibition of bulk downloading and web scraping

It is strictly prohibited to use automated tools, robots, scripts or any other technical means to:

• Bulk download the content of this website;
• Automatically extract data (web scraping);
• Systematically copy the site’s content;
• Overload our servers with automated requests.

Any violation of this prohibition may result in:

• The immediate blocking of your IP address;
• The permanent suspension of your access to the site;
• Legal action for infringement of our intellectual property rights;
• A claim for damages.

Retention period for personal information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or to meet our legal obligations. Once those purposes are achieved, the information is destroyed or anonymized, in accordance with Law 25.

How we protect your personal data

Our commitment is to ensure the security and confidentiality of our users’ personal data. The information collected through our appointment booking page on Microsoft Bookings is limited to essential data, such as last name, first name, phone number, email address and company name. To ensure its protection, we have put the following security measures in place:

Secure storage

The data collected is stored on Microsoft’s secure servers. Microsoft Bookings is part of the Office 365 suite, which complies with numerous international security and compliance standards.

Secure transfer

When information is entered, data is transferred using the HTTPS protocol, ensuring that the data is encrypted and cannot be intercepted during transmission.

Limited access

Only authorized employees who need to access this data to perform their professional duties may do so. They are trained in our confidentiality protocols and are committed to respecting the confidentiality of the information.

Although we take all reasonable precautions to ensure that our user data is secure and that users are protected, there always remains a risk of harm. The Internet as a whole can sometimes be insecure, so we are unable to guarantee the security of user data beyond what is reasonably achievable.

Confidentiality incident

In the event of a confidentiality incident (unauthorized access, use, disclosure or loss of personal information), we take reasonable measures to reduce its consequences. If the incident presents a risk of serious injury, we will notify the affected individuals and the Commission d’accès à l’information, and we will keep a register of incidents, in accordance with Law 25.

Minors

In Québec, consent to the collection of the personal information of a minor under the age of 14 must be given by the person having parental authority or by the tutor. We do not knowingly collect information about a child under the age of 14 without such consent.

Your rights

Under Law 25, you have the following rights with respect to the personal information we hold about you:

• Access: consult the personal information we hold about you;
• Rectification: have inaccurate, incomplete or ambiguous information corrected;
• Withdrawal of consent: withdraw your consent to the collection or use of your information at any time;
• Portability: obtain, in a structured and commonly used technological format, the computerized information you have provided to us;
• De-indexation: request that the dissemination of information cease or that a hyperlink giving access to it be removed, in the cases provided for by law.

To exercise these rights, contact our person in charge of the protection of personal information (details above). We respond to any request within the time limits provided by law.

Recourse with the Commission d’accès à l’information

If you believe we have not handled your personal information or your request in accordance with the law, you may first contact our person in charge of the protection of personal information. You also have the right to file a complaint with Québec’s Commission d’accès à l’information (cai.gouv.qc.ca).

Cookie policy

A cookie is a small file stored on a user’s hard drive by the website. Its purpose is to collect data relating to the user’s browsing habits.

Our site does not use audience-analytics cookies or advertising/targeting cookies. We do not track your browsing for statistical or marketing purposes.

Strictly necessary cookies and storage

We use only functional local storage to remember certain selections (for example the contents of your quote request) and keep them from page to page. Our host (Cloudflare) may also set strictly technical cookies necessary for the security and proper operation of the site. These are not used to profile you.

You can set your browser to be notified when a cookie is set or to disable cookies entirely; this may, however, reduce the quality of your experience.

Amendments

This privacy policy may be amended from time to time in order to maintain compliance with the law and to account for any changes to our data collection process. We recommend that our users review our policy from time to time to ensure they are informed of any updates. Where necessary, we may notify users by email of changes to this policy.

Contact

If you have any questions, please do not hesitate to contact us:

Phone: (418) 410-3592 · Email: [email protected] · Address: 4 avenue St-Jacques, Saint-Raymond, Québec G3L 3X6