Privacy Policy

Effective Date: December 12, 2023

Most Recent Update Date: February 28, 2024



Introduction


Brassardburo Inc. recognizes the importance of protecting your personal information. This policy explains how we collect, use, store, and disclose your personal information. Personal information is any information about you that directly or indirectly identifies you (for example, by associating it with other information).

This policy applies to users and customers of our websites, applications, services, and products, but does not apply to our staff members, applicants, and suppliers. By providing us with your personal information after being informed of this policy, in accordance with applicable laws, you consent to the collection, use, storage, and disclosure of your personal information as outlined in this policy. Your consent may also be implicit in certain cases, based on your reasonable expectations.

We reserve the right to update this policy at any time, and these changes will take effect on the date indicated in the modification. You are encouraged to regularly check if this policy has been modified. We consider that you have accepted the modifications to this policy if you continue to provide us with personal information after the modifications come into effect.


Who is the company collecting personal information?


Your personal information is collected by the Company on its own behalf. Your personal information may also be collected on our behalf by third parties, for example: technology service providers such as an order platform or a newsletter manager, payment service provider as described below.


How are your personal information collected and what information is collected?


Your personal information is collected directly from you when you provide it to us, for example:

  1. - online on our website;

  2. - through emails you send us;

  3. - when you call us;

  4. - when you chat with us.

In addition to the above, we may also collect personal information when you decide to subscribe to a newsletter, participate in a contest, or participate in a survey.

We collect the following personal information:

name, first name, postal address, email address, phone numbers, details of communications between you and us, details of purchases and orders.

The types of personal information we collect depend on several factors and the context. We only collect personal information that we consider necessary for the conduct of our activities and for the achievement of the specified purposes.

Personal information may be collected if it is publicly available online, for example, on social media accounts or as permitted by applicable laws. Additionally, we may collect personal information from our business partners or other third parties, provided that these third parties confirm that you have authorized them to provide us with this information or that you expressly consent to it.

We automatically collect personal information on our websites and applications, which is provided through analytical tools or digital markers. These analytical tools only collect a limited set of data, including Internet Protocol (IP) address, date and time of visit, pages visited, actions taken on the website, domain used to access the website, type and version of browser or operating system you are using, as well as the website you accessed immediately before and after ours. This information is collected using cookies, as further described below.

We do not collect any payment card information. Payments made on our websites or applications are processed directly by a service provider, who has sole access to the payment card information. Online transactions are secured in accordance with the transmission standards of the service provider, to allow for secure transmission and processing of transactions, specifically in accordance with the PCI (Payment Card Industry) standard. Payment card information is encrypted at the time of the transaction.


For what purposes are personal information collected?


We collect personal information for the following purposes:

  1. - provide requested services or information requested by you;

  2. - process your requests and orders;

  3. - ship ordered products;

  4. - manage billing and process payments;

  5. - address and resolve complaints and dissatisfactions;

  6. - offer personalized recommendations based on purchasing profile, if you have agreed to the installation of cookies;

  7. - communicate with you in the course of our activities, for internal quality assurance purposes, or to manage the quality of the information provided;

  8. - detect and prevent fraud;

  9. - inform you about news, updates, information, and special offers regarding the Company's services and products, in accordance with anti-spam laws and with your express consent when required;

  10. - administer your account or services intended for you, including reward programs, draws, and contests;

  11. - as required or permitted by applicable laws.


What technologies are used that include functions to identify, locate, or profile individuals?


We may use cookies. Cookies are pieces of information sent to your computer or mobile device when you visit a website. Cookies are stored, either temporarily or permanently, on the hard drive of your computer or mobile device, thus leaving a trace of your visit. When you visit a website, a cookie can be created and stored, allowing you to be 'recognized' each time you visit the website.

Cookies that allow us to identify, locate, or profile you are disabled by default. You must first accept them. You can refuse these cookies, but in such a case, you may not be able to benefit from certain features.

Cookies may allow us to analyze your personal preferences, interests, or behavior when you browse the Internet. They thus improve your online experience by recording your browsing preferences, analyzing the operation of our websites, performing statistical analyses, and recommending content to you.


We notably use the following cookies:


Cookies Utility Duration
.ASPXAUTH Session Identification Session
ASP.NET_Sessionid Session Identification Session
EasyEcomAdmin.ASPXAUTH Admin Session Identification Session
MerchantisLocked Configure multiple databases Session
OrderId Identification of grocery cart 1 year
ProductListing_DisplayMode Product list display choice Session
ProductListing_EnterBy Product list-page items frequently ordered - My/All orders Session
ProductListing_ResultPerPage Number of results per product list page Session
ProductListing_SOrtBy Sorting order of product list Session
UserResultPerPageAddressSearch Address list (My account) 1 year
UserResultPerPageCreditCardSearch Credit card list 1 year
UserResultPerPageOrderSearch Number of results per page in order tracking 1 year
UserResultPerPageSearch Number of results per page in user search 1 year
UserSessionId Session Identification 1 year
_atuvc Cookie for component addition 1 year
kLng Site language display 1 year
visited Used to detect the first access of a session to the site to redirect to the homepage in the user's browser language Session
_go Google Analytics 2 years
_got Google Analytics Session
_gid Google Analytics 1 day

We will ask you in advance whether you accept or refuse the installation of cookies, if these cookies allow us to identify, locate, or profile you.

Many major websites use cookies. Most browsers are initially configured to accept them. If you wish, you can change your browser settings to notify you when you receive a cookie or to refuse to accept them.

Although you are not required to accept cookies, it is possible that some features of a website may not work properly if you refuse to install cookies. You can consult the following link for an overview of how to block or delete cookies on the most common browsers: https://www.allaboutcookies.org/fr/


Is it possible to refuse the collection of personal information?


You can refuse the collection of personal information about you. However, refusing such consent may limit our ability to offer you services or sell you products. We will not refuse to comply with a request for a product or service from you if you refuse such consent unless the collection is necessary in such a context. Your consent for us to use your personal information for secondary purposes (e.g., for marketing) is therefore not mandatory.


Will we make decisions based solely on automated processing of your personal information?


We do not intend to make decisions based solely on automated processing of your personal information.


Who has access to personal information within and outside the company?


Only members of our staff who are authorized and need to have access to your personal information for the performance of their duties have access to it, for example: customer service center, billing department, and individuals responsible for providing products and services to customers. These individuals only have access to the personal information necessary to perform their tasks.

We will only disclose personal information about you to third parties (the type of information disclosed depends on the situation) in the following cases:

  1. - you have authorized us to disclose the information to a third party for a specific purpose;

  2. - third parties acting on behalf of the Company as agents or service providers (e.g., IT service providers, hosting providers, marketing solution providers, transportation and delivery companies for ordered products, as well as our related companies with whom we share services, infrastructure, systems, and technologies), and the information is disclosed to them only in this capacity, provided that these third parties must comply with strict contractual terms requiring them to maintain the confidentiality of all information, use it only for this purpose, and not retain the information after the contract expires;

  3. - if a person acts as your representative or if we reasonably believe that the person is acting under appropriate authorization (e.g., guardian, holder of parental authority, etc.) or if it is a person who holds a service or product jointly with you;

  4. - to satisfy legal requirements;

  5. - if we are required to provide personal information in response to a valid court order, subpoena, government inquiry, or as otherwise required by applicable laws;

  6. - if the Company ever sells its business or assets, in whole or in part, or merges, as required by such transaction, as well as in the context of due diligence;

  7. - as required or permitted by applicable laws.


What are the roles and responsibilities of our staff members who have access to personal information?


Our staff members are informed by us of their obligation to preserve the confidentiality of personal information, and we raise their awareness of the importance of protecting the confidential nature of personal information. Our staff members can only use personal information in accordance with the terms of this policy and our other policies.

We have established the roles and responsibilities of our staff members throughout the processing cycle of your personal information, from collection to destruction, in a personal information governance and management policy.


What measures are taken to ensure the confidentiality and security of personal information?


We implement reasonable security measures of a physical, technological, and administrative nature to protect personal information against loss or theft, as well as against unauthorized access, disclosure, copying, use, or modification. The nature of security measures varies depending on the sensitivity of the personal information collected, the quantity, distribution, and format of the personal information, as well as the storage methods. These measures include:

  1. - Physical measures, such as locked premises;

  2. - Technological measures, such as firewalls and SSL encryption keys;


How long do we retain your personal information?


We retain the personal information we collect for as long as necessary for the purposes identified, as long as it is reasonable to do so for customer service, legal, or business purposes. The retention period depends on the identified purposes and the nature of the information. At the end of this period, the information is securely and permanently destroyed or anonymized, in accordance with applicable laws.


What rules apply to third-party operated websites, applications, and social media sites?


Our websites or applications may contain links to third-party websites or applications (collectively and individually 'Third-party Sites') that may take you away from our website or application. We provide these links for convenience. Third-party Sites are not under our control, and therefore, we have no control over the privacy and confidentiality practices of Third-party Sites. Therefore, any personal information transmitted through Third-party Sites is subject to the privacy policy of these Third-party Sites. It is your responsibility to review them to ensure the protection of your personal information.

We may use third-party social media Sites (e.g., Facebook, LinkedIn, and Instagram). Social media accounts are public and are not operated by us. If you choose to interact with us through these third-party social media Sites, you should first review their privacy policy.

Personal information provided to us through social media accounts is collected to capture conversations (e.g., questions and answers, comments, 'likes,' shared tweets) between you and us. They may be used to respond to requests, conduct statistical assessments, and for reporting and all other purposes stated in this policy.


What are your rights and how can you exercise them?


You have the following rights, all within the limits and according to the terms of applicable laws:

  1. - Access your personal information;

  2. - Rectify or update your personal information;

  3. - Withdraw your consent at any time (withdrawing consent binds us regarding the use of personal information based on the consent in question, but will not affect use based on your consent before its withdrawal);

  4. - Request the deletion of your personal information if it is outdated or not justified for the purposes of collection.

If you request to withdraw your consent to the use, disclosure, and retention of your personal information, the processing of this request will depend on the situation and purpose. Depending on the case:

  1. - You can withdraw your consent, but we may no longer be able to provide you with a service or product dependent on it;

  2. - You cannot withdraw your consent because the processing of your personal information is necessary or mandatory.

In any case, we may need to retain certain personal information to fulfill our obligations imposed by law.

You can exercise the above rights at any time by contacting the person responsible for the protection of personal information of the Company (see below).

The request must contain sufficient information for us to process it. We undertake to respond to requests in a reasonable time frame and, to the extent possible, within thirty (30) days, as provided by applicable laws. However, we must first verify the identity of the person making the request.

We will ensure that your personal information is as accurate, complete, and up-to-date as possible for the purposes for which it is used. However, it is your responsibility to ensure that you update your personal information, such as your contact details, with us.


What is the process for handling complaints regarding the protection of personal information?


You can lodge a complaint with the person responsible for the protection of personal information of the Company (see below) if you believe that we are not complying with our obligations regarding the protection of confidential information. We will acknowledge receipt of your complaint, may contact you for further clarification, conduct an investigation into the complaint confidentially, and inform you of the findings of the investigation. If your complaint is justified, we will then take appropriate measures to correct the situation. If you are dissatisfied with this internal review of your complaint, you can contact the authorities responsible for the protection of personal information: Office of the Privacy Commissioner of Canada (at the federal level), Commission d’accès à l’information du Québec.


Who can you contact for any questions regarding your personal information and who is responsible for the protection of personal information of the Company?


The person with the highest authority in the Company has delegated the role of responsible for the protection of personal information to the IT technician, whose contact information is as follows: steve.doucet@brassardburo.com.

You can contact the person responsible for the protection of personal information of the Company to exercise your rights, to ask questions about our personal information practices, or to make a complaint regarding the protection of personal information.

This website uses cookies.

BrassardBuro respects your privacy. We are therefore committed to protecting the personal information of our users. We have established this privacy policy to be transparent about what data we collect, why we collect it, who we share it with, how you can access it and how to correct it, if necessary.