Personal Information Governance Policy

1. Purpose of the Policy

This policy establishes the standards and procedures for the collection, use, retention, disclosure, and destruction of personal information in accordance with the Québec Bill 25.

2. Collection of Personal Information

a. We collect only personal information that is necessary for the identified purposes.

b. We obtain the consent of individuals before collecting their personal information, unless the law allows or requires collection without consent.

c. We inform individuals of the purposes for which their personal information will be used.

3. Use and Retention of Personal Information

a. We use personal information only for the purposes for which it was collected unless the individual consents or the law requires otherwise.

b. We retain personal information for as long as is necessary to fulfill the purposes for which it was collected, in accordance with legal requirements.

c. Personal data will be destroyed 30 days after the account is closed or as soon as they are no longer needed, in accordance with the requirements of Québec Bill 25.

4. Disclosure of Personal Information

a. We disclose personal information only with the consent of the individual, unless the law allows or requires disclosure without consent.

b. We may disclose personal information to third parties, such as subcontractors or partners, only if these third parties have agreed to adhere to this policy and applicable laws.

5. Security of Personal Information

a. We implement security measures to protect personal information against loss, theft, unauthorized access, disclosure, copying, alteration, or destruction.

6. Access to Personal Information

a. We allow individuals to access their personal information and correct it if it is inaccurate.

b. Access requests will be processed in accordance with the requirements of Québec Bill 25.

7. Compliance Responsibility

a. Alain Gaudreau, President of the organization (), is the responsible party for the protection of personal information and will be designated to monitor and ensure compliance with this policy and applicable laws.

8. Training and Awareness

a. All employees will receive training on personal information protection and will be made aware of their obligations under this policy.

9. Policy Review

a. This policy will be regularly reviewed to ensure that it remains in compliance with Québec Bill 25 and best practices in personal information protection.