Privacy Policy.

1. Scope

Who does this policy apply to?

This policy applies to personal information collected by Girouard Conseil TI through its website, forms, email communications, online booking tool, and exchanges related to a service inquiry.

It may apply to website visitors, people who complete a form, people who book a call, prospects, clients, and representatives of client or prospective client organizations.

2. Responsible person

Person responsible for the protection of personal information.

The person responsible for the protection of personal information at Girouard Conseil TI is:

Questions, access requests, correction requests, withdrawal of consent, or other privacy-related requests may be sent to this address.

3. Information collected

What information may we collect?

Depending on your interaction with the website or with Girouard Conseil TI, we may collect the following categories of personal information:

• First name, last name, title, role, or function;
• Organization name, industry, approximate size, and region;
• Email address, phone number, and contact preferences;
• Information submitted in a form or email, including the description of your IT situation;
• Information related to booking a call, including the date, time, time zone, and information submitted through Microsoft Bookings;
• Technical information needed for website operation and security, such as IP address, browser type, device, server logs, and security events;
• Cookie, language, or consent preferences when these features are enabled.

Please do not submit sensitive or confidential information that is not necessary to understand your initial request.

4. Purposes of use

Why do we use this information?

We use personal information only for specific, legitimate, and reasonable purposes, including to:

• Respond to a contact or information request;
• Schedule, confirm, or manage a confidential call;
• Assess whether Girouard Conseil TI can assist you;
• Prepare a proposal, meeting, or scoping discussion;
• Provide advisory services to a client;
• Manage client relationships, billing, administration, and contractual obligations;
• Maintain the security, availability, and integrity of the website;
• Comply with applicable legal, regulatory, tax, or contractual obligations;
• Send advisory communications only where you have consented or where the law permits.

5. Consent

How is consent obtained?

By completing a form, booking a call, writing to us, or using certain features of the website, you consent to the information you provide being used for the purposes identified at the time of collection or described in this policy.

Where required, we request separate consent for marketing communications or non-essential cookies. You may withdraw your consent at any time, subject to applicable legal, contractual, or operational restrictions.

Withdrawing consent may limit our ability to respond to a request or provide certain services.

6. Cookies and similar technologies

Do we use cookies?

The website may use essential cookies required for operation, security, preference management, or technical performance. If analytics, advertising, or retargeting cookies are added, they should be described in a separate cookie preferences page and enabled according to the consent required by applicable law.

To view or update your choices, use the Cookie Preferences page.

7. Service providers and third parties

Who may process the information?

Girouard Conseil TI may use service providers to operate the website, host data, manage forms, process email, manage bookings, maintain security, support systems, or provide administrative services.

Depending on the tools actually used, these providers may include:

• WordPress and the web hosting provider;
• WPForms for forms;
• Microsoft 365, Outlook, and Microsoft Bookings for email, calendars, and bookings;
• Complianz for cookie consent and cookie preferences;
• LinkedIn when you click an external link to a LinkedIn profile;
• Security, backup, maintenance, analytics, or CRM tools, if applicable.

Girouard Conseil TI does not sell personal information. If advertising or retargeting tools are added later, this policy and the appropriate consent or opt-out mechanisms must be updated before activation.

8. Transfers outside Quebec or Canada

Where may information be processed?

Some technology providers may process or host information outside Quebec or Canada, including in the United States, Europe, Australia, or other jurisdictions where their infrastructure or subprocessors are located.

Where required, Girouard Conseil TI must assess risks related to the communication or processing of personal information outside Quebec and take appropriate contractual, organizational, or technical measures based on the nature of the information and the providers used.

This section must be adjusted according to your actual providers, hosting locations, subprocessors, and data flows.

9. Retention and destruction

How long do we keep information?

We retain personal information only as long as necessary for the purposes for which it was collected, to provide services, respond to requests, meet legal or contractual obligations, prevent disputes, and maintain business records.

At the end of the applicable period, information is securely destroyed, deleted, or anonymized, subject to applicable retention obligations.

10. Security

How do we protect information?

Girouard Conseil TI applies reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information processed.

• Access limited to people who need the information for their role;
• Use of professional tools for email, calendars, and documents;
• Account and system protection according to applicable security practices;
• Reasonable monitoring and maintenance of the website;
• Backups and continuity measures according to the tools used;
• Periodic review of access, providers, and practices where required.

No system, website, or method of transmission can be guaranteed to be completely secure.

11. Confidentiality incidents

What happens if there is an incident?

In the event of a confidentiality incident involving personal information, Girouard Conseil TI takes reasonable steps to limit risks, investigate the situation, document the incident, and notify affected individuals or authorities where required by law.

An incident register may be maintained in accordance with applicable obligations.

12. Your rights

What rights can you exercise?

Depending on your place of residence and the laws that apply, you may have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate, incomplete, or ambiguous information;
• Withdraw your consent, where applicable;
• Request deletion, de-indexing, or cessation of dissemination in certain circumstances provided by law;
• Request portability of certain information, where applicable;
• Object to certain uses or request information about automated decisions, where applicable;
• File a complaint with a competent privacy or data protection authority.

To exercise your rights, visit the Privacy Rights page or write to info@girouardti.ca.

13. Updates

This policy may be updated.

Girouard Conseil TI may update this policy to reflect changes to its practices, providers, services, or applicable legal obligations. The update date displayed at the top of the page indicates the most recent version.

Where required, we will take reasonable steps to inform affected individuals of material changes.

14. Contact us

Privacy questions or requests.

For questions about this policy or to exercise your rights, contact: