Who is responsible

Our person in charge of the protection of personal information is [NAME], [TITLE]. You can reach them at [email protected] or [MAILING ADDRESS] for any question, request or complaint about your personal information.

What we collect

When you contact us or book a call: your name, work email, company, headcount, phone number if you give it, and what you tell us about your project.

If you subscribe: your email address and a record of your consent (date, time and the wording you agreed to).

When you visit the site: limited technical information such as pages viewed and browser type, used in aggregate to improve the site.

When you become a client: the information needed to deliver the engagement, governed by our contract and any data-processing terms we sign with you.

Why we use it

To reply to you, schedule and hold calls, prepare proposals, deliver services, send invoices, meet legal obligations and, only if you agreed, send occasional news and Dayforce tips. We do not sell personal information.

Consent and email

We send commercial emails only with your consent, as required by Canada’s Anti-Spam Legislation (CASL). Every message identifies us and includes a one-click unsubscribe link. You can withdraw consent at any time.

Who we share it with

We use trusted service providers to run our business: Microsoft 365 (email, files and bookings), [CRM PROVIDER] (contact management), Cloudflare (website hosting) and [ACCOUNTING PROVIDER] (invoicing). They may only use your information to provide services to us.

Some providers may store or process information outside Quebec or outside Canada, including in the United States. Before any such transfer we assess whether the information will be adequately protected, and we put written safeguards in place.

How long we keep it

Enquiries that do not lead to work: up to [24] months. Client records: as long as required by our contracts and by tax and business law, then securely destroyed or anonymized. Consent records: as long as needed to prove consent.

How we protect it

Multi-factor authentication on all accounts, managed and encrypted devices, role-based access, and the security controls in our Microsoft 365 environment. We will notify you and the relevant regulator of any confidentiality incident that presents a risk of serious harm, as the law requires.

Your rights

You can ask to access or correct your personal information, withdraw your consent, or ask how it is used. Quebec residents also have rights under Law 25, including data portability and, in some cases, de-indexation. We respond within 30 days.

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

Cookies

We use only the cookies needed for the site to work, and privacy-friendly analytics. If we ever add advertising or tracking cookies, we will ask for your consent first.