Policy on the protection of personal information
Adopted November 22, 2018 and updated September 22, 2023
This Policy describes how Canatal collects, uses, communicates, and protects your personal information. Canatal’s practices with respect to your personal information comply with Quebec’s Act Respecting the Protection of Personal Information in the Private Sector. This policy does not apply to information that does not constitute “personal information” within the meaning of applicable privacy legislation.
Collection and use of personal information
Canatal may ask you for personal information
- When you purchase or request one of Canatal’s products or services;
- when you request information about one of Canatal’s products or services;
- when you contact Canatal’s customer service department or one of Canatal’s employees or professionals;
- when you visit or make transactions on one of Canatal’s websites;
- when you make comments or suggestions to Canatal;
- when you apply for a job at Canatal.
Use of personal information
Canatal may use personal information for the following purposes
- To identify customers, employees, and suppliers in order to establish and maintain relationships with them;
- provide ongoing services to customers to ensure the appropriate delivery of services and to better guide customers when using Canatal’s services;
- improve Canatal’s products and services;
- provide Canatal customers with information on other Canatal products and services that may be of interest to them;
- prevent errors and fraud;
- comply with legal and audit requirements;
- send information about new job opportunities at Canatal and other career development resources.
Canatal may also use personal information to compile company statistics. These statistics do not contain any data that could personally identify customers, employees or suppliers.
Other uses of personal information
If all or part of Canatal’s assets are sold or financed, or if Canatal merges with another company, personal information in its possession may be disclosed to the lender, buyer, or company involved in the merger. However, such personal information must be used strictly in accordance with this Policy.
Transfers to third parties and/or agents
Certain products and services offered through Canatal may be provided by third parties in collaboration with Canatal. In order to provide you with the products or services you request from Canatal, it may be necessary for Canatal to transfer information about you to these third parties.
When Canatal must transfer personal information to third parties for processing on its behalf, Canatal signs an agreement setting out appropriate privacy protection provisions before any information is transferred to the third party. These provisions must stipulate that the third party will not use the personal information for its own purposes, that it will protect the information, and that it will only process the information in accordance with Canatal’s instructions.
In addition, the use of certain third-party products to purchase products or services from Canatal may require Canatal to provide your personal information to third parties in order to process the transaction.
Retention of personal information
Canatal retains personal information only as long as necessary to process the transactions concerned.
All personal information collected by Canatal is protected by reasonable security measures appropriate to its sensitivity. Personal information stored electronically, including all information collected through Canatal websites, is kept in protected confidential databases. Canatal regularly evaluates its security equipment and procedures, and modifies them if necessary.
Canatal implements policies and practices governing corporate governance and the protection of personal information.
Canatal employees are made aware of the importance of protecting personal information and of the measures to be taken to ensure that this information remains confidential. As part of their duties, employees follow procedures that protect the confidentiality of personal information and promote best practices in this area.
Canatal protects personal information as soon as it is collected, and implements security measures to protect it against use that does not comply with current legislation, accidental loss, unauthorized modification, disclosure or access, misuse, or any form of illegal use. However, Canatal cannot guarantee that the personal information it collects will be protected against any infringement.
Person responsible for the protection of personal information
If you have any questions or comments about how Canatal handles personal information during its life cycle, or if you wish to exercise your rights under the Privacy Act, you may contact the person responsible for protecting personal information at Canatal:
by mail: 2885, boul. East, Thetford Mines, Qc, Canada, G6G 6P6
A person who believes that his or her own personal information or that of another person has been subject to :
- access not authorized by law;
- a use not authorized by the Act;
- disclosure not authorized by the Act;
- loss or any other infringement of the protections set out in the Act
is invited to submit his or her complaint in writing to the Privacy Officer identified below.
The complaint must include the relevant details, i.e. the personal information concerned, the context, the potential or actual harm suffered or that could be suffered, as well as the relevant dates. The details of the reported incident should be described as accurately as possible, so that action can be taken quickly.
Any employee who receives a complaint knows that it must be forwarded to the Privacy Officer as soon as it is received.
Upon receipt of a complaint, Canatal follows its internal Complaints Handling Procedure, in order to treat the complaint fairly.
Changes to this Policy
If Canatal changes this Policy, Canatal will post the revised statement in its entirety on its Web site. If Canatal makes substantial changes in the way it collects personal information, Canatal may also inform you by other means, such as by sending you an e-mail, posting a notice on the home page of its websites or in its places of business.