Privacy Policy
A. Objectives
Poirier Peinture Plus inc. may be required to collect, hold, use, or disclose to third parties personal information obtained in the course of carrying out its work, quotes, estimates, and activities.
In this context, this privacy and personal information protection policy aims to establish the principles governing the collection, use, disclosure, retention, and destruction of personal information by Poirier Peinture Plus inc. in order to ensure its protection.
To this end, the Policy is intended in particular to:
- Designate and define the role and responsibilities of the Privacy Officer ("PO") and all employees of Poirier Peinture Plus inc.
- Establish specific rules regarding the collection, use, disclosure, retention, destruction, and rights of access and correction of personal information.
B. Definitions
Personal information is any information that relates to a natural person and that directly or indirectly identifies that person.
It may be of the following nature:
- Identifying: name, address, telephone number, date of birth
- Financial: salary, credit card, bank account
- Tax-related: social insurance number
Exception
Personal information concerning a natural person acting in a professional capacity within an organization (name, title, professional contact information) is not covered by this policy.
Personal information is considered sensitive when it gives rise to a high degree of reasonable expectation of privacy, particularly when it is of a:
- medical nature
- biometric nature
- intimate nature
For the purposes of this policy, the term personal information also includes sensitive personal information.
C. Regulatory Framework
This Policy is established in accordance with the obligations of Poirier Peinture Plus inc. under the Act Respecting the Protection of Personal Information in the Private Sector and any regulations made thereunder.
D. Scope
This Policy applies to all personal information, regardless of the nature of the medium on which it is held or the form in which it is accessible:
- written
- graphic
- audio
- visual
- digital
- or other
E. Persons Concerned and Responsibilities
All Personnel are required to comply with this Policy throughout the duration of their employment.
Each member of the Personnel is also bound by an obligation of confidentiality and loyalty with respect to the information they access in the course of their duties.
This obligation includes in particular the prohibition against:
- using such information for personal benefit
- disclosing such information
- reproducing or transmitting such information
except as permitted by law.
F. Obligations
The protection of personal information must be ensured throughout its entire lifecycle:
- collection
- use
- disclosure
- retention
- destruction
1. Collection and Consent
Collection
Prior to collecting personal information, each member of the Personnel must:
- Determine the purposes of collection and ensure there is a serious and legitimate interest.
- Limit collection to the information necessary for those purposes.
- Use lawful means.
- Implement appropriate security measures.
- Collect information directly from the person concerned, except where permitted by law.
Obligation to Inform
At the time of collection, the person concerned must be informed of:
- the purposes of the collection
- the means used
- their rights of access and correction
- their right to withdraw consent
- the possibility of disclosure to third parties or outside Quebec
Upon request, they may also obtain:
- the information collected
- the categories of persons having access to that information
- the retention period
- the contact information of the Privacy Officer
Consent
By completing a quote request form, the person concerned consents to the use of the information provided for the intended purposes.
To be valid, consent must be:
- manifest
- freely given
- informed
- given for specific purposes
- expressed in plain and clear language
2. Use
Personal information may only be used for the purposes for which it was collected, except as permitted by law.
3. Disclosure
Internal Access
Access to personal information is limited to those persons who require it to carry out their duties.
Disclosure to Third Parties
Personal information may be disclosed:
- with the consent of the person concerned
- when permitted by law
- when necessary for the performance of a mandate or contract
- in emergency situations
- when required by a competent authority
A disclosure register must be kept up to date when such disclosures occur.
4. Retention
Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected.
5. Destruction
Once the purposes for which the information was collected have been fulfilled, it must be securely destroyed, subject to any legal retention obligations.
6. Privacy Impact Assessment (PIA)
Where required, Poirier Peinture Plus inc. conducts a PIA to assess privacy risks and implement measures to reduce those risks.
7. Security Measures
Poirier Peinture Plus inc. applies various measures to protect personal information:
- secure web hosting
- secure email transmission
- access management
- antivirus and computer security protection
- compliance with Law 25 requirements
- internal access register
8. Privacy Incident
A privacy incident includes in particular:
- unauthorized access
- unauthorized use
- unauthorized disclosure
- loss of personal information
Any incident must be reported to the Privacy Officer and recorded in a register maintained for that purpose.
G. Privacy Officer
François Poirier President — Privacy Officer
Telephone: 418-932-0564
H. Right of Access and Correction
Any person may request:
- access to their personal information
- correction of inaccurate information
Requests must be addressed to the Privacy Officer.
A response will be provided within a maximum of 30 days.
I. Complaints
Any complaint regarding the management of personal information may be submitted to the Privacy Officer for review and response.
J. Coming into Force and Updates
This policy has been in effect since March 5, 2023.
It may be amended at any time to reflect:
- organizational changes
- legislative amendments
Last updated: 2026-03-05