Privacy Policy

1Privacy Officer

In accordance with Quebec's Law 25, the person responsible for the protection of personal information at Catafago Services is:

For any questions, access requests, corrections, or other exercises of your rights, please contact us at the address above.

2Personal Information We Collect

2.1 — Contact Form

When you use the contact form on our website, we collect the following information:

• Full name
• Email address
• Organization name (optional)
• Service of interest (e.g. audit, compliance, training)
• Message

This information is used solely to respond to your inquiry and, where applicable, to establish a professional relationship. It is not used for commercial prospecting without your explicit consent.

2.2 — Browsing Data (Cookies & Analytics)

Our website uses web analytics tools to understand how visitors use the site. These tools may automatically collect:

• IP address (anonymized)
• Browser type and operating system
• Pages visited and duration of visit
• Traffic source (search engine, direct link, etc.)
• Screen resolution and browser language

This data is collected in aggregate form and does not allow us to identify you directly. It is used to improve user experience and website performance.

2.3 — Information We Do Not Collect

We do not collect payment information, social insurance numbers, health data, or other sensitive information through this website.

3Purposes of Processing & Legal Bases

4Cookies

A cookie is a small text file placed on your device when you visit a website. Our site uses the following types of cookies:

Strictly Necessary Cookies

Essential for the proper functioning of the site (WordPress session, language preference). These cookies cannot be disabled.

Analytics Cookies

Allow us to measure website audience (page views, session duration, traffic source). Data is anonymized before processing. You may refuse these cookies through your browser settings or via our cookie consent banner.

Learn more: allaboutcookies.org

5Retention Period

We retain your personal information only for as long as necessary for the purposes for which it was collected:

• Contact requests without follow-up — 12 months
• Active client files — Duration of the professional relationship + 5 years
• Analytics data — 14 months

At the end of these periods, your information is securely deleted or anonymized.

6Sharing of Information

We do not sell, rent, or share your personal information with third parties for commercial purposes. Your data may be shared only in the following situations:

• Technical service providers (web hosting, analytics) acting on our behalf and bound by confidentiality obligations.
• Legal obligations — when required by law or in response to a court or regulatory authority order.
• With your explicit consent for any other situation.

Hosting & Cross-Border Transfers

Our website is hosted by IONOS. If your data is processed outside Quebec or Canada, we ensure that appropriate protective measures are in place, in accordance with Law 25 requirements (privacy impact assessment for cross-border communications).

8Security of Your Information

As cybersecurity specialists, we apply rigorous security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

• 🔒 SSL/TLS encryption (HTTPS) across the entire website
• 👤 Access to data limited to authorized personnel
• 🔄 Regular system and software updates
• 📋 Internal privacy incident management policy

In the event of a privacy incident likely to cause serious harm, we will notify the Commission d'accès à l'information du Québec and affected individuals within the timeframes prescribed by Law 25.

9Links to Third-Party Sites

Our website may contain links to external websites (e.g., LinkedIn, industry resources). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their respective privacy policies before sharing any personal information with them.

10Changes to This Policy

We reserve the right to modify this policy at any time. Any changes will be posted on this page with the revised update date. We encourage you to review this policy periodically. Your continued use of the site after a modification is posted constitutes your acceptance of the updated version.