Skip to content

Privacy Policy

A. Objectives

Poirier Peinture Plus inc. may be required to collect, hold, use, or disclose to third parties personal information obtained in the course of carrying out its work, quotes, estimates, and activities.

In this context, this privacy and personal information protection policy aims to establish the principles governing the collection, use, disclosure, retention, and destruction of personal information by Poirier Peinture Plus inc. in order to ensure its protection.

To this end, the Policy is intended in particular to:

  1. Designate and define the role and responsibilities of the Privacy Officer ("PO") and all employees of Poirier Peinture Plus inc.
  2. Establish specific rules regarding the collection, use, disclosure, retention, destruction, and rights of access and correction of personal information.

B. Definitions

Personal information is any information that relates to a natural person and that directly or indirectly identifies that person.

It may be of the following nature:

  • Identifying: name, address, telephone number, date of birth
  • Financial: salary, credit card, bank account
  • Tax-related: social insurance number

Exception

Personal information concerning a natural person acting in a professional capacity within an organization (name, title, professional contact information) is not covered by this policy.

Personal information is considered sensitive when it gives rise to a high degree of reasonable expectation of privacy, particularly when it is of a:

  • medical nature
  • biometric nature
  • intimate nature

For the purposes of this policy, the term personal information also includes sensitive personal information.


C. Regulatory Framework

This Policy is established in accordance with the obligations of Poirier Peinture Plus inc. under the Act Respecting the Protection of Personal Information in the Private Sector and any regulations made thereunder.


D. Scope

This Policy applies to all personal information, regardless of the nature of the medium on which it is held or the form in which it is accessible:

  • written
  • graphic
  • audio
  • visual
  • digital
  • or other

E. Persons Concerned and Responsibilities

All Personnel are required to comply with this Policy throughout the duration of their employment.

Each member of the Personnel is also bound by an obligation of confidentiality and loyalty with respect to the information they access in the course of their duties.

This obligation includes in particular the prohibition against:

  • using such information for personal benefit
  • disclosing such information
  • reproducing or transmitting such information

except as permitted by law.


F. Obligations

The protection of personal information must be ensured throughout its entire lifecycle:

  • collection
  • use
  • disclosure
  • retention
  • destruction

Collection

Prior to collecting personal information, each member of the Personnel must:

  1. Determine the purposes of collection and ensure there is a serious and legitimate interest.
  2. Limit collection to the information necessary for those purposes.
  3. Use lawful means.
  4. Implement appropriate security measures.
  5. Collect information directly from the person concerned, except where permitted by law.

Obligation to Inform

At the time of collection, the person concerned must be informed of:

  • the purposes of the collection
  • the means used
  • their rights of access and correction
  • their right to withdraw consent
  • the possibility of disclosure to third parties or outside Quebec

Upon request, they may also obtain:

  • the information collected
  • the categories of persons having access to that information
  • the retention period
  • the contact information of the Privacy Officer

By completing a quote request form, the person concerned consents to the use of the information provided for the intended purposes.

To be valid, consent must be:

  • manifest
  • freely given
  • informed
  • given for specific purposes
  • expressed in plain and clear language

2. Use

Personal information may only be used for the purposes for which it was collected, except as permitted by law.


3. Disclosure

Internal Access

Access to personal information is limited to those persons who require it to carry out their duties.

Disclosure to Third Parties

Personal information may be disclosed:

  • with the consent of the person concerned
  • when permitted by law
  • when necessary for the performance of a mandate or contract
  • in emergency situations
  • when required by a competent authority

A disclosure register must be kept up to date when such disclosures occur.


4. Retention

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected.


5. Destruction

Once the purposes for which the information was collected have been fulfilled, it must be securely destroyed, subject to any legal retention obligations.


6. Privacy Impact Assessment (PIA)

Where required, Poirier Peinture Plus inc. conducts a PIA to assess privacy risks and implement measures to reduce those risks.


7. Security Measures

Poirier Peinture Plus inc. applies various measures to protect personal information:

  • secure web hosting
  • secure email transmission
  • access management
  • antivirus and computer security protection
  • compliance with Law 25 requirements
  • internal access register

8. Privacy Incident

A privacy incident includes in particular:

  • unauthorized access
  • unauthorized use
  • unauthorized disclosure
  • loss of personal information

Any incident must be reported to the Privacy Officer and recorded in a register maintained for that purpose.


G. Privacy Officer

François Poirier President — Privacy Officer

Telephone: 418-932-0564


H. Right of Access and Correction

Any person may request:

  • access to their personal information
  • correction of inaccurate information

Requests must be addressed to the Privacy Officer.

A response will be provided within a maximum of 30 days.


I. Complaints

Any complaint regarding the management of personal information may be submitted to the Privacy Officer for review and response.


J. Coming into Force and Updates

This policy has been in effect since March 5, 2023.

It may be amended at any time to reflect:

  • organizational changes
  • legislative amendments

Last updated: 2026-03-05