Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

We may collect the following personal information when you:

• Contact us through our website forms
• Request a consultation or service quote
• Subscribe to our newsletter or communications
• Engage our services

Types of information collected:

• Name and contact information (email, phone number, business address)
• Company name and job title
• Information about your technology infrastructure and business needs
• Communication preferences
• Payment and billing information (processed securely through third-party providers)

1.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and geographic location
• Browser type and version
• Device information
• Pages visited and time spent on our site
• Referring website addresses
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide consulting services, support, and fulfill contractual obligations
• Communication: To respond to inquiries, send service updates, and provide customer support
• Marketing: To send newsletters, promotional materials, and information about our services (with your consent)
• Business Operations: To improve our services, conduct analytics, and manage our business
• Legal Compliance: To comply with legal obligations and protect our rights
• Security: To detect, prevent, and address technical issues and security threats

3. Legal Basis for Processing (Quebec Law 25 Compliance)

We process your personal information based on:

• Consent: You have given explicit consent for specific purposes
• Contract Performance: Processing is necessary to fulfill our service agreement with you
• Legitimate Interest: Processing is necessary for our legitimate business interests
• Legal Obligation: Processing is required to comply with legal requirements

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

Third-party vendors who assist us with:

• Cloud hosting and infrastructure (Microsoft Azure)
• Payment processing
• Email marketing platforms
• Customer relationship management (CRM) systems
• Analytics and website optimization

4.2 Business Partners

Microsoft and other technology partners when necessary to deliver services (with your consent)

4.3 Legal Requirements

When required by law, court order, or governmental authority, or to protect our legal rights

4.4 Business Transfers

In connection with a merger, acquisition, or sale of assets (you will be notified)

5. Data Retention

We retain your personal information only as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal, accounting, or reporting requirements
• Resolve disputes and enforce our agreements

Retention periods:

• Client service records: 7 years after service completion
• Marketing communications: Until you unsubscribe or request deletion
• Website analytics: 26 months
• Financial records: 7 years (as required by Canadian tax law)

6. Your Privacy Rights (Quebec Law 25)

Under Quebec law, you have the right to:

• Access: Request access to your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Receive your personal information in a structured, commonly used format
• Withdraw Consent: Withdraw consent for processing at any time
• Object: Object to processing based on legitimate interests
• Restrict Processing: Request restriction of processing in certain circumstances
• Lodge a Complaint: File a complaint with the Commission d'accès à l'information du Québec (CAI)

To exercise these rights, contact us at: info@aimpactconsult.com or +1 (438) 230-0816

We will respond to your request within 30 days as required by Quebec law.

7. Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Multi-factor authentication (MFA)
• Regular security assessments and audits
• Access controls and employee training
• Secure backup and disaster recovery procedures
• Compliance with CIS 8.1, NIST 2.0, and Microsoft Security Baselines

8. Data Breach Notification

In accordance with Law 25, if a data breach occurs that presents a risk of serious harm, we will:

• Notify affected individuals as soon as possible
• Notify the Commission d'accès à l'information du Québec
• Provide information about the breach, its consequences, and measures taken
• Maintain a breach registry as required by law

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Enable website functionality
• Analyze website traffic and user behavior
• Remember your preferences
• Deliver relevant content and advertising

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

12. International Data Transfers

Your information may be transferred to and processed in jurisdictions outside Quebec and Canada, including the United States, where our service providers operate. We ensure appropriate safeguards are in place to protect your information in accordance with Quebec law.

13. Privacy Officer

Our Privacy Officer is responsible for ensuring compliance with privacy laws and handling privacy-related inquiries.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Obtaining new consent where required by law

15. Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

16. Regulatory Authority

If you believe your privacy rights have been violated, you may file a complaint with:

17. Consent

By using our website or services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.