Saint-Patrick’s Quebec (the “Company”) acknowledges the importance of protecting personal information and is committed to how it handles such information.
The Company pledges to only collect, use, disclose, and retain personal information that is necessary for the conduct of its activities and within the scope of its business.
The Company has adopted a privacy protection policy, applies it in the course of its operations, and, in accordance with the Private Sector Privacy Law (the “PSPL”), has designated a person responsible for the protection of personal information and privacy within the organization. The identity and contact details of this person are mentioned at the end of this section.
When and how is the collection of personal information carried out?
In the normal course of its activities and within the scope of its business and service provision, the Company collects certain personal information necessary for these purposes or for any other compatible purpose, provided that the criteria of the PSPL and other applicable laws and regulations related to personal information protection are met (collectively referred to as the “Law”). Personal information may also be collected by the Company in the context of employment, customer knowledge, debt collection, consultation, and business relationships.
The personal information collected by the Company may include, but is not limited to, details related to identity, contact information, health, social or family status, employment, recruitment, financial information, training, or education of the individuals concerned, depending on the nature of their relationship with the Company. Identification documents containing personal information may also be collected by the Company.
The Company ensures that individuals concerned by this personal information collection are informed of the collection and understand its purposes.
It is possible that the Company may collect personal information using technology that includes features for identifying, locating, or profiling an individual. In such cases, consent in accordance with the Law will be sought from the individual concerned. Information about the use of the Company’s website and other technical information or visitor interaction with the website may be collected.
In cases where personal information collected by the Company is provided by a third party, that is, a person other than the one concerned by the information, the person making the disclosure must ensure that they have obtained the consent of the individual concerned and informed them of such disclosure in advance.
For what purposes are personal information used?
The personal information collected by the Company is used in the provision of its services and, in some cases, to meet legal obligations arising, in particular, from the Law. Personal information collected by the Company may also be required to fulfill its contractual obligations to its clients and other third parties.
In what cases can personal information be disclosed by the Company?
The Company may occasionally disclose personal information it holds to third parties, including companies that act as subcontractors or service providers. These third parties may, in some cases, be located outside the province of Quebec, which means that the personal information collected and held by the Company may be located in a jurisdiction with different legal regulations than those of Quebec.
Contracts that the Company enters into with third parties require them to maintain the confidentiality of personal information and stipulate, among other things, their obligation to comply with the legal framework applicable to the Company in matters of personal information protection and privacy.
Subject to an exception provided by the Law, consent will be sought from individuals concerned by the personal information if the Company needs to disclose personal information to third parties that is not related to its routine operations and activities or is not compatible with the purposes for which it was collected.
The Company may also be required to disclose certain personal information it holds to government authorities or law enforcement agencies.
What security measures does the Company take with regard to the personal information it holds?
The Company implements policies and practices governing corporate governance and personal information protection.
Personal information held by the Company is stored in secure locations, following generally recognized practices, and access to this information is limited to employees who need access to it in the course of their duties.
Company employees are made aware of the importance of personal information protection and the measures to be recommended to ensure the confidentiality of this information. As part of their duties, employees follow procedures that protect the confidentiality of personal information and promote best practices in this regard.
The Company ensures the protection of personal information from the moment of collection and implements security measures to protect against unauthorized use in violation of current legislation, accidental loss, alteration, disclosure, or unauthorized access, misuse, or any form of illegal use. However, the Company cannot guarantee that the personal information it collects is absolutely protected against any breach.
Where are the personal information collected by the Company stored?
The personal information of the Company may be held or transferred outside the province of Quebec, including in countries other than Canada, where personal information protection rules differ from those of Quebec and Canada. When information is located outside Quebec or Canada, it is subject to the laws of the country where it is located, and its collection, disclosure, use, and destruction may be carried out differently from provincial or federal requirements.
What is the retention period for personal information?
Unless authorized or required by applicable laws, the Company retains personal information only for the time necessary to achieve the purposes for which it was collected, including meeting ethical, legal, tax, accounting, or notification requirements to appropriate government agencies. Upon expiration of the retention period, personal information is destroyed, deleted, or anonymized. Anonymized information no longer allows for irreversible identification of the person concerned.
In the event of a privacy incident involving personal information, the Company follows the provisions of the current law and takes reasonable measures to mitigate the risks of harm to individuals affected by the personal information involved in the incident.
Privacy-Related Complaints
Anyone who believes that their personal information or that of another person has been subjected to:
- Unauthorized access under the Law;
- Unauthorized use under the Law;
- Unauthorized disclosure under the Law;
- Loss or any other breach of the protections provided by the Law is encouraged to file a written complaint with the Person Responsible for the Protection of Personal Information identified below.
The complaint should include relevant details, including the personal information involved, the context, the potential or actual harm suffered or that could be suffered, and relevant dates. The details of the reported incident should be described as accurately as possible so that a rapid intervention can be carried out.
Any employee who receives a complaint knows that they must forward it to the Person Responsible for the Protection of Personal Information upon receipt.
Upon receiving a complaint, the Company follows its internal Complaint Handling Procedure to fairly address the complaint.
Person Responsible for the Protection of Personal Information
For any questions or comments regarding how the Company handles personal information throughout its lifecycle within the organization, or if you wish to exercise your rights under the Privacy Protection Law, you can contact the person responsible for the protection of personal information at the Company:
Saint-Patrick’s Parish
1145, de Salaberry,
Quebec City (Quebec)
G1R 2V7