Law 25

Responsible for Personal Information Protection

We have appointed Camille A. Perrin, Chief Operating Officer, to oversee personal-information protection.
Contact : [email protected] | 450-628-0690

Incident Reporting and Notification

Every confidentiality incident is entered in an internal incident log.
If an incident poses a risk of serious harm, we notify the affected person and the Commission d’accès à l’information without delay.

Governance and Personal Information Protection

Our governance program includes written policies, employee training, and regular audits. These documents are available on our website.

Privacy Policy

A clear, plain-language privacy policy is published at www.magemontreal.com/privacy-policy/

Privacy Impact Assessment (PIA)

We complete a PIA before any project that collects, uses, discloses, stores, or destroys personal information.

Individual Information and Data Collection

We explain the purpose of each collection, the means used, and the rights of access, correction, withdrawal of consent, and portability.
Cookies : Visitors see a banner — “We use cookies to improve your experience. Accept all or manage preferences” — with direct links to granular controls.
Call and video recording : An automated message states “This call or meeting may be recorded. By continuing, you consent to the recording.” Recordings cover all RingCentral phone calls and most Zoom/Microsoft Teams meetings.
Cross-border transfers : Voice and video data may be stored on servers in Canada and the United States. Before any cross-border processing we conduct a PIA and ensure protection equivalent to Québec standards.

Retention and Secure Destruction

Telephone and video recordings are kept for up to 24 months, then securely deleted or anonymised unless a legal hold applies.
All other personal data is retained only as long as necessary to fulfil its original purpose and is then permanently destroyed using industry-standard methods.