Privacy Policy
-
General Information
-
Introduction
Privacy protection is important to 9215-0770 Québec inc. (Pneus à rabais) (hereinafter referred to as the "Entity", "We", "Our"). For this reason, We have implemented protective measures and sound management practices for your Personal Information in accordance with applicable laws in Quebec and Canada.
This privacy policy (the "Policy"), which must be read together with Our Legal Notice, describes our practices regarding the collection, use, processing, disclosure, and retention of the Personal Information of our customers, visitors, and users. It applies to the Entity as a whole.
By using our websites https://www.pneusarabais.com/ and https://www.quattrotires.com/ (the "Websites") or any of our services, you agree that We may collect, use, process, disclose, and retain your Personal Information in accordance with the terms set forth herein. If you do not agree to abide by and be bound by this Policy, you are not authorized to visit, access, or use Our Websites or our Services, or to share your Personal Information with Us.
This Policy does not apply to the Personal Information of employees, representatives, and consultants of the Entity, or any other person affiliated with the Entity, as well as to any information that does not constitute Personal Information as defined by applicable laws in Quebec and Canada.
-
Personal Information Protection Officer
Questions, comments, and complaints regarding the Policy and the Entity's privacy practices may be addressed to Our Personal Information Protection Officer at the following coordinates:
Phone: 1-844-778-2887
Email: [email protected]
Address: 2650, rue étienne-Lenoir, Laval (Québec) H7R 0A3
-
-
Definitions
The following words and expressions, when they appear with an initial capital letter in the Policy, have the meanings ascribed to them below, unless there is an implicit or explicit derogation in the text:
"Service Provider": any natural or legal person who processes Personal Information on behalf of the Entity. These are third-party companies or individuals employed by the Entity to facilitate the Services, provide the Services on behalf of the Entity, perform services related to the Services, or assist the Entity in analyzing the use of the Services.
"Personal Information": any information that relates to an identifiable individual, meaning it directly or indirectly reveals something about the identity, characteristics (e.g., skills, preferences, psychological tendencies, predispositions, mental capacities, character, and behavior of the individual concerned), or activities of that individual, regardless of the nature of the medium and regardless of the form in which the information is accessible (written, graphic, sound, visual, computerized, or otherwise).
"Personal Information Protection Officer": the person in charge of implementing this Policy, whose contact information is identified in section 1 of this Policy.
"Services": Services refer to the Website and our pages on social networks and to the services and products provided to you.
-
Processing of Personal Information
-
Collection of Personal Information
In the course of our activities, we may process various types of Personal Information including the following:
- Contact information, such as your name, address, email address, phone number, vehicle model, and information to verify your identity;
- Information regarding products or services, such as information about the Services we have provided to you;
- Information that you choose to provide or transmit to us, for example, when you fill out our forms, apply for one of our job offers (your resume), or communicate with one of our employees or representatives;
- Information related to transactions and payment, such as the payment method used, date and time, payment amount, billing postal code, your address, and other related information;
- Information automatically collected when using the Websites and our Services, including:
- Connection information and other information about your activities on the Websites, such as your IP address, the pages you have viewed, the time and date of your visits, the number of connections, the type of browser you are using, your device's operating system, and other hardware and software information;
- Demographic data and geolocation data, such as your IP address, a precise or approximate location determined from your IP address or your mobile device's GPS (depending on your device's settings);
- Financial information about your activities when using the Websites and our Services, such as credit card numbers when you make commercial transactions related to the Entity.
In each case, this Personal Information is processed in accordance with the legitimate and necessary purposes listed in section 3.2 below.
-
Use of Personal Information
We may use your Personal Information for the legitimate purposes described below:
- To operate, maintain, monitor, develop, enhance, and offer all features of our Website;
- To present and provide you with Services;
- To allow you to track your online order;
- To enable you to apply for job offers;
- To enable you to acquire our Services and conduct transactions related to our Services;
- To enable you to initiate a financing request;
- For marketing and business development purposes, if you have previously consented to the processing of your Personal Information for these purposes;
- To respond to your inquiries and provide assistance as needed;
- To collect feedback, testimonials, and comments regarding our Services;
- To fulfill our contractual obligations to you;
- To develop, improve, and offer new Services;
- To send you messages, updates, security alerts;
- To detect and prevent fraud, errors, spam, abuse, security incidents, and other harmful activities;
- For any other purpose permitted or required by law.
-
Disclosure of Personal Information
We may disclose your Personal Information to our employees (including human resources and IT departments), contractors, consultants, agents, service providers, and other trusted third parties (collectively, "Service Providers"), who need this information to assist us in operating our Websites, conducting our business activities, or serving you, provided that these Service Providers have previously committed in writing to ensuring the confidentiality of your Personal Information in accordance with applicable laws and our Information Governance Program.
We do not sell, trade, or otherwise disclose your Personal Information to third parties.
-
Service Providers and Other Third Parties
Although we try to avoid disclosing your Personal Information to third parties, we may engage Service Providers to perform various services on our behalf, such as IT management and security, marketing, as well as data analysis, hosting, and storage. We have outlined below the cases in which such sharing may occur:
- We use Google Analytics to analyze Website traffic, generate statistics, and engage with customers and prospects. See their Privacy Policy;
- We use Google Ads to analyze the audience of our Services, generate statistics, and engage with customers and prospects. See their Privacy Policy;
- We use Facebook Pixel services to understand and deliver ads, generate statistics, and engage with customers and prospects. See their privacy policy;
- We use Amazon Web Services (AWS) services for hosting our websites. See their privacy policy;
- We use MailChimp services. See their privacy policy;
- We use FedEx, Nationex, and OptimoRoute for processing the delivery of your orders. See their privacy policy;
- We use PayPal services for processing payments and prepayments of our Services and products. See their privacy policy;
- We use social media services Facebook from the Meta group to communicate about our Services and products. See their privacy policy;
- We use Affirm services for financing the purchase of products and services. See their privacy policy;
- We use a management tool for our Websites, namely Sentry. See their privacy policy;
- We use GoTekky for storing certain documents. See their privacy policy;
- We use Metatracer to ensure our compliance with privacy laws that apply to us. See their privacy policy.
Prior to disclosing your Personal Information to Service Providers outside the province of Quebec or depending on the nature of the Personal Information disclosed, we conduct a privacy impact assessment. When we disclose your Personal Information to Service Providers, we enter into written agreements with them before your Personal Information is disclosed to them, and we only provide them with the Personal Information necessary to perform their mandate. Under these agreements with our Service Providers, we undertake to ensure that the principles set out in this Policy are respected, and these Service Providers are required to use the Personal Information confidentially, in accordance with our instructions, and only for the purposes for which they were provided. We provide sufficient guarantees regarding the implementation of adequate protection measures that are proportionate to the sensitivity of the Personal Information processed or disclosed. When our Service Providers no longer need your Personal Information, we ask them to appropriately destroy this data.
-
Compliance with Legislation, Response to Legal Requests, Prevention of Harm, and Protection of Our Rights
We may disclose your Personal Information when we believe such disclosure is authorized, necessary, or appropriate, including:
- To respond to requests from public and governmental authorities, including public and governmental authorities outside your country of residence;
- To protect our business activities;
- To comply with legal proceedings;
- To protect our rights, your privacy, our security, our property, yours, or that of third parties;
- To enable us to implement available remedies or limit the damages we may suffer; and
- In accordance with applicable laws that are applicable, including laws outside your country of residence.
-
Business Transaction
We may share, transfer, or communicate, in strict compliance with this Policy and the provisions of the Private Sector Privacy Act, RLRQ c P-39.1 (the "Private Sector Act") and the Act modernizing legislative provisions relating to the protection of personal information, LQ 2021, c 25 (the "Act 25", sanctioned on September 22, 2021), your Personal Information in the event of a sale, transfer, or assignment, in whole or in part, of the Entity or our assets (for example, following a merger, consolidation, change of control, reorganization, bankruptcy, liquidation, or any other commercial transaction, including in the context of negotiating such transactions). In this case, we will inform you before your Personal Information is transferred and governed by another privacy policy.
-
-
Consent to Personal Information
To the extent possible, the Entity obtains directly from the individual concerned their consent to collect, use, and disclose their Personal Information. However, if you provide us with Personal Information about other individuals, you must ensure that you have duly informed them that you are providing us with their information in addition to obtaining their consent to such communication.
We will seek your explicit, manifest, free, informed, and specific consent before using or disclosing your Personal Information for purposes other than those set out herein. We will also seek your explicit consent whenever sensitive Personal Information is involved in any of the Entity's processing activities. We will request your consent for each specific purpose in clear and simple terms, distinctly from any other information communicated to you.
BY USING OUR WEBSITES, BY TRANSMITTING YOUR PERSONAL INFORMATION BY EMAIL, YOU CONSENT TO THIS PRIVACY POLICY AND THE COLLECTION AND PROCESSING OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THE PRIVACY POLICY.
If you do not consent, please discontinue using the Websites. Unless otherwise provided by law, you may withdraw your consent at any time, upon reasonable notice. Please note that if you choose to withdraw your consent to the collection, use, or disclosure of your Personal Information, some features of our Websites may no longer be accessible to you, or we may not be able to offer you certain services.
-
Retention of Personal Information
Subject to applicable laws, we retain your Personal Information only for the time necessary to achieve the purposes for which such information was collected, unless you consent to the use or processing of your Personal Information for another purpose. As an indication, the duration of certain information may extend up to 7 years following the end of the Services rendered by the Entity to you. Additionally, our retention periods may be changed in due course due to legitimate interests (for example, to ensure the security of Personal Information, to prevent abuses and violations, or to pursue criminals)
For more information on the periods during which your Personal Information is retained, please contact our Personal Information Protection Officer using the contact information provided in section 1b) of this Policy.
-
-
Your Rights
As a data subject, you can exercise the rights listed below by contacting our Privacy Officer in writing at the contact details provided in Article 1b) of the Policy. Please note that we may ask you to verify your identity before responding to any of these requests.
- You have the right to be informed about the Personal Information we hold about you, its use, disclosure, retention, and destruction, subject to exceptions provided by applicable law;
- You have the right to access your Personal Information, request a copy, including paper copies of documents containing your Personal Information, subject to exceptions provided by applicable law, and obtain, if applicable, additional details on how we use, disclose, retain, and destroy it;
- You have the right to rectify, modify, and update the Personal Information we hold about you if it is incomplete, ambiguous, outdated, or inaccurate;
- You have the right to withdraw or modify your consent to the Entity collecting, using, disclosing, or retaining your Personal Information at any time, subject to applicable legal and contractual restrictions;
- You have the right to request that we stop disseminating your Personal Information and deindex any links attached to your name that provide access to this information if such dissemination violates the law or a court order;
- You have the right to request that your Personal Information be communicated to you or transferred to another organization in a structured, commonly used, and machine-readable format;
- The right to be informed of a privacy breach involving your Personal Information and which may cause you serious harm. To this end, we maintain a register that lists all privacy breaches and assess the harm they may cause;
- You have the right to lodge a complaint with the Access to Information Commission, subject to the conditions provided by applicable law.
To process your request, you may be asked to provide appropriate identification documentation or to otherwise verify your identity.
-
Cookies and Other Tracking Technologies
We use cookies and similar technologies (collectively, "Cookies") to help us operate, protect, and optimize the websites and services we offer. Cookies are small text files that are stored on your device or browser. They allow us to collect certain information during your visit to the websites, including your preferred language, the type and version of your browser, the type of device you are using, and the unique identifier of your device.
If some of the Cookies we use are deleted after the end of your browser session, other Cookies are retained on your device or browser to allow us to recognize your browser during your next visit to the websites. Personal information collected through these Cookies is not intended to identify you. They are used to ensure the operation of the websites, improve the user browsing experience, and provide certain data that allows us to better understand the traffic and interactions taking place on Our websites, as well as to detect certain types of fraud. Cookies do not cause any damage to your device and cannot be used to extract your personal information. We collect your IP address, information about your device and operating system or browser, your path and browsing history on Our websites, as well as your requests, browsing preferences (languages used), etc.
You can configure your browser to be informed about the placement of Cookies during your visit to the websites, so that you can decide, in each case, whether to accept or refuse the use of some or all Cookies. Please note that disabling Cookies on your browser could affect your browsing experience on the websites and prevent you from using some of its features.
To learn more about how we use Cookies, you can consult Our "Cookie Policy".
-
Security Measures
The Entity has implemented physical, technological, and organizational security measures aimed at adequately protecting the confidentiality and security of your personal information against loss, theft, or unauthorized access, disclosure, reproduction, communication, use, or modification. These measures include:
Administratively, the adoption of a series of policies and procedures as part of the implementation of our information governance program which include:
- Regulating access, communication, storage, depersonalization, including anonymization and/or, if applicable, destruction of Personal Information;
- Determining the roles and responsibilities of our employees throughout the lifecycle of Personal Information and documents;
- Establishing procedures for intervention and response in the event of a privacy incident;
- Regulating the process of requests and complaints related to the protection and processing of Personal Information.
Technically, resorting to various means such as:
- Using a secure server. All sensitive information provided is transmitted via "Secure Socket Layer (SSL)" technology, then encrypted in Our payment gateway provider's database only to be accessible by authorized individuals with special access rights to these systems, and are required to keep the information confidential;
- Using backup systems, network monitoring software, etc.;
- Using encryption and task separation systems, access controls, and conducting internal audits.
We have not exhaustively listed all the measures we implement given the public nature of this Policy.
Despite the measures described above, We cannot guarantee the absolute security of your Personal Information. If you have reason to believe that your Personal Information is no longer protected, please contact Our Privacy Officer immediately using the contact information provided in article 1b) above.
-
Modification of this Privacy Policy
We reserve the right to modify this Policy at any time in accordance with applicable legislation. In the event of a modification, we will publish the revised version of the Privacy Policy and update the revision date in the footer. We will also notify you by email at least thirty (30) days before the effective date of the new version of our Policy. If you do not agree with the new terms of the Privacy Policy, we invite you to discontinue using Our Websites and our Services. If you continue to use Our Websites or our Services after the effective date of the new version of our Policy, your use of Our Websites and our Services will be governed by this new version of the Policy.
-
Links to Third-Party Websites
Occasionally, we may include references or links on Our Websites to Our Facebook page, websites, products, or services provided by third parties (the "Third-Party Services"). These Third-Party Services, which are not operated or controlled by the Entity, are governed by entirely separate and independent privacy policies from ours. Therefore, we assume no responsibility for the content and activities of these sites. This Policy applies solely to the Website and Services that We offer. The Policy does not extend to Third-Party Services such as Our Facebook, LinkedIn, and Twitter pages.
-
Invisible reCAPTCHA
Invisible reCAPTCHA analyzes activity on a web page feature (e.g., mouse movements and typing patterns) to determine if a user is a robot.
The invisible reCAPTCHA service may collect information from your device. The information collected by reCAPTCHA is stored in accordance with its privacy policy.
-
Payment Details
Regarding the details of credit cards or other payment information that you have provided to us, we are committed to ensuring that this confidential information is stored in the most secure manner possible.
-
Individuals Under the Age of 14
We do not knowingly collect or use personal information from individuals under the age of 14. If you are under 14 years old, you should not provide us with your personal information without the consent of your parents or legal guardian. If you are a parent or legal guardian and become aware that your child has provided us with personal information without consent, please contact us using the contact details provided in article 1b) above to request the removal of this child's personal information from our systems.
-
Applicable Laws
The laws of Canada and Quebec, excluding its conflict of law rules, shall govern this agreement and your use of the Websites. Your use of the Websites may also be subject to other local, provincial, national, or international laws.
*Updated on December 5, 2023*