privacy policy

1) Who we are

Gestion Dryades — Quebec, Canada. Website: https://gestiondryades.com

2) Personal information we collect

A) When you contact us or request a quote

• Identification and contact details (e.g. name, email, phone).
• Information about your property or project (e.g. property address, operational details, service preferences).
• The content of your messages and communications with us (emails, calls, forms).

B) When you use the website

• Technical and usage data (e.g. pages visited, interactions, device type, browser information).
• Cookies and similar technologies: essential cookies for operation and security and, with your consent, analytics and advertising performance cookies.

C) Information we do not seek to collect

We do not request sensitive information (e.g. medical information) through the website. If you voluntarily send such information, we handle it with additional care and only for necessary purposes.

3) How we use your information

• Provide our services (e.g. respond to a request, prepare a quote, carry out a mandate, manage client relationships).
• Communicate with you (follow-up, information, support).
• Secure our systems and prevent fraud or abuse.
• Improve our website and services (audience and performance measurement, only with your consent).
• Meet our legal and administrative obligations.

4) Grounds and consent

We process your information on recognized grounds (e.g. contract performance, legitimate interests, legal obligations) and, where required, based on your consent.

Cookies and preferences

Essential cookies are necessary for operation and security. Analytics and marketing cookies are optional and activated only with your agreement. Change your choices at any time through “Manage cookies” at the bottom of the page or the consent banner.

5) Who we share your information with

We do not sell your personal information. We may share it with third parties when necessary to provide our services, including:

• Technology providers (hosting, security, analytics with consent, support tools).
• Operational partners (e.g. on-site providers) when needed to carry out a mandate, depending on the context.
• Relevant authorities when required by law.

6) Transfers outside Quebec (where applicable)

Some providers may host or process data outside Quebec (e.g. elsewhere in Canada or the United States). Where this occurs, we implement appropriate contractual and organizational measures to protect your information.

To learn about the main locations or categories of providers involved, write to us at [email protected].

7) Retention and destruction

We retain your information only as long as necessary for the stated purposes, then destroy or anonymize it in accordance with our legal obligations and internal practices.

• Quote requests: retained for follow-up and administrative management.
• Client files: retained during the mandate and according to applicable requirements (e.g. accounting or legal).
• Security logs: retained for a limited period to detect and prevent abuse.

8) Security measures

We apply reasonable measures to protect your information against loss, unauthorized access, misuse or disclosure, for example:

• Access controls and authentication, where applicable.
• Encryption in transit (HTTPS) and hosting security measures.
• Security logging and monitoring, and regular system updates.
• Least-privilege access to data.

9) Your rights

Subject to exceptions provided by law, you may:

• Access the personal information we hold about you.
• Correct inaccurate, incomplete or ambiguous information.
• Withdraw your consent when processing is based on it.
• Request that distribution cease or that information be de-indexed in certain prescribed cases.

To exercise your rights, contact the designated privacy officer: Laurie Gagnon — [email protected]. We may request reasonable proof of identity to protect your information.

10) Privacy incidents

For incidents involving a risk of serious harm, we follow applicable obligations, including measures to reduce the risk, maintaining a register and, where required, notifying the CAI and affected individuals.

11) Information about minors

Our website and services are not specifically intended for minors. If you believe a minor sent us personal information without authorization, contact us so we can assess the situation.

12) Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. The update date appears at the top of the page. For significant changes, we will take reasonable steps to inform you.