Law 25

Privacy policy

This policy explains how Groupe Verira collects, uses, discloses, retains and protects personal information, in accordance with Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25.

Last updated : 2026-08-10

1. Privacy officer

The person responsible for the protection of personal information at Groupe Verira will be named publicly in this section. Their contact details will be added once confirmed. In the meantime, any request may be submitted through the contact form.

2. Information we collect

Through the contact form: name, organization, email address, phone number if you provide it, subject and message content. Through browsing: technical data strictly necessary for the operation and security of the site. No analytics cookie is placed without your consent.

3. Purposes

Responding to your requests, following up on the business relationship you initiated, maintaining site security and meeting our legal obligations. Your information is never sold, rented or used for advertising.

4. Consent

Consent is requested separately, in clear terms, before collection. You may withdraw it at any time; withdrawal does not retroactively affect processing already carried out lawfully.

5. Retention and destruction

Messages received are kept for as long as needed to handle the request and any resulting business relationship, then securely destroyed or anonymized. Specific durations are set out in our retention schedule, available on request.

6. Disclosure to third parties and hosting

We share your information only with providers necessary to operate the site and our services, bound by contract and confidentiality obligations. Our provider register will be published. Any transfer outside Quebec is subject to a privacy impact assessment.

7. Security

Encryption in transit and at rest, least-privilege access control, strong authentication for administrative access, logging, backups and a confidentiality incident response procedure including an incident register.

8. Automated decisions and artificial intelligence

This site makes no decision about you based exclusively on automated processing. In our products, AI processing runs locally on infrastructure under our control and is never used to train third-party models.

9. Your rights

You may request access to your information, its correction, the cessation of its dissemination, de-indexing, portability of the computerized information you provided to us, and the withdrawal of your consent. We respond within 30 days.

10. Complaints

If our response does not satisfy you, you may file a complaint with the Commission d'accès à l'information du Québec.

11. Changes

Any material change to this policy will be published on this page with a revised update date.