Privacy Policy
Boite Pac ("Boite Pac", "we", "our", "ours") places special importance on respecting your privacy and protecting your personal information. This Privacy Policy (the "Policy") describes the personal information we may receive or collect from you and how we use, communicate, store, and secure it. This way, you can make thoughtful and informed choices.
This Policy applies to our website boitepac.com as well as our customer relationship manager Pipedrive. However, we want to draw your attention to the fact that the rights and obligations described in this Policy do not cover third-party platforms that may be mentioned on the Platform. These third-party platforms have their own privacy policies, and we encourage you to read them carefully.
1. What is personal information?
For the purposes of this Policy, we mean by "Personal Information" any information about an individual that allows for their identification, or which, when taken separately or combined with other information, allows for the identification of an individual.
2. How do we collect your personal information?
With your consent
Generally speaking, we will obtain the Personal Information we need directly from you, with your consent, subject to any applicable legislative or regulatory exceptions. For example, Boite Pac may need to proceed without your consent when, for reasons of detecting or preventing fraud, requesting your consent would defeat the purpose.
Boite Pac primarily collects your Personal Information directly from you, especially when you communicate with us or use our services. Your Personal Information may also be collected through cookies, through publicly accessible records, or from third parties as permitted by applicable law or if we have obtained the necessary consent.
Refusal regarding the collection and withdrawal of your consent
You have the right, if you wish, to refuse the collection, use, and communication of your Personal Information. You may also withdraw your consent regarding the use of the Personal Information we have in our possession at any time, subject to reasonable notice and applicable legal or contractual restrictions, by contacting us. However, you should know that if you decide not to provide us with your Personal Information, this may prevent you from accessing certain of our services.
We also wish to inform you that anonymized information, which does not allow us to know who you are, may continue to be used, despite the withdrawal of your consent.
Secondary use
Depending on the circumstances, Boite Pac may also ask for your consent to use your personal information for secondary purposes, for example, to conduct market research or to enhance its databases. Your consent for secondary use can be withdrawn at any time by contacting us, without affecting the provision of our services to you.
3. What personal information do we collect?
As part of our activities and service delivery, the personal information collected may include, but is not limited to:
- Your contact details (for example: your name, your email address, your employer or your phone number), for identification and correspondence purposes;
- Your communication preferences;
- Your comments or responses to surveys, if applicable;
- Any other personal information that you have provided to us.
Boite Pac also collects information related to the use of its website, including technical information about your visits and any other information collected through cookies or other similar tools. For more information in this regard, we invite you to read the section "Cookies and other similar tools".
Boite Pac DOES NOT COLLECT the following data:
- Physiological biometric data.
4. Why do we collect and use your personal information?
Boite Pac only collects and uses information necessary to fulfill its obligations as well as to provide and improve its services. The personal information collected by or on behalf of Boite Pac is used for the following purposes:
- To communicate with you and assist you in delivering our services;
- To provide and maintain the requested services;
- For research and development, statistics, and to improve the use of our website and your customer experience. In other words, we want to ensure that you enjoy your digital experience and that our services meet your needs;
- To respond to your requests for information. In other words, if you need help, we will strive to be there to respond to you;
- To inform you of our new offers and communicate other information of a commercial nature, if you give us your consent or if the law permits us to do so;
- As allowed or required, for any applicable legal or regulatory obligation or provision;
- Any other purpose to which you have consented.
By automated processes
When you use our website, we obtain certain information through automated processes, such as the pages you have viewed. The information collected helps us better tailor our website to your needs in order to optimize its features and provide you with the best possible experience. We collect this information through various means, including the use of login cookies or other similar tools. For more information in this regard, we invite you to read the section "Login Cookies and Other Similar Tools."
5. Login witnesses and other similar tools
As mentioned in the previous sections, we may use various tools to enhance your experience on our website and better understand our customers' behavior, particularly in relation to our marketing strategies. The following section aims to provide you with more information about how we use these tools and how we conduct profiling, if applicable.
Login cookies and tracking pixels
We may use cookies and invisible pixels. Generally, cookies are small data files that are commonly stored on your device when using websites and online services. Invisible pixels, sometimes called "web beacons," are tiny images that can be placed on web pages or in emails. They can be used, for example, to anonymously track how many times a particular page has been visited by a user or to confirm that an email has been read. As their name suggests, pixels are invisible, and any part of our website, including advertisements that may be displayed, can contain invisible pixels. Unlike cookies, invisible pixels are not placed on your computer. In this Policy, we collectively refer to cookies and invisible pixels as "cookies."
The cookies we use
Boite Pac may use various types of cookies. As outlined below, some of these cookies are strictly necessary for the proper functioning of the website, while others will be used, if you consented, for functional, performance, or targeting purposes, or to share content on social media:
- Strictly necessary cookies. We use strictly necessary cookies to enable the proper functioning of our Platform, our security measures, as well as those of third parties. Without these cookies, the services you requested cannot be provided.
- Functional cookies (also known as “preference cookies”). These cookies are not essential for providing our services. If you have consented to their use, these cookies help personalize and enhance the user experience. For example, they retain your communication and language preferences.
- Advertising cookies. These cookies are not essential for providing our services. If you consented, we use advertising cookies to present you with relevant advertising content, including on social media. Additionally, our partners may use these cookies to determine if our ads have been displayed to you and, if so, whether you interacted with them. In such cases, our partners share data with us, including statistics regarding the performance of our ads.
Analytical tools
If you consent, Boite Pac uses analytical tools to analyze the browsing behaviors of visitors to its Platform, which are tools for analyzing traffic and usage of websites. Among other things, we use the Google Analytics tool provided by Google LLC ("Google") to collect information about how you navigate our website, as well as demographic and interest data. You can get more information about Google Analytics here.
Targeted advertising
Boite Pac also collaborates with third-party advertising companies such as Google Ads that collect and use information about your visits to our Platform to show you ads that may interest you. Boite Pac does not provide any information that would allow advertising companies to identify you.
Disabling cookies
Except for strictly necessary cookies, we will only place cookies on your device if you consent, and these will be kept for a maximum period of thirteen months from the time they are placed on your device. After this period, your consent will be required again.
You can also manage your cookie settings at any time by following these instructions. However, if you choose to refuse cookies, some pages or sections of our website may not display correctly, or some features may not be available. Also, even if you choose not to receive targeted advertising based on your interests, it will still be possible to see ads from Boite Pac; however, in this case, the ads will simply not be tailored to your interests and may be displayed more frequently.
- Set your choices in your browser. You can manage your cookie settings by modifying the settings in your browser or mobile device. For details on how to set up your browser, we invite you to consult the help center of Chrome, Safari, Firefox, Internet Explorer, Edge or Opera.
- Set your choices on social media. If you wish to change your sharing cookie settings via social media, we invite you to go directly to the sites of these social networks: Facebook (https://www.facebook.com/policies/cookies/), LinkedIn (https://fr.linkedin.com/legal/cookie-policy), YouTube (https://policies.google.com/technologies/cookies?hl=en), Instagram (https://www.facebook.com/policies/cookies/).
- Disable analytics tools. You can disable Google Analytics by installing this add-on.
6. How do we communicate your personal information?
As part of our activities, we sometimes need to communicate your personal information to various stakeholders. However, we strive to only disclose your personal information in the manner described below:
- Our employees. As part of their work, our employees may need to access your personal information, for example, when you contact us for information about our services. Their access is limited to what is necessary to perform their duties.
- Our agents and service providers. We may sometimes need to share your personal information with agents or third-party service providers who assist us in providing our services (for example: analysis, legal requirements, fraud detection, and marketing). For more information about the transfer of personal information, please see the section “Do we transfer your personal information outside of Quebec?”.
- When required by applicable law, to enforce rules or to protect the property or security of our rights or those of others. For example, we may disclose personal information to legal or regulatory authorities if we suspect money laundering activities, insider trading, misleading or deceptive business practices, or other criminal activities, to detect and prevent fraud, or to comply with the requirements of legislation or regulations from government entities, regulatory agencies, or other self-regulatory organizations. We may also be required to disclose personal information to comply with a legal obligation (for example, a court order) or to protect our asset (for example, for the collection of overdue accounts).
- Business transfer. In the course of developing our business, we may need to sell or buy businesses or services. In such transactions, personal information is generally part of the transferred business assets, but remains subject to the promises made in any existing privacy policy (unless, of course, the individual concerned consents otherwise).
- Anonymously. Anonymized personal information may be shared with third parties. For example, we might anonymize personal information to establish trends or statistics.
7. Are we transferring your personal information outside of Quebec?
The personal information we collect is stored in secure systems hosted on servers that may be located outside of Quebec, including in Canada and the United States. We also engage the services of agents and service providers who may be located outside of Quebec.
However, we strive to protect the personal information we hold, including personal information entrusted to an agent or service provider, whether located in Canada, the United States, or in other jurisdictions or countries. We particularly strive to limit their access to the personal information that is necessary to perform the tasks assigned to them. Please know that we also strive to establish contractual agreements with these agents and service providers to ensure the confidentiality and security of your personal information. This may include implementing robust and effective security measures.
If you have any additional questions on this topic, you can contact us.
8. How long do we keep your personal information?
Your personal information will be retained as long as necessary to fulfill the determined purposes or to comply with the requirements set forth in any applicable law regarding retention periods. Thus, the retention period of your personal information will vary based on the purpose of its use. At the end of this period, we will strive to destroy or anonymize this information. If you would like more details on this subject, we invite you to contact us.
8.1. How do I access my data or delete it?
You may request at any time to have access to a copy of the data that Boite Pac holds on you. You may also request that all the data we hold on you be deleted. In both cases, simply fill out the form for this purpose.
9. How do we protect your personal information?
We strive to implement the necessary and appropriate security measures to ensure the confidentiality of the Personal Information in our possession. To this end, we follow generally accepted standards in the industry, particularly regarding encryption, firewalls, and security protocols. The Personal Information we hold is therefore only accessible to those who are authorized to know it and who access it only when necessary in the performance of their duties.
Appropriate physical, technical, and administrative protections and security measures have been put in place and are kept up to date to minimize the risk of security incidents. If you believe that the security of your Personal Information has been compromised, we invite you to contact us.
10. What are your rights?
Under applicable law, you may have certain rights, such as the following:
- Protection of the privacy of your Personal Information;
- Access to your Personal Information;
- Correction of your Personal Information if it is incomplete, inaccurate or ambiguous, or if its collection, communication or retention is not authorized by any applicable law;
- Removal of your email address from our newsletter mailing list, if applicable;
- Withdrawal of your consent to the communication, use, and disclosure of your Personal Information, if applicable.
For any requests in this regard, contact us.
11. Changes and updates to the policy
Boite Pac reserves the right to modify this document at any time and for any reason, in which case the most recent version of the Policy will be published on the website. You are responsible for complying with the displayed updates to the Policy, as applicable. Your continued use of the website after the publication of the modified version of the Policy indicates your full and complete acceptance of it. The date of the last update to the Policy is indicated at the top of the Policy.
12. How to contact us?
Boite Pac has established procedures for receiving complaints and inquiries regarding its policies and practices for the management of Personal Information. We will inform individuals who make an inquiry or file a complaint of the existence of the relevant procedures.
Boite Pac will strive to investigate all complaints that are submitted to it. If a complaint is deemed valid, we will take appropriate action, including, if necessary, amending our policies and practices.
Feel free to contact us with any questions, requests for information, comments, or complaints regarding your Personal Information. To do so, we invite you to reach out to us using the contact details found on the Contact page.
13. Responsible for protecting personal information
Boite Pac is responsible for the protection of any personal information under its care. It has appointed a person responsible for the protection of personal information to ensure the organization's compliance with this personal information protection policy and the principles underlying it. In order to ensure the appropriate and consistent handling of any request under this policy, all access requests and requests for correction must be submitted in writing to the person responsible for the protection of personal information, namely:
Thomas Ferland-Dionne
Co-founder, B Corp Consultant
Email: thomas@boitepac.com
14. Security Policy
Boite Pac employs measures that adhere to industry standards to ensure the confidentiality, security, and integrity of its clients' data against any form of unauthorized use, consultation, communication, alteration, loss, as well as unlawful or accidental destruction. We are committed to ensuring the protection of encrypted data, both at rest and in transit, and we are committed to their retention or deletion in compliance with our policy or any agreement prevailing with an educational institution.
Boite Pac does not informally disclose the data covered by this policy to its employees. Only employees who need protected data to perform their duties can access it. In these cases, the principle of minimal access is applied, meaning that each program or employee is granted the least possible access needed to perform their tasks. Employees who have access to protected data are trained on their responsibilities regarding the processing of this data, as well as on the various laws and agreements related to data security. These employees also receive a unique user identifier, when possible, to facilitate accountability.
Although Boite Pac is committed to implementing best practices in information and data security, we cannot guarantee total security, as virus and hacker technologies are constantly evolving and there are other risk factors, such as unpredictable hardware or software failures. Therefore, Boite Pac cannot be held responsible for the loss or alteration of data.
If you would like to learn more about our security measures or obtain a copy of our data security policy, please contact us.
