Quebec Privacy — Loi 25

1. What is Loi 25?

Loi 25 (Act Modernizing Legislative Provisions as Regards the Protection of Personal Information) is Quebec's Act respecting the protection of personal information in the private sector. It grants Quebec residents broader rights than federal PIPEDA, including data portability, de-indexation, and protections around automated decision-making.

2. Rights of Quebec Residents

• •Right of access — request a copy of your personal information held by GotMaple.
• •Right to rectification — request correction of inaccurate or incomplete information.
• •Right to data portability — receive your data in a commonly used, structured format.
• •Right to deletion ("right to be forgotten") — request erasure of your personal information where permitted by law.
• •Right to de-indexing — request that hyperlinks to personal information about you be de-indexed from search results where continued dissemination causes harm.

To exercise any of these rights, email privacy@gotmaple.ca.

3. Automated Decision Making

GotMaple does not use automated decision-making systems that significantly affect Quebec residents without human review. Any significant automated decision (e.g., account suspension) is subject to review by a member of our team.

4. Privacy Impact Assessments

In compliance with Loi 25 requirements, GotMaple conducts Privacy Impact Assessments (PIAs) for all new high-risk data processing activities before they go into production.

5. Data Breach Notification

In the event of a security incident likely to cause serious harm, GotMaple commits to notifying affected Quebec residents within 72 hours of discovering the breach, as required by Loi 25. We will also inform the Commission d'accès à l'information (CAI) of Quebec within prescribed timeframes.

6. Privacy Officer (Responsable de la protection des renseignements personnels)

GotMaple has designated a Privacy Officer (Responsable de la protection des renseignements personnels) as required by Loi 25. For any privacy question or to exercise your rights, contact:

7. Data Storage Location

All personal information of GotMaple users is stored exclusively in Canada, in compliance with Loi 25 requirements and GotMaple's commitment to Canadian data sovereignty:

• •Primary data centre: Aptum Technologies — Montreal, Quebec, Canada
• •Secondary / disaster recovery: Aptum Technologies — Toronto, Ontario, Canada
• •No personal data is transferred outside of Canada without explicit user consent.
• •Backups are encrypted at rest using AES-256 and stored in Canadian facilities only.

Should GotMaple ever consider storing or processing data outside Canada, a Privacy Impact Assessment (PIA) would be conducted in advance and affected residents notified as required by Loi 25.

8. Commission d'accès à l'information (CAI)

If you feel GotMaple has not addressed your complaint satisfactorily, you have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI), the provincial privacy supervisory authority:

We encourage you to contact us first at privacy@gotmaple.ca to attempt to resolve any concern before contacting the CAI.

À propos de cette page (Français)

Cette page est fournie principalement en français pour les résidents du Québec, conformément à la Charte de la langue française (Loi 101). Une version française complète de notre avis de confidentialité est disponible à gotmaple.ca/fr/legal/privacy-qc.