Privacy Policy

Protection of your personal information

Version 2.0 — Last updated: September 21, 2026

Introduction

TDR Informatique (hereinafter "we", "our" or "TDR") is committed to protecting the confidentiality and security of the personal information of visitors to its website, in compliance with Quebec's Law 25 on the protection of personal information and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy applies to the website tdrinformatique.ca. This is an informational website: it offers no user account, no subscription and no online payment. The only information you can send us through this site is what you voluntarily enter in the contact form.

Information collected in the course of our technical work at client sites is governed by our service agreements and is not covered by this policy.

1. Privacy Officer

In accordance with Law 25, the person holding the highest authority within TDR Informatique acts as the person responsible for the protection of personal information.

Any question, access request, correction request, withdrawal of consent or complaint regarding your personal information may be directed to them:

2. Personal Information Collected

A) Contact form

When you write to us through the contact form, we collect only:

  • Your name
  • Your email address
  • Your phone number (optional)
  • The subject and content of your message

This information is sent to us by email. The site keeps no visitor database.

B) Technical data related to form security

To limit automated submissions (spam), our server temporarily stores a timestamp associated with a non-reversible fingerprint of your IP address. This fingerprint cannot be used to recover the original IP address and is automatically deleted after a few hours.

C) Website analytics (only with your consent)

If you accept analytics cookies, the tools described in section 8 collect browsing data: pages viewed, visit duration, device and browser type, approximate location and IP address (truncated or anonymized depending on the tool). If you decline, none of these tools are loaded.

D) Server logs

Like any web server, our host keeps technical access logs (IP address, date and time, page requested) for security and diagnostic purposes.

3. Purposes of Collection

We collect and use your personal information solely for the following purposes:

  • Responding to your request for information or service
  • Contacting you to prepare a quote or schedule a service call
  • Protecting the contact form against automated submissions
  • Ensuring the security and proper operation of the site
  • Understanding, in aggregate form, how the site is used in order to improve it (only with your consent)
  • Complying with our legal obligations

We do not use your information for commercial solicitation and we never sell it.

4. Consent

In accordance with Law 25, your consent is required before any collection of personal information. This consent is:

  • Free: you may decline analytics cookies without losing access to the site
  • Informed: you are informed of the nature of the information collected and its use
  • Specific: consent for the contact form is separate from consent for cookies
  • Revocable: you may withdraw your consent at any time

When submitting the contact form, you must explicitly check a box authorizing TDR to use your contact details to reply to you.

5. Retention of Information

  • Messages received through the form: kept in our mailbox for as long as necessary to follow up on your request, then archived or deleted
  • Anti-spam fingerprint: a few hours at most
  • Server logs: according to our host's retention policy, generally a few weeks
  • Analytics data: according to the retention settings of the tools described in section 8 (maximum 14 months for Google Analytics)

6. Hosting and Data Security

The site is hosted in Canada, on OVH infrastructure. The following measures are in place:

  • Encrypted communications via TLS certificate (HTTPS) across the entire site
  • Protection of the form against automated submissions and header injection
  • Restricted and authenticated server access
  • HTTP security headers and blocking of direct access to internal files
  • Security updates applied by the host

As no system is infallible, we cannot guarantee absolute security, but we take reasonable measures to protect your information.

7. Disclosure to Third Parties

We do not sell, trade or rent your personal information.

Certain technical information may pass through the following providers, only to the extent necessary for the site to function:

  • OVH — website and email hosting, in Canada
  • Google — Google Analytics, web fonts and embedded map. Visiting the site transmits your IP address to Google, including for displaying fonts and the map.
  • Microsoft — Microsoft Clarity analytics, loaded only after your consent

These providers may process data outside Quebec, notably in the United States. We may also disclose information where required by law.

8. Cookies

The site uses two categories of cookies:

Necessary cookies

  • Storing your cookie preference
  • Session cookie used by the contact form

These cookies are essential to the operation of the site and do not require your consent.

Analytics cookies (consent required)

  • Google Analytics 4 — traffic statistics
  • Microsoft Clarity — page usage analysis

These tools are loaded only if you click "Accept" in the banner shown on your first visit. If you decline, no analytics script is executed. You can change your choice at any time by clearing your browser cookies.

9. Your Rights

Law 25 and PIPEDA grant you the following rights:

  • Right of access: obtain a copy of the information we hold about you
  • Right of rectification: have inaccurate or incomplete information corrected
  • Right to withdraw consent: withdraw your consent at any time
  • Right to deletion: request deletion of your information when its retention is no longer justified
  • Right to portability: receive your information in a structured, commonly used technological format
  • Right to complain: to us or to the competent authority

To exercise any of these rights, write to us at info@tdrinformatique.ca. We will respond within a maximum of 30 days.

10. Privacy Incidents

In the event of a privacy incident presenting a risk of serious harm, we undertake to:

  • Promptly take reasonable measures to limit the consequences
  • Notify the Commission d'accès à l'information du Québec
  • Notify the affected individuals
  • Maintain an incident register, in accordance with Law 25

11. Minors

The site is not intended for persons under 14 years of age and we do not knowingly collect their personal information. If you become aware that a minor has sent us information, write to us and we will delete it.

12. Changes to This Policy

We may modify this policy to reflect a change in our practices or in the law. The date of the last update appears at the top of this page. We invite you to consult it periodically.

13. Remedies

If you believe we have not handled your request satisfactorily, you may file a complaint with the following authorities:

  1. Commission d'accès à l'information du Québec (CAI) — www.cai.gouv.qc.ca
  2. Office of the Privacy Commissioner of Canada — www.priv.gc.ca

This policy takes effect on September 21, 2026 and replaces any previous version.