This Privacy Policy explains how Tradesult (“we”, “our”, “us”) collects, uses, discloses, retains and protects the personal information you provide when you use our website tradesult.org, our business valuation questionnaire and our related services.
We are committed to complying with Quebec’s Act respecting the protection of personal information in the private sector (commonly referred to as “Law 25”) as well as any other applicable privacy legislation.
1. Privacy Officer
In accordance with Law 25, we have designated a person in charge of the protection of personal information, who ensures compliance with this policy and our practices.
For any question, access or rectification request, withdrawal of consent, or complaint regarding the handling of your personal information, please contact the Privacy Officer at the coordinates above.
2. Information We Collect
As part of our business valuation service, we may collect the following categories of information:
2.1 Identification and contact information
- First name, last name, job title
- Email address and phone number
- Company name, mailing address, website
2.2 Financial and business information
- Financial statements (balance sheets, income statements, quarterly revenues)
- Fixed assets, products and services, customers, suppliers
- Shareholding structure and shareholder compensation
- Information on key employees, workforce and industry
- Strategic analyses (strengths, weaknesses, opportunities, threats), R&D activities and financing structure
2.3 Technical information
- IP address, browser type and operating system
- Access and usage logs of the service
- Cookies strictly necessary for the site to function
3. Purposes of Collection
We collect and use your personal information solely for the following purposes:
- Providing the business valuation and sale-support service you have requested
- Generating personalized reports and analytical documents
- Communicating with you regarding your file and our services
- Ensuring the security, integrity and proper functioning of our platform
- Complying with our legal, regulatory and contractual obligations
We will not use your information for any other purpose without obtaining your prior consent, unless permitted or required by law.
4. Consent
By using our questionnaire and submitting your information, you consent to its collection, use and disclosure in accordance with this policy. Your consent is free, informed and given for specific purposes.
You may withdraw your consent at any time, subject to legal or contractual restrictions. However, withdrawing consent may prevent us from continuing to provide certain services to you.
5. Disclosure to Third Parties
We do not sell or rent your personal information. We may, however, disclose it to third parties in the following circumstances:
- Service providers: web hosting, web application firewall and security monitoring, email processing, and other technical providers bound by contractual confidentiality obligations;
- Legal obligations: when required by law, a court, or a competent regulatory authority;
- Explicit consent: with your prior authorization for any other disclosure.
Our service providers are only authorized to use your information to the extent necessary to perform the services we entrust to them.
6. Transfers Outside Quebec
Some of our service providers may be located outside Quebec, notably in the United States. Before any transfer, we conduct a privacy impact assessment to ensure that your information benefits from a level of protection equivalent to that afforded in Quebec.
These measures include encryption of communications in transit (HTTPS/TLS), selection of reputable providers that adhere to international security standards and whose terms of service include data protection commitments, and limiting the data actually transferred to what is strictly necessary.
7. Retention and Destruction
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or for the period required by law.
Retention period: Data entered in the web form is retained until the end of the mandate. Data uploaded for the execution of the mandate is retained for a period of five (5) years following the end of the mandate, after which it is securely destroyed or anonymized.
8. Security Measures
We have implemented reasonable physical, organizational and technological security measures to protect your personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. These measures include, among others:
- Web application firewall (WAF) and attack protection
- Encryption of communications (HTTPS/TLS)
- Two-factor authentication on administrative accounts
- Regular scanning of server files for malware detection
- Access controls based on the principle of least privilege
- Regular backups and business continuity plan
- Logging and monitoring of access to sensitive data
9. Your Rights
In accordance with Law 25, you have the following rights with respect to your personal information:
- Right of access: obtain a copy of the information we hold about you
- Right of rectification: request correction of inaccurate, incomplete or ambiguous information
- Right to portability: receive your information in a structured, commonly used technological format
- Right to withdraw consent: withdraw your consent to the processing of your information
- Right to de-indexing and cessation of dissemination: in the cases provided for by law
- Right to lodge a complaint: with our Privacy Officer or directly with the Commission d’accès à l’information du Québec
To exercise any of these rights, please contact our Privacy Officer at the coordinates provided in Section 1. We will respond to your request within the timeframes prescribed by law (30 days).
10. Privacy Incidents
In the event of a confidentiality incident presenting a risk of serious harm, we will notify you as soon as possible and will also inform the Commission d’accès à l’information du Québec, in accordance with our legal obligations. We maintain an internal log of all incidents, even minor ones.
11. Cookies and Similar Technologies
Our site uses cookies strictly necessary for its operation and, where applicable, performance cookies. No advertising or third-party tracking cookies are used without your consent. You may configure your browser to refuse cookies, although this may affect certain site features.
12. Automated Decisions
We do not use fully automated decision-making systems that produce legal or significant effects on you. Should such use be contemplated, we would inform you in advance and offer you the opportunity to submit your observations.
13. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, applicable legislation or our services. The date of the last update appears at the top of the document. We invite you to review this page regularly.
14. Contact Us
For any question concerning this policy or our personal information protection practices, please contact:
Gestion Tradesult Inc.
Privacy Officer
Officer: François-Guy Richard
Title: President
Email: privacy@tradesult.org