Privacy Policy

PRIVACY POLICY - PARECO RÉNOVATION+TOITURE

This Privacy Policy is designed to help you understand our practices regarding the collection, use, and retention of personal information. By providing us with personal information (through our website, completing a form, via email, in person, or over the phone), you agree that it will be processed in accordance with the terms outlined in this Privacy Policy, and you authorize Pareco + Inc., its third parties, and service providers to process your personal information for the purposes stated below.

POLICY ON BEST PRACTICES TO FRAME THE HOLDING OF PERSONAL INFORMATION (PI)

In order to ensure compliance by Pareco + Inc. relating the protection of personal information in the private sector, also known as Law 25, we invite you to validate and adapt practices in this regard as needed.

DEFINITION OF PERSONAL INFORMATION:

Here is what constitutes personal information:

• Name, race, ethnic origin, religion, marital status, and level of education
• Email address, email messages, and IP address (Internet Protocol - cookie)
• Age, height, weight, medical records, blood type, DNA, fingerprints, and vocal signature
• Income, purchases, consumption habits, banking information, credit or debit card data, loan or solvency reports, and tax returns
• Social Insurance Number (SIN) or other identification numbers

These are some elements to consider and implement to promote compliance with legislative provisions, most of which will come into effect in September 2023.

WHAT PERSONAL INFORMATION DO WE COLLECT?

We may collect and process various types of personal information in the course of our functions, including:

• Professional and/or personal contact information, such as first name, last name, address(es), email address(es), and phone number(s)
• Marketing and communication preference information, feedback, and responses to surveys
• Billing information and financial details, such as billing address, bank account information, or payment data
• Information regarding services, including details about services we have provided to you;
• Information related to recruitment, such as a curriculum vitae, educational and professional background information, details about professional affiliations, and other relevant information for potential recruitment;
• Information about website usage and other technical information, such as details about visits to our websites, your interaction with our advertising and online content, or information collected through cookies and other tracking technologies;
• Photos and video or audio content;
• Any other personal information provided.

Please note that if you provide us with personal information about other individuals (such as your clients, administrators, or true owners), you must ensure that you have duly informed them that you are providing us with their information and have obtained their consent for such information disclosure. If applicable, evidence of the consent given to us (date, time, method) in circumstances where such consent is necessary for the processing of personal information;

HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

We collect your personal information from you and during our interactions with you, as follows:

• During your registration on our form on our website;
• During the provision of services we render to you;
• Through exchanges by mail, email, or phone.

We also collect publicly accessible information, including on public platforms, including our website.

HOW DO WE USE PERSONAL INFORMATION?

We may use personal information in any of the ways indicated below, with your consent or, as applicable, on another legal basis. In each case, we specify the reasons for using your personal information:

• To provide our services and conduct our business, to administer and execute our services, including fulfilling our obligations under any agreement between you and us.
• To facilitate the use of our websites and ensure that the content is relevant and presented in the most effective way for you and your device.
• For marketing and business development purposes – to provide details about new services, information about developments in our organization and industry, and invitations to seminars and events when a person has chosen to receive such information.
• For research and development purposes (including security), to conduct analyses for a better understanding of our customers' service and marketing requirements, and to better understand our organization and develop our services and offerings.
• For recruitment purposes, to process job applications and assess whether a person meets the requirements of the position they are applying for.
• To comply with our legal, regulatory, or risk management obligations.
• To enforce our rights, to comply with our legal or regulatory obligations to disclose information, or to protect the rights of third parties.
• To ensure we get paid, to recover payments owed to us, and if necessary, to pursue such recoveries through debt collection agencies or other legal means, including legal proceedings.
• To reorganize or modify our company, if we undergo a reorganization (such as merging, consolidating, or transferring part of the business), we may need to transfer some or all of the personal information to an applicable third party (or its advisors) as part of any due diligence process or transfer to that entity resulting from a reorganization or to that third party for the same purposes as stated in this Privacy Policy or for the analysis of any proposed reorganization.

CONSULTATION AND USE OF PERSONAL INFORMATION

Pareco + Inc. must ensure to adhere to the following parameters:

• Limit access to personal information only to individuals authorized to receive them within the company when such information is necessary for the performance of their duties.
• Limit the use of personal information: unless an exception provided by law, the company must obtain the consent of the individual concerned to use their information once the purpose of the file is completed. Implement security measures to ensure the protection of collected, used, disclosed, stored, or destroyed personal information.

Additionally, the law provides that Pareco + Inc. may disclose personal information of an individual upon request from a third party or government organization:

• To its attorney.
• To the Director of Criminal and Penal Prosecutions if the information is required for a prosecution for an offense under a law applicable in Quebec.
• To an organization, mandated by law to prevent, detect, or suppress crime or offenses to request it in the exercise of its functions, if the information is necessary for the prosecution of an offense under a law applicable in Quebec.
• To a person to whom it is necessary to disclose the information under an applicable law in Quebec or for the enforcement of a collective agreement.
• To a person or organization with the power to compel communication, requesting it in the exercise of their duties;
• To a person to whom this communication must be made due to an emergency endangering the life, health, or safety of the person concerned;
• To third parties to prevent an act of violence, including suicide, when there is reasonable belief that a serious risk of death or serious injury threatens an identifiable person or group, and the nature of the threat inspires a sense of urgency;
• To an archival service under certain conditions and/or after a certain period;
• To a person who, by law, can recover debts on behalf of others and requests it for this purpose in the exercise of their duties;
• To a person if the information is necessary for the purpose of recovering a company's debt;
• To any person or organization that may reduce a risk following a privacy incident involving personal information, by providing only the personal information necessary for that purpose;
• To their spouse or one of their close relatives in the case of a deceased person if this information is likely to help that person in their grieving process, unless the deceased person has in writing refused to grant this right of access;

RETENTION OF PERSONAL INFORMATION

The law requires Pareco + Inc to establish rules applicable to the retention and destruction of personal information. Pareco + Inc. must document where physical and paper records containing personal information are located and restrict access to these records to individuals who need to have this information.

For example, Pareco + Inc could gather all records containing personal information and place them in one or more folders located in a restricted access room and/or locked with a key that only individuals needing to consult them can have.

Example:

-Locked office outside business hours, Locked file cabinet with limited access to the aforementioned individuals

-Confidentiality and destruction commitment signed by each member of the management

-HR records : CVs of job applicants, personal files and contracts of staff members, volunteer information files, etc.

-Accounting database: History of all clients
-History of transactions and communications, Client information

-Data backup every day

-HR records: CVs of job applicants, personal files, and contracts of staff members, etc. CEO, Accountant Payroll and tax statement production

Secure file and access restricted to authorized personnel only

Other Location of the computer server(s):

-Since Pareco + Inc.'s computer server is located on its premises, it must ensure that access to the relevant area is limited to individuals who need access to HR or IT personnel responsible for server maintenance.

HOW LONG DO WE KEEP PERSONAL INFORMATION?

We will only retain personal information for the duration necessary for the purposes outlined in this Personal Information Privacy Policy and to comply with our legal and regulatory obligations. For more information on how long we retain personal information, please contact us using the contact information provided in the "How to Contact Us" section.

DESTRUCTION OF PERSONAL INFORMATION

Individuals for whom Pareco + Inc. holds personal information can request at any time that their personal information be destroyed, except for information required for tax receipts for a period of 6 years.

HOW DO WE PROTECT PERSONAL INFORMATION?

We follow industry-accepted standards to protect information submitted to us, both during transmission and once we receive it. We maintain appropriate physical, technical, or administrative protection measures to protect personal information against accidental or unlawful destruction, accidental loss, alteration, disclosure, or unauthorized access, misuse, or any other form of illegal processing of personal information in our possession. We have taken steps to ensure that only staff members who need access to your personal information are those who need to know or whose functions reasonably require knowledge of such information.

However, no method of transmission over the Internet, or electronic storage method, is 100% secure.

Therefore, we cannot guarantee the security of the information you transmit to us or provide to us, and you do so at your own risk. We also cannot guarantee that such information will not be accessed, obtained, disclosed, altered, or destroyed due to the breach of our physical, technical, or administrative

protection measures. If you have reason to believe that personal information has been compromised, please contact us using the contact information provided in the "How to Contact Us" section.

In the event of a privacy incident involving your personal information, we commit to notifying you as soon as possible following our awareness of the incident. We will take reasonable measures to reduce the risks of harm and prevent new incidents of a similar nature from occurring.

WITH WHOM DO WE SHARE PERSONAL INFORMATION?

Third-party service providers and/or partners, including those who provide services to us. These third parties may have access to personal information or process it as part of the services they provide to us. We limit the information we provide to these service providers to only the information reasonably necessary for them to perform their functions, and the contracts we have with these service providers require them to preserve the confiden􏰀ality of this information. Government authorities and law enforcement agencies when required by applicable laws. Specifically, we may disclose personal information and other information if required by law, including tax laws, or if we believe in good faith that such disclosure is necessary to comply with applicable laws, in response to a court order or subpoena, or a government search warrant, or otherwise to collaborate with such government authorities and law enforcement agencies; The acquirer, successor, or assignee in the context of any merger, acquisition, borrowing, sale of assets, or similar transaction, as well as in the event of insolvency, bankruptcy, or receivership involving the transfer of personal information to one or more third parties as a business asset; We will only use personal information for the sole purpose of achieving the main and legitimate objective for which it was collected, or for purposes compatible with that main objective. The organization uses the services of third-party sites, such as Facebook, YouTube, Google, to promote its content and offers. When you visit our website, these third parties may use cookies, invisible pixels, or similar technologies on your hard drive to collect or receive information about your browsing on the website and elsewhere on the Internet. These technologies allow for the delivery of relevant and targeted advertisements based on your interests. You can view and destroy cookies if you wish, giving you full control. We recommend referring to your browser settngs to make the appropriate changes. If you want third-party sites to store cookies on your hard drive for targeted advertising, you can enable this option.

CONFIDENTIALITY COMMITMENT FROM STAFF, CONTRACTORS, AND SUBCONTRACTORS WITH ACCESS TO PERSONAL INFORMATION

Confidentiality commitment from a third-party contractor with access to personal information. Since Pareco + Inc. may decide to entrust various mandates to other third parties, and the execution of these contracts may require the transfer and/or access by them to personal information held by Pareco + Inc. Given that these organizations or third parties undertake to take all necessary measures to ensure the protection and confidentiality of personal information held by Pareco + Inc. It is agreed that the preamble is an integral part of this commitment. It is agreed that during the term of my contract with Pareco + Inc. and following the end of my involvement with Pareco + Inc., I undertake not to disclose or divulge to anyone, directly or indirectly, any personal information of an individual held by Pareco + Inc. and to which I may have access.

Personal information includes, but is not limited to: Name, marital status, and level of education; age, email address, email messages, and IP address (Internet Protocol-cookie), banking information, credit or

debit card data, loan or solvency reports, and income statements, etc. I also undertake not to use any personal information for personal purposes or for purposes other than those required by Pareco + Inc.

Notwithstanding any other provision of this commitment, I will not be in default or in violation due to the disclosure of personal information if I am compelled by law to disclose this information, provided that I have made best efforts to inform Pareco + Inc. promptly so that Pareco + Inc. takes appropriate measures to prevent disclosure if necessary. Furthermore, I undertake that any member of my staff involved in this contract adheres to this commitment. This commitment binds any corporation and any person affiliated with Pareco + Inc. who has access to personal information transmitted by Pareco + Inc. At the end of the contract, I undertake to have the personal information transmitted by Pareco + Inc. subsequently destroyed without a backup copy."

WHAT RIGHTS DOES A PERSON HAVE REGARDING THEIR PERSONAL INFORMATION?

In certain circumstances and in accordance with applicable data protection laws, a person has the following rights:

• Access: the right to inquire whether we are processing information and, if so, to request access to personal information. Subject to applicable law and, if necessary, the payment of a monetary amount, the person may receive a copy of the personal information we hold and certain other information about them;
• Accuracy: we are required to take reasonable steps to ensure that the personal information in our possession is accurate, complete, not misleading, and up-to-date;
• Rectification: the right to request the rectification of any incomplete or inaccurate personal information we hold.
• Deindexing: the right to request the cessation of disseminating their personal information or deindexing any hyperlink attached to their name providing access to information if such dissemination harms them or violates the law or a court order (right to erasure or forgefulness)
• Anonymization: the fact that our organization may, instead of destroying them, anonymize personal information for use, but only for serious and legitimate purposes (e.g., retention of information required for possible tax inspection)
• The right to be informed when subject to a decision based exclusively on automated processing; The right to be informed when using identification, location, or profiling technology and the means
• offered to enable these functions;

Finally, it is also possible to file a complaint with a data protection authority, especially in the country, province, or state where you normally reside (in Quebec, the Access to Information Commission), where we are located, or where an alleged violation of data protection laws has occurred. To exercise any of these rights, please contact us using the contact information provided in the "How to Contact Us" section.

HOW TO CONTACT US?

To ask questions, provide comments or a complaint regarding this Privacy Policy or personal information, exercise your rights, file a complaint, or obtain information about our policies, contact our Privacy Officer at the following coordinates:

Catherine Paré, Operations Director

Pareco + Inc. 125 Mount Vernon Ave, Mtl, Qc, H8R 1J9

(514) 488-4882, info@pareco.ca

HOW DO WE UPDATE THIS PRIVACY POLICY?

We may change the content of our websites and our use of cookies without notice, and as a result, our Privacy Policy and Cookie Policy may be amended from time to time in the future. We encourage you to review them whenever you visit the website to stay informed about how we handle personal information.

COOKIE POLICY CONSENT

CONSENT

By using our website https://pareco.ca, you consent to the use of cookies in accordance with this cookie policy. You will have seen an invitation to this effect on your first visit to this website; although it usually does not appear on subsequent visits, you can withdraw your consent at any time by following the instructions below.

DISABLE COOKIES

When the organization setting the cookie offers an automatic disablement tool for that cookie or those cookies, we indicate the name of that organization. If you do not agree to the use of these cookies, please disable them by following the instructions for your browser as outlined on the following site (All About Cookies) or use an automatic disablement tool, if available. However, some services may not work as well if cookies are disabled. After your initial visit to this website, we may change the cookies we use. This cookie policy will always let you know who is setting up cookies, for what purpose, and how to disable them if you check it from time to time.

QUELS TYPES DE TÉMOIN SONT UTILISÉS?

The categories of cookies used by Pareco + Inc. and its suppliers are described below.

Marketing Cookies

These technologies are used by advertisers to deliver ads that match your interests.

Functional Cookies

These technologies allow us to analyze usage behavior to measure and improve performance.

Essential Cookies

These technologies are necessary to enable the basic features of our service.

The cookie policy does not cover third-party websites Please note that this cookie policy does not apply to the privacy practices of third-party websites that may be linked on or accessible from this website, and we are not responsible for such practices. Changes to the cookie policy We may update this cookie policy, and we encourage you to review the policy from time to time to stay informed about how we use cookies.

The last update to this cookie policy was on November 8, 2023.