Privacy Policy

The person in charge of the protection of personal information is:

Angelo Mecugni
Email: angelo@reeval.ca
Reeval inc., Montréal, Quebec

Any question, request to exercise your rights, or complaint concerning personal information may be addressed to him at this address. We acknowledge requests within a reasonable time and respond no later than the 30-day period provided by law.

We collect only the information necessary for the purposes described in section 3:

Information you provide directly. When you complete the compliance diagnostic: your answers (which concern your establishment — headcount, sector, the state of your prevention documents — not individuals), your email address, and, if you choose to provide them, your first name and your establishment's name.

Technical information collected automatically. The origin parameters of your visit (UTM parameters and the "gclid" ad-click identifier when you arrive through an ad), stored with your submission. Our hosting providers also generate standard technical logs (IP address, browser type, pages visited) for security and operational purposes.

Your cookie choice. Your decision to accept or refuse advertising-measurement cookies is stored locally in your browser (see section 6). We cannot access it on our servers.

We collect no sensitive information, no banking information, and no information concerning minors. Our services are not directed at persons under 18.

Your information is collected and used exclusively to:

• a) produce and present your compliance diagnostic results;
• b) deliver the documents you request (including the Starter Kit);
• c) follow up with you about your diagnostic and, where you have expressed interest, about our services, including the beta offer;
• d) measure the effectiveness of our advertising campaigns (only where you have consented — see section 6);
• e) comply with our legal obligations.

We do not use your information for other purposes without first obtaining your consent. We never sell your personal information and never share it with third parties for their marketing purposes.

Except where the law provides otherwise, we collect your information with your consent, expressed by voluntarily providing it (for example, entering your email to receive your detailed results) or by your explicit choice in our cookie banner.

You may withdraw your consent at any time by writing to angelo@reeval.ca or, for cookies, through the "Cookie preferences" link at the bottom of every page. Withdrawal has no retroactive effect on processing already lawfully carried out, but we then cease the processing concerned and delete the related information, subject to retention periods provided by law.

Your information is hosted in Canada: our database is operated by Supabase in the AWS ca-central-1 region (Montréal) and our site is deployed by Vercel with primary processing in the Montréal region (yul1).

We use the following providers, who act on our behalf under contractual confidentiality and security commitments:

• Supabase — database hosting (Canada);
• Vercel — site hosting and delivery. Its content-delivery network may process transient technical data (such as IP addresses) on servers outside Quebec while serving pages;
• Google (Google Workspace) — business email; messages you send us may be processed on servers outside Quebec, including in the United States;
• Google (Google Ads) — advertising measurement, only where you have consented to measurement cookies (section 6).

Before communicating personal information outside Quebec, we conduct a privacy impact assessment in accordance with section 17 of the Act, considering among other things the sensitivity of the information, the purposes, and the safeguards in place. Given the limited nature of the information concerned and the contractual and technical protections in place, we consider that it receives adequate protection.

Essential storage. The site works without any advertising cookie. Your consent choice is kept locally in your browser (local storage), along with elements strictly necessary for operation.

Advertising-measurement cookies (Google Ads). Only with your consent, we use the Google tag and Consent Mode to measure whether our ads lead to completed diagnostics. Everything defaults to refused: no advertising cookie is set and no advertising identifier is transmitted until you click "Accept." If you refuse, Google receives only aggregated, cookieless signals that cannot identify you. We never transmit your email, your name, your establishment's name, or your diagnostic answers to Google.

You may change your choice at any time through "Cookie preferences" at the bottom of every page. Refusing cookies has no consequence on your use of the site.

Information related to your diagnostic (answers, email, origin) is kept for a maximum of 24 months after our last interaction with you, then securely destroyed or irreversibly anonymized. Our hosting providers' technical logs follow their usual short retention cycles. If you become a client, a retention policy specific to the service agreement will apply and will be communicated to you.

You may request early deletion of your information at any time (section 9).

We apply security measures proportionate to the nature of the information, including: encryption in transit (TLS), encryption at rest with our database host, strict access control (submission data is readable only by an authenticated administrator account; no public read access), least privilege, and administrative access logging. Access to the information is limited to Angelo Mecugni.

We maintain a confidentiality-incident register. Should an incident present a risk of serious injury, we will diligently notify the Commission d'accès à l'information and the persons concerned, as required by law.

In accordance with the Act, you may:

• Access the personal information we hold about you;
• Rectify information that is inaccurate, incomplete, or ambiguous;
• Withdraw your consent at any time (section 4);
• Obtain portability of the computerized personal information you provided to us, in a structured, commonly used technological format;
• Request deletion of your information, subject to exceptions provided by law;
• File a complaint with us (section 1) and, if unsatisfied with its handling, with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

To exercise these rights, write to angelo@reeval.ca. We may ask for reasonable proof of identity before proceeding. We respond in writing no later than 30 days after receiving the request.

We may amend this policy to reflect changes in our practices or in the law. The version in force, its number, and its date appear at the top of this page. In the event of a substantial change affecting cookies, your consent will be requested again through the banner.

Reeval inc. (NEQ en attente d'attribution)
Montréal, Quebec
Person in charge of the protection of personal information: Angelo Mecugni — angelo@reeval.ca

This policy describes our practices for information purposes and does not constitute legal advice.