Law 25-compliant — Updated May 2026

Privacy policy.
Compliant with Law 25.

Synéra is committed to complying with Law 25 and any other applicable law on the protection of personal information. This policy describes our practices for collecting, using and protecting your data.

01 · Introduction

Synéra ("we", "our") is operated by 9478-9310 Québec inc. This policy applies to all personal information processing activities — website visitors, clients, prospects and partners.

02 · Privacy Officer (RPRP)

In accordance with section 3.1 of Law 25, Synéra has designated a Privacy Officer (RPRP) :

03 · Information collected

Under section 5 of Law 25, we may collect : your name, email, phone, company, position, the content of your requests through the forms, as well as technical data (IP address, browser, pages visited). We do not intentionally collect sensitive data (health, political opinions, biometric data) except with explicit consent and where necessary.

04 · Purposes of collection

We use your personal information to :

  • Respond to your requests for information
  • Provide you with our IT, cybersecurity and compliance services
  • Manage the client relationship
  • Improve our website and our services
  • Comply with our legal obligations

05 · Consent

In accordance with section 8 of Law 25, your consent is required. It may be given through the forms on our site, by email, by phone, or through the cookie banner. You may withdraw your consent at any time at no cost and without prejudice.

06 · Use and disclosure

We never sell your personal information. We share it only with : our technology providers (hosting, email, management) bound by agreement, the authorities where the law requires it, or in the event of a merger/acquisition subject to a confidentiality undertaking.

07 · Hosting and transfers outside Quebec

In accordance with section 17 of Law 25, certain data is processed by American providers (Cloudflare, Microsoft, Resend). We have carried out a risk assessment and put adequate contractual protections in place.

08 · Security measures

In accordance with section 3.4 of Law 25, we have put in place access controls and system protections, and we apply best practices. No system is 100% secure — in the event of an incident, we apply the legal notification obligations.

09 · Retention of information

In accordance with section 23 of Law 25, your information is retained only for as long as necessary for its purpose, or longer where the law requires it (tax, contractual). Upon expiry, it is securely destroyed or anonymised.

10 · Your rights

In accordance with sections 27 and 28 of Law 25, you have the right to :

  • Access your personal information
  • Correct it
  • Withdraw your consent
  • Request erasure
  • Request portability

We respond within 30 days. If you disagree, you may contact the Commission d'accès à l'information (CAI) : 1-888-528-7741 · cai.gouv.qc.ca.

11 · Privacy incidents

In accordance with section 3.5 of Law 25, in the event of an incident, we take measures to mitigate its impact, notify the persons concerned where there is a risk of serious injury, notify the CAI within 72 hours, and maintain a register of incidents.

12 · Cookies

In accordance with section 8.1 of Law 25, we use four categories of cookies : essential (always active), preferences, analytics and marketing (consent-based). A banner appears on your first visit and a link in the footer lets you change your preferences.

13 · Minors

Our site is intended for a B2B audience. We do not intentionally collect information from minors. If we detect any, it is deleted. Parents may contact our Privacy Officer to report such a situation.

14 · Changes

This policy may be updated to reflect changes in our practices or in the law. Substantial changes are communicated in a visible manner or by email.

15 · Contact us

To exercise your rights or ask any question :

We acknowledge receipt of your request within 30 days and respond within a further 30 days.

— A question about your rights ?

Contact our Privacy Officer.