Privacy Policy

1. Who We Are

Automathing Group Inc. ("Automathing," "we," "us," or "our") is a technology consulting firm incorporated under the laws of Québec, Canada, with its principal place of business at 1835 Belvédère Sud #404, Sherbrooke, Québec. We help companies design, build, and evolve digital products and automated systems.

This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with Québec’s Act respecting the protection of personal information in the private sector (Law 25 / Bill 64), the federal Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s Anti-Spam Legislation (CASL), and other applicable privacy laws.

2. Person Responsible for Personal Information

In compliance with section 3.1 of Law 25, Automathing has designated a person responsible for the protection of personal information. You may contact them at:

• Email: info@automathing.ca
• Address: 1835 Belvédère Sud #404, Sherbrooke, Québec, Canada

3. Personal Information We Collect

We collect only the personal information necessary for the purposes described in this Policy.

Information you provide directly

• Contact details: name, email address, phone number, company name
• Communications: messages sent via our contact form, email, or booking system
• Professional context: job title, industry, project details you share with us

Information collected automatically

• Usage data: pages visited, time on site, referring URLs, browser type, operating system
• IP address and approximate geographic location
• Device identifiers
• Cookies and similar tracking technologies (see Section 9)

Information from third parties

We do not purchase personal information from third-party data brokers.

4. Purposes for Collection

We collect and use personal information to:

• Respond to your inquiries and communicate about our services
• Schedule and conduct consultations and meetings
• Deliver contracted services and manage client relationships
• Send you service updates, event notices, or insights — with your consent
• Analyze website usage and improve our online presence
• Comply with legal obligations

We do not use personal information for purposes other than those for which it was collected, unless we obtain your consent or are required by law.

5. Legal Basis for Collection and Use

Under Law 25, we rely on the following bases:

• Consent: For marketing communications, we obtain your prior, free, and informed consent. You may withdraw consent at any time.
• Contractual necessity: To perform services you have engaged us to deliver.
• Legitimate interest: For website analytics, security monitoring, and fraud prevention, where your privacy interests are not overridden.
• Legal obligation: To comply with applicable laws and regulations.

6. Disclosure of Personal Information

We do not sell personal information. We may share it with:

• Service providers: Third-party vendors who assist us in delivering our services (e.g., hosting, analytics, scheduling). These parties are contractually bound to protect your information and use it only for specified purposes.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred under confidentiality commitments.

Our key service providers include:

7. Cross-Border Data Transfers

Some of our service providers are located outside Québec or Canada, including in the United States. Before transferring personal information outside Québec, we assess whether the destination jurisdiction offers adequate protection and, where required, implement appropriate safeguards such as contractual clauses, in accordance with Law 25.

You may request information about our privacy impact assessments (PIAs) for cross-border transfers by contacting us at info@automathing.ca.

8. Retention and Destruction

We retain personal information only as long as necessary for the purposes it was collected or as required by law:

• Contact inquiries: Up to 2 years after last contact
• Client records: 7 years after the end of the business relationship (accounting and tax obligations)
• Website analytics data: As configured in Google Analytics (default: 26 months)

When personal information is no longer needed, we securely destroy or anonymize it.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate and analyze site usage.

You can manage or disable cookies through your browser settings. You may also opt out of Google Analytics tracking via the Google Analytics Opt-out Browser Add-on.

10. Security

We implement appropriate technical and organizational security measures, including:

• Encrypted data transmission (TLS/HTTPS) for all website communications
• Access controls and authentication for internal systems
• Periodic security reviews

No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Privacy incident notification: In the event of a privacy incident involving personal information presenting a risk of serious harm, we will notify the Commission d’accès à l’information (CAI) and affected individuals within 72 hours of becoming aware of the incident, as required by Law 25.

11. Your Rights

Under Québec Law 25 and PIPEDA, you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Portability: Request that your personal information be communicated to you in a commonly used technological format (effective September 22, 2023 under Law 25).
• Erasure / de-indexing: Request deletion or de-indexing of your personal information, subject to our legal retention obligations.
• Withdraw consent: Withdraw consent to certain processing at any time without affecting the lawfulness of processing before withdrawal.
• Object to automated decisions: Request that automated decisions producing legal or significant effects be reviewed by a person.

To exercise any of these rights, contact us at info@automathing.ca. We will respond within 30 days. We may need to verify your identity before processing your request.

12. Complaints

If you believe we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with:

We encourage you to contact us first so we can work to resolve any concerns directly.

13. Children’s Privacy

Our services are intended for businesses and professionals. We do not knowingly collect personal information from children under the age of 14. If we become aware that we have inadvertently collected such information, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. Material changes will be communicated by updating the “Last Updated” date above. We encourage you to review this Policy periodically.

15. Contact Us

For any questions or concerns about this Privacy Policy: