PRIVACY POLICY

Act to modernize legislative provisions as regards the protection of personal information (Law 25 — Bill 64)

1. Who are we?

Metalaser Inc. (“Metalaser,” “we,” “us,” or “our”) is responsible for the personal information collected through this website. We are committed to protecting your privacy in accordance with Quebec’s Act respecting the protection of personal information in the private sector (Law 25).

Person responsible for the protection of personal information:

• Name: Luis Alberto Castiblanco Reyes
• Email: info@metalaser.ca
• Address: Laval, Quebec, Canada

2. Information we collect

We may collect the following categories of personal information:

a) Information provided directly by you

• Full name
• Email address
• Telephone number
• Name and address of your business
• Details about your project or service request submitted through contact forms or by email

b) Information collected automatically

• IP address and approximate geographic location
• Browser type and version
• Pages visited and browsing activity on the website
• Date and time of visits
• Referral source, including how you found our website
• Cookie identifiers; see our Cookie Policy

3. Purposes of collection

We collect and use your personal information only for the following specific, explicit, and legitimate purposes:

• To respond to your requests for information and prepare quotes for our services.
• To process and fulfill service orders.
• To send you administrative communications related to your project.
• To improve the features and content of our website through statistical analysis.
• To comply with our legal obligations under Quebec and Canadian law.

We do not use your personal information for automated decision-making or profiling purposes.

4. Legal basis for processing

Under Law 25, we collect personal information only with your consent or when another legal basis applies, including:

• Consent: freely given, informed, and specific consent, such as when you submit a contact form.
• Performance of a contract: when processing is necessary to provide the services you have requested.
• Legal obligation: when we are required by law to retain certain records.

5. Retention period

We retain personal information only for as long as necessary for the purposes described above or as required by law:

• Contact requests: up to two years after the last communication.
• Client records, including invoices and contracts: seven years, in accordance with applicable tax legislation and accounting standards.
• Website analytics data: up to 13 months, after which it is anonymized.

Once these retention periods have expired, the data is securely destroyed or anonymized.

6. Disclosure to third parties

We do not sell, rent, or trade your personal information. We may disclose it only to:

• Service providers acting on our behalf, such as web hosting providers, email platforms, and analytics tools, that are bound by confidentiality agreements and authorized to process the information only for the specified purposes.
• Government authorities when required by law or court order.

Any transfer of personal information outside Quebec, such as to servers located in another province or country, is carried out only with appropriate safeguards and following a privacy impact assessment, in accordance with Law 25.

7. Your rights under Law 25

As a Quebec resident, you have the following rights regarding your personal information:

• Right of access: obtain a copy of the personal information we hold about you.
• Right to rectification: request the correction of inaccurate or incomplete information.
• Right to erasure: request the deletion of your information, subject to legal retention requirements.
• Right to withdraw consent: withdraw your consent at any time, without retroactive effect.
• Right to data portability: receive your information in a structured, commonly used, and machine-readable format.
• Right to be informed of a privacy incident: we will notify you and the Commission d’accès à l’information du Québec (CAI) of any privacy incident that may result in a risk of serious harm, in accordance with Law 25.

To exercise any of these rights, contact us at info@metalaser.ca. We will respond within 30 days.

8. Security measures

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption, restricted access controls, and regular security reviews.

9. Privacy incidents

In the event of a privacy incident or data breach that presents a risk of serious harm, we will notify the Commission d’accès à l’information du Québec (CAI) and the affected individuals, in accordance with the requirements of Law 25.

10. Protection of minors

Our website is not intended for children under the age of 14. We do not knowingly collect personal information from children. If you believe that we have inadvertently collected such information, please contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will publish the updated version on this page with a revised date.

12. Contact and complaints

For any questions regarding the protection of personal information or to submit a complaint, contact our person responsible for the protection of personal information at info@metalaser.ca.

You also have the right to file a complaint with the Commission d’accès à l’information du Québec (CAI): www.cai.quebec.ca.