Privacy policy
Aptitude Technologies (9320-1606 Québec inc., hereinafter “Aptitude”, “we” or “our”) attaches great importance to protecting the personal information entrusted to it. This policy explains what information we collect, why, how we use it, who can access it, how long we keep it and how to exercise your rights under Quebec's Act respecting the protection of personal information in the private sector (Law 25, chapter P-39.1).
Privacy Officer
In accordance with Law 25, Aptitude designates a Privacy Officer (PO) who can be reached at:
confidentialite@aptitudetech.net
or by postal mail: 250, route 338, bureau 201, Les Coteaux (QC) J7X 1E4.
1. Personal information we collect
We limit collection to what is strictly necessary for the purposes set out below. Depending on your interactions with us, we may collect:
- Contact details: last name, first name, email address, phone number, company name.
- The content of your messages: subject, description of your need, technology context shared voluntarily.
- Business qualification data: company size, number of users/servers, timeline, indicative budget (quote form).
- Applications: résumé, cover letter, LinkedIn profile, position sought (careers form).
- Technical browsing data: IP address, device type, page visited, referrer, session duration, preferred language. This data is collected via cookies and our audience analytics service.
- Live chat: if you use our chat window (powered by 3CX), the content of your messages and, if you choose to start a voice call from your browser, that call's technical data.
No sensitive personal information (health data, biometric data, detailed financial information) is requested through this site.
2. Purposes
- Respond to your contact requests and prepare a quote.
- Manage the commercial or contractual relationship if you become a client.
- Evaluate your application when you apply for a job.
- Improve our site, understand its use, detect and prevent abuse.
- Comply with our legal, accounting and tax obligations.
We do not use your information for direct marketing purposes without your explicit consent. No automated decisions are made about you.
3. Legal basis and consent
The processing of your information is based, as the case may be, on:
- your consent, given by completing a form and ticking the boxes provided for that purpose;
- the performance of a contract or pre-contractual measures at your request;
- compliance with a legal obligation;
- our legitimate interest, insofar as it does not infringe your rights (site security, fraud prevention, administrative management).
You may withdraw your consent at any time, as described in the “Your rights” section.
4. Retention
- Unconverted contact requests: kept for at most 24 months after the last contact, then destroyed or anonymized.
- Quotes and opportunities: kept for the duration of the relationship, then 7 years to meet our legal and tax obligations.
- Applications: kept for 12 months after the last interaction, unless you explicitly consent to longer retention.
- Technical logs: kept for a maximum of 12 months for security.
5. Hosting and location
The website and the CRM (ERPNext) are hosted on infrastructure located in Canada. Data is not systematically transferred outside Canada. Should such a situation arise (for example during a third-party integration), we would first carry out a privacy impact assessment (PIA) and obtain your consent where required.
6. Sharing with third parties
We do not sell or rent your information. We may share it only with:
- Our employees and subcontractors bound by confidentiality commitments, only to the extent strictly necessary to carry out their mandate.
- Our technology providers (hosting, email, audience analytics), governed by contract.
- 3CX (phone system and live chat), to handle the conversations and calls initiated from our website.
- Public authorities, when the law requires us to.
7. Cookies and similar technologies
Our site uses a minimal number of cookies:
- Strictly necessary cookies (preferred language, security token, consent status). They do not require your prior consent.
- Audience analytics cookies (Google Analytics 4 — anonymized IP, no advertising sharing). Enabled only after your consent via the cookie banner.
- 3CX live chat widget (browser local storage, on the Home, Contact and Remote help pages). Loaded only after your consent via the cookie banner.
No advertising or marketing-profiling cookies are used. You may withdraw your consent at any time by clearing your browser cookies or through your browser settings.
8. Security
We implement reasonable security measures suited to the sensitivity of the information: TLS encryption of the site and emails, role-based access control in our CRM, access logging, encrypted backups, and ongoing staff awareness. As no system is infallible, in the event of a confidentiality incident we will apply the procedure provided for by Law 25 (notification to the Commission d'accès à l'information and to the individuals concerned if the incident presents a serious risk of harm).
9. Your rights
In accordance with Law 25, you have the following rights regarding your personal information:
- The right to access the information we hold about you;
- The right to rectify inaccurate, incomplete or ambiguous information;
- The right to withdraw consent and to cease dissemination;
- The right to portability (to receive your information in a structured, commonly used technological format);
- The right to de-indexing when dissemination causes you serious harm;
- The right to be informed of a decision based exclusively on automated processing (where applicable).
To exercise any of these rights, write to our Privacy Officer at confidentialite@aptitudetech.net. We will respond within 30 days. If you find our response unsatisfactory, you may file a complaint with Quebec's Commission d'accès à l'information ( cai.gouv.qc.ca).
10. Changes to this policy
We may update this policy to reflect legal, technological or commercial developments. Any significant change will be indicated on this page (update date below). We invite you to review the current version periodically.
Dernière mise à jour : 7 mai 2026.