This policy describes how personal information is used and protected in our activities and on this website.
Text revised on October 20, 20261. Person responsible for the protection of personal information
In accordance with Law 25, Nortech Solution Informatique inc. has designated the following person for all matters relating to the protection of personal information:
- Person responsible: John Laverdière — President
- Address: 181, 6e Rue Ouest, Amos, QC J9T 2V7
- Telephone: 819-732-0717
- Email: protectionrenseignements@nortechsolution.com
2. Purpose
Nortech Solution Informatique inc. (“Nortech”) is committed to protecting personal information in accordance with Law 25.
This policy describes our practices regarding:
- Collection of personal information
- Use of personal information
- Disclosure to third parties
- Retention
- Protection
3. Scope
This policy applies to every person whose information is collected by Nortech, including:
- Current clients and prospects
- Employees and job applicants
- Suppliers and subcontractors
- Users of our IT services
- Visitors to our website
4. Information collected
4.1 Identification data
- Full name
- Mailing address
- Telephone number
- Email address
4.2 Professional information
- Company name
- Job title or position
- Business contact information
4.3 Technical data
- IP address
- Connection logs
- System information collected in connection with IT service delivery
- Data collected through remote management tools (RMM, security, backup)
4.4 Financial data
- Billing information
- Payment data processed through certified secure providers
5. Collection methods
Collection methods depend on your relationship with Nortech. On this website, the forms collect your name, email and message, plus your telephone, company and subject if you provide them. This information is sent by email to handle your request.
Other collection methods used in our activities include:
- Web forms
- Telephone and email
- Account-opening forms
- Technical support interactions
- IT management tools (RMM and remote maintenance)
- Website privacy preferences and the IP address used to prevent abusive submissions
6. Purposes
Information is collected solely to:
- Provide our IT services
- Deliver technical support
- Manage client relationships
- Process payments
- Ensure system security
- Prevent fraud
- Improve our services
- Comply with our legal obligations
7. Consent
Consent is obtained in the following ways:
- Explicitly: through a signed form, online acceptance or verbal declaration
- Implicitly: within an established business relationship where the collection is reasonably foreseeable
Withdrawal of consent
Consent may be withdrawn at any time by contacting our privacy officer at protectionrenseignements@nortechsolution.com. Withdrawal may affect the delivery of certain services.
8. Cookies and web technologies
8.1 Local storage
The website remembers in your browser that you have acknowledged the privacy notice. No audience analytics or advertising tools are enabled on these pages.
8.2 Your choices
The “Privacy” button reopens the notice. You can clear the stored information in your browser settings. The form remains accessible.
8.3 External services
External links open services governed by their own policies. Website hosting and form delivery also involve technical service providers. The cookies and local storage policy explains how these pages work.
9. Disclosure of information
We never sell personal information.
We may share it only with:
- Technology providers required to deliver services (for example Microsoft 365, Azure and IT tools)
- Secure payment providers
- Legal authorities when required by law
Contractual safeguards
Contractual agreements govern these disclosures and require the confidentiality of all transmitted information.
10. Transfers outside Quebec
Some information may be hosted outside Quebec, for example through cloud services. Before any transfer, Nortech conducts a privacy impact assessment (PIA) in accordance with the Law 25 requirements in force since September 2023.
Where required by law, the individuals concerned are informed before their information is transferred outside Quebec.
11. Security
Security measures implemented by Nortech include:
- Multi-factor authentication (MFA)
- Endpoint detection and response (EDR / antivirus)
- Strict access controls for systems and data
- Logging of access and activities
- Regular encrypted backups
- Ongoing cybersecurity training for staff
12. Privacy incidents
In the event of a privacy incident such as unauthorized access, a data leak or cyberattack, Nortech undertakes to:
- 1. Immediately contain the incident and take reasonable measures to reduce the risk of harm.
- 2. Assess whether the incident presents a risk of serious harm to the individuals concerned.
- 3. Promptly notify the Commission d’accès à l’information (CAI) when such a risk is identified.
- 4. Promptly notify affected individuals when a risk of serious harm is identified, subject to legal exceptions.
- 5. Record the incident in the internal privacy-incident register and retain it for at least five (5) years.
Notification timeline
When an incident presents a risk of serious harm, the Commission d’accès à l’information and affected individuals must be notified promptly, subject to the exceptions provided by law.
13. Retention
Data is retained according to:
- Legal requirements applicable to each category of information
- Service delivery needs and the stated purposes
End of the retention period
At the end of the retention period, data is either:
- Securely destroyed
- Anonymized according to recognized best practices
Incident register
Register information is kept up to date and retained for at least five (5) years after the date or period when Nortech became aware of the incident, as required by the Regulation respecting confidentiality incidents.
14. Your rights
Under Law 25, you have the following rights:
- Access: review the information we hold about you.
- Correction: request correction of inaccurate or incomplete information.
- Portability: receive your information in a structured format or request its transfer. (In force since September 2024)
- Withdrawal: withdraw your consent at any time, subject to legal obligations.
- De-indexing: request deletion or de-indexing of information published online in cases provided by law.
Processing requests
Requests will be processed within a maximum of 30 days following receipt, in accordance with Law 25.
To exercise your rights, contact us:
- Email: protectionrenseignements@nortechsolution.com
- Telephone: 819-732-0717, attention John Laverdière
15. Minors
In accordance with Law 25, we do not knowingly collect personal information from individuals under 14 years of age without prior consent from a parent or legal guardian.
16. Automated form checks
The form applies automated checks to limit abusive submissions. These checks may prevent a message from being delivered. If you cannot reach us through the form, call 819-732-0717 or email support@nortechsolution.com so our team can assist you.
17. Changes
This policy may be amended at any time to reflect changes in our practices or legal requirements. Any amendment will be published on our website with an updated revision date. We will notify the individuals concerned through appropriate means in the event of a significant change.
Last text revision: October 20, 2026
18. Contact
For any question about this policy or the protection of your personal information:
- Company: Nortech Solution Informatique inc.
- Address: 181, 6e Rue Ouest, Amos, QC J9T 2V7
- Telephone: 819-732-0717
- Email: protectionrenseignements@nortechsolution.com
- Website: nortechsolution.com
This document is provided for information purposes only and does not constitute legal advice. For legal questions regarding compliance with Law 25, Nortech recommends consulting a qualified legal adviser.