By “personal data” we mean any information that can identify you directly or indirectly. CheeseBOX collects:

• Information that you voluntarily enter on our site (contact forms, registrations, etc.).
• Technical data related to the use of our site (IP address, browser type, pages visited) via cookies and similar technologies (see our cookie policy).
• Information exchanged during our telephone conversations, emails or via any other channel (quotes, contracts, invoices).
• Certain information obtained from third parties (business directories, professional social networks), only if you have the possibility to consult and rectify them

We process your data for:

1. Execute our contracts: quote management, invoicing, service monitoring.
2. Inform you: new products, promotions and marketing communications, only if you have consented.
3. Improve our services: statistical analyses and market studies.
4. Legal compliance: tax, accounting and regulatory obligations.

We keep your data for the period necessary for the purposes mentioned, then we delete it securely, unless otherwise required by law.

In accordance with Law 25 (Quebec) and the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:

• Access: obtain a copy of the data concerning you.
• Correction: to correct inaccurate or incomplete data.
• Deletion: request the deletion of your data when their retention is no longer justified.
• Opposition: object to processing based on your consent.
• Portability: receive your data in a structured and commonly used format.
• Withdrawal of consent: for marketing communications.

To exercise these rights, write to: Activation de Marques CheeeseBOX inc. 2327 Rue Montgomery, H2K 2S2, QC Canada Email: info@cheesebox.ca

You can also file a complaint with the Commission d'accès à l'information du Québec (CAI) or the Office of the Privacy Commissioner of Canada (OPC).

We do not sell or rent your data to third parties. We only share your information with:

• Our subcontractors (hosting, IT services, marketing) who must comply with this policy.
• Public authorities if required by law.

If we transfer your data abroad (outside Canada), we ensure that an equivalent level of protection is respected (standard contractual clauses, prior consent

At no time do we sell or rent your data to external organizations, companies, or individuals. We consider your personal data to be confidential information. For some initiatives, we offer you, upon registration, the opportunity to be kept informed of the activities of one or more external partners of the project in question. In such a case, you must give your explicit consent.

We also use an external subcontractor for a range of initiatives. This external subcontractor manages a database that is linked to the Cheeesebox database. The subcontractor undertakes to process the data confidentially and securely, in full compliance with this policy. These provisions are always contractually stipulated with our subcontractors. This way, a subcontractor will never be able to use your personal data on their own initiative, and your data must be deleted once their mission is complete.