Skip to main content

Privacy Policy

Last updated: August 16, 2026

Nord Numérique Inc. (“Nord Numérique,” “we,” “our”) is committed to protecting the personal information of visitors to its website and of the people it does business with. This policy explains what information we collect, why, how we protect it, and what rights you can exercise, wherever you are in Canada.

This policy applies to the website northnumeric.com and to any interaction with us through it (contact form, job application, cookies, potential newsletter). It does not apply to third-party sites our site may link to.

The Site is offered in French and English. In accordance with the Charter of the French Language, the French version of this policy prevails in the event of a discrepancy with its English version.

1. Applicable Laws

Nord Numérique is a Quebec-based company. The processing of your personal information is governed by:

  • Quebec’s Act Respecting the Protection of Personal Information in the Private Sector, as amended by Bill 25 (“Law 25”), our primary framework, applying to any activity conducted from Quebec or targeting Quebec residents;
  • the Personal Information Protection and Electronic Documents Act (“PIPEDA”), the federal law applicable to the private sector across Canada, including for our activities and counterparts in provinces without a provincial law deemed equivalent;
  • in provinces with a provincial law deemed substantially similar to PIPEDA (notably Alberta’s and British Columbia’s Personal Information Protection Act), that provincial law applies instead of PIPEDA for activities taking place there, following the same underlying principles;
  • Canada’s Anti-Spam Legislation (“CASL”), for any commercial electronic communication, notably a potential newsletter.

Regardless of your province of residence, we uniformly apply the most protective standard among these laws (in practice, that of Law 25) across all our Canadian activities: whatever satisfies the country’s most demanding standard necessarily satisfies the others.

2. Person in Charge of Personal Information Protection

In accordance with Law 25, Nord Numérique has designated a person responsible for the protection of personal information. Absent a name specified elsewhere on the site, this function is carried out by the company’s management. Any question, request, or complaint relating to this policy may be addressed to them using the contact details in Section 12.

3. Information We Collect

We apply a data minimization principle: we only collect what is necessary for the specific purpose for which you provide the information.

3.1 Contact Form (“Discuss your project”)

Name, business email address, company name (optional), subject, and content of your message. This information is used solely to respond to your request.

3.2 Job Applications

Name, email address, phone number (optional), resume, and cover message (optional). This information is used exclusively to evaluate your application and for the recruitment process, including the retention, governance, and deletion timelines described in Section 8.

3.3 Cookies

We use cookies essential to the site’s operation (always active) and, only if you explicitly consent, analytics, marketing, or preference cookies. You choose these categories through the banner shown on your first visit and can change your choice at any time via the “Manage cookies” link in the footer. See Section 10 for details. The display language you choose (French or English) is separately remembered by an essential cookie — needed for consistent navigation from page to page — which is not subject to this consent.

3.4 Newsletter (if you subscribe)

Email address and, optionally, first name. Your subscription is confirmed by a second action on your part (double opt-in) before any email is sent. See Section 5.

3.5 Technical Information

When you submit a form or respond to the consent banner, we retain a hashed (irreversible) version of your IP address and your user agent (browser), never your IP address in clear text, as technical proof of the submission — not as a means to identify you personally on an ongoing basis.

4. Use of Information

We use your personal information only to:

  • respond to a contact or information request;
  • evaluate a job application and communicate with you about it;
  • operate and secure the site;
  • measure site traffic, only if you have consented to it;
  • send you a newsletter, only if you have subscribed and confirmed your subscription;
  • meet our legal obligations (notably retaining proof of consent).

We never sell your personal information and do not use it for purposes incompatible with those for which it was collected without obtaining your additional consent.

5. Consent

We obtain your explicit consent, distinct for each purpose, before any non-essential collection: never a pre-checked box, never a marketing purpose bundled with a mandatory box. Each consent (form or cookie banner) is timestamped and retained as proof, along with the version of the policy in effect when it was given.

For the newsletter specifically, CASL requires express consent: your subscription is only activated after confirmation through a second action on your part (a confirmation link sent by email).

You may withdraw your consent at any time:

  • for cookies: the “Manage cookies” link in the footer, at any time;
  • for the newsletter: the unsubscribe link included in every email, effective within 10 business days;
  • for any other collection: by contacting us using the details in Section 12.

Withdrawing consent does not affect the validity of processing already carried out before the withdrawal.

6. Disclosure to Third Parties

We disclose your personal information to a third party only in the following cases:

  • Service providers acting on our behalf (cloud hosting, transactional email or newsletter services), bound by contract to confidentiality and security obligations at least equivalent to this policy, and using your information only for the service they provide us;
  • Legal obligation: if required to do so by law or by order of a court of competent jurisdiction;
  • Protection of our rights: to prevent fraud or assert our legal rights, to the extent strictly necessary;
  • With your explicit consent, for any other situation.

7. Transfers Outside Quebec or Canada

Some of our cloud service providers (hosting, email) may store or process data on servers located outside Quebec, or even outside Canada. In accordance with Law 25, before any transfer we ensure that the information will receive adequate protection (comparable to what it would receive in Quebec) through a privacy impact assessment and contractual safeguards with the provider. Information transferred outside Quebec remains governed by this policy.

8. Retention and Destruction

We retain your information only for as long as necessary for the purposes for which it was collected, then securely destroy or anonymize it:

  • Contact request: 24 months after the last exchange, unless it converts into a business relationship (in which case it is governed by the terms of the corresponding agreement);
  • Rejected or withdrawn application: automatically anonymized 12 months after the decision, unless you expressly consent to a longer retention for future opportunities;
  • Resume and attachments: deleted on the same timeline as the application they are attached to;
  • Consent record (cookies/newsletter): 36 months, a benchmark based on CASL’s requirement to be able to demonstrate consent for up to 3 years after the last contact;
  • Newsletter: until you unsubscribe; proof that you subscribed and then unsubscribed is retained separately on the same 36-month benchmark.

9. Security Measures

We apply security measures proportionate to the sensitivity of the information: encryption of transmissions (HTTPS), role-based access control (only people who need a piece of information to perform their duties can access it), validation and sanitization of uploaded files (resumes), and hashing of technical identifiers (IP addresses) rather than retaining them in clear text.

In the event of a confidentiality incident presenting a risk of serious harm, we notify the Commission d’accès à l’information du Québec and the individuals concerned, in accordance with Law 25’s obligations, and maintain a register of incidents.

10. Cookie Details

Our site uses a consent management system that distinguishes four categories: essential (always active), analytics, marketing, and preferences (the latter three disabled by default, enabled only if you consent). No non-essential script runs before your explicit consent to the corresponding category.

You can change your choices at any time via the “Manage cookies” link present in the footer of every page on the site. We also honor the Global Privacy Control (GPC) signal sent by your browser, treated as an explicit refusal of non-essential categories.

11. Your Rights

Subject to the exceptions provided by law, you have the right to:

  • access the personal information we hold about you;
  • have corrected any information that is inaccurate, incomplete, or ambiguous;
  • withdraw your consent to future collection or use (Section 5);
  • request the deletion of information we are no longer required to retain;
  • obtain the portability of information you provided to us yourself, in a structured, commonly used technological format, where required by law;
  • request de-indexing or re-indexing of information about you that is publicly disclosed, if its disclosure causes you serious harm disproportionate to the public’s interest in knowing it (a right specific to Law 25).

To exercise any of these rights, contact us using the details in Section 12. We respond within a reasonable time, generally 30 days.

12. Contact Us and File a Complaint

For any question, access request, or complaint regarding your personal information:

Person in charge of personal information protection
Nord Numérique Inc.
Montreal, Quebec
Email: see the Contact page on the site

If you consider our response unsatisfactory, you may file a complaint with:

  • the Commission d’accès à l’information du Québec (cai.gouv.qc.ca), for any matter falling under Law 25;
  • the Office of the Privacy Commissioner of Canada (priv.gc.ca), for any matter falling under PIPEDA or if you reside outside Quebec.

13. Information About Minors

Our site is intended for a business (B2B) audience and is not designed to collect personal information from minors. If you believe a minor has provided us with information without the required consent of a parent or guardian, please contact us so that we can delete it.

14. Changes to This Policy

We may modify this policy to reflect a change in our practices or in applicable law. Any substantial modification is indicated by a new update date at the top of the page and, where applicable, triggers the consent banner again for all visitors.