Privacy Policy
Last updated: June 8, 2025
At Louise Dufresne PhD, your privacy is our top priority.
This policy applies in accordance with Law 25 (Act to modernize legislative provisions regarding the protection of personal information).
Geographical scope of our services
This website and our services primarily target clients and businesses located in Canada, with particular attention to the requirements of Quebec's Law 25. While we adhere to best practices in data protection, this site is not specifically compliant with the European Union's GDPR (General Data Protection Regulation).
Visitors outside Canada use this site at their own risk regarding data protection and are advised to leave the site if they disagree with this policy.
1. Data Collected
1.1. We collect only the data necessary for our services:
- Identity (last name, first name, position)
- Professional contact information
- Assessment data (CSI scores, feedback)
- Session history (dates, objectives)
1.2. No sensitive data (ethnic origin, political opinions, health, etc.) is collected without explicit consent.
2. Processing Purposes
Your data is used exclusively for:
- Providing contracted coaching services
- Personalizing coaching tools
- Generating invoices compliant with Quebec tax laws
- Continuously improving our services (anonymized data)
3. Data Protection
3.1. Technical measures:
- AES-256 encryption for sensitive data
- Storage on Canadian servers (compliant with Law 25) with Clemento Web Services (clemento.ca)
- Two-factor authentication for access
3.2. Organizational measures:
- Restricted access to authorized personnel
- Confidentiality clauses with all subcontractors
- Annual security audits
4. Data Sharing
4.1. Your data is never sold or shared for commercial purposes.
4.2. Exceptional cases of sharing:
- With your written consent (e.g., report to your employer)
- Legal obligation (court order)
- Protection of vital rights (Article 18 of Law 25)
5. Your Rights
In accordance with Law 25, you can:
- Access your data (Article 27)
- Request corrections (Article 28)
- Withdraw your consent (Article 12)
- Request data portability (readable format)
- File a complaint with the CAI
Maximum response time: 30 days (Article 30 of Law 25)
6. Retention
6.1. Maximum retention periods:
- Active data: 5 years after last contact
- Archived data: 10 years (legal requirement)
6.2. Destruction methods:
- Secure deletion (NIST SP 800-88 standard)
- Physical destruction of paper documents
7. Cookies and Trackers
7.1. Minimal use:
- Strictly necessary cookies (shopping cart, login)
- Website analytics (anonymized)
7.2. No advertising targeting.
Data Protection Officer
To exercise your rights or for any questions:
- louise@louisedufresne.com
- Montreal, QC
- Please do not send commercial solicitations
Systems Administrator Contact Information
For technical questions
CLEMENTO WEB SERVICES (16390544 Canada inc.)
- hello@clemento.ca
- +1 (833) 947-1145
- Please do not send commercial solicitations