PRIVACY POLICY

Thank you for visiting the website of Solution Abris Estrie (hereinafter referred to as SAE) and for reviewing its privacy policy (hereinafter the Policy).

This page applies to citizens and legal permanent residents of Canada.

Consent

By browsing our website or using our systems or services, you acknowledge that you have read and understood this policy and consent to your data and personal information being processed in accordance with it.

The Purpose of this Privacy Policy

To inform users of our website about the various personal data we will collect, as well as the following information, if applicable:

• The personal data we will collect

• The use of the collected data

• Who has access to the collected data

• The rights of website users

• The site's "cookies" policy

Retention of Personal Information

This privacy policy works in conjunction with the terms and conditions of use of our site.

Applicable Laws

This policy complies with the laws set out in the Personal Information Protection and Electronic Documents Act (PIPEDA).

For residents of EU countries, the General Data Protection Regulation (GDPR) governs all data protection policies, regardless of the location of the site. This privacy policy aims to comply with the GDPR. If there are inconsistencies between this policy and the GDPR, the GDPR will apply.

For residents of California, this privacy policy aims to comply with the California Consumer Privacy Act (CCPA). If there are inconsistencies between this document and the CCPA, the state legislation (CCPA) will apply. If we find any inconsistencies, we will modify our policy to comply with the relevant law.

For residents of Quebec, Law 25 on the protection of personal information governs all data protection policies, regardless of the location of the site. This privacy policy aims to comply with Law 25. If there are inconsistencies between this policy and Law 25, Law 25 will apply.

Personal Data We Collect

Automatically Collected Data

When you visit and use our site, we may automatically collect and store the following information:

• IP address

• Links a user clicks while using the site

• Content that the user views on your site

Non-Automatically Collected Data

We may also collect the following data when you perform certain functions on our site:

• First and last name

• Email

• Phone number

• Payment information

• Auto-fill data

Please note that we only collect data that helps us achieve the purpose outlined in this privacy policy. We will not collect additional data without informing you in advance.

How We Use Personal Data

Personal data collected on our site will be used only for the purposes specified in this policy or as indicated on relevant pages of our site. We will not use your data beyond what we disclose. The data we collect automatically is used for the following purposes:

• Statistics, Analytics for remarketing

The data we collect when the user performs certain functions may be used for the following purposes:

• Email or SMS communication from our Customer Relationship Management (CRM) software

With Whom We Share Personal Data

Employees

We may disclose to any member of our organization the user data they reasonably need to achieve the objectives set out in this policy.

Third Parties

We may share the user data processed on our website with the following third parties:

• This website is hosted by Wix Online Platform Limited Address: 1 Grant’s Row, Dublin 2 D02HX96, Ireland.

We may share user data with third parties for the following purposes:

• Wix.com is a processor for the data of our site's visitors. This means Wix will only process the data of our site's visitors following our instructions and on our behalf.

• Wix.com will not process the data of our site's visitors for its own interest.

For more information about Wix's privacy policy, visit https://www.wix.com/about/privacy

Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose.

Other Disclosures

We are committed to not selling or sharing your data with third parties, except in the following cases:

• If the law requires it

• If it is required for any legal proceedings

• To prove or protect our legal rights

If you follow hyperlinks from our site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.

International Data Transfers

User data may be accessed, processed, or collected in the following countries:

• To our knowledge, the data is collected for statistical purposes by Wix and Google. It is not possible to specify the exact countries of the servers to which the data is transmitted to these third parties. However, we know that some data may be collected in the following countries:

  • United States (Google Analytics)

  • Ireland (Wix)

How Long We Retain Personal Data

We do not retain user data beyond what is necessary to achieve the purposes for which it was collected.

How We Protect Your Personal Data

Wix uses HTTPS, TLS 1.2+, and automatic SSL so that our site's data (e.g., user data) is protected regardless of location.

AES-256, the most robust encryption available, encrypts user data at rest, so it is protected during storage.

Wix provides two levels of built-in DDoS protection: one to protect us against fraudulent incoming traffic and another to manage the massive traffic flow caused by a DDoS attack.

We assure you that our company is protected by Wix's international security standards and compliance with SOC 2 Type 2, PCI DSS Level 1, GDPR, CCPA, LGPD, and ISO standards.

To ensure the protection of your security, we use the Transport Layer Security protocol to transmit personal information within our system.

All data stored in our system is securely protected and accessible only to our employees. Our employees are bound by strict confidentiality agreements, and a violation of this agreement would result in the employee's dismissal.

While we take all reasonable precautions to ensure that our user data is secure and that users are protected, there is always a risk of harm. The Internet can be, at times, insecure, so we are unable to guarantee the security of user data beyond what is reasonably practical.

Minors

For EU residents, the GDPR specifies that individuals under the age of 15 and for Quebec residents, Law 25 specifies that individuals under the age of 14 are considered minors for data collection purposes. Minors must have the consent of a legal representative for their data to be collected, processed, and used.

Modifications

This privacy policy may be amended from time to time to maintain compliance with the law and to reflect any changes in our data collection process. We recommend that our users check our policy from time to time to ensure they are informed of any updates. If necessary, we may notify users by email of changes to this policy.

Your Rights as a User

As a user, you have the right to access all your personal data that we have collected. In addition, you have the right to update or correct any personal data in our possession, provided it is legally acceptable. You can choose to delete or modify your consent to data collection and use at any time, provided it is legally acceptable to do so and you have informed us within a reasonable timeframe.

How to Modify, Delete, or Contest Collected Data

If you wish to have your information deleted or modified in any way, please contact our compliance officer identified below.

Complaint

To maintain and improve the quality of its services, SAE offers anyone the opportunity to express dissatisfaction with the protection of personal information it collects, holds, uses, or discloses. Therefore, anyone wishing to file a complaint must contact the compliance officer identified below in writing. The complaint must include the following elements:

• First and last name

• Phone number

• Postal address or email

• Reason for the complaint

COOKIES POLICY

1. Introduction

Our website, https://www.solutionabris.com/ (hereinafter: “the website”) uses cookies and other related technologies (for simplicity, all these technologies are referred to as “cookies”). Cookies are also placed by third parties we have engaged. In the document below, we inform you about the use of cookies on our website.

1. What are cookies?

A cookie is a small simple file sent with the pages of this website and stored by your browser on the hard drive of your computer or another device. The information stored therein may be returned to our servers or to the servers of the relevant third parties during a subsequent visit.

1. What are scripts?

A script is a piece of code that is used to make our website function properly and interactively. This code is executed on our server or on your device.

1. What is a web beacon?

A web beacon (or a pixel tag) is a small, invisible piece of text or image on a website, used to track traffic on a website. To do this, various data about you is stored using web beacons.

1. Third Parties

We have made agreements about the use of cookies with other companies that place cookies. However, we cannot guarantee that these third parties handle your personal data reliably or securely. Some parties such as Google must be considered as independent data controllers. We recommend that you read the privacy statements of these companies.

1. Cookies

6.1 Technical or Functional Cookies

Some cookies ensure that certain parts of the website work properly and that your user preferences remain known. By placing functional cookies, we make it easier for you to visit our website. This way, you do not need to repeatedly enter the same information when visiting our website, and, for example, the items remain in your shopping cart until you have paid.

6.2 Marketing/Tracking Cookies

Marketing/tracking cookies are cookies or any other form of local storage used to create user profiles to display advertising or to track the user on this website or across several websites for similar marketing purposes.

1. Cookies Placed

Section to follow

1. Consent

When you visit our website for the first time, we will show you a pop-up with an explanation about cookies. As soon as you click on “Accept”, you consent to us using all cookies and plugins as described in the pop-up and this cookie policy. You can disable the use of cookies via your browser, but please note that our website may no longer work properly.

1. Enabling/Disabling and Deleting Cookies

You can use your internet browser to delete cookies automatically or manually. You can also specify that certain cookies may not be placed. Another option is to change the settings of your internet browser so that you receive a message each time a cookie is placed. For more information about these options, please refer to the instructions in the Help section of your browser. Or you can indicate your preferences on the following page: youradchoices.ca

Please note that our website may not work properly if all cookies are disabled. If you delete cookies in your browser, they will be placed again after your consent when you revisit our website.

1. Your Rights Regarding Personal Data

You have the following rights regarding your personal data:

• You can send a request for access to the data we process about you.

• You can object to the processing.

• You can request an overview, in a commonly used format, of the data we process about you.

• You can request the correction or deletion of the data if they are incorrect or no longer relevant. When appropriate, the modified information will be forwarded to third parties having access to the relevant information.

You have the right to withdraw your consent at any time, subject to contractual or legal restrictions and reasonable notice. You will be informed of the implications of such withdrawal.

You have the right to object to our organization's non-compliance with PIPEDA and, if the issue is not resolved, to the Office of the Privacy Commissioner of Canada.

To exercise these rights, please contact us. Please refer to the contact details at the bottom of this cookie policy. If you have a complaint about how we handle your data, we would like to be informed.

Contact Information

Compliance Officer:

For any questions, comments, or complaints about our policies, you can contact the person responsible for ensuring compliance with these policies:

Dave Soucy, Owner of Solution Abris Estrie 534, chemin Louis-Cayer, Sherbrooke, QC J1R 0H7 Phone: 819 200-4050 Email: info@solutionabris.com

Effective Date: September 22, 2023