Privacy policy

This English version is provided for convenience. In case of discrepancy, the French version prevails.

This policy describes how Locato collects, uses, discloses and protects your personal information. It complies with the Act to modernize legislative provisions as regards the protection of personal information of Quebec (commonly known as “Law 25”) as well as the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1).

1. Controller and person in charge

9459-3142 Québec inc., which operates Locato, is the controller of your personal information.

In accordance with Law 25, a person in charge of the protection of personal information has been designated:

You may contact this person with any question about this policy or to exercise the rights described in section 8.

2. Information we collect

We collect only the information necessary for the purposes described in section 3. Depending on how you use Locato, we may collect:

2.1 Information you provide voluntarily

2.2 Information collected automatically

2.3 Information we do not collect

• We do not collect social insurance numbers, credit card numbers (processing is handled entirely by Stripe), or biometric data.
• We do not create an advertising profile and do not use advertising cookies or retargeting pixels.

3. Purposes of processing

Your information is used solely for the following purposes:

We will never use your information for other purposes without your consent, except where the law requires or permits us to.

4. Basis for processing (consent)

We process your personal information with your express, free, informed and specific consent, collected at the time of collection, for each purpose described in section 3: when you enter your information, when you confirm the sending of a document and, for statistics cookies, through the consent banner. You may withdraw your consent at any time (see section 8), which will result in the deletion of your data, except for information the law requires us to keep (see section 6), and the interruption of the service.

5. Disclosure to third parties

We do not sell your personal information. We share certain information with service providers who assist us in operating Locato. Each provider is contractually required to protect your information and to use it only for the services it provides to us:

5.1 Transfers outside Quebec

Several of our providers are established outside Quebec, mainly in the United States. In accordance with section 17 of the Act respecting the protection of personal information in the private sector, we have assessed the applicable protection factors and contractually ensure that your information benefits from equivalent protection. By using Locato, you consent to these transfers.

6. Retention period

When the purpose of collection has been achieved, we destroy or anonymize the information in accordance with our internal records management procedures.

7. Security

We implement reasonable technical and organizational measures to protect your information:

• Encryption in transit (TLS) for all communications;
• Encryption at rest by our infrastructure providers;
• Role-based access controls and the principle of least privilege;
• Multi-factor authentication for access to administration systems;
• Access logging and anomaly monitoring;
• Cryptographic fingerprint (SHA-256) of transmitted documents to guarantee their integrity.

As no system is perfectly secure, we cannot guarantee absolute security.

7.1 Confidentiality incident

In the event of a confidentiality incident that could cause serious harm, we will notify the Commission d'accès à l'information du Québec and the persons concerned as promptly as possible, in accordance with section 3.5 of the Act respecting the protection of personal information in the private sector. We keep a register of confidentiality incidents.

8. Your rights

Law 25 grants you several rights with respect to your personal information:

To exercise any of these rights, write to dominic@hainstech.com. We will respond within a maximum of 30 days. We may ask you for reasonable proof of identity before processing your request.

If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec.

9. Cookies and similar technologies

Locato uses a minimal number of cookies:

We use no advertising cookies and carry out no cross-site tracking. You can accept or decline statistics cookies through our consent banner and change your choice at any time. You can also block them through your browser settings or private browsing mode.

10. Minors

Locato is not intended for persons under 14. We do not knowingly collect personal information from a minor under 14 without the consent of the person having parental authority. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. Changes to this policy

We may amend this policy to reflect legal, technical or operational changes. For substantial changes, we will notify you by email or through a notice on the site at least 30 days before they take effect. The version in force is always the one published at this address, dated at the top of the document.

12. Contact us

For any question about this policy, your personal information or the exercise of your rights: