This policy describes how Atelier Med (“the house”) collects, uses, stores and protects personal information about people who visit the site, write to the house, or visit a Le Centre MD clinic. It is written in compliance with the Act respecting the protection of personal information in the private sector of Québec (chapter P-39.1, as amended by Law 25).
Privacy officer (RPP)
As required by section 3.1 of the Act, the house designates a person responsible for the protection of personal information (RPP).
- How to reach the RPP · Atelier Med, attn. RPP, by email at info@ateliermed.ca.
Information collected and purposes
The house only collects the information needed for the purposes stated below.
- Site visit · Anonymous technical data (device type, browser, pages visited, visit duration). Purpose: audience measurement and site improvement.
- Cookies · See the dedicated policy: Cookie policy.
- Incoming email · Name, email address and content of the message sent to info@ateliermed.ca. Purpose: answer the request.
- Visit to a clinic · The Le Centre MD clinics (Longueuil, Trois-Rivières, Granby) collect their own information for medical consultation and billing. Those processings fall under their own privacy policy.
Legal bases for processing
- Consent · optional cookies, newsletter, voluntarily submitted forms.
- Legitimate interest · site security, fraud prevention, service improvement.
- Legal obligation · accounting and tax retention when the house bills directly.
Retention period
- Technical logs and audience data: 13 months.
- Email exchanges: the time needed for the conversation, then 24 months for traceability, unless an earlier deletion is requested.
- Accounting records: 6 years after the relevant fiscal year, in line with tax obligations.
Transfers outside Québec
Some technical tools used by the house (hosting, audience measurement, email) may process or store information outside Québec. Before any transfer, the house assesses the protection offered under section 17 of the Act and favours providers that offer protection equivalent to that provided under Québec law.
Your rights
Law 25 recognises several rights for the people concerned. To exercise them, write to the RPP at info@ateliermed.ca.
- Access · obtain a copy of personal information held by the house.
- Rectification · have any inaccurate, incomplete or equivocal information corrected.
- Withdrawal of consent · stop consenting at any time to a processing that relies on consent.
- De-indexing · request the cessation of disclosure or de-indexing of information where applicable.
- Portability · receive, in a structured and commonly used technological format, the personal information provided.
The house responds within 30 days of receiving the request.
Complaint procedure
A person who believes that the house does not comply with Law 25 may file a complaint with the RPP. If the response is not satisfactory, the complaint may be brought before the Commission d'accès à l'information du Québec:
- Commission d'accès à l'information du Québec · cai.gouv.qc.ca
Security
The house applies reasonable technical and organisational measures to protect information against unauthorised access, loss or destruction: encrypted connections, restricted access, logging.
Changes
This policy may be updated. The last update date appears at the top of the page. Significant changes are announced on the site.