Privacy Policy
Last updated: March 17, 2026
This Privacy Policy explains how Neortal Technologies Inc. (“Neortal,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit our website (neortal.com) or engage with our services. It applies to all personal information we hold and complies with the Act Respecting the Protection of Personal Information in the Private Sector (Quebec Law 25 / Bill 64), the Personal Information Protection and Electronic Documents Act (PIPEDA), and Canada's Anti-Spam Legislation (CASL).
1. Identity and Contact Information of the Controller
The organization responsible for your personal information is:
Neortal Technologies Inc.
Montreal, Quebec, Canada
General inquiries: contact@neortal.com
Phone: +1 (514) 652-0583
Privacy Officer (Responsable de la protection des renseignements personnels)
As required by Quebec Law 25, Neortal has designated a Privacy Officer responsible for overseeing compliance with this policy and applicable privacy laws. To reach our Privacy Officer:
Email: contact@neortal.com
2. Personal Information We Collect
We collect only the personal information necessary to fulfill the purposes described in this policy (principle of minimal collection). We collect information through the following means:
2.1 Information You Provide Directly
When you complete a contact form, request a consultation, or communicate with us, we may collect:
- First and last name
- Professional email address
- Phone number (optional)
- Company or organization name (optional)
- Company size (optional)
- Service of interest (optional)
- Approximate project budget (optional)
- Project description or message content
2.2 Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address and approximate geographic location (country, region)
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referral source (how you arrived at our website)
- Device type and screen resolution
This information is collected through cookies and similar technologies (see Section 8).
2.3 Sensitive Information
We do not intentionally collect sensitive categories of personal information (e.g., health data, financial account details, social insurance numbers). Please do not include such information in any form submission or message to us.
3. Purposes of Collection and Legal Basis
We collect and use your personal information only for specific, explicit, and legitimate purposes. We will not use your information for any purpose that is incompatible with those disclosed here without first obtaining your consent.
Responding to inquiries and providing services: We use contact information to respond to your questions, provide quotes, and deliver IT consulting and managed services you request.
Service improvement and analytics: We use automatically collected data to understand how visitors use our website, diagnose technical issues, and improve our content and user experience.
Marketing communications (with consent): If you have expressly consented, we may send you information about our services, industry insights, or updates. You may withdraw consent at any time (see Section 10).
Legal compliance: We may process your information to comply with applicable laws, court orders, or regulatory requirements.
4. Consent
By submitting a contact form on our website, you consent to the collection and use of your personal information for the purposes described in this policy. For marketing communications, we rely on your express consent as required by CASL.
Where we rely on your consent, you have the right to withdraw it at any time without adverse consequences, subject to legal or contractual restrictions. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
To withdraw consent, contact us at contact@neortal.com or use the unsubscribe link in any marketing email we send you.
5. Disclosure of Personal Information
We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:
5.1 Service Providers
We engage third-party service providers to help us operate our website and deliver services (e.g., email hosting, content delivery, analytics). These providers are permitted to use your information only to perform services on our behalf and are bound by confidentiality obligations. Current categories of providers include:
- Website hosting and cloud infrastructure providers
- Content delivery network services (Sanity.io / CDN)
- Business email and communication platforms
- Website analytics services
5.2 Cross-Border Transfers
Some of our service providers are located outside Canada, including in the United States. When your personal information is transferred outside Quebec or Canada, we ensure that an adequate level of protection is in place, including through contractual clauses or assessments of the recipient jurisdiction's legal framework, as required by Quebec Law 25 (s. 17). You may request information about cross-border transfers by contacting our Privacy Officer.
5.3 Legal Requirements
We may disclose your personal information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Neortal, our clients, or others.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal information may be transferred to the successor entity. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.
6. Retention of Personal Information
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our general retention practices are:
- Contact form submissions (no engagement): 12 months from date of submission
- Active client or prospect records: Duration of the relationship plus 7 years (for tax and legal compliance)
- Website analytics data: Up to 26 months (in anonymized or aggregated form where possible)
- Marketing consent records: For the duration of our relationship and a reasonable period thereafter as evidence of consent
When personal information is no longer needed, we destroy or anonymize it using secure methods.
7. Security of Personal Information
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encrypted data transmission (HTTPS/TLS)
- Access controls and role-based permissions for staff
- Regular security reviews and assessments
- Confidentiality obligations imposed on staff and contractors
No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
7.1 Privacy Incident and Breach Notification
In the event of a confidentiality incident (privacy breach) that poses a risk of serious harm, we will notify the Commission d'accès à l'information du Québec (CAI) and affected individuals as required by Quebec Law 25. We maintain an internal register of all confidentiality incidents.
8. Cookies and Tracking Technologies
Our website may use cookies and similar technologies (e.g., web beacons, pixels) to enhance your browsing experience and collect analytics data. Cookies are small text files stored on your device.
Types of Cookies We May Use
- Strictly necessary cookies: Required for the website to function properly. Cannot be disabled.
- Analytics cookies: Help us understand how visitors interact with our website (e.g., pages visited, time on site). Used in aggregate, anonymized form where possible.
- Preference cookies: Remember your settings and preferences.
You can control or delete cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website. We do not use cookies for targeted advertising.
9. Your Rights Under Quebec Law 25 and PIPEDA
As an individual whose personal information we hold, you have the following rights. To exercise any of these rights, contact our Privacy Officer at contact@neortal.com. We will respond within 30 days of receiving a valid request.
Right of Access (s. 27, Quebec Law 25 / PIPEDA Principle 9): You have the right to know whether we hold personal information about you and to receive a copy of that information, along with details about how it is used and to whom it has been disclosed.
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information we hold about you.
Right to Deletion (Right to be Forgotten): Subject to certain exceptions (e.g., legal obligations, ongoing disputes), you may request that we delete your personal information when it is no longer necessary for the purposes for which it was collected.
Right to De-indexation (s. 28.1, Quebec Law 25): If your personal information is disseminated online by our website, you may request that links to that information be de-indexed or that the information be re-anonymized, where technically feasible and where no legitimate reason prevails.
Right to Data Portability (s. 27, Quebec Law 25): You may request a copy of your personal information that you have provided to us in a structured, commonly used, and machine-readable format, where technically feasible.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of prior processing.
Right to Complain: If you are unsatisfied with our response to your privacy request, you have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI) at www.cai.gouv.qc.ca or, for federal matters, with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.
10. Opting Out of Marketing Communications (CASL)
We send commercial electronic messages (marketing emails) only with your express or implied consent, as required by Canada's Anti-Spam Legislation (CASL). Each marketing email we send includes an unsubscribe mechanism. You may also opt out at any time by:
- Clicking the unsubscribe link in any marketing email
- Emailing us at contact@neortal.com with the subject line “Unsubscribe”
We will process your opt-out within 10 business days, as required by CASL. Opting out of marketing does not affect transactional or service-related communications.
11. Automated Decision-Making
We do not currently use automated systems to make decisions about individuals that produce legal or similarly significant effects. If we implement such systems in the future, we will update this policy and provide appropriate disclosure and rights as required by Quebec Law 25.
12. Privacy by Default
In accordance with Quebec Law 25, we apply a privacy-by-default approach: only the personal information necessary for each specific purpose is collected, and privacy-protective settings are applied by default in our systems.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Service Availability Disclaimer
References to “24/7 emergency support” on our website indicate that emergency assistance may be available outside standard business hours. Emergency response is subject to technician availability and is guaranteed only under an active managed service agreement that explicitly includes out-of-hours support. Neortal Technologies Inc. makes no unconditional guarantee of round-the-clock availability to clients without such an agreement in place.
15. Language
This Privacy Policy is provided in English. A French version is available upon request. In the event of any conflict between the English and French versions, the version applicable under applicable law shall prevail. To request a French version, contact us at contact@neortal.com.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated “Last updated” date. For material changes, we will take reasonable steps to notify you (e.g., by email or a prominent notice on our website). We encourage you to review this policy periodically.
17. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:
Privacy Officer — Neortal Technologies Inc.
Email: contact@neortal.com
Phone: +1 (514) 652-0583
Montreal, Quebec, Canada
This policy is governed by the laws of the Province of Quebec and the federal laws of Canada applicable therein.