Boite PacBoite Pac

    Privacy Policy

    Boite Pac ("Boite Pac", "we", "our", "us") places great importance on respecting your privacy and protecting your personal information. This Privacy Policy (the "Policy") describes the personal information we may receive or collect from you, as well as how we use, disclose, retain and secure it, so that you can make informed and thoughtful choices.

    Last updated: June 23, 2026.

    This Policy applies to our boitepac.com website as well as to our customer relationship manager, Pipedrive. Please note, however, that the rights and obligations described in this Policy do not cover third-party platforms that may be mentioned on the Platform. Those third-party platforms have their own privacy policies, which we encourage you to read carefully.

    1. What is personal information?

    For the purposes of this Policy, "personal information" means any information concerning a natural person that allows them to be identified, or that, taken alone or combined with other information, allows them to be identified.

    2. How do we collect your personal information?

    With your consent

    Generally speaking, we obtain the personal information we need directly from you, with your consent, in accordance with Quebec's Act 25 modernizing legislative provisions relating to the protection of personal information, and subject to any applicable legal or regulatory exceptions. For example, Boîte Pac may have to proceed without your consent when, for reasons of fraud detection or prevention, requesting your consent would defeat the intended purpose.

    Boite Pac mainly collects your personal information directly from you, particularly when you communicate with us or use our services. Your personal information may also be collected through cookies, from publicly available records or from third parties, to the extent permitted by applicable law or if we have obtained the necessary consent.

    Refusing collection and withdrawing your consent

    You have the right, if you wish, to refuse the collection, use and disclosure of your personal information. You may also withdraw your consent to the use of the personal information in our possession at any time, subject to reasonable notice and applicable legal or contractual restrictions, by contacting us. However, please note that if you decide not to provide us with your personal information, this may prevent you from accessing some of our services.

    We also want to inform you that anonymized information, which does not make it possible to identify you, may continue to be used despite the withdrawal of your consent.

    Secondary use

    Depending on the circumstances, Boite Pac may also seek your consent to use your personal information for secondary purposes, such as conducting market research or enriching its databases. Your consent to a secondary use may be withdrawn at any time by contacting us, without affecting the delivery of our services.

    3. What personal information do we collect?

    As part of our activities and the delivery of our services, the personal information collected may include, without limitation:

    • your contact details (for example: your name, email address, employer or phone number), for identification and correspondence purposes;
    • your communication preferences;
    • your comments or responses to surveys, where applicable;
    • any other personal information you have provided to us.

    Boite Pac also collects information related to the use of its website, including technical information about your visits and any other information collected through cookies or other similar tools. For more information on this topic, please refer to the "Cookies and other similar tools" section.

    Boite Pac DOES NOT collect the following data:

    • physiological biometric data.

    4. Why do we collect and use your personal information?

    Boite Pac only collects and uses the information necessary to fulfill its obligations and to deliver and improve its services. The personal information collected by or on behalf of Boite Pac is used for the following purposes:

    • to communicate with you and support you in the delivery of our services;
    • to provide and maintain the requested services;
    • for research and development purposes, statistics and to improve the use of our website and your customer experience. In other words, we want to make sure you enjoy your digital experience and that our services meet your needs;
    • to respond to your information requests. In other words, if you need help, we'll do our best to get back to you;
    • to inform you of our new offers and to send you any other commercial information, if you consent or if the law authorizes us to do so;
    • as permitted or required, for any applicable legal or regulatory obligation or provision;
    • for any other purpose to which you have consented.

    Through automated processes

    When you use our website, we obtain certain information through automated processes, such as the pages you have viewed. The information collected helps us better tailor our website to your needs in order to optimize its features and offer you the best possible experience. We collect this information by various means, including the use of cookies or other similar tools.

    5. Cookies and other similar tools

    As mentioned in the previous sections, we may use various tools to improve your experience on our website and to better understand the behavior of our clientele, particularly in connection with our marketing strategies. The following section is intended to provide you with more information about how we use these tools and, where applicable, carry out profiling.

    Cookies and invisible pixels

    We may use cookies and invisible pixels. Generally, cookies are small data files commonly stored on your device when using websites and online services. Invisible pixels, sometimes called "spy pixels", are tiny images that may be placed on web pages or in emails. They may be used, for example, to anonymously track the number of times a given page has been visited by a user or to confirm that an email has been read. As their name suggests, pixels are invisible, and any part of our website, including the ads that may appear there, may contain invisible pixels. Unlike cookies, invisible pixels are not placed on your device. In this Policy, we collectively refer to cookies and invisible pixels as "cookies".

    The cookies we use

    Boite Pac may use different types of cookies. As described below, some of these cookies are strictly necessary for the proper functioning of the website, while others will be used, with your consent, for functional, performance, targeting or social media sharing purposes:

    • Strictly necessary cookies. We use strictly necessary cookies to allow the proper functioning of our Platform, our security measures and those of third parties. Without these cookies, the services you have requested cannot be provided.
    • Functional cookies (also called "preference cookies"). These cookies are not essential to the delivery of our services. If you have consented to their use, these cookies help personalize and improve the user experience. For example, they retain your communication and language preferences.
    • Advertising cookies. These cookies are not essential to the delivery of our services. If you have consented, we use advertising cookies to present you with relevant advertising content, particularly on social media. In addition, our partners may use these cookies to determine whether our advertisements have been shown to you and, if so, whether you have interacted with them. In such cases, our partners share data with us, including statistics about the performance of our ads.

    Analytics tools

    With your consent, Boite Pac uses analytics tools to study the browsing behavior of visitors to its Platform. Among other tools, we use Google Analytics, provided by Google LLC ("Google"), to collect information about how you navigate our website, as well as demographic and interest data.

    Targeted advertising

    Boite Pac also works with third-party advertising companies such as Google Ads that collect and use information about your visits to our Platform to present you with advertisements that may interest you. Boite Pac does not provide any information that allows these advertising companies to identify you.

    Disabling cookies

    Except for strictly necessary cookies, we will only place cookies on your device with your consent, and they will be kept for a maximum period of thirteen months from the time they are placed on your device. After this period, your consent will be required again.

    You can also manage your cookie settings at any time by changing your browser or mobile device settings. If you choose to refuse cookies, some pages or sections of our website may not display correctly, or some features may not be available.

    6. How do we disclose your personal information?

    As part of our activities, we sometimes need to disclose your personal information to various parties. We strive, however, to only disclose it as described below:

    • Our employees. As part of their work, our employees may need to access your personal information, for example when you contact us for information about our services. Their access is limited to what is necessary for the performance of their duties.
    • Our agents and service providers. We may sometimes share your personal information with third-party agents or service providers that help us deliver our services (for example: analytics, legal requirements, fraud detection and marketing).
    • When required by applicable law, to enforce rules or to protect the property or security of our rights or those of others. For example, we may disclose personal information to legal or regulatory authorities if we suspect money laundering, insider trading, deceptive business practices or other criminal activities, to detect and prevent fraud, or to comply with the requirements of the law or of governmental bodies, regulatory agencies or other self-regulatory bodies.
    • Business transfer. In the course of developing our business, we may be led to sell or buy businesses or services. In such transactions, personal information is generally part of the business assets transferred, but remains subject to the commitments made in any existing privacy policy.
    • On an anonymized basis. Anonymized personal information may be shared with third parties. For example, we may anonymize personal information to establish trends or statistics.

    7. Do we transfer your personal information outside Quebec?

    The personal information we collect is stored in secure systems hosted on servers that may be located outside Quebec, particularly in Canada and the United States. We also use the services of agents and service providers that may be located outside Quebec.

    However, we strive to protect the personal information in our possession, including that entrusted to an agent or service provider, whether located in Canada, the United States or in other jurisdictions or countries. In particular, we strive to limit their access to the personal information necessary to perform the tasks entrusted to them and to enter into contractual agreements with these agents and providers to ensure the confidentiality and security of your personal information.

    8. How long do we keep your personal information?

    Your personal information will be kept for as long as necessary to achieve the determined purposes or to comply with the requirements of any applicable law regarding retention periods. The retention period for your personal information will therefore vary depending on the purpose of its use. At the end of this period, we will strive to destroy or anonymize this information.

    8.1 How can I access or delete my data?

    You may at any time request access to a copy of the data that Boite Pac holds about you. You may also request that all the data we hold about you be deleted. In either case, simply contact us at info@boitepac.com.

    9. How do we protect your personal information?

    We strive to implement the necessary and appropriate security measures to ensure the confidentiality of the personal information in our possession. To this end, we follow industry-accepted standards, particularly with regard to encryption, firewalls and security protocols. The personal information we hold is therefore only accessible to authorized persons and only when necessary for the performance of their duties.

    Appropriate physical, technical and administrative safeguards and security measures have been implemented and are maintained up to date to minimize the risk of security incidents. If you believe the security of your personal information has been compromised, please contact us.

    10. What are your rights?

    Under applicable law, including Quebec's Act 25, you may have certain rights, including:

    • the protection of the confidentiality of your personal information;
    • access to your personal information;
    • the rectification of your personal information if it is incomplete, inaccurate or ambiguous, or if its collection, disclosure or retention is not authorized by applicable law;
    • the portability of your personal information, to the extent provided by law;
    • the removal of your email address from our newsletter mailing list, where applicable;
    • the withdrawal of your consent to the disclosure, use and disclosure of your personal information, where applicable;
    • the right to file a complaint with the Commission d'accès à l'information du Québec if you believe we are not complying with applicable law.

    11. Changes and updates to the policy

    Boite Pac reserves the right to modify this document at any time and for any reason, in which case the most recent version of the Policy will be posted on the website. It is your responsibility to comply with the posted updates to the Policy, where applicable. Your continued use of the website after the publication of the modified version of the Policy indicates your full and complete acceptance of it.

    12. How to contact us?

    Boite Pac has established procedures for receiving complaints and requests regarding its personal information management policies and practices. We will inform individuals who submit a request or file a complaint of the existence of the relevant procedures.

    Boite Pac will strive to investigate all complaints submitted to it. If a complaint is found to be well-founded, we will take appropriate measures, including, if necessary, modifying our policies and practices.

    Please feel free to contact us with any questions, requests for information, comments or complaints regarding your personal information, at info@boitepac.com or at 514 588-1357.

    13. Privacy officer

    Boite Pac is responsible for protecting any personal information in its care. It has designated a person responsible for the protection of personal information to ensure the organization's compliance with this policy and the principles underlying it. To ensure the proper and consistent handling of any request under this policy, all access and rectification requests must be submitted in writing to the privacy officer, namely:

    Thomas Ferland-Dionne
    Co-founder, B Corp Consultant
    Email: thomas@boitepac.com

    14. Security policy

    Boite Pac uses industry-standard measures to ensure the confidentiality, security and integrity of its clients' data against any form of unauthorized use, access, disclosure, alteration, loss, or unlawful or accidental destruction. We are committed to ensuring the protection of encrypted data, both at rest and in transit, and to retaining or deleting it in accordance with our policy or any prevailing agreement with an educational institution.

    Boite Pac does not informally disclose the data covered by this policy to its employees. Only employees who need the protected data to perform their duties have access to it. In such cases, the principle of minimum access is applied, which means that each program or employee is granted the least access possible necessary to perform their tasks. Employees with access to protected data are trained on their responsibilities for handling such data as well as on the various laws and agreements related to data security.

    Although Boite Pac is committed to implementing best practices in information and data security, we cannot guarantee complete security, as virus and hacker technologies are constantly evolving and there are other risk factors, such as unforeseen hardware or software failures. As a result, Boite Pac cannot be held responsible for the loss or alteration of data.

    If you would like to know more about our security measures or obtain a copy of our data security policy, please contact us at info@boitepac.com.