Privacy policy

REF. 01Person in charge

entreprises.ca is operated by Salah Khalfi, sole proprietorship (NEQ 2270228325), in Montréal. He is the person in charge of the protection of personal information.

For any question or request about your information: bonjour@entreprises.ca.

REF. 02What we collect

• Through the “Get a written assessment” form, and only if you send it: the company name, your email address, the number of employees and your message. We add the page language and the date and time received.
• The 7-question eligibility check is calculated in your browser. Your answers are never sent to us.
• Your IP address is used, when the form is sent, to limit abusive submissions. We do not keep it with your request. Our hosting provider may process it to keep the service secure.
• We never receive your employees’ social insurance numbers (SIN): you enter them yourself in the official calculator, on your own computer. Do not write them in the form or in your emails.
• The message field is free text: do not include personal information about your employees.

REF. 03Why we use it

• To reply to your assessment request and write to you about it.
• If you become a client: to prepare your application, invoice you and track your deadlines.
• Nothing else: no selling, no renting, no advertising, no profiling.

You consent to this use by checking the box on the form. You may withdraw your consent at any time by writing to us; we then stop using your information, except what the law requires us to keep.

REF. 04Who has access

Only the person in charge has access to your information. Your full request is not sent to any artificial intelligence tool. Only a masked version, from which the company name, email addresses, numbers and any proper names are removed automatically, may be read by a drafting tool (provider in the United States, not used to train its models) to prepare a draft reply. If masking is not reliable, no such version is produced. No decision about you is made automatically: every reply is written and sent by the person in charge.

REF. 05Service providers and disclosure outside Québec

We use service providers, identified here by category:

• our cloud hosting provider (a United States company), where your request is stored; its data centres may be outside Canada;
• our email delivery service (United States), which notifies us of a new request;
• our business email service (hosted outside Québec), which receives that notice and our exchanges with you.

Your information may therefore be disclosed and stored outside Québec. These providers use it only to provide their service to us, under their contractual commitments, and do not sell it.

REF. 06How long we keep it

We keep a request and our exchanges for 24 months after the last exchange, then delete them. If you become a client, invoices and accounting records are kept for the period required by tax laws.

REF. 07Your rights

• Know what information we hold about you and get a copy (access).
• Have inaccurate or incomplete information corrected (rectification).
• Withdraw your consent and ask for deletion.
• Receive your information in a structured, commonly used technological format (portability).

Write to bonjour@entreprises.ca. We reply in writing within 30 days. If you are not satisfied, you may file a complaint with the Commission d'accès à l'information du Québec.

REF. 08Cookies and analytics

The site keeps a single item in your browser: the language you chose (local storage, key “langue”). It uses no advertising cookies, no audience measurement tools and no trackers. Fonts are served by our own site.

REF. 09Security and confidentiality incidents

• Exchanges with the site are encrypted (HTTPS) and access to requests is protected.
• We keep a register of confidentiality incidents.
• If an incident presents a risk of serious injury, we promptly notify the Commission d’accès à l’information and the persons concerned, and we take steps to reduce the risk.

REF. 10Our internal rules (governance)

• The person in charge approves these rules and ensures they are applied.
• Roles: only the person in charge accesses requests; tools and providers only process them on his behalf.
• Retention and destruction: when the 24 months are up, the stored request and the related emails are deleted.
• Access, rectification or withdrawal requests: handled in writing, reply within 30 days.
• Complaints: write to bonjour@entreprises.ca; we reply in writing within 30 days. You may also contact the Commission d’accès à l’information.
• Incidents: recorded in the register, assessed and, where there is a risk of serious injury, reported.

REF. 11Updates to this policy

We publish any change here, with its date. Last updated: October 29, 2026.