1. Data controller
This privacy policy is published by AS Alliance R&DaS Alliance R&D (hereinafter "we", "us", "our" or "the company"), a company in the financial sector operating in Quebec.
As a company that collects, uses and communicates personal information in the course of its activities, AS Alliance R&D is subject to the An Act to modernize legislative provisions respecting the protection of personal information (L.Q. 2021, c. 25), commonly referred to as "Bill 25", as well as the Act respecting the protection of personal information in the private sector(LPRPSP, RLRQ, c. P-39.1).
We are committed to treating your personal information with rigor, transparency and respect for your rights. This policy explains, in clear terms, what information we collect, why we collect it, with whom we share it and how you can exercise your rights.
2. Personal information collected
Depending on how you interact with our website, we may collect the following categories of personal information:
2.1 Information collected automatically during your visit
- IP address - automatically collected by our hosting infrastructure and audience analysis tools.
- Device identifiers - technical identifiers generated by your browser or device, used for analysis purposes.
- Visited pages and browsing behavior - pages viewed, links clicked, duration of sessions and site navigation.
- Approximate location - derived from your IP address (city or region, never your exact address).
2.2 Information about your preferences
- Cookie consent preferences - your choices concerning the activation or deactivation of the different categories of cookies, memorized for 13 months via the Moelleux platform.
2.3 Cookies placed on your browser
Our site uses cookies (small text files deposited on your browser) to ensure its smooth operation and, with your consent, to analyze site usage. The following categories of cookies are used:
-
Essentials - Essential for site operation. They cannot be deactivated. Includes cookie
moelleux_{site_key}which remembers your consent choices (duration: 13 months). - Analytics - Used to measure audience and analyze visitor behavior. Activated only with your consent. Includes Google Analytics 4 cookies.
3. Purposes of processing
We process your personal information only for specified, explicit and legitimate purposes. The table below sets out each purpose, the information concerned and the applicable legal basis under Law 25.
| Purpose | Information concerned | Legal basis | Department(s) involved |
|---|---|---|---|
| To ensure the proper functioning of the site and remember your consent choices | IP address, consent preferences | Legitimate interest - necessary for the operation of the site | Moelleux (by Horizon-Cumulus), HCU accommodation |
| Audience measurement and website improvement | IP address, device IDs, pages visited, session duration, browsing behavior, approximate location, user preferences | Consent - you can accept or refuse via our consent banner | Google Analytics 4 (via Google Tag Manager) |
| Computer security and abuse prevention | IP address, connection logs | Legitimate interest - protection of infrastructure and users | Hosting Horizon-Cumulus (OVH Beauharnois, Quebec) |
We will never process your personal information for purposes incompatible with those stated above without first informing you and, where applicable, obtaining your consent.
4. Third parties and subcontractors
To operate our website, we use third-party service providers. These suppliers act as subcontractors and may use your information only for the purposes for which we have mandated them. Here is the complete list of third parties involved in the processing of your personal information:
| Supplier name | Purpose | Category | Transfer outside Québec |
|---|---|---|---|
| Soft (by Horizon-Cumulus - 9322-8310 Québec inc., Joliette, Québec) | Cookie consent management and privacy policy hosting. Consent records are hosted in Quebec (OVH Beauharnois). | Essential | No - data hosted in Quebec |
| Google Analytics 4 (Google LLC, United States) | Audience measurement and analysis of visitor behavior on the website. | Analytical | Yes - United States (see section 5) |
| Horizon-Cumulus (web hosting, Joliette, Quebec) | Website hosted on OVH Beauharnois (Quebec) infrastructure. | Essential | No - data hosted in Quebec |
| Google Workspace (Google LLC, USA) | Corporate e-mail service. | Functional | Yes - United States (see section 5) |
We do not sell your personal information to third parties or share it for advertising purposes without your explicit consent.
5. Transfers outside Québec
Some of our service providers are located outside Quebec, which means that your personal information may be transmitted, stored or processed in other jurisdictions. In accordance with Section 17 of Bill 25, we will keep you transparently informed.
5.1 Suppliers involving a transfer outside Quebec
| Supplier | Country of treatment | Information transferred | Contract management |
|---|---|---|---|
| Google Analytics 4 (Google LLC) | United States | IP address (anonymized), device identifiers, browsing behavior, approximate location | Google Data Processing Amendment; standard contractual clauses |
| Google Workspace (Google LLC) | United States | E-mail content, contact details | Google Data Processing Amendment; standard contractual clauses |
5.2 Privacy Impact Assessment (PIA)
Prior to any transfer of personal information outside Quebec, we conduct a Privacy Impact Assessment (PIA) to ensure that the level of protection offered in the destination country is adequate, in accordance with section 17 of Bill 25. This assessment takes into account the laws applicable in the destination country, the security measures put in place by the supplier, and the risks to the individuals concerned.
For transfers to the United States via Google LLC, we rely on Google's standard contractual clauses and contractual data protection commitments to govern these transfers.
5.3 What's left of Quebec
Your website is hosted in Quebec by Horizon-Cumulus on the OVH Beauharnois infrastructure. Your cookie consent records, managed by Moelleux, are also hosted in Quebec. This data never leaves Quebec.
6. Shelf life
We keep your personal information only as long as necessary for the purposes for which it was collected, or as required by law. The applicable retention periods are as follows:
| Type of information | Shelf life | Reason |
|---|---|---|
| Cookie consent preferences (Soft cookie) | 13 months | Memorization of your choices to avoid having to ask for your consent each time you visit, in accordance with good consent practices |
| Analytics data (Google Analytics 4) | 14 months (Google Analytics default setting) | Analysis of traffic trends and website improvements over a rolling period |
| Connection logs and IP addresses (hosting) | 90 days | IT security, detection of unauthorized access and resolution of technical incidents |
| E-mails and correspondence (Google Workspace) | Duration of business relationship + 7 years | Legal and tax obligations applicable to companies in Quebec |
| Consent registrations (Moelleux) | 5 years | Proof of consent in the event of an audit or complaint, in accordance with the requirements of Bill 25 |
Once these time limits have expired, your personal information is securely destroyed or irreversibly anonymized, so that it can no longer be used to identify you.
7. Your rights
Bill 25 gives you important rights with respect to the personal information we hold about you. Here is an overview of these rights and how to exercise them.
7.1 Right of access
You have the right to know whether we hold personal information about you and, if so, to obtain a copy. You may also request details of the sources of this information, the purposes for which it is used and the third parties to whom it has been disclosed.
7.2 Right of rectification
If your personal information is inaccurate, incomplete or ambiguous, you may request that it be corrected. You may also request the deletion of outdated or unauthorized information.
7.3 Right to erasure (right to be forgotten)
In certain circumstances provided for by Law 25, you may request the deletion of your personal information, in particular when the purposes for which it was collected have been fulfilled and its retention is no longer necessary.
7.4 Right to portability
You have the right to receive, in a structured and commonly used technological format, the personal information you have provided to us, so that you can transmit it to another data controller. This right applies to information collected automatically with your consent.
7.5 Right to withdraw consent
Where the processing of your personal information is based on your consent, you may withdraw such consent at any time, free of charge and without prejudice. Withdrawal of consent does not affect the lawfulness of the processing carried out prior to such withdrawal. For analytical cookies, you can change your preferences at any time via our Moelleux consent management banner, accessible at the bottom of every page.
7.6 How to exercise your rights
To exercise any of these rights, send your written request to our Privacy Officer (see section 8). We will acknowledge receipt of your request as soon as possible and respond within a maximum of 30 daysin accordance with Law 25.
7.7 Right to file a complaint with CAI
If you feel that your rights have not been respected or that your personal information has been processed in violation of Bill 25, you have the right to file a complaint with the Commission d'accès à l'information (CAI) Commission for Access to Information (CAI) :
- Website : https://www.cai.gouv.qc.ca
- Telephone: 1-888-528-7741
- Address: 525 René-Lévesque Blvd. East, Suite 2.36, Québec (Québec) G1R 5Y4
8. Privacy Officer
In accordance with section 8.1 of Bill 25, AS Alliance R&D has designated a Privacy Officer. This person is your point of contact for any questions, requests or concerns you may have regarding the protection of your personal information.
| Name | Mathieu Corriveau |
|---|---|
| Title | Founding Chairman |
| info@as-alliance.com | |
| Phone | 514.831.4004 |
You can contact our manager for :
- Exercise one of your rights (access, rectification, deletion, portability, withdrawal of consent);
- Questions about this policy or our privacy practices ;
- Report a situation that concerns you regarding the management of your personal information.
We undertake to acknowledge receipt of your request promptly and to respond within 30 days we will reply within 30 days of receipt of your request, as stipulated in Bill 25. If your request is complex or voluminous, we will inform you of any additional time required.
9. Effective date and versioning
This Privacy Policy is effective as of the date indicated below. It replaces any previous version published on this site.
| Effective date | June 1, 2026 |
|---|---|
| Version | 2 |
We reserve the right to modify this policy at any time, in particular to reflect changes in our practices, in the services we use or in applicable legal requirements. In the event of substantial modification, we will inform you in an appropriate manner (for example, via a visible notice on our website) before the changes take effect.
We encourage you to periodically visit this page to review the most current version of our privacy policy. The effective date indicated above lets you know if the policy has been updated since your last visit.
This policy has been drafted and is managed via the Moelleux platform Moelleuxmoelleux, a consent and privacy policy management service operated by Horizon-Cumulus (9322-8310 Québec inc.), Joliette (Québec).