GCA Sécurité Incendie
    FREN

    Privacy Policy

    Effective date: October 7, 2026, Version 1.0

    This English version is provided for convenience. In case of any discrepancy, the French version prevails.

    Last updated: October 7, 2026

    At GCA Sécurité Incendie Inc. (hereinafter "we" or "GCA"), we take the protection of your personal information and your business data very seriously. This policy describes how we collect, use, store and protect your information when you use our website www.gcasecuriteincendie.ca, our online store, the PREVIO platform (hereinafter the "Platform") and all of our services.

    1. Data Hosting (Canadian Sovereignty)

    To ensure compliance with the legal obligations of our Canadian clients, all data collected through the Site and the Platform is hosted and backed up exclusively on secure servers located in Canada. Your data does not pass through and is not stored on foreign servers subject to other jurisdictions (such as the U.S. Patriot Act).

    2. Collection of Information

    We collect only the information needed for our services, our online store and the Platform to work properly:

    • User Profiles: Identification data for all users (owners, managers, safety committee members, employees, store customers, as well as suppliers and their users). This includes: last name, first name, business email address, phone number, mailing address and job title.

    • Training and Drill Data: Completion records, quiz results and time stamps related to the use of the training modules (LMS) and to evacuation drills.

    • Business and Operational Data: Building addresses, plans, safety equipment inventory, inspection reports, and any information or image submitted by users.

    • Login and Browsing Data: IP addresses, browser type and connection logs for security, audit and Site improvement purposes.

    3. Use of Data, Artificial Intelligence and Sharing

    Your data is used to:

    • Process your orders in the online store and provide access to the features of the Platform.

    • Provide technical support, customer service and maintenance.

    • Send you safety notifications, compliance reminders or service confirmations.

    • Artificial Intelligence (AI): We use artificial intelligence tools to analyze the information and/or inspection images uploaded to the Platform, in a strictly anonymized and aggregated way, in order to optimize detection and improve our services.

    No sale of data and sharing with third parties: GCA formally undertakes to never sell its clients' personal or business data to third parties. However, we may share certain strictly necessary information in the following contexts:

    • Service Providers (Supplier Portal): When you initiate a service request through the Platform, we send the selected Supplier the operational data needed for its work (e.g. address, on-site contact, description of the need, photos). No irrelevant personal data is shared.

    • Secure Payment Processors: GCA Sécurité Incendie has no access to your banking data or credit card numbers and does not store any of this information. Payments for the online store and subscriptions are processed entirely securely by Stripe. Payments for coaching or one-time services are processed through secure QuickBooks links.

    • Legal Obligations: If the law or a court order formally requires us to do so.

    4. Data Security

    We implement robust technological and organizational security measures to protect your information:

    • Encryption of data in transit (SSL/TLS) and at rest.

    • Strict access controls reserved for authorized staff only.

    • Regular, redundant backups kept in Canada.

    5. Responsibilities (Law 25, Quebec) and Access Management

    In accordance with the Act to modernize legislative provisions as regards the protection of personal information (Law 25 in Quebec):

    • Person in charge of the protection of personal information: GCA has designated a person in charge of data protection. For any question, or to report a confidentiality incident, you can contact us at:

      info@gcasecuriteincendie.ca

    • Self-managed access: Users are responsible for keeping their credentials confidential. They can reset and manage their passwords on their own through magic links or secure procedures.

    • Right of access, rectification and erasure: You have the right to request access to your personal information or its rectification. However, since the information entered in the Platform (training, inspection records, drill attendance) constitutes legal fire safety records for the client business, any request for the permanent deletion of data from an employee, a committee member or a secondary user must be approved by an officer or the main holder of the Client account before it can be carried out.

    • Incident notification: In the event of a confidentiality incident that presents a risk of serious injury, we undertake to notify the persons concerned and the Commission d'accès à l'information du Québec (CAI) within the time limits set by law.

    6. Cookies (Managed by Enzuzo)

    We use cookies that are essential to the operation of the Site and the Platform to keep your session active and secure.

    To manage your consent to analytics, marketing or continuous improvement cookies on the website, we use the compliance services of the Enzuzo application. The choices you make through the consent banner (accept or refuse) are recorded securely by Enzuzo so that your preferences are respected. We do not use third-party advertising tracking cookies without your explicit consent collected through this tool.

    7. Consent

    By browsing our Site, making purchases in our online store or accessing the PREVIO Platform, you consent to the collection, use and processing of your personal information as described in this Privacy Policy.