Privacy

This Privacy Policy describes how Toucan Solutions Inc. (“Toucan Solutions”) collects, uses, and protects the personal information of users of the Arkipel platform (the “Software”, the “Platform” or the “Service”). Arkipel is a service of Toucan Solutions designed to support business and solidarity networks in achieving their mission, through digitalization and resource sharing, while respecting the autonomy of each. This policy complies with Quebec’s Act to modernize legislative provisions respecting the protection of personal information (Act 25) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

ARTICLE 1 – PERSONAL INFORMATION COLLECTED

When you browse the Software, we automatically receive your computer’s Internet Protocol address (IP address) and technical details about the browser and operating system you are using. When you contact us or fill out a form on the site, we collect the personal information you provide to us, such as your name, address, and email. With your permission, we may send you emails about Toucan Solutions, new services, and other updates.

ARTICLE 2 – CONSENT

How do you obtain my consent?

When you provide us with your personal information on one of our Platforms, we presume that you consent to the collection and use of that information for the sole purposes of that Service. If we ask you to provide your personal information for another reason, for marketing purposes for example, we will ask for your explicit consent directly, or we will give you the opportunity to refuse.

How do I withdraw my consent?

If after giving us your consent, you change your mind and no longer consent to us contacting you, collecting your information, or disclosing it, you may notify us by contacting us through our Contact page or by mail at: Toucan Solutions, 5304 rue de Bordeaux, Montréal, H2H 2A7, Canada.

ARTICLE 3 – DISCLOSURE

We may disclose your personal information if required by law to do so or if you violate our Terms of Use.

ARTICLE 4 – THIRD-PARTY SERVICES

In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to provide the services they offer us. However, some third-party service providers have their own privacy policies. With respect to these providers, we recommend that you read their privacy policies carefully so that you can understand how they will handle your personal information. It should be noted that some providers may be located or have facilities located in a jurisdiction different from yours or ours. Therefore, if you decide to proceed with a transaction that requires the services of a third-party provider, your information could then be governed by the laws of the jurisdiction in which that provider is located or those of the jurisdiction in which its facilities are located. For example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, your information used to complete the transaction could be disclosed under United States legislation, including the Patriot Act. Once you leave Toucan Solutions’ services or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or the Terms of Use of our website.

Links

You may leave our website by clicking on certain links on our site. We assume no responsibility for the privacy practices of these other sites and recommend that you read their privacy policies carefully.

ARTICLE 5 – SECURITY AND DATA HOSTING

To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not lost, misappropriated, accessed, disclosed, altered, or improperly destroyed. Production data is currently hosted in Canada, with regular backups at least every 24 hours, guaranteeing a Recovery Point Objective (RPO) of less than 24 hours of data loss. Security patches for critical vulnerabilities are applied within a maximum of 72 hours.

The hosting location of each community on the Platform may vary according to the needs of the client organization. Although hosting is currently in Canada, Toucan Solutions may host data in other jurisdictions (including the United States or Europe) depending on where each community is deployed. In all cases, the data remains governed by this Privacy Policy and by the laws applicable to the hosting jurisdiction.

In the event of a data breach involving personal information, Toucan Solutions shall notify the User and the relevant regulatory authorities (including the Commission d’accès à l’information du Québec) within a maximum of 72 hours.

ARTICLE 6 – DATA RETENTION

We retain your personal information for as long as necessary to achieve the purposes for which it was collected, either for the duration of the business relationship or as long as required to comply with legal obligations. At the end of this period, the information is securely deleted or anonymized.

ARTICLE 7 – AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your state or province of residence, and that you have given us your consent to allow any minor in your care to use this website.

ARTICLE 8 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please check it frequently. Changes and clarifications will take effect immediately upon their publication on the website. If we make changes to the content of this policy, we will notify you here that it has been updated, so that you know what information we collect, how we use it, and under what circumstances we disclose it, if applicable. If our site is acquired by or merged with another company, your information may be transferred to the new owners so that we can continue to provide you with services.

QUESTIONS AND CONTACT INFORMATION

If you wish to: access, correct, amend, or delete any personal information we have about you, file a complaint, or if you simply want more information, contact our privacy compliance officer through our Contact page or by email at aide@toucansolutions.ca. Data access, deletion, and portability requests are processed within a maximum of 30 days, and requests to rectify inaccurate data within a maximum of 15 days.