Privacy and data protection policy

1. Introduction

At Stoik QSE, protecting your privacy and the security of your information is a priority. This policy describes how we handle the personal information you provide to us, as well as the security measures in place to protect all company information.  


2. Who we are

Our website address is: https: //stoikqse.com.


3. Information gathering

We collect information that you provide directly to us, such as your name, e-mail address, telephone number, and other information you choose to provide. In addition, during audits, we may collect documents relating to your management system, such as manuals, documented procedures, audit records and management review reports.


Comments

When visitors leave comments on the site, we collect the data entered in the comment form, as well as the visitor’s IP address and browser user agent string to help detect spam. An anonymized string created from your e-mail address (also called a hash) may be provided to the Gravatar service to see if you use it. The Gravatar privacy policy is available here. Once your comment has been approved, your profile photo will be visible to the public in the context of your comment.


Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract all location data from images on the website.


4. Use of your information

We use your information to :

  • Respond to your requests and provide services.
  • To improve our services and understand your interaction with our site.
  • Contact you for updates or offers.
  • Information gathered during audits is treated with confidentiality and used only for the specified purpose.
 

5. Sharing information

Your personal information is not shared with unaffiliated third parties without your explicit consent. If you request a password reset, your IP address will be included in the reset email.


6. Cookies and log files

Stoik QSE uses cookies and log files to improve user experience and perform statistical analysis. Here’s how we use these technologies:


Cookies

If you leave a comment on our site, you may choose to save your name, email address and website in cookies. These cookies are for your convenience so you don’t have to fill in your information again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.

When you log in, we will also set several cookies to save your login information and screen display choices. Login cookies last two days, and screen options cookies last one year. If you select “Remember me”, your connection will persist for two weeks. If you log out of your account, the login cookies will be deleted.


Log files and web analysis services

Stoik QSE uses web analysis services such as Google Analytics, which collect certain information via log files and cookies. This information includes your IP address, operating system, pages visited and time and day of connection. This information helps us to improve our service and compile statistics. We do not collect any information that would allow Google Analytics to personally identify an individual.


Right of objection and withdrawal

You can object to the use of cookies by modifying your browser settings. You can also unsubscribe from our email communications by using the unsubscribe link included in our messages.


7. Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, integrate additional third-party tracking, and monitor your interaction with such integrated content, including tracking your interaction with integrated content if you have an account and are logged in to this website.


8. Data security

We implement rigorous security measures to protect your personal information against unauthorized access, disclosure, alteration or destruction. A Privacy Officer has been appointed and can be contacted at [email protected].


9. Security incident management

In the event of a data security breach involving your personal information, we undertake to notify the Commission d’accès à l’information du Québec and, where applicable, the persons concerned, in accordance with the requirements of the Act to modernize legislative provisions respecting the protection of personal information (“Bill 25”). Corrective and preventive measures will be implemented to avoid the recurrence of such incidents.


10. How long we keep your data

If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to automatically recognize and approve any follow-up comments instead of holding them in a moderation queue.

For users who register on our website (where applicable), we also store the personal information they provide in their user profile. All users can view, modify or delete their personal information at any time (except that they cannot change their username). Website administrators can also view and modify this information.


11. What rights you have over your data

If you have an account on this site, or have left comments, you may request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You may also request that we delete any personal data we hold about you. This does not include data that we are obliged to retain for administrative, legal or security purposes.


12. Contact form

By using our contact form, you consent to Stoik QSE retaining the information submitted for the purpose of communicating with you or submitting service offers to you. We will not use this information for any other purpose without your consent.


13. Company information gathered during audits or consulting mandates

In the course of our audits and consulting mandates, we may collect professional and business information, such as manuals, documented procedures, audit records, management review reports, and meeting minutes. This information is treated with the utmost confidentiality and is used only for the purposes specified in the mandate.


Collection and storage

The information collected is documented and stored securely in our internal databases. We apply strict protection measures to ensure the confidentiality of this information.


Access and privacy

Access to this information is strictly limited to certified auditors, quality managers and company management. All information collected is protected against unauthorized access by rigorous security controls.


Storage and archiving

Audit records and other related documents are kept for a specified period, in accordance with legal and contractual requirements. After this period, documents are archived or securely destroyed.


14. Where your data is sent

Visitor comments can be checked by an automated spam detection service.


15. Policy modification

This policy may be updated from time to time. We will inform you of any significant changes.