Privacy Policy

1. Introduction

NickClickTech (hereinafter “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information we collect in the course of our business. This Privacy Policy describes how we collect, use, disclose and safeguard personal information in compliance with Québec’s Act Respecting the Protection of Personal Information in the Private Sector (commonly known as Law 25).

We have appointed a Privacy Officer who oversees our compliance and responds to privacy-related questions and requests. The name and contact information for the Privacy Officer are listed below.

2. What Personal Information We Collect

We collect only the personal information necessary for purposes identified in advance. Personal information includes any data about an identifiable individual, such as:

• Identity and contact details: name, company, email, phone number, mailing address and other identifiers you provide when you contact us, open a ticket or sign up for services.
• Account information: usernames, passwords (hashed), usage logs and preferences associated with your account.
• Technical information: IP address, device identifiers, browser type, cookies, or other analytics that may identify you.
• Payment and billing data: details needed to invoice clients and process payments.
• Support correspondence: messages, recordings, or attachments that may contain personal information.

We do not knowingly collect personal information from children under 14 years of age without parental consent, as required by Law 25.

3. Why We Collect and Use Personal Information

We use personal information only for legitimate and specific purposes that we identify at or before the time of collection. These purposes include:

• Service delivery: to provide, maintain and improve our managed IT services and cybersecurity solutions (including monitoring, backups, incident response and Law 25 compliance).
• Customer support: to respond to your inquiries, manage tickets and address technical issues.
• Account administration: to create and manage client accounts, billing and contracts.
• Security: to authenticate users, prevent fraud, detect cybersecurity threats and satisfy legal obligations.
• Marketing: to send you information about our services (with your consent) and to invite feedback or satisfaction surveys.
• Legal compliance: to comply with applicable laws, including Law 25, and to report confidentiality incidents to the Commission d’accès à l’information (CAI) when required.

4. How We Obtain Consent

We rely on express, free and informed consent when required by Law 25. You can withdraw your consent at any time by contacting us at privacy@nickclicktech.ca. However, some processing may continue if necessary to carry out our contractual obligations, comply with legal requirements or prevent fraud.

If we collect personal information via cookies or other tracking technologies, we will provide clear notice and obtain consent before such technologies are activated.

5. Sharing and Disclosure

We may share personal information only in limited circumstances, such as:

• Service providers: third‑party vendors who assist with hosting, backups, email delivery, payment processing, analytics or other operational tasks. These providers are contractually required to protect your information and may only use it for the services they perform on our behalf.
• Legal compliance and protection: if required by law or regulation, to report data breaches, protect our rights or respond to legal requests.
• Commercial transactions: if we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction, but only for completing that transaction and subject to strict confidentiality obligations.
• Research or statistics: we may share de‑identified data for research purposes under conditions permitted by Law 25.

We do not sell your personal information. We do not disclose personal information to third parties for their own marketing purposes without your explicit consent.

6. Cross‑Border Transfers

We may store or process personal information outside Québec. When transferring data internationally, we ensure that the information will receive adequate protection, as required by Law 25. We may perform a privacy impact assessment and, where necessary, put contractual safeguards in place before transferring data to another jurisdiction.

7. Data Security

We implement technical and organizational measures to protect personal information against accidental loss, theft, unauthorized access, disclosure or modification. Measures include network segmentation, encryption, multi‑factor authentication, access controls, secure backups and routine security assessments. In the event of a confidentiality incident (data breach), we will take immediate steps to mitigate harm, notify affected individuals and the CAI if there is a risk of serious injury, and log the incident as required by Law 25.

8. Retention and Destruction

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Once information is no longer required, we securely destroy, erase or anonymize it in accordance with our data governance policies.

9. Your Rights

Under Law 25, you have rights concerning your personal information, including the right to:

• Access: request a copy of the personal information we hold about you.
• Rectify: correct inaccuracies or complete incomplete information.
• Withdraw consent: revoke your consent to our use of your information.
• Be informed: know how your information is used, who can access it and whether it is sent outside Québec.
• Erase: request deletion in specific circumstances (e.g., when information is no longer needed).
• Portability: obtain your personal data in a structured, commonly used format (effective 22 September 2024).
• Be informed about automated decision‑making: know if we use automated processes and the effects on you.

We will respond to your requests within 30 days, subject to verification of your identity. Some requests may be denied if required by law or if they would reveal proprietary or confidential information about another person.

10. How to Exercise Your Rights or Submit a Complaint

If you have questions, wish to exercise your rights or have concerns about our privacy practices, please contact our Privacy Officer:

We encourage you to contact us first so we can address your concerns. If you remain dissatisfied, you have the right to file a complaint with Québec’s Commission d’accès à l’information (CAI).

11. Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. When we make changes, we will post the revised policy on our website and indicate the date of the update. We may also notify you via email or by a banner on our website when significant changes occur.