Privacy policy

1. Personal information protection officer #

S. 3.1, Act respecting the protection of personal information in the private sector (CQLR c. P-39.1, as amended by Law 25)

G4POS is responsible for the personal information it holds. The person in charge of personal information protection within the company is Jean-Philippe Gingras, President.

Unless a different written designation is made, this function is held by right by the person exercising the highest authority within the company.

Contact: confidentialite@g4pos.com · 1-888-653-8131. For a written request sent by mail: 100 rue de Singapour, Saint-Augustin-de-Desmaures, Quebec G3A 0P5.

Send this person any question, any access or correction request and any complaint regarding your personal information.

2. Our governance policies and practices #

S. 3.2 of the Act

Our policies and practices governing personal information are set out in an internal document, proportionate to the nature and size of our business and approved by the person in charge of personal information protection.

They cover:

• the retention and destruction of personal information (section 9);
• the roles and responsibilities of our staff throughout the life cycle of that information;
• the process for handling complaints about the protection of personal information (section 15);
• how we act in the event of a confidentiality incident (section 14).

3. Information we collect #

S. 8 para. 1(1) and (2) of the Act

Collection happens through the site’s web forms, the footer newsletter and the document request window. No passwords, no banking or payment card information and no sensitive information within the meaning of s. 59 of the Act are collected on this site.

We collect only the following information:

• Information you type into a form yourself: name, company, email address, phone number, website address, the content of your message, the display language and, where applicable, the model or document you are writing about.
• Proof of consent, when you tick a consent box: the exact wording shown to you and the timestamp recorded by our server.
• Where your visit came from: campaign parameters (utm_source, utm_medium, utm_campaign), advertising click identifier, referring site and first page viewed. Those values stay in your browser for the life of the tab and only reach us if you submit a form.
• Connection IP address: our server processes it when a form is submitted, solely to cap the number of submissions per source and to filter out automated ones. It appears in our technical logs only in truncated form, when a delivery fails. It is also recorded by our hosting provider (section 8).
• Anonymous visit statistics, produced without cookies for all visitors (section 6): pages viewed, referring site, country, region and city inferred from the IP address, device and browser type, and certain actions (form submitted, click on the phone number, document downloaded), with none of the information you type in.
• Information collected by measurement cookies, only if you have consented to them (section 6).

Cookie policy →

4. Purposes of collection #

S. 8 para. 1(1) and s. 12 of the Act

Each item of information is collected for a specific purpose. Information collected for one of those purposes is not used for another without your consent, except as permitted by law. We make no decision about you based exclusively on automated processing.

• To process and answer your request.
• To open, verify and manage a reseller account.
• To provide technical and commercial support on the hardware we distribute, and to send you the document you asked for.
• To protect our forms against automated submissions and fraud attempts, using the IP address, the timestamp and an invisible trap field.
• To send you commercial communications, only where you have consented or where the law permits it (section 12).
• To measure and improve site usage: through anonymous, aggregated statistics, without cookies, for all visitors; through measurement cookies, only if you have accepted them (section 6).

5. Your consent and its withdrawal #

S. 8 para. 1(4) and s. 14 of the Act

Your consent is requested for each purpose, in clear and simple terms, and presented separately from any other information. No consent box on this site is ever pre-ticked.

Withdrawal applies going forward. It does not prevent G4POS from keeping information that a legal obligation or an ongoing contractual relationship requires it to keep. You may withdraw your consent at any time:

• measurement cookies: through the preference manager in the Cookie policy, or the “Manage cookies” link in the footer;
• commercial communications: using the unsubscribe link in every email, or by writing to vente@g4pos.com;
• any other use: by writing to the officer named in section 1.

Manage cookies →

6. Cookies and measurement technologies #

Ss. 8.1 and 14 of the Act

This site uses Vercel Web Analytics and Speed Insights, supplied by our hosting provider Vercel Inc. (United States), to produce aggregated visit and performance statistics. These tools store no cookie, keep nothing on your device and use no persistent identifier: a visit is recognised for 24 hours at most. They do not make it possible to identify you, follow you from one site to another or build a profile. They are active for all visitors, without prior consent.

They also record certain actions anonymously: a form being submitted (its type only), a click on the phone number and a document being downloaded. None of the information you type in (name, email, phone, message) is sent to them.

This site may load the Google Tag Manager container (ID GTM-BNDDHS), which deploys audience measurement tools supplied by Google LLC.

That container is loaded only after your explicit acceptance. If you decline, or if you make no choice, it is not loaded and no measurement cookie is stored on your device; only the anonymous, cookieless statistics described above are produced.

Your choice is granular: audience measurement and marketing are two separate purposes that you accept or decline independently. It is kept for at most thirteen months, then asked again; it is also asked again if the purposes change.

Details of the cookies, of the values kept on your device and the preference manager are set out in the Cookie policy.

Cookie policy →

7. Sharing with service providers #

S. 18.3 of the Act

We do not sell your personal information and we do not trade it for advertising purposes.

We share it only with providers acting on our behalf, to the extent necessary to perform their mandate, which must be granted in writing and must set out protection measures.

We may also disclose information where the law requires it, or to assert our rights.

8. Transfers outside Québec #

S. 8 para. 2 and s. 17 of the Act

Some of our providers are established outside Québec. Your information may therefore be processed and stored outside Québec, mainly in the United States, and be subject to the laws applicable there, including access requests from foreign authorities.

These transfers are governed by a written agreement with each provider and have been the subject of the privacy impact assessment required by s. 17 of the Act.

The site’s fonts are served from our own servers: no request is sent to a third party merely because you display a page.

The table below names each provider, its role, its processing territory and the information transferred to it.

9. Retention and destruction #

S. 23 of the Act

We keep your information only for as long as necessary for the purposes for which it was collected. Once those purposes are fulfilled, we destroy or anonymize it.

At the end of the period, the information is securely destroyed or anonymized. We review these deadlines at least twice a year.

10. Security measures #

S. 10 of the Act

We take the security measures needed to protect the personal information we hold, having regard in particular to its sensitivity, its quantity and the medium on which it is held:

• the site is served exclusively over HTTPS: exchanges between your browser and our servers are encrypted;
• no password or payment information is collected or stored on this site;
• form submissions are capped in number and in size, and an invisible trap field filters out automated ones;
• no measurement cookie is stored and Google Tag Manager is loaded only with your consent; without consent, measurement is limited to anonymous, aggregated, cookieless statistics, and collection is limited to what is strictly necessary;
• access to the information is limited to the people who need it to carry out their duties.

11. Your rights #

Ss. 27, 28, 28.1, 32 and 12.1 of the Act

The law grants you the rights listed below. Send your request to the officer named in section 1: we answer in writing within 30 days of receipt. We may ask you for proof of identity before processing it, and our answer is free of charge, apart from reasonable transcription or transmission fees of which we would inform you in advance.

• Access: confirm that we hold information about you and obtain a copy of it (s. 27).
• Correction: have inaccurate, incomplete or ambiguous information corrected (s. 28).
• Deletion: have information deleted where its collection is not authorized by law (s. 28).
• Portability: receive, in a structured and commonly used technological format, the computerized information you provided to us (s. 27 para. 3).
• De-indexing: require that the dissemination of information cease, or that a hyperlink giving access to it be de-indexed, in the cases provided by law (s. 28.1).
• Withdrawal of consent: at any time, as set out in section 5 (s. 8 para. 1(4)).
• Automated processing: be informed if a decision about you is based exclusively on automated processing and submit your observations (s. 12.1). G4POS makes no such decision from information collected on this site.
• Review: refer our refusal, or our failure to answer within 30 days, to the Commission d’accès à l’information for examination (s. 32).

12. Commercial communications #

Canada’s Anti-Spam Legislation (S.C. 2010, c. 23), ss. 6, 10, 11 and 13 · SOR/2012-36

We send you a commercial electronic message only where you have expressly consented, through a checkbox that is never pre-ticked, or where the law implies your consent, in particular following an inquiry from you (six months) or a purchase (two years).

Every message identifies its sender and gives its contact details: G4PDV Inc., doing business as G4POS, 100 rue de Singapour, Saint-Augustin-de-Desmaures, Quebec G3A 0P5, 1-888-653-8131, vente@g4pos.com.

Every message contains an unsubscribe mechanism that is free of charge, usable with no further action on your part and valid for at least 60 days after sending. We give effect to an unsubscribe request within 10 business days at the latest.

We keep proof of your consent: the exact wording shown to you, the date and time recorded by our server, the display language and the originating page. If it is contested, the burden of that proof is on us.

13. Advertising and custom audiences #

We may use the email address and phone number you provided to us as a customer to show you our ads on Facebook and Instagram (Meta), Google and LinkedIn, or to avoid showing you ads intended for new customers.

Before any transfer, this information is transformed on our systems by hashing (SHA-256). The platforms use it only to find a match with their accounts, act on our behalf and may not use it for any other purpose. These providers may process the data outside Québec, notably in the United States and Ireland. A privacy impact assessment has been carried out.

You may opt out at any time by writing to confidentialite@g4pos.com. We will remove you from our audiences within 10 business days.

14. Confidentiality incidents #

Ss. 3.5 to 3.8 of the Act · Regulation respecting confidentiality incidents (CQLR c. P-39.1, r. 1)

In the event of a confidentiality incident, we take reasonable measures to reduce the risk of injury and to prevent a similar incident from recurring.

If the incident presents a risk of serious injury, we promptly notify the Commission d’accès à l’information and the individuals concerned.

We keep a register of confidentiality incidents, retained for at least five years after the date or period when we became aware of the incident.

You can report an incident or a vulnerability by writing to confidentialite@g4pos.com.

15. Complaints and recourse #

S. 3.2 of the Act

Any complaint about the protection of your personal information may be sent to the officer named in section 1, by email or by phone. We acknowledge receipt, examine it and send you our reasoned conclusion in writing within 30 days.

If our answer does not satisfy you, you may contact the Commission d’accès à l’information du Québec (cai.gouv.qc.ca, 1-888-528-7741).

Because some information crosses the border, the Personal Information Protection and Electronic Documents Act may also apply. You may then contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

16. Visitors from the European Economic Area #

This site is intended for businesses in Canada. We do not offer goods or services to individuals located in the European Economic Area and we do not monitor visitor behaviour there.

If you are nonetheless located in the EEA and your information has been processed, write to the officer named in section 1: your request will be handled according to the principles set out in this policy.

17. Changes to this policy #

We may amend this policy. The date of the latest update appears at the top of this page.

Any significant change to the purposes of collection will be the subject of a new request for consent.

Cookie policy →Terms and conditions →