1. Person in Charge of Processing
This privacy policy applies to B2R (hereinafter "we," "us," or "our"), a business operating in the construction sector and subject to Quebec Law 25 (An Act to modernize legislative provisions as regards the protection of personal information, S.Q. 2021, c. 25) and all other applicable Quebec privacy legislation.
Quebec Law 25 governs how we collect, use, communicate, retain, and destroy personal information about individuals who interact with our website and services. By using our website, you acknowledge that your personal information may be handled as described in this policy.
Our website is hosted by Horizon-Cumulus (9322-8310 Québec inc.), located in Joliette, Quebec. Website data and consent records are stored in Quebec (OVH, Beauharnois, Quebec). Our email communications are handled through Microsoft 365, operated in the United States — see Section 5 for details on cross-border transfers.
2. Personal Information Collected
We collect personal information only to the extent necessary for the purposes described in this policy. The categories below reflect what we collect through our website and business operations.
2.1 Contact and Identification Information
- Full name
- Email address
- Phone number
- Mailing or project address
2.2 Technical and Navigation Information
- IP address
- Device identifiers and advertising identifiers
- Pages visited and browsing behavior on our site
- Session duration
- Consent preferences (stored via the Moelleux consent management platform)
2.3 Marketing and Advertising Information
- Social identifiers (when interacting via Meta platforms)
- Advertising identifiers used for retargeting
- Conversion events (e.g., form submissions, page visits linked to ad campaigns)
2.4 Human Resources Information
Because we operate in the construction sector and accept employment-related inquiries, we may collect personal information from job applicants and employees, including:
- Resume and work history
- Professional qualifications and certifications
- References and contact details
- Government-issued identification numbers where required by law
Human resources personal information is collected and used solely for recruitment, employment management, and compliance with applicable labor and occupational health and safety legislation.
3. Purposes of Processing
We process your personal information only for specific, explicit, and legitimate purposes. The table below outlines each purpose, the personal information involved, the third-party services used (where applicable), and the legal basis under Quebec Law 25.
3.1 Operating and Securing the Website
Information used: IP address, consent preferences, session data.
Service: Moelleux by Horizon-Cumulus (consent management and policy hosting).
Legal basis: Legitimate interest — necessary to deliver a functional, secure website and to fulfill our legal obligation to record consent under Quebec Law 25.
3.2 Responding to Your Inquiries
Information used: Name, email address, phone number, project address, message content.
Legal basis: Consent (you voluntarily submit a contact form or reach out directly) and legitimate interest (responding to business inquiries).
3.3 Targeted Advertising and Remarketing
Information used: IP address, device identifiers, advertising identifiers, social identifiers, pages visited, browsing behavior, conversion events.
Service: Meta Pixel (Facebook) — conversion tracking and personalized ad targeting on Meta platforms.
Legal basis: Consent — this service is activated only when you accept marketing cookies through our consent banner. You may withdraw consent at any time.
3.4 Displaying Video Content
Information used: IP address, device identifiers, session duration, browsing behavior.
Service: YouTube (embedded videos) — allows us to display video content directly on our website.
Legal basis: Consent — YouTube embeds are activated only when you accept functional cookies through our consent banner.
3.5 Recruitment and Human Resources Management
Information used: Resume, work history, qualifications, references, contact details, identification numbers.
Legal basis: Consent (for voluntary applications) and legal obligation (for employment records required under Quebec labor law).
4. Third Parties and Processors
We share personal information with the following third-party service providers only to the extent necessary for the purposes described in this policy. We do not sell your personal information.
| Name | Purpose | Category | Transfer Outside Quebec |
|---|---|---|---|
| Moelleux (by Horizon-Cumulus) | Consent management platform and privacy policy hosting. Consent records and the policy are hosted in Quebec (OVH, Beauharnois). Stores a preference cookie named moelleux_{site_key} for 13 months. | Essential | No — data remains in Quebec |
| Meta Pixel (Facebook) | Conversion tracking and remarketing for personalized advertising on Meta platforms. | Marketing | Yes — United States (see Section 5) |
| YouTube (embedded videos) | Embedding and playing video content on the website. | Functional | Yes — United States (see Section 5) |
Additionally, our transactional and operational email is handled through Microsoft 365 (operated in the United States). See Section 5 for the applicable cross-border transfer disclosure.
5. Transfers Outside Quebec
Quebec Law 25 (s. 17) requires that before personal information is communicated outside Quebec, we assess whether it will receive adequate protection in the destination jurisdiction. The following transfers occur in connection with our website and operations.
5.1 Meta Pixel (Facebook) — United States
When you accept marketing cookies, your device identifiers, IP address, browsing behavior, and advertising identifiers are transmitted to Meta Platforms, Inc., headquartered in the United States. Meta is subject to U.S. federal and state privacy laws. We rely on Meta's standard data processing terms and, where applicable, standard contractual clauses as contractual safeguards. A Privacy Impact Assessment (PIA) has been or will be conducted prior to this transfer, as required by Quebec Law 25.
5.2 YouTube (Google LLC) — United States
When you accept functional cookies, your IP address, device identifiers, and session data may be transmitted to Google LLC, headquartered in the United States, in connection with embedded YouTube video players. We rely on Google's data processing terms as contractual safeguards. A PIA has been or will be conducted prior to this transfer.
5.3 Microsoft 365 — United States
Our email communications are processed through Microsoft 365, operated by Microsoft Corporation in the United States. Your email address and any personal information included in email correspondence may therefore be processed in the United States. We rely on Microsoft's data processing addendum and standard contractual clauses as contractual safeguards. A PIA has been or will be conducted for this transfer.
In all cases, we take reasonable steps to ensure that personal information transferred outside Quebec receives a level of protection comparable to that afforded under Quebec Law 25.
6. Retention Period
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the retention period expires, personal information is securely destroyed or anonymized.
| Data Type | Retention Period | Justification |
|---|---|---|
| Contact and inquiry information | 3 years from last contact | Limitation period for civil claims under Quebec law; legitimate interest in maintaining business records |
| Consent records (Moelleux cookie) | 13 months | Quebec Law 25 requirement to demonstrate valid consent; cookie lifespan set by Moelleux platform |
| Technical and navigation data (server logs) | Up to 12 months | Security monitoring, fraud prevention, and website performance analysis |
| Marketing and advertising data (Meta Pixel) | As determined by Meta's data retention policies (typically up to 180 days for event data) | Conversion tracking and remarketing; subject to Meta's terms of service |
| Human resources and recruitment information | Active employees: duration of employment plus 5 years. Unsuccessful applicants: 2 years from application date. | Quebec labor law, Act respecting occupational health and safety, and applicable limitation periods |
| Email correspondence | 3 years from last exchange | Business records and civil limitation period |
7. Your Rights
Under Quebec Law 25, you have the following rights with respect to your personal information. To exercise any of these rights, please contact our Person responsible for the protection of personal information using the details in Section 8. We will respond within 30 days of receiving your request.
7.1 Right of Access
You have the right to ask us whether we hold personal information about you, and to receive a copy of that information in a clear and understandable format.
7.2 Right of Rectification
If any personal information we hold about you is inaccurate, incomplete, or ambiguous, you have the right to ask us to correct it. You may also ask us to add a note to your file if a dispute about accuracy cannot be resolved.
7.3 Right to Erasure
You have the right to ask us to delete personal information that was collected without a valid legal basis, or that is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
7.4 Right to Portability
Where technically feasible, you have the right to receive personal information that you provided to us in a structured, commonly used, and machine-readable format, and to have it transmitted to another organization.
7.5 Right to Withdraw Consent
Where we process your personal information based on your consent (for example, marketing cookies or functional cookies), you may withdraw that consent at any time by updating your preferences through our consent banner or by contacting us directly. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
7.6 Right to File a Complaint
If you believe your rights under Quebec Law 25 have not been respected, you have the right to file a complaint with the Quebec Information Access Commission (CAI) at https://www.cai.gouv.qc.ca.
8. Person Responsible for the Protection of Personal Information
In accordance with Quebec Law 25 (s. 3.1 and s. 8.1), we have designated a Person responsible for the protection of personal information who oversees compliance with this policy and handles all privacy-related requests and inquiries.
- Name: Claudia Bérubé
- Title: Directrice générale
- Email: info@b2r.ca
- Phone: 418 914-0644
You may contact our Person responsible for the protection of personal information at any time to exercise your rights, ask questions about this policy, or report a privacy concern. We are committed to responding to all requests within 30 days, as required by Quebec Law 25.
If you are not satisfied with our response, you may escalate your complaint to the CAI as described in Section 7.6.
9. Effective Date and Versioning
This privacy policy takes effect on 10 juin 2026 and supersedes any previous version.
Version: 1
We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. When we make material changes, we will update the effective date above and, where appropriate, notify you through our website or by email. We encourage you to review this policy periodically.
Continued use of our website after a revised policy has been posted constitutes your acknowledgment of the updated terms, to the extent permitted by Quebec Law 25.
