Privacy policy

Effective date: October 26, 2026

Maison INVICTA inc. (“Maison Invicta,” “we,” “us”) attaches great importance to protecting the personal information of the people who visit its website and of those who contact us.

This policy explains what personal information we collect, why we collect it, how we use it, with whom we share it, how long we keep it and what your rights are. It applies to the website maisoninvicta.com and to the communications you have with us by telephone or email following your visit.

This policy is established in accordance with Quebec’s Act respecting the protection of personal information in the private sector, as amended by the Act to modernize legislative provisions as regards the protection of personal information (Law 25).

1. Person in Charge of the Protection of Personal Information

Maison Invicta has designated a person in charge of the protection of personal information. This person ensures compliance with this policy and handles any question, access request, correction request or complaint.

2. Personal Information We Collect

Our website has no account creation feature, no online payment and no document upload. Depending on how you interact with us, the information collected may include:

• your name, your email address and, if you choose to provide it, your telephone number, when you fill out our contact form, write to us or call us;
• the content of the messages and communications you send us;
• technical and usage information related to your visit to the website (IP address, browser and device type, pages viewed, length of visits), collected through analytics cookies when you have consented to them.

We ask that you do not send us financial, tax, wealth or identification information (for example account numbers, statements or identity documents) by email during a first contact. Information required for a business relationship is collected directly from the individuals concerned, outside the website, through secure means, and is governed by our service agreements and professional obligations.

3. How We Collect This Information

We collect your personal information directly from you, through the following means:

• the website’s contact form, which includes a consent checkbox;
• email exchanges;
• telephone conversations;
• cookies and similar technologies used on the website, under the conditions set out in section 6.

We do not collect personal information about you from third parties through the website.

4. Purposes for Which We Use Your Information

We use your personal information for the following purposes:

We do not use your personal information for other purposes without first obtaining your consent, except where permitted or required by law. We do not use it for commercial solicitation and we do not run targeted advertising from this website.

5. Consent

By checking the consent box on the contact form or by sending us your personal information through any of the other means described in section 3, you consent to our using it for the purposes set out in section 4. This consent is requested in a free and informed manner, for specific purposes and for the time needed to fulfil them.

You may withdraw your consent at any time:

• for non-essential cookies, by changing your preferences through the cookie settings panel available on the website;
• for any other use, by writing to the person in charge identified in section 1.

Withdrawing your consent does not affect processing already carried out and may, in some cases, prevent us from following up on your request.

6. Cookies and Tracking Technologies

Our website uses cookies, which are small files placed on your device when you visit. They are used to ensure the website works properly, to remember your cookie choices and, with your consent, to measure traffic.

Categories of cookies used

• Necessary cookies: essential to the operation and security of the website, including storing your cookie choices. They cannot be disabled.
• Analytics cookies: they help us understand how the website is used and improve its content. They are placed only with your consent.

Managing your preferences

On your first visit, a banner allows you to accept or refuse non-essential cookies. By default, only necessary cookies are active. You can change your choice at any time from the cookie settings panel available on the website. You can also configure your browser to block or delete cookies, although this may limit certain features.

Technologies and services used on the website

The video shown on the home page is hosted directly on our website and does not use any external video platform.

7. People and Organizations With Access to Your Information

Access to your personal information is limited to members of our team who need it to perform their duties, including responding to your communications. Messages sent through the contact form are stored in the website’s secure administration area and forwarded by email to a shared inbox whose access is limited to three members of our operations team. They are not passed on to any other person or organization.

We also use service providers that process information on our behalf, including for website hosting and maintenance, email, audience measurement and consent management. These providers are bound by contractual confidentiality commitments and may only use the information for the purposes for which we entrust it to them.

We do not sell your personal information and we do not trade it for commercial purposes.

8. Communication of Information Outside Quebec

Some of our service providers are headquartered or operate infrastructure outside Quebec, mainly in the United States and Europe. Your personal information may therefore be stored or processed outside Quebec through the following services: Google Tag Manager, Google Site Kit, Google Analytics 4 and CookieYes.

Before communicating personal information outside Quebec, we conduct a privacy impact assessment, as required by law. This assessment takes into account the sensitivity of the information, the purposes for which it will be used, the protection measures it would benefit from and the legal framework applicable in the jurisdiction concerned.

We only communicate personal information outside Quebec when it will receive adequate protection there and the communication is covered by a written agreement with the provider.

9. Retention Period

We keep your personal information for as long as necessary to fulfil the purposes for which it was collected, unless a legal obligation requires a longer retention period.

• Requests for information and messages sent through the form: up to 2 years after the last exchange, if the request did not lead to a business relationship.
• Browsing data and statistics: according to the retention periods set by our audience measurement tools, up to 14 months.
• Record of your cookie choices: 12 months, after which the banner is shown to you again.

At the end of the retention period, the information is securely destroyed or anonymized.

10. Security Measures

We implement reasonable security measures, appropriate to the sensitivity of the information, to protect it against loss, theft and unauthorized access, communication, copying, use or modification. These measures include:

• encryption of communications on the website using a security certificate (HTTPS);
• limiting access to authorized persons only;
• the use of strong passwords and management of access accounts;
• regular updates of the website’s components and hosting;
• protection of the form against automated and malicious submissions.

Despite these measures, no transmission of data over the Internet can be guaranteed to be completely secure.

11. Your Rights

Subject to the conditions provided by law, you have the following rights regarding your personal information:

• Right of access: to obtain confirmation that we hold information about you and to receive a copy of it.
• Right to correction: to have inaccurate, incomplete or equivocal information corrected.
• Right to withdraw consent: to withdraw at any time the consent you have given us.
• Right to portability: to receive the computerized information you provided to us in a structured, commonly used technological format, or to have it transferred to a third party.
• Right to de-indexing and cessation of dissemination: to request that we stop disseminating personal information or de-index any hyperlink providing access to it, where its dissemination causes you serious injury.
• Right to file a complaint: to file a complaint with our person in charge, then with the Commission d’accès à l’information du Québec if you are not satisfied with the response.

How to exercise your rights

Send your request in writing to the person in charge of the protection of personal information at compliance@heward.com. We may need to verify your identity before acting on your request. We will respond within 30 days of receiving it.

12. Automated Decisions and Profiling

We do not use your personal information to make decisions based exclusively on automated processing, nor for profiling purposes.

13. Confidentiality Incidents

In the event of a confidentiality incident involving personal information, we promptly take reasonable measures to reduce the risks and prevent a similar incident from occurring again. If the incident presents a risk of serious injury, we notify the Commission d’accès à l’information du Québec and the individuals concerned, and we keep a register of incidents as required by law.

14. External Websites

Our website may contain links to websites operated by third parties. We have no control over these websites and are not responsible for their privacy practices. We invite you to read their own policies before providing them with any information.

15. Information Concerning Minors

Our website is not intended for minors and we do not knowingly collect their personal information without the consent of a person having parental authority. If you believe such information has been sent to us, please contact our person in charge so that we can delete it.

16. Changes to This Policy

We may amend this policy to reflect changes in our activities, our tools or the applicable legal framework. The version in force is the one published on this page, and the effective date appears at the top of the document. We invite you to consult it periodically.

17. Contact Us

For any question about this policy or the protection of your personal information:

You may also contact the Commission d’accès à l’information du Québec, the supervisory authority for the protection of personal information, at cai.gouv.qc.ca.