Your data, our responsibility
Privacy Policy
This policy explains, in plain terms, what personal information Groupe Miracom collects, why, who it is shared with, how long it is kept and how to exercise your rights. It serves as the governance policy published under Québec's Act respecting the protection of personal information in the private sector (Law 25). The French version prevails in case of discrepancy.
Last updated: October 31, 2026
1. Person in charge of personal information
Groupe Miracom is responsible for the personal information it holds. Our person in charge of the protection of personal information ensures compliance with the law and answers any question, request or complaint:
- Title
- Person in charge of the protection of personal information
- info@groupemiracom.ca
- Phone
- 1 855 339-9543
- Groupe Miracom, 601, avenue du Cénacle, Québec (Québec) G1E 6W4
- Suggested subject
- Personal information
2. Information we collect
We only collect what is needed for the purposes listed in section 3:
- Contact form: name, email, phone, subject and message.
- Cyber risk assessment: name, email, company, phone, your answers to the questionnaire and the risk score calculated from them.
- Clients: contact persons' details, billing information and technical information needed for support (support requests, interventions, remote access).
- Applications: resumes and information sent to cv@miracom.ca.
- Browsing: our host's technical logs (IP address, browser, requested page) are used only for security and to keep the site running. Audience measurement is turned on only with your consent (section 9).
We do not collect sensitive information (health, personal financial data, etc.) through this site. Please do not enter any in free-text fields.
3. Why we use it
- To answer your information or quote requests;
- To send you your assessment result and discuss it with you;
- To provide, manage and bill our services when you are a client;
- To handle support requests and technical interventions;
- To review job applications;
- To keep the site secure and meet our legal obligations.
We never use your information for any other purpose without your consent. We do not sell or rent it, and we never add you to a newsletter without your explicit agreement.
The assessment score is calculated automatically, but no decision about you is made without human involvement. We do no profiling.
4. Consent
When you fill out a form, a collection notice tells you, at that moment, what your information will be used for. By submitting the form, you consent to that use only. You may withdraw your consent at any time by writing to info@groupemiracom.ca, subject to our legal and contractual obligations.
This site is not intended for children under 14 and does not knowingly collect information about them.
5. Who has access
Only staff members who need it to do their job have access, and they are bound by confidentiality.
We also rely on the following providers, bound by contract and allowed to use your information only for our purposes:
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Website hosting and form processing; cookieless audience measurement, only if you accept it | United States |
| SMTP2GO | Delivery of messages sent through our forms to our team | Outside Québec (global cloud infrastructure) |
| OpenFreeMap | Branch map tiles (receives your IP address, no cookies) | Europe |
We may also disclose information when required by law or ordered by a competent authority.
6. Disclosure outside Québec
As shown above, some of our providers process or host information outside Québec. Before entrusting them with any, we assess the privacy factors (sensitivity, purposes, safeguards and applicable legal framework) and ensure adequate protection by contract.
7. Retention and destruction
We keep your information only as long as needed, then securely destroy it or irreversibly anonymize it:
| Information | Retention period |
|---|---|
| Requests received through our forms | 24 months after the last exchange if you do not become a client |
| Client and billing records | Length of the contract, then 7 years (tax obligations) |
| Unsuccessful applications | 12 months |
| Consent cookie | 12 months |
8. Security measures
- Encryption in transit (HTTPS) and at rest;
- Multi-factor authentication on our internal systems;
- Least-privilege access;
- Access logging and continuous monitoring;
- Encrypted backups and an incident management procedure.
We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we promptly notify the Commission d'accès à l'information and the people concerned.
9. Cookies and audience measurement
We use no advertising cookies. Audience measurement is off by default and only turns on with your consent. You can change your mind at any time: . Details are in our Cookie Policy.
10. Your rights
You have the right to:
- access the information we hold about you;
- have it corrected if inaccurate, incomplete or equivocal;
- receive the information you provided in a structured, commonly used technological format (portability);
- request that its dissemination stop or that it be de-indexed;
- withdraw your consent;
- be told where your information came from and who has access to it.
Write to the person in charge (section 1). We may ask you to confirm your identity. We reply in writing within 30 days, free of charge, except for transcribing or reproducing large documents (you will be told in advance).
11. Complaints
Any complaint about how your information is handled may be sent to the person in charge (section 1). It is recorded, handled promptly and answered in writing within 30 days. If you are not satisfied, you may contact the Commission d’accès à l’information du Québec (CAI).
12. Changes
We update this policy when our practices or the law change. The date of the last update appears at the top of the page. Any significant change will be announced on this site.
Questions? Talk to a human.
Our team answers all your questions about protecting your data — and everything else in your IT.