Your data, our responsibility

Privacy Policy

This policy explains, in plain terms, what personal information Groupe Miracom collects, why, who it is shared with, how long it is kept and how to exercise your rights. It serves as the governance policy published under Québec's Act respecting the protection of personal information in the private sector (Law 25). The French version prevails in case of discrepancy.

Last updated: October 31, 2026

1. Person in charge of personal information

Groupe Miracom is responsible for the personal information it holds. Our person in charge of the protection of personal information ensures compliance with the law and answers any question, request or complaint:

Title
Person in charge of the protection of personal information
Email
info@groupemiracom.ca
Phone
1 855 339-9543
Mail
Groupe Miracom, 601, avenue du Cénacle, Québec (Québec) G1E 6W4
Suggested subject
Personal information

2. Information we collect

We only collect what is needed for the purposes listed in section 3:

  • Contact form: name, email, phone, subject and message.
  • Cyber risk assessment: name, email, company, phone, your answers to the questionnaire and the risk score calculated from them.
  • Clients: contact persons' details, billing information and technical information needed for support (support requests, interventions, remote access).
  • Applications: resumes and information sent to cv@miracom.ca.
  • Browsing: our host's technical logs (IP address, browser, requested page) are used only for security and to keep the site running. Audience measurement is turned on only with your consent (section 9).

We do not collect sensitive information (health, personal financial data, etc.) through this site. Please do not enter any in free-text fields.

3. Why we use it

  • To answer your information or quote requests;
  • To send you your assessment result and discuss it with you;
  • To provide, manage and bill our services when you are a client;
  • To handle support requests and technical interventions;
  • To review job applications;
  • To keep the site secure and meet our legal obligations.

We never use your information for any other purpose without your consent. We do not sell or rent it, and we never add you to a newsletter without your explicit agreement.

The assessment score is calculated automatically, but no decision about you is made without human involvement. We do no profiling.

4. Consent

When you fill out a form, a collection notice tells you, at that moment, what your information will be used for. By submitting the form, you consent to that use only. You may withdraw your consent at any time by writing to info@groupemiracom.ca, subject to our legal and contractual obligations.

This site is not intended for children under 14 and does not knowingly collect information about them.

5. Who has access

Only staff members who need it to do their job have access, and they are bound by confidentiality.

We also rely on the following providers, bound by contract and allowed to use your information only for our purposes:

ProviderRoleLocation
Vercel Inc.Website hosting and form processing; cookieless audience measurement, only if you accept itUnited States
SMTP2GODelivery of messages sent through our forms to our teamOutside Québec (global cloud infrastructure)
OpenFreeMapBranch map tiles (receives your IP address, no cookies)Europe

We may also disclose information when required by law or ordered by a competent authority.

6. Disclosure outside Québec

As shown above, some of our providers process or host information outside Québec. Before entrusting them with any, we assess the privacy factors (sensitivity, purposes, safeguards and applicable legal framework) and ensure adequate protection by contract.

7. Retention and destruction

We keep your information only as long as needed, then securely destroy it or irreversibly anonymize it:

InformationRetention period
Requests received through our forms24 months after the last exchange if you do not become a client
Client and billing recordsLength of the contract, then 7 years (tax obligations)
Unsuccessful applications12 months
Consent cookie12 months

8. Security measures

  • Encryption in transit (HTTPS) and at rest;
  • Multi-factor authentication on our internal systems;
  • Least-privilege access;
  • Access logging and continuous monitoring;
  • Encrypted backups and an incident management procedure.

We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we promptly notify the Commission d'accès à l'information and the people concerned.

9. Cookies and audience measurement

We use no advertising cookies. Audience measurement is off by default and only turns on with your consent. You can change your mind at any time: . Details are in our Cookie Policy.

10. Your rights

You have the right to:

  • access the information we hold about you;
  • have it corrected if inaccurate, incomplete or equivocal;
  • receive the information you provided in a structured, commonly used technological format (portability);
  • request that its dissemination stop or that it be de-indexed;
  • withdraw your consent;
  • be told where your information came from and who has access to it.

Write to the person in charge (section 1). We may ask you to confirm your identity. We reply in writing within 30 days, free of charge, except for transcribing or reproducing large documents (you will be told in advance).

11. Complaints

Any complaint about how your information is handled may be sent to the person in charge (section 1). It is recorded, handled promptly and answered in writing within 30 days. If you are not satisfied, you may contact the Commission d’accès à l’information du Québec (CAI).

12. Changes

We update this policy when our practices or the law change. The date of the last update appears at the top of the page. Any significant change will be announced on this site.

Questions? Talk to a human.

Our team answers all your questions about protecting your data — and everything else in your IT.