Who this policy applies to
This site is operated by William Néron, a cybersecurity speaker and trainer based in the Quebec City region. This policy covers information collected through williamneron.com and the email exchanges that follow from it.
External sites I link to, such as LinkedIn or Groupe Miracom, have their own privacy policies.
Person in charge of the protection of personal information
I am personally responsible for protecting the personal information collected through this site. For any question, request or complaint, write to me:
- Name
- William Néron
- Role
- Person in charge of the protection of personal information
- reservation [at] williamneron.com
- Response time
- 30 days at most
Information collected
I only collect what is needed to answer your request:
- Booking form: name, organization, email, preferred format and number of participants.
- Law 25 checklist: your email address.
- Emails: your address and the content of the messages you send me.
- Technical data: the site’s host briefly keeps server logs (IP address, browser type, page visited, date and time) to keep the site secure and working.
Form content is not stored on the site: your request is sent to me by email and is not kept on the site’s servers. It is stored nowhere but in my mailbox.
To block bots and abusive sending, the site keeps an encrypted, unreadable fingerprint of your IP address and email for no more than 24 hours. It is used only to limit the number of requests and is then deleted automatically.
Why I use it
- To answer your request and plan a talk, a training session or an audit.
- To send you the checklist you asked for.
- To handle the administrative side of an engagement, such as quotes and invoicing.
- To protect the site against abuse and attacks.
I never sell, rent or trade your information. I never add you to a mailing list without your explicit consent.
Your consent
By sending me a form or an email, you consent to my using your information for the purposes above, and only those. Any other use will require new consent.
You can withdraw your consent at any time by writing to me. I will then stop using your information, subject to my legal obligations, such as keeping invoices.
Cookies and tracking tools
This site uses no cookies, no audience measurement tool and no advertising technology. No feature can identify you, locate you or build a profile of you. That is why no consent banner is shown.
Fonts and images are hosted directly on this site: your browser contacts no third-party service during your visit.
If I ever add such a tool, it will be off by default, turned on only with your consent, and this policy will be updated.
Sharing with third parties and outside Quebec
Your information is only shared with the providers needed to run the site and my email:
- Website hosting: Vercel Inc., whose servers may be located outside Quebec, including in the United States.
- Form delivery: SMTP2GO (New Zealand), which delivers the requests sent through the site’s forms from the info [at] miracom.ca address.
- Email: my email service provider, which stores the messages I receive.
Before sharing information outside Quebec, I assess, as the law requires, whether it will receive adequate protection there, and I choose providers that offer recognized contractual and security safeguards. I may also share information when the law requires it.
How long I keep it
I keep your information only as long as needed for the purposes it was collected for:
- Requests that go no further: up to 12 months after our last exchange.
- Completed engagements: up to 3 years after the engagement ends. Accounting records are kept for 6 years, as tax laws require.
- Server logs: for the short period set by the host.
At the end of these periods, the information is securely destroyed or anonymized.
Security
I apply security measures suited to how sensitive the information is: encrypted connection (HTTPS) across the whole site, multi-factor authentication on my accounts, access limited to me alone, regular updates and protected backups.
Confidentiality incidents
If personal information is accessed, used or disclosed without authorization, I act quickly to reduce the risk of harm. Every incident is recorded in a register.
If an incident presents a risk of serious harm, I notify the Commission d’accès à l’information and the people concerned.
Your rights
At any time, you can:
- access the information I hold about you;
- have it corrected if it is inaccurate, incomplete or ambiguous;
- withdraw your consent to its use;
- ask that it stop being disseminated, or that any hyperlink giving access to it be de-indexed, where the law allows;
- get a copy of your information in a structured, commonly used technological format;
- be informed of any decision based exclusively on automated processing. This site makes none.
To exercise a right, write to the person in charge at reservation [at] williamneron.com. I reply in writing within 30 days. Access is free; reasonable fees may apply only for transcription, reproduction or transmission.
If you are not satisfied with my answer, you can file a complaint with the Commission d’accès à l’information du Québec.
Minors
This site is intended for organizations and adults. I do not knowingly collect information about anyone under 14.
Personal information governance
My practices for handling personal information include:
- a designated person in charge of the protection of personal information (section 2);
- retention and destruction rules (section 8);
- a process for handling access and correction requests and complaints (section 11);
- a register of confidentiality incidents (section 10);
- a privacy impact assessment before any new information system project or any sharing of information outside Quebec.
Changes
I may update this policy to reflect changes in my practices or in the law. The date of the last update appears at the top of the page, and any significant change will be noted there.