Privacy Policy

1. Privacy Officer

The person responsible for the protection of personal information at Supernova Group is:

2. Information We Collect

We collect only the information you voluntarily provide to us:

• ✓Full name — to personalize communication
• ✓Email address — to respond to your inquiry
• ✓Message — the content of your request or question

We do not collect sensitive information (SIN, health data, banking information, biometric data) through this website.

3. Purpose of Collection

Your information is collected solely for the following purposes:

• →Responding to your information or service inquiry
• →Assessing the needs of a potential project
• →Following up on a professional exchange

We do not sell, trade, or rent your personal information to third parties. Your data is not used for advertising, profiling, or behavioral analysis purposes.

4. Consent

By submitting the contact form, you explicitly consent to the collection and use of your information for the purposes described above. This consent is freely given, informed, and provided at a specific point in time. You may withdraw it at any time by contacting us at the address in section 1 — processing will cease within 30 days.

5. Retention

Your information is retained only as long as necessary for the purposes for which it was collected — typically the duration of a project or business relationship — plus a maximum administrative retention period of 24 months after the end of the relationship. At the end of this period, it is securely destroyed.

6. Security Measures

• ✓Encrypted transmission (TLS/SSL) of form data
• ✓Secure professional email (Zoho Mail, SPF/DKIM/DMARC protocols)
• ✓Access limited on a need-to-know basis
• ✓Infrastructure hosted on Vercel (North American servers, SOC 2 compliant)

7. Third-Party Disclosure

Your information is not sold or shared with third parties for commercial purposes. It may be shared only in the following cases:

• →Technical service providers (Vercel, Zoho) — strictly as required for the service, bound by their own privacy policies
• →Legal obligation — if required by law or a competent authority

8. Cookies & Tracking Technologies

This website currently uses no tracking, advertising, or behavioral analytics cookies. No third-party analytics services (Google Analytics, Meta Pixel, etc.) are active. If this changes, this policy will be updated and a consent mechanism will be implemented before any tracking tool is activated.

9. Your Rights

Under Law 25 and PIPEDA, you have the following rights regarding your personal information:

• Access— Obtain confirmation that we hold information about you and receive a copy.
• Rectification— Request correction of inaccurate or incomplete information.
• Deletion— Request erasure of your information, subject to legal retention obligations.
• Portability— Receive your information in a structured, commonly used technological format.
• Withdrawal— Withdraw your consent to processing at any time.
• Complaint— File a complaint with a competent authority.

To exercise any of these rights, contact our privacy officer at direction@groupesupernova.ca. We will acknowledge receipt within 5 business days and process your request within 30 days.

10. Regulatory Authorities

11. Privacy Incidents

In the event of a privacy incident posing a risk of serious harm, we are committed to notifying the Commission d'accès à l'information du Québec and the Office of the Privacy Commissioner of Canada within the legally prescribed timeframes, as well as notifying affected individuals without undue delay.

12. Changes to This Policy

We reserve the right to modify this policy at any time. The current version is always available at supernovagroup.ca/en/confidentialite. In the event of a material change, notice will be posted on the website and, where possible, sent to affected individuals.