Privacy Policy

1. Policy Objective

This Privacy Policy (the “Policy”) is designed to define the principles and rules governing the protection of personal information collected by our company in the course of its operations.

It describes how we collect, use, disclose and protect your personal information, as well as the rights you hold. This Policy applies to our clients, partners, suppliers and any other individual whose personal information we collect in the course of our operations.

2. Personal Information

Personal information is any information that concerns an individual and allows them to be identified.

3. Accountability

The Privacy Officer is designated to oversee compliance with and enforcement of this Policy within the organization.

The Privacy Officer coordinates security measures, manages privacy incidents, and responds to requests for access or correction of personal information made by affected individuals.

Any question, concern or complaint regarding the protection of personal information should be directed to the Privacy Officer:

Email address: rpr@groupepmi.ca

4. Determining the Purposes of Collection

We identify the purposes for which personal information is collected no later than at the time of collection. These purposes include, but are not limited to:

• Provide the requested services and maintain our business relationships.

• Manage employment and recruitment records.

• Ensure legal and regulatory compliance, including occupational health and safety requirements.

• Prevent fraud and other unlawful activities.

5. Consent

We collect, use and disclose your personal information with your consent, except as required or permitted by law. Your consent must be clear, voluntary and informed.

We commit to not using your personal information for purposes other than those for which it was collected, unless we have obtained your prior consent or are authorized to do so by law.

You may withdraw your consent at any time, subject to applicable legal or contractual restrictions and reasonable notice.

6. Limiting Collection

We collect only the personal information that is necessary for the identified purposes. We prefer to collect information directly from the individual concerned, unless consent has been given or collection from other sources is authorized by law.

7. Limiting Use, Disclosure and Retention

We do not use or disclose personal information for purposes other than those for which it was collected, unless the individual consents or as required by law.

We retain personal information only as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements.

Once the purposes are fulfilled and the applicable legal retention periods have expired, we proceed with the secure destruction or anonymization of personal information.

8. Accuracy

We take reasonable steps to ensure that personal information in our possession is accurate, complete and up to date at the time of use. Individuals are responsible for notifying us of any changes to their personal information.

9. Security Safeguards

We protect personal information using physical, organizational and technological security measures appropriate to the sensitivity of the information. These measures aim to prevent loss, theft, unauthorized access, disclosure, copying, use or modification.

Our employees and partners are made aware of the importance of maintaining the confidentiality of personal information and are required to comply with our security policies.

10. Privacy Incident Management

In the event of a privacy incident (unauthorized access, use or disclosure of personal information), we immediately take the necessary steps to reduce the risk of harm and implement all actions required by law, including notifying the relevant authorities and affected individuals as applicable.

11. Openness

We make specific information about our policies and practices relating to the management of personal information available upon request. We foster open communication to allow everyone to understand how their personal information is handled.

12. Access to Personal Information

Any individual has the right to request access to the personal information we hold about them, obtain a copy of it, or request its correction if it is inaccurate, incomplete or misleading.

Requests for access or correction must be submitted in writing to the Privacy Officer:

rpr@groupepmi.ca

13. Right to File a Complaint Regarding Non-Compliance

Any individual may file a complaint regarding non-compliance with the principles set out in this Policy by contacting the Privacy Officer. We commit to investigating all complaints received and taking appropriate steps to resolve any non-compliant situation.