Privacy

01Who this policy applies to

CrenoSync is a booking platform made in Québec for businesses whose activities are booked by the hour. It is in development; the person responsible for it is Charles Héroux.

This policy explains how we handle the personal information we receive on crenosync.ca, mainly through its contact form, under Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.

It does not cover the booking sites of the businesses that use CrenoSync: each one has its own policy (see "The businesses’ sites", below).

02The person in charge

The person in charge of the protection of personal information at CrenoSync is Charles Héroux. They make sure this policy is followed, and answer your questions and requests.

Write to them at privacy@crenosync.ca.

03The information we collect

When you write to us with the contact form, we receive:

• the subject of your message, your name and your email address;
• your phone number, if you give it;
• for a demo request: your business’s name, its type of activity, its city and, if you give it, its number of rooms or play areas;
• your message;
• the page’s language, and the date and time of your consent.

When you visit the site, our host and our application also record technical logs: IP address, page requested, date and time, browser type. They are used for the site’s security and to block automated submissions.

The site uses no audience measurement, advertising or social media tools. Its fonts and images come from our own server: no other company is told about your visit.

04Why we use it

• to answer your question or your demo request;
• if you wish, to discuss a pilot project with you and follow up on it;
• to protect the site from abuse (filters against automated submissions, sending limits).

We use it for no other purpose without asking you first, and we never add you to a mailing list.

05Your consent

By checking the form’s box, you consent to our using your information to answer you. You may withdraw this consent at any time by writing to us: we then erase your information, unless the law requires us to keep it.

06Who can see it

Only CrenoSync staff who need it to answer you see your information, in the platform’s administration, protected by a password and two-step sign-in. Today, that is Charles Héroux.

We do not sell, rent or trade your information. We entrust it only to our host:

• WHC (Web Hosting Canada) hosts the site, its database and our mailboxes, on a server in Québec. It keeps them on our behalf and uses them for no other purpose.

Your message is also sent to us by email, to our mailboxes hosted by WHC, and we read it on our computers and phones.

Your information stays in Québec. We disclose it to no one else unless the law requires it, for example under a court order.

07How long we keep it

• Contact form messages: 24 months after they arrive, then they are erased automatically from our database. Their email copies are deleted within the same period.
• The application’s technical logs: 14 days.
• Your browsing session (see "Cookies"): 2 hours after your last visit.
• Backup copies: a limited time, then they are deleted.

If you ask, we erase your message sooner.

08How we protect it

• Exchanges with the site are encrypted (HTTPS).
• Your name, email address, phone number and message, and your business’s name and city, are encrypted in our database.
• The platform’s administration requires a password and two-step sign-in, and its important actions are logged.
• The form is protected against automated submissions, and the number of submissions is limited.

No measure offers absolute security. If a confidentiality incident occurred, we would record it in our register and, if it presents a risk of serious injury, we would notify you and the Commission d’accès à l’information, as the law requires.

09Cookies

The site sets two strictly necessary cookies: crenosync_session, which keeps your session while you fill in the form, and XSRF-TOKEN, which protects the form from forged submissions. They expire 2 hours after your last visit.

We use no audience measurement, advertising or tracking cookies. If your browser refuses cookies, the contact form cannot work.

10Your rights

At any time, you may:

• find out whether we hold information about you, and get a copy of it;
• have it corrected if it is inaccurate, incomplete or equivocal;
• have it erased, or withdraw your consent;
• receive it in a structured, commonly used technological format;
• file a complaint with Québec’s Commission d’accès à l’information (www.cai.gouv.qc.ca).

Write to privacy@crenosync.ca. To protect your information, we may ask you to confirm your identity, for example by writing from the email address given in the form. We answer within 30 days.

11The businesses’ sites

The businesses that use CrenoSync each have their own booking site, for example name.crenosync.ca. Each business is responsible for its customers’ information and publishes its own privacy policy on its site. CrenoSync handles that information on its behalf, as a service provider, and uses it for no other purpose.

For a question about a booking, or to exercise your rights about it, contact the business first: we will help it answer you.

12Minors

This site is meant for businesses. It is not aimed at young people under 14, and we do not knowingly collect their information.

13Changes

We may change this policy, for example when CrenoSync welcomes its first pilot businesses. The date it came into force, at the top of the page, shows the current version. An important change will be announced on this page before it applies.