Privacy Policy

1. Who we are

Opex House ("we", "us", "our"). This policy explains how we collect, use, disclose and protect your personal information, in accordance with Quebec's Law 25 (An Act to modernize legislative provisions as regards the protection of personal information) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Person in charge of personal information

Pursuant to section 3.1 of Law 25:

Najm Jaouadi
Person in charge of the protection of personal information
Email: najm.jaouadi@opexhouse.ca

3. Information we collect

When you submit our contact form, we collect: name, work email, phone number, organization (optional), and a description of your situation. We do not collect sensitive information (health, financial, biometric data, etc.).

4. Purposes

• Respond to your inquiry and contact you back;
• Assess the fit between your need and our services;
• Send you a recommendation or a commercial proposal;
• Comply with our legal and contractual obligations.

We do not use your information for marketing without your separate consent.

5. Consent

By voluntarily submitting the form after checking the consent box, you provide free and informed consent to the collection and use of your information for the stated purposes. You may withdraw your consent at any time by writing to the person in charge above.

6. Retention

We retain your information as long as necessary for the stated purposes, and for a maximum of 36 months after the last exchange, after which it is securely destroyed or anonymized.

7. Third parties and hosting

We do not sell or rent your information. We rely on the following processors, bound by confidentiality and security agreements:

• Lovable Cloud / Supabase — database and application infrastructure hosting. Data may be processed outside Quebec (Canada / United States). We have assessed that these providers offer protection equivalent to that required by Law 25.
• Cloudflare — content delivery and site security.

8. Security

We apply reasonable physical, administrative and technical safeguards: TLS/HTTPS in transit, encryption at rest, role-based access control, access logging, least-privilege principles, and strong password policies.

9. Your rights

• Access the information we hold about you;
• Have it corrected if inaccurate, incomplete or ambiguous;
• Request its deletion (right to erasure / de-indexing);
• Withdraw consent at any time;
• Receive your information in a structured, commonly used technological format (portability);
• Be informed of any fully automated decision that concerns you (if applicable).

To exercise these rights, write to najm.jaouadi@opexhouse.ca. We will reply within 30 days.

10. Cookies

Our site only uses cookies strictly necessary for its operation (session, preferences). We do not use advertising cookies or third-party trackers such as Google Analytics or Meta Pixel.

11. Privacy incidents

In the event of a privacy incident presenting a risk of serious harm, we will notify the Commission d'accès à l'information du Québec (CAI) and the affected individuals without delay, as required by law.

12. Complaints

If you believe your rights have not been respected, you may file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

13. Changes

We may update this policy. The version in force is always the one published on this page, with the last-updated date above.