Data Protection Policy

Effective Date: April 30, 2026

At QASEL, we are committed to maintaining the highest standards of privacy and data security. This Data Protection Policy outlines our practices regarding the collection, use, and safeguarding of personal information in strict accordance with Canadian federal and provincial privacy laws.

1. Regulatory Compliance

QASEL operates in full compliance with the following Canadian legal frameworks:

  • PIPEDA: The Personal Information Protection and Electronic Documents Act (Federal).

  • Law 25: The Act respecting the protection of personal information in the private sector (Quebec).

  • CASL: Canada’s Anti-Spam Legislation.

2. Principles of Data Collection

We adhere to the ten fair information principles as defined by Canadian privacy standards:

  • Accountability: We have designated a Privacy Officer to oversee our compliance with this policy.

  • Identifying Purposes: The purposes for which personal information is collected will be identified at or before the time of collection.

  • Consent: Knowledge and consent are required for the collection, use, or disclosure of personal information, except where required or permitted by law.

  • Limiting Collection: Collection is limited to that which is necessary for the purposes identified by QASEL.

3. Data Security & Safeguards

To ensure the integrity and confidentiality of the information we process, QASEL employs a “Privacy by Design” approach. Our technical safeguards include:

  • Encryption in Transit: All data transmitted to and from our services is forced through SSL/TLS encryption to prevent unauthorized interception.

  • Encryption at Rest: Sensitive data stored in our databases is protected using industry-standard encryption protocols.

  • Access Control: Access to personal information is strictly restricted to authorized employees and contractors who require the data to perform their specific duties.

4. Quebec-Specific Provisions (Law 25)

For our users and clients in Quebec, we provide enhanced protections including:

  • Default Privacy: All privacy settings are set to the highest level of restriction by default.

  • Privacy Impact Assessments: We conduct rigorous assessments for any project involving the processing of personal information.

  • Right to Portability: Upon request, users may obtain their personal information in a structured, commonly used technological format.

5. Your Rights as a Data Subject

Under Canadian law, you retain significant control over your personal information. You have the right to:

  • Access: Request a copy of the personal information we hold about you.

  • Correction: Request the correction of inaccurate or incomplete data.

  • Withdrawal of Consent: Withdraw your consent for data processing at any time, subject to legal or contractual restrictions.

  • Inquiry: File a challenge concerning our compliance with these principles with our Privacy Officer.

6. International Data Transfers

While QASEL is a Canadian organization, we may utilize service providers (such as cloud hosting or SMTP services) that process data in other jurisdictions. In such cases, we ensure that contractual agreements are in place to provide a level of protection comparable to that which is required under Canadian law.

7. Contact Us

If you have any questions about this policy or wish to exercise your rights regarding your personal information, please contact us at info@qasel.org.