PRIVACY POLICY AND PROTECTION OF PERSONAL INFORMATION

1. OBJECTIVES OF THE PRIVACY POLICY / SCOPE AND APPLICATION

Respect for privacy and the protection of personal information are essential for us, which is why, through this Policy, we intend to protect it in accordance with applicable laws.

To ensure this protection, TRÉVI VALLEYFIELD undertakes to collect, process and share information identifying an individual only when the individual has consented, unless permitted or required by law, in which case your consent will not be necessary.

The purpose of this Policy is to inform users of the reasons and the way in which TRÉVI VALLEYFIELD, or any person acting on its behalf, will collect and use their personal information. It is written in clear language to ensure informed consent from users.

For the purposes of this Policy, “personal information” means any information about an identifiable person or enabling the identification of a person. Where possible, we will anonymize, pseudonymize and/or aggregate such information so that it no longer identifies an individual.

2. REASONS WHY WE COLLECT YOUR INFORMATION / EFFECTIVE DATE

Personal information collected and used is notably for the following purposes:

• To allow you to access and properly use the service;
• To process your requests, including inquiries and reservations;
• To allow you to apply for a posted job;
• To allow you to subscribe to our newsletter or an activity;
• To process issues reported to us by you, including troubleshooting, support, optimization, security breach review or data restoration;
• To evaluate, optimize and improve website content and features;
• To communicate with you regarding a request you made or your experience with our services or website;
• To offer you advertising content, notably through retargeting (“remarketing”), and to improve such content so it is more relevant to you;
• To track your use of website features.

We only use personal information for the purposes for which it was collected.

3. METHODS OF OBTAINING CONSENT / HOW INFORMATION IS COLLECTED

We are committed to obtaining consent before collecting personal information. Consent may be explicit or implicit and may be given directly by the individual or by an authorized representative.

We favour explicit consent, verbally, electronically or in writing. However, implicit consent may be reasonably inferred from a person’s action or inaction. For example, providing a name and address to receive a publication or a name and phone number to receive a response is considered implicit consent to the collection of information containing personal data. To determine the appropriate form of consent, we consider the sensitivity of information, the purpose, and the reasonable expectations of a person in a similar situation.

When you access this service, your computer and our server automatically exchange data. This exchange is necessary for the server to transmit a file compatible with your device. The exchanged data includes:

• Identification of your Internet service provider;
• Your IP address (numerical address identifying a device connected to the Internet, e.g. 123.45.67.890);
• Browser type (Chrome, Safari, Firefox, Explorer) and operating system (Windows, Mac OS);
• Pages visited;
• Date and time of visits;
• Referring site address, if you accessed this website from another.

Most automatically transmitted information does not identify you personally. It is collected due to technical requirements of Internet browsing. These data are retained for statistical purposes: number of visits, most visited pages, visitor technology, referrer sites, and visitor country of origin.

Use of cookies (browser cookies)

Cookies are used to facilitate navigation. These cookies do not collect personal information. You may configure your browser to block cookies; however, this may disable certain site features.

IF YOU USE A PUBLIC OR SHARED COMPUTER, ENSURE YOU CLEAR BROWSER HISTORY BEFORE ENDING YOUR SESSION.

Use of Google Analytics

We use Google Analytics to measure website traffic. With cookies, Google Analytics collects non-personal, aggregated statistical data to analyze visitor behaviour.

Collected information is stored on servers including those in the United States. Google may share this data if legally required or when acting as processor on our behalf.

Collected information includes pages viewed, dates/times of visits, links clicked, system OS and language, ISP name, geographic region, and anonymized IP addresses.

Data is used only to produce reports, enabling TRÉVI VALLEYFIELD to improve its online services. Google does not link this data to other identifiable sources.

You may disable Google Analytics tracking by installing the browser opt-out tool.

Personal and confidential information

TRÉVI VALLEYFIELD may also collect voluntarily provided personal information: full name, mailing address, email, phone number—when applying for employment, registering for activities or newsletter, or reserving. These systems may involve transfers between service partners (hosting, development, marketing). Partners ensure confidentiality according to law.

By using this service, you consent to exchange of:

• Questionnaire responses (name, phone, email, etc.);
• Marketing preferences (such as newsletter subscription).

If we intend to use information for new purposes, we will request new consent.

Information may be shared without consent when required by law.

4. PURPOSES OF DATA COLLECTION / USE OF COLLECTED INFORMATION

Information is collected in accordance with this Policy.

Personal information may be used to:

• Manage our relationship with you;
• Personalize products/services;
• Maintain reservation and activity history;
• Prevent fraud or manage risk;
• Provide support and after-sales service.

Marketing

We may send marketing communications if you have purchased or shown intention to purchase, unless you opt out. You can unsubscribe at any time via the link in email communications.

Unsubscribing from marketing does not affect transactional communications (e.g., reservation confirmations).

We may process data to:

• Provide and fulfill services
• Improve services and features
• Develop new services and AI-based tools
• Personalize content and recommendations
• Measure product/service performance
• Protect user privacy and verify identity
• Fulfill legal obligations

5. PURPOSES OF DATA PROCESSING / RETENTION OF INFORMATION

TRÉVI VALLEYFIELD collects information lawfully and only for disclosed purposes. Personal data is retained for 2 years to:

• Provide service access
• Respond to requests
• Fulfill stated objectives
• Deliver services
• Meet legal obligations
• Resolve disputes
• Enforce agreements

After this period, data is anonymized or securely destroyed.

Examples of personal data collected:

• Name & contact details
• Identity credentials (passwords, login details)
• Demographic data
• Payment information
• Subscription information
• Audio/video security data
• Interaction and usage data
• Browsing history, search, account activity
• Preferences, interests, behaviour analytics
• Google Analytics and similar metrics

6. PERSONAL INFORMATION COLLECTED / DATA SECURITY

We use collected data to operate and enhance our services. Personal information is stored on protected Canadian servers with high-security standards. Access is restricted to authorized personnel only.

Despite security measures, no system is perfect and data transmission carries risk. TRÉVI VALLEYFIELD is not liable for unauthorized disclosure unless negligence has occurred.

In some cases, information may be processed by third parties located outside Canada, bound by confidentiality safeguards.

Data may be used for:

• Product improvement
• Personalization
• New service development
• Support and troubleshooting
• Fraud and security monitoring
• Surveys and promotional content
• Advertising and remarketing
• Transaction processing
• Operational reporting
• Rights and property protection
• Regulatory compliance
• Research purposes

7. PROCESSING METHODS USED / COMMUNICATION OF INFORMATION

TRÉVI VALLEYFIELD treats information in accordance with industry standards. However, online transmission poses inherent risk and is at the user’s discretion.

Service providers

External companies may assist with data processing, reservations, customer service, marketing, etc., with limited, purpose-bound access to information.

Third-party applications

Some website tools (registration forms, newsletters) operate through third-party software. Data received varies per tool.

Hyperlinks and external sites

The site may contain outgoing links. Once you leave our site, this Policy no longer applies.

8. METHODS, CONTROL OF INFORMATION / COMPLIANCE WITH LAW

We ensure personal information is accurate and relevant.

You may request access or corrections to your data. Identification verification may be required.

Access may be denied if it exposes another individual’s personal information or violates legal restrictions.

We may disclose information to authorities when required by law or to:

• Comply with legal demands
• Enforce service terms
• Protect rights, property and safety
• Prevent fraud or illegal activity

9. REASONS FOR SHARING PERSONAL INFORMATION WITH THIRD PARTIES / COMMERCIAL TRANSFER

We do not sell or rent personal information.

We may share data only:

• With your consent
• For secure cloud storage
• With trusted processors acting on our behalf
• For legal compliance

In a commercial transaction (e.g., merger, acquisition, sale), personal information may be transferred with confidentiality expectations.

10. USE OF COOKIES AND SIMILAR TECHNOLOGIES / YOUR RIGHTS AND CHOICES

TRÉVI VALLEYFIELD may use cookies, web beacons, tracking pixels, log files, and related technologies to collect user session information.

Cookies may store navigation history, cart information, and user session identifiers.

Disabling cookies may restrict site functionality.

External links and third-party services have separate privacy policies.

You may refuse to provide personal information, but certain site features may no longer function.

Consult, modify, or delete your information

You may contact us to request access, correction, or deletion.

11. RETENTION OF PERSONAL INFORMATION

TRÉVI VALLEYFIELD retains data for various periods based on purpose and legal requirements.

Data may be stored internationally by authorized third-party processors.

Once expired, information is securely deleted or anonymized.

We reserve the right to update this Policy at any time. The most recent version will always be available online.

12. PERSONAL INFORMATION PROTECTION OFFICER

Policy modification

Any reduction of user rights requires explicit consent. Significant changes will be publicly announced and archived versions remain accessible.

Compliance Officer:

FRANCE BOUCHARD

For questions, comments, or complaints about this Privacy Policy, you may contact the person responsible:

FRANCE BOUCHARD

TRÉVI VALLEYFIELD

565 BOUL MONSEIGNEUR-LANGLOIS

Phone: 450-373-2210

Fax: 450-373-7114

Email: FBOUCHARD@TREVIVALLEYFIELD.COM