top of page

CEPASS collects, uses, and discloses personal information with your knowledge and consent, except where otherwise permitted or required by law.

 

Consent may be obtained:

 

  • Verbally;

  • In writing;

  • Electronically;

  • Through the voluntary submission of information;

  • Through registration for activities; and

  • Through participation in services provided by CEPASS.

 

Where required by law, consent will be explicit, informed, and specific to the purpose for which information is collected.

You may withdraw your consent at any time, subject to legal, regulatory, contractual, or operational requirements.

Requests to withdraw consent may be directed to:

 

info@cepass.ca

 

Withdrawal of consent may limit our ability to provide certain services, communications, or requested information.

7. Consent

We collect and use personal information only for legitimate business purposes, including:

 

  • Responding to inquiries and requests;

  • Providing consulting and advisory services;

  • Managing client and business relationships;

  • Delivering webinars, events, and training activities;

  • Providing requested resources, publications, and information;

  • Improving our website and services;

  • Understanding user interests and engagement;

  • Administering newsletters and communications;

  • Maintaining business records;

  • Conducting business development activities;

  • Complying with legal and regulatory obligations;

  • Protecting our rights, interests, systems, and operations; and

  • Preventing fraud, misuse, and unauthorized activities.

 

Information submitted through our website should be limited to information reasonably necessary for inquiries, communications, event participation, resource downloads, or service delivery.

 

Users should avoid submitting confidential, proprietary, or sensitive information unless specifically requested by CEPASS.

 

Commercial electronic communications are managed in accordance with applicable Canadian anti-spam legislation. Recipients may unsubscribe from such communications at any time using the unsubscribe mechanism included in the communication or by contacting us directly.

6. Why We Collect Personal Information

We may collect information in the following ways.

 

Directly From You, when you:

  • Contact us;

  • Submit a form;

  • Register for an event or webinar;

  • Subscribe to communications;

  • Download resources;

  • Request information;

  • Participate in surveys;

  • Schedule meetings; or

  • Engage our consulting services.

  • Automatically

 

When you visit our website through:

  • Cookies;

  • Analytics tools;

  • Log files;

  • Website performance monitoring technologies; and

  • Security monitoring technologies.

  • From Other Sources

 

Where permitted by law, we may receive information from:

  • Business partners;

  • Professional networking platforms;

  • Publicly available sources;

  • Event organizers;

  • Marketing and communication service providers; and

  • Referral sources.

5. How We Collect Information

Depending on your interaction with CEPASS, we may collect personal information including:

​

Contact Information

  • First and last name;

  • Business name;

  • Job title;

  • Email address;

  • Telephone number;

  • Mailing address; and

  • Country or region.

​

Professional Information

  • Employer information;

  • Industry sector;

  • Professional interests; and

  • Information relating to business projects, inquiries, or service requirements.

​

Communication Information

  • Information submitted through contact forms;

  • Email correspondence;

  • Webinar registrations;

  • Event registrations;

  • Survey responses;

  • Meeting requests; and

  • Communication preferences.

​

User-Provided Operational Information

Depending on the services, tools, resources, platforms, or activities being used, we may collect information voluntarily submitted through online assessments, questionnaires, registration tools, client portals, secure collaboration environments, document submission platforms, file-sharing systems, or similar digital services provided by CEPASS.

Such information may include:

  • Business or organizational information;

  • Project-related information;

  • Compliance-related information;

  • Operational information;

  • Uploaded documents;

  • Responses to questionnaires, assessments, or surveys; and

  • Other information voluntarily provided in connection with a requested service, activity, engagement, or use of a CEPASS platform or tool.

​

Technical Information

When you visit our website, we may automatically collect information such as:

  • IP address;

  • Browser type;

  • Operating system;

  • Device information;

  • Date and time of visits;

  • Pages viewed;

  • Referral sources; and

  • Website activity data.

​

Cookies and Analytics Information

Where applicable, we may collect information through:

  • Cookies;

  • Website analytics tools;

  • User experience monitoring tools;

  • Website performance tools; and

  • Session analysis technologies.

​

Please refer to Section 8 for additional information regarding cookies and similar technologies.

4. Personal Information We Collect

In accordance with applicable privacy legislation, responsibility for the protection of personal information rests with the President of CEPASS Solutions Inc.

 

Questions, requests, complaints, or concerns regarding privacy may be directed to:

 

Privacy Officer

President

CEPASS Solutions Inc.

Email: info@cepass.ca

Website: https://www.cepass.ca

3. Privacy Officer

This Privacy Policy applies to personal information collected through:

 

  • The CEPASS website (https://www.cepass.ca);

  • Contact forms;

  • Email communications;

  •  Newsletter subscriptions;

  •  Webinar registrations;

  •  Event registrations;

  •  Resource downloads;

  •  Business inquiries;

  •  Consulting engagements;

  •  Surveys;

  •  Online assessment tools;

  •  Client portals or secure collaboration environments;

  •  Document submission or file-sharing platforms;

  •  Social media interactions; and

  •  Any other communications, activities, digital tools, applications, platforms or services provided by CEPASS.

 

This policy applies whether information is collected electronically, verbally, or in writing.

2. Scope

CEPASS Solutions Inc. ("CEPASS", "Solutions CEPASS", "we", "our", or "us"), is committed to protecting the privacy and security of the personal information entrusted to us.

 

This Privacy Policy explains how we collect, use, disclose, store, protect, and retain personal information when individuals interact with CEPASS through our website, communications, events, services, publications, and related activities.

 

CEPASS provides professional business consulting and advisory services related to product compliance, regulatory requirements, operational excellence, management systems, business processes, sustainability, and related organizational improvement initiatives.

 

We are committed to complying with applicable Canadian privacy legislation, including:

 

  • The Personal Information Protection and Electronic Documents Act (PIPEDA);

  • Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25); and

  • Other applicable federal and provincial privacy laws.

 

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.

1. Introduction

Our website may use cookies and similar technologies to improve functionality, performance, security, and user experience.

​

These technologies may include:

 

Essential Cookies

Required for the proper operation, functionality, and security of the website.

​

Performance and Analytics Cookies

Used to understand how visitors interact with our website and to help improve website performance and content.

​

Examples may include, but are not limited to:

  • Google Analytics;

  • Microsoft Clarity;

  • Google Tag Manager; and

  • Similar analytics, performance-monitoring, and user-experience tools.

​

Preference Cookies

Used to remember user preferences and settings.

 

Marketing Cookies

Where implemented, marketing cookies may help us better understand engagement with our content, publications, and communications.

 

Where required by law, optional cookies and tracking technologies will only be activated after obtaining the appropriate consent.

 

Certain technologies used on our website may collect information relating to user interactions, preferences, device characteristics, browsing behavior, or website usage patterns for analytics, security, performance optimization, communication, service improvement, or similar purposes. Where required by applicable law, users will be informed of such technologies and provided with appropriate choices regarding their activation and use.

 

CEPASS seeks to apply privacy-protective settings by default where technologies permit and where required by applicable law.

 

Users may manage cookie preferences through browser settings and any cookie preference tools made available on our website.

8. Cookies and Similar Technologies

CEPASS does not sell personal information.

 

We may disclose personal information only when reasonably necessary, including to:

 

  • Website hosting providers;

  • Cloud service providers;

  • Content delivery and security providers;

  • Email and communication platforms;

  • Analytics providers;

  • Event and webinar platforms;

  • Customer relationship management (CRM) systems;

  • Professional advisors;

  • Information technology service providers; and

  • Government authorities where required by law.

 

Certain service providers may support website hosting, website security, content delivery, communications, analytics, customer relationship management, event management, or other business operations necessary for the functioning of CEPASS and its services.

9. Disclosure of Personal Information

Some service providers used by CEPASS may process or store information outside Quebec or outside Canada.

 

As a result, personal information may become subject to the laws and lawful access requirements of foreign jurisdictions.

 

Where personal information is transferred outside Quebec or Canada, CEPASS will take reasonable measures to ensure that an appropriate level of protection is maintained consistent with applicable law.

 

Where required by applicable law, CEPASS may assess the privacy-related risks associated with such transfers, including the sensitivity of the information, the purpose for which it is used, the safeguards implemented by the receiving party, and the legal framework applicable in the destination jurisdiction.

 

CEPASS may also require contractual, organizational, or technical safeguards designed to provide an appropriate level of protection for transferred information.

10. International Transfers

CEPASS maintains administrative, technical, and physical safeguards appropriate to the sensitivity of the information we collect.

 

These measures may include:

  • Access controls;

  • Password protection;

  • Encryption where appropriate;

  • Secure hosting environments;

  • Network security measures;

  • Employee confidentiality obligations;

  • Limited access based on business need;

  • Security monitoring; and

  • Periodic review of information management practices.

 

While we take reasonable measures to protect personal information, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

11. Security Safeguards

CEPASS retains personal information only for as long as necessary to:

  • Fulfill the purposes for which it was collected;

  • Deliver services and communications;

  • Comply with legal and regulatory obligations;

  • Resolve disputes;

  • Protect legal interests; and

  • Maintain appropriate business records.

 

When personal information is no longer required, it will be securely deleted, destroyed, anonymized, or otherwise disposed of in accordance with applicable laws and reasonable business practices.

12. Retention of Information

Subject to applicable laws, you may have the right to:

  • Access personal information held about you;

  • Request correction of inaccurate or incomplete information;

  • Request deletion of information where permitted by law;

  • Withdraw consent;

  • Request information about how your information is used;

  • Request information regarding disclosure of your information;

  • Request a copy of certain personal information in a structured and commonly used format where required by applicable law;

  • Request withdrawal of consent and, where applicable, deletion or de-indexing of personal information in accordance with applicable laws; and

  • Submit questions, concerns, or complaints regarding our privacy practices.

 

To exercise these rights, please contact:

 

info@cepass.ca

 

Reasonable proof of identity may be required before responding to a request.

CEPASS will respond within the timeframes required by applicable legislation.

13. Your Privacy Rights

If CEPASS becomes aware of a confidentiality incident involving personal information, we will:

  • Investigate the incident;

  • Take reasonable steps to mitigate risks;

  • Implement corrective measures where appropriate;

  • Maintain documentation as required by law; and

  • Notify affected individuals and regulatory authorities where required.

 

CEPASS maintains procedures designed to respond to confidentiality incidents and protect affected individuals.

14. Confidentiality Incidents

Our website may contain links to third-party websites, services, or platforms.

CEPASS is not responsible for the privacy practices, security measures, or content of third-party websites.

Users are encouraged to review the privacy policies of external websites they choose to visit.

15. Third-Party Websites

CEPASS's website and services are intended primarily for business, professional, governmental, academic, and organizational users and are not directed to children.

 

We do not knowingly collect personal information from children.

 

If we become aware that personal information has been collected from a child contrary to applicable law, we will take reasonable steps to delete such information.

16. Children's Privacy

CEPASS may update this Privacy Policy from time to time to reflect changes in legal requirements, technologies, business operations, or privacy practices.

The most current version will always be available on our website and will indicate the date of the latest revision.

Continued use of our website following publication of updates constitutes acceptance of the revised policy.

17. Changes to This Privacy Policy

This Privacy Policy is available in both English and French.

The English and French versions are intended to communicate the same information and principles regarding the collection, use, disclosure, retention, and protection of personal information.

In the event of a discrepancy, inconsistency, ambiguity, or conflict between the English and French versions of this Privacy Policy, the English version shall prevail, except where applicable law requires otherwise.

18. Language Versions

For questions, requests, complaints, or concerns regarding this Privacy Policy or CEPASS's privacy practices, please contact:

 

Privacy Officer

President

CEPASS Solutions Inc.

 

Email: info@cepass.ca

Website: https://www.cepass.ca

19. Contact Us
CEPASS Solutions Inc. is committed to protecting personal information and conducting its activities in a manner that promotes privacy, transparency, accountability, and trust.

Privacy Policy

CEPASS.ca

Last Updated: September 10, 2026

bottom of page