PRIVACY AND PERSONAL INFORMATION

PROTECTION POLICY

Last updated: Novembre 21st, 2025

Référence TI inc. is a business corporation incorporated under the Business Corporations Act, whose primary commercial activities consist of providing professional IT consulting services.

This Privacy and Personal Information Protection Policy explains how Référence TI inc. (hereinafter “we,” “our,” or the “Company”) collects, uses, discloses, retains, and protects personal information collected in the course of its activities, including the operation of its website www.referenceti.com, all in accordance with the applicable provisions of the Act

Respecting the Protection of Personal Information in the Private Sector, and all other applicable laws and regulations in Québec and Canada.

1. Privacy Officer

We have appointed a Privacy Officer responsible for ensuring compliance with this Policy.

Address: 595, Brousseau Street, Beloeil (Québec), J3G 1Y2 Canada

Phone: +1 (514) 844-4488

Email: rprp@referenceti.com

Any comments, questions, or complaints relating to this Policy and to the Company's privacy practices may be directed to our Privacy Officer using the contact information above.

2. Personal Information We Collect

In the course of providing our IT consulting services and through the use of our website, we may collect the following personal information:

2.1. Information provided directly by you

Without limitation, we primarily collect the following information:

First and last name;
Contact information (email, phone number, address);
Your company name, address, and other relevant business contact details;
Professional information (title, employer);
Information required for service delivery: IT requirements, technical descriptions, client documentation;
Billing information and transaction history.

2.2. Information automatically collected

When you use or browse the website www.referenceti.com, we primarily collect the following information, without limitation:

IP address;
Cookies and session identifiers;
Device type, operating system, browser type;
Pages visited and time spent on the site;
Anonymized analytics data (Google Analytics or equivalent).

3. Purposes of Collection

We use the personal information collected from our clients and partners solely for the following purposes:

Providing professional IT services and other related technology services;
Client relationship management and customer service;
Administration and improvement of the website;
Billing and record-keeping;
Fraud prevention and security;
Compliance with legal obligations.

We collect only the information necessary to achieve the purposes identified above. No personal information is collected without a valid reason or without first obtaining your consent.

4. Consent for Collection of Personal Information

We collect your personal information with your consent, except where the law permits collection without consent (e.g., fraud prevention, legal compliance).

You may withdraw your consent at any time, subject to legal or contractual restrictions. If you do not agree with this website’s policy, you are invited to stop using or browsing the website.

5. Use, Disclosure, and Transfer of Personal Information

We may disclose your personal information to the following third parties, without limitation,

but only when necessary and while attempting to limit the sharing and exchange of

personal information:

IT service providers (hosting, cloud services, secure email systems, analytics tools);
Subcontractors required for the delivery of our services;
Professional advisors (lawyers, accountants);
Government authorities or others when legally required to do so.

All service providers who have access to personal information are contractually required

to comply with the applicable provisions of the Act Respecting the Protection of Personal

Information in the Private Sector.

Transfers outside Québec:

If your information is hosted or accessible outside Québec, we conduct a Privacy Impact Assessment (PIA) and ensure that the level of protection is adequate in accordance with the law.

6. Cookies and Similar Technologies

Through our website, we use cookies, including for the following purposes:

Facilitating navigation;
Personalizing content;
Measuring website usage;
Ensuring session security.

You may adjust your browser settings to refuse cookies; however, certain website features may be affected, without any liability on our part.

7. Security Measures

We apply administrative, technical, and physical security measures proportional to the

sensitivity of the data and the risk of breach, including:

Access controls;
Identity and password management;
Backups and logging;
Internal incident management policy.

8. Retention and Destruction

We retain personal information only for the duration necessary to achieve the purposes for which it was collected, or as required by law.

Once that period has expired, the data is either:

securely deleted, or
irreversibly anonymized.

9. Your Rights

You have the following rights:

Right to access your personal information;
Right to correct inaccurate information;
Right to withdraw your consent;
Right to file a complaint with the Commission d’accès à l’information du Québec.

To exercise your rights, please contact our Privacy Officer identified in Section 1.

10. Automated Processing

We do not use any automated decision-making that produces legal or significant effects concerning you.

11. Privacy Incidents

In the event of an incident involving personal information:

We apply our internal incident management procedure;
We notify the Commission d’accès à l’information du Québec and affected individuals when there is a risk of serious harm.

12. Changes to the Policy

We may update this Policy as needed. The date of the latest update appears at the beginning and end of this document.

Any significant modification to this Policy will be communicated to you via a notice on our website or through an email describing the changes and attaching the updated policy.

13. Contact Us

Any comments, questions, or complaints relating to this Policy and the Company’s privacy practices may be addressed to our Privacy Officer using the contact information below.