Privacy policy | Groupe LAFI

Last updated: October 14, 2026

This is a translation of the French version. In case of discrepancy, the French version prevails.

Groupe LAFI attaches great importance to the protection of your personal information. This policy explains what information we collect through this site, why, with whom we share it, how long we keep it and how to exercise your rights, in accordance with Quebec’s Act respecting the protection of personal information in the private sector.

Personal information is any information that concerns a natural person and allows that person to be identified, directly or indirectly: name, email address, phone number, resume, etc.

1. Person in charge of the protection of personal information

The person in charge of the protection of personal information is the general manager of Groupe LAFI. For any question, request or complaint about your personal information:

email: [email protected], marked “Personal information”;
phone: 514 900-0126;
address: Groupe LAFI, 441, chemin du Coteau-Rouge, Longueuil, Quebec J4J 1X9.

The general manager has delegated in writing, to the person responsible for the site, the functions that concern the site: privacy impact assessments, oversight of the site’s service providers, updating this policy and handling incidents affecting the site. Your requests and complaints are always to be sent to the contact details above.

2. Information we collect

a) Quote request

Your email address, the subject and content of your request and, if you provide them, your name, your company, your phone number, the service concerned and an attached document (plan, report, photo, etc.).

b) Job application

Your name, the position you are applying for, your email address, your phone number, your cover letter and your resume, as well as the information it contains. Your city of residence and your availability date are optional.

c) Correspondence

The information contained in the emails you write to us and in our subsequent exchanges.

d) Browsing

To display the site and protect it against abuse, our web host processes technical data such as the IP address and the browser type. On form pages, an anti-bot check (Cloudflare Turnstile) also analyzes technical characteristics of your browser and of your connection, including the IP address, solely to distinguish a person from a bot. Audience measurement, which is subject to your consent, is described in section 8.

We collect only the information necessary for the purposes described below. Optional fields are indicated in the forms.

3. Why we use it

To respond to your request, send you a service proposal and, if a mandate is entrusted to us, carry it out and follow up on it.
To assess your application and communicate with you about the recruitment process.
To ensure the operation and security of the site.
To measure traffic to the site, only if you consent to it (section 8).

We do not sell your personal information and do not use it for commercial prospecting.

4. Consent

By sending us a form or an email, you consent to the information provided being used for the purposes described in section 3. You may withdraw your consent at any time by writing to us (section 1); we might then no longer be able to follow up on your request or your application.

5. Communication to third parties and outside Quebec

Your information is accessible only to those members of Groupe LAFI’s staff who need it to process your request or your application. We use the following service providers, which process it on our behalf and only for the purposes indicated:

our service provider responsible for administering the site, based in Tunisia: technical management of the site and of the services below;
Cloudflare: hosting of the site, processing of the forms and anti-bot check (Turnstile). Cloudflare also uses the technical data from this check, under its own responsibility, to improve its bot detection;
Resend: delivery of the emails generated by the forms, attachments included. Resend keeps a copy of them for 30 days, then deletes it;
Microsoft (Microsoft 365): the email service in which we receive and keep these emails;
Google (Google Analytics): audience measurement, only with your consent (section 8).

These service providers may process your information outside Quebec, in particular in the United States and in Tunisia, where it is subject to local laws. Before entrusting your information to them, we conducted a privacy impact assessment of these communications: sensitivity of the information, purposes, protection measures and applicable legal framework. Each communication is governed by a written agreement that requires protection measures and the deletion of the information at the end of the service. We do not communicate your information to any other third party, unless the law requires or permits it.

6. Retention period

We keep your information for as long as necessary for the purposes for which it was collected:

quote request: for the duration of our exchanges and, if a mandate is entrusted to us, for the period required by our legal and professional obligations;
job application: until the end of the recruitment process. If another position might suit you, we will ask for your agreement before keeping your application, for a period that we will specify.

Once these periods have elapsed, the information is securely destroyed or anonymized, including the emails and attachments received through the forms.

7. Security

We take reasonable security measures to protect your information: encrypted connection (HTTPS) for the forms, restricted access to the emails received and recognized service providers. We keep a register of confidentiality incidents. In the event of an incident presenting a risk of serious injury, we notify the Commission d’accès à l’information and the persons concerned, as provided by law.

8. Cookies and audience measurement

A cookie is a small file saved by your browser. The site uses two categories of cookies.

a) Necessary cookies

The cc_cookie cookie remembers your choice regarding cookies, for 6 months. It is essential for the site to work, is not used to track you and is not sent to any third party.

b) Audience measurement: Google Analytics

These cookies are disabled by default. They are set, and data is sent to Google, only if you accept them in the banner displayed on your first visit or in the “Manage cookies” panel.

Purpose: to measure traffic to the site (pages viewed, where visits come from, quote requests) in order to improve its content. This data is not used for advertising: Google signals and ad personalization are disabled.
Information collected: a random identifier stored in the _ga and _ga_* cookies, the pages viewed, the date and length of the visit, the referring site or search engine, the type of device, the browser, the language, the approximate location (city, country) derived from the IP address, as well as clicks on phone, email and quote request links and the submission of a form, without its content. Google Analytics does not keep the IP address. We do not send Google your name, your email address or your phone number.
Retention period: 13 months for the _ga and _ga_* cookies; 14 months for the data in Google Analytics, after which it is deleted automatically.
Communication outside Quebec: the data is processed by Google LLC, in the United States and in other countries where Google operates servers. There, it is subject to local laws, which may offer protection different from that of Quebec.
Withdrawal of consent: you may withdraw your consent at any time with the button below or the “Manage cookies” button at the bottom of every page. The _ga and _ga_* cookies are then deleted and no more data is sent to Google. You can also delete cookies in your browser settings.

9. Your rights

You may ask:

to access the personal information we hold about you and to obtain a copy of it;
to have it rectified if it is inaccurate, incomplete or equivocal;
to withdraw your consent to its use;
to have it deleted when it is no longer necessary;
to receive the information you provided to us in a structured, commonly used technological format, or to have it communicated to the person or body of your choice.

Write to the person in charge of the protection of personal information (section 1). We may ask you to confirm your identity. We respond in writing within 30 days of receiving your request.

10. Governance and complaints

The person in charge of the protection of personal information approves our internal rules and ensures that they are applied:

access to information restricted to the staff members who need it;
retention periods and secure destruction (section 6);
written agreements with our service providers and a privacy impact assessment before any new system or any communication outside Quebec;
register and handling of confidentiality incidents (section 7).

To make a complaint about the protection of your personal information, write to the person in charge (section 1), describing the situation. We acknowledge receipt of your complaint, examine it and respond to you in writing within 30 days of receiving it. If you are not satisfied with our response, you may contact the Commission d’accès à l’information du Québec.

11. Changes

We may amend this policy, in particular to reflect changes to the site or to the law. Any amendment is announced by a dated notice at the top of this page. The version in force is the one published here, with its last-updated date.