PRIVACY
POLICY

01 — SCOPE OF THIS POLICY

This policy applies solely to the theentity.ca site.

Each brand in the ecosystem processes its own data, under its own responsibility and according to its own privacy policy:

No visitor data is pooled between theentity.ca and the brands' sites.

02 — OFFICER RESPONSIBLE FOR THE PROTECTION OF PERSONAL INFORMATION

In accordance with Law 25, the person responsible for the protection of personal information within The Entity Nexus Inc. is:

03 — INFORMATION PROCESSED

The site has no user accounts, no forms and no comment section. Three categories of information may be processed:

04 — PURPOSES AND LEGAL BASES

• Site security and operation — technical logs. Basis: legitimate interest and security obligations.
• Understanding traffic — aggregated analytics. Basis: your consent, withdrawable at any time.
• Responding to your communications — email correspondence. Basis: your voluntary approach (consent).

No information is processed for advertising, commercial profiling, resale or the training of artificial intelligence models. No decision producing legal effects concerning you is made by automated means.

05 — COOKIES

The site uses no advertising or tracking cookies. It sets no identifier allowing your browsing to be followed from one site to another.

Only cookies strictly necessary for operation and for recording your choice are set without consent. Two optional categories — analytics and display preferences — are disabled by default and are enabled only after your free, informed and specific consent, given category by category in the consent banner.

06 — DISCLOSURE AND SERVICE PROVIDERS

No personal information is sold, rented or disclosed to third parties for commercial purposes. The only technical providers involved in the operation of the site are:

Information may also be disclosed where required by law or under a valid order from a competent authority. Any excessive or non-compliant request is challenged.

07 — RETENTION PERIODS

When information is no longer needed for the purposes for which it was collected, it is destroyed or anonymised, subject to legal retention obligations.

08 — SECURITY

• Encryption in transit — the entire site is served over HTTPS (TLS).
• Encrypted email — the group's communications go exclusively through Proton Mail: end-to-end encryption, servers in Switzerland.
• Minimisation — no visitor database, no forms, no unnecessary collection.
• Restricted access — access to correspondence is limited to strictly authorised persons.

09 — YOUR RIGHTS

In accordance with Law 25 (Québec) and PIPEDA (Canada) — and, for residents of the European Union, the GDPR — you have, among others, the following rights:

To exercise a right, write to jarod@theentity.ca. Response within 30 days. No charge for reasonable requests.

10 — CONFIDENTIALITY INCIDENTS

In accordance with Law 25, every confidentiality incident is recorded in a register. Where an incident presents a risk of serious injury:

• the Commission d'accès à l'information du Québec is notified promptly;
• the persons concerned are notified promptly;
• measures are taken to limit the impact and prevent any recurrence.

11 — CHANGES

This policy may be amended to reflect legal, regulatory or technical developments. Any change takes effect upon publication on this page. The date of last update appears at the top of the page.

12 — GOVERNING LAW AND CONTACT

This policy is governed by the laws of the Province of Québec and the applicable federal laws of Canada. Any dispute relating to its interpretation shall be submitted to the exclusive jurisdiction of the courts of the judicial district of Montréal, Québec, subject to applicable mandatory provisions.