{"id":929,"date":"2025-10-07T18:28:13","date_gmt":"2025-10-07T18:28:13","guid":{"rendered":"https:\/\/j080jke8ql.wpdns.site\/929-2\/"},"modified":"2025-11-11T15:03:56","modified_gmt":"2025-11-11T15:03:56","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/lebaldwin.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

LE BALDWIN <\/b><\/p>

Private Event Hall<\/b><\/p>


Effective Date<\/b> : 10\/6\/2025<\/p>

Last Updated<\/b> : 10\/6\/2025<\/p>

1. INTRODUCTION<\/h3>

LE BALDWIN is a refined private event venue located in Laval, Qu\u00e9bec, specializing in weddings, birthdays, baby showers, engagements, and other memorable celebrations.<\/p>

We place the utmost importance on protecting your personal information and are committed to respecting your privacy. This privacy policy informs you about our practices regarding the collection, use, disclosure, retention, and protection of your personal information, in accordance with Qu\u00e9bec\u2019s Act respecting the protection of personal information in the private sector (Law 25).<\/p>

This policy is written in clear, simple terms so you can easily understand how we handle your personal information and what your rights are.<\/p>

Person Responsible for the Protection of Personal Information <\/b><\/p>

\u00a0<\/p>

Name: Claudio Sansalone
Email: [info@lebaldwin.com](mailto:info@lebaldwin.com)
Phone: (438) 299-6868
Address: 3954 Bd Leman, Laval, QC H7E 1A1<\/p>

For any questions regarding the protection of your personal information or to exercise your rights, you can contact our Responsible Person at the coordinates above.<\/p>

2. PERSONAL INFORMATION COLLECTED<\/h3>

We collect only the personal information necessary to provide our event hall rental services and to improve your experience.<\/p>

2.1 Identification and contact information<\/b><\/h5>

\u2022 First and last name
\u2022 Email address
\u2022 Phone number
\u2022 Mailing address (if paper billing is required)<\/p>

2.2 Information related to your event<\/b><\/h5>

\u2022 Type of event (wedding, birthday, baby shower, engagement, other)
\u2022 Date and time of the event
\u2022 Number of expected guests
\u2022 Preferences and special needs (layout, decoration, equipment)
\u2022 Food allergies or dietary restrictions (if catering services are coordinated)<\/p>

\u00a0<\/p>

2.3 Payment information<\/b><\/h5>

\u2022 Billing information
\u2022 Transaction details (amount, date)
\u2022 Credit card information is processed securely by our payment provider Stripe and is never stored directly on our systems (see section 5.3)<\/p>

\u00a0<\/p>

2.4 Browsing information (with your consent)<\/b><\/h5>

\u2022 Anonymized IP address
\u2022 Pages visited on our website
\u2022 Duration and sequence of browsing
\u2022 Browser type and operating system
\u2022 Data collected via cookies and similar technologies (see section 6)

<\/b><\/p>

2.5 Communications-related information<\/b><\/h5>

\u2022 Content of your emails and messages<\/p>

\u2022 History of our exchanges
\u2022 Communication preferences <\/b><\/p>

2.6 Photos and videos (with your specific consent)<\/b><\/h5>

\u2022 Photos and videos of your event (only if you have signed a specific authorization)<\/p>

3. PURPOSES OF COLLECTION AND USE<\/span><\/h3>

We collect and use your personal information only for specific, determined, and legitimate purposes.<\/p>

3.1 Reservations management and services<\/b><\/h5>

Purposes <\/b>:<\/p>

\u2022 Process and confirm your reservation request
\u2022 Manage your reservation and prepare the hall according to your needs
\u2022 Contact you regarding your event
\u2022 Coordinate details of your event
\u2022 Respond to your questions and requests<\/p>

Legal basis: Performance of the service contract
Possibility of refusal: Refusing to provide this information would prevent us from processing your reservation and providing our services.<\/p>

3.2 Billing and payment<\/b><\/h5>

Purposes<\/b> :<\/p>

\u2022 Process payments and issue invoices
\u2022 Manage billing and accounting
\u2022 Prevent fraud Legal basis: Performance of the contract and legal tax obligations Possibility of refusal: This information is required to complete the transaction.<\/p>

3.3 Communication and customer service<\/b><\/h5>

Purposes <\/b>:<\/p>

\u2022 Communicate with you regarding your reservation
\u2022 Send you confirmations and reminders
\u2022 Handle your requests, questions, and complaints
\u2022 Provide follow-up after your event<\/p>

Legal basis: Performance of the contract and legitimate interest<\/p>

3.4 Marketing and promotional communications (with your consent)<\/b><\/h5>

Purposes <\/b>:<\/p>

\u2022 Send you our newsletter
\u2022 Inform you about our promotions and special offers
\u2022 Share our updates and services<\/p>

Legal basis: Explicit consent<\/p>

Possibility of refusal: You may refuse to receive these communications without affecting our other services. You can unsubscribe at any time by clicking the unsubscribe link in each email or by contacting our Person Responsible for the Protection of Personal Information.<\/p>

3.5 Service improvement and analytics<\/b><\/h5>

Purposes <\/b>:<\/p>

\u2022 Understand how you use our website
\u2022 Improve our services and your experience
\u2022 Analyze traffic trends and statistics
\u2022 Optimize our site\u2019s performance<\/p>

Legal basis: Consent (for analytics tools) and legitimate interest <\/b><\/p>

3.6 Promotion and portfolio (with your specific consent)<\/b><\/h5>

Purposes <\/b>:<\/p>

\u2022 Publish photos of your event on our website and social networks
\u2022 Use photos in our promotional materials
\u2022 Build our portfolio of achievements<\/p>

Legal basis: Explicit and separate consent<\/p>

Possibility of refusal: This use requires a separate written authorization that you can refuse or withdraw at any time. <\/b><\/p>

3.7 Legal compliance<\/b><\/h5>

Purposes <\/b>:<\/p>

\u2022 Comply with our legal and regulatory obligations
\u2022 Respond to requests from competent authorities
\u2022 Defend our rights in the event of a dispute<\/p>

Legal basis: Legal obligations<\/p>

4. METHODS OF COLLECTION<\/h3>

We collect your personal information in various ways, always transparently.

<\/b><\/p>

4.1 Directly from you<\/b><\/h5>

\u2022 Inquiry and reservation forms on our website<\/p>

\u2022 Communications by email or phone
\u2022 Newsletter sign-up forms
\u2022 Contracts and signed documents
\u2022 Exchanges with our staff <\/b><\/p>

4.2 Through technologies<\/b><\/h5>

\u2022 Cookies and similar technologies on our website (with your consent)<\/p>

\u2022 Sonixos online booking system
\u2022 Web analytics tools (Google Analytics \u2013 with your consent)
\u2022 Advertising tracking pixels (Facebook Pixel \u2013 with your consent)<\/p>

Important: All identification, location, or profiling technologies are disabled by default and are only enabled after obtaining your explicit consent via our cookie management banner. <\/b><\/p>

4.3 Browsing our website<\/b><\/h5>

When you visit our website, certain technical information is collected automatically to ensure the site functions (essential cookies). Other information requires your consent (analytics and marketing cookies).<\/p>

\u00a0<\/h3>

5. DISCLOSURE AND SHARING OF<\/h3>

INFORMATION<\/b><\/p>

We never sell your personal information. We disclose it only under the following circumstances: <\/b><\/p>

5.1 Partners and providers for your event<\/b><\/h5>

<\/b>To carry out your event according to your wishes, we may share certain information with our trusted partners:<\/p>

\u2022 Catering services (name, contact details, event date, number of guests, allergies)
\u2022 Photographers and videographers (name, contact details, event date)
\u2022 Decoration services (name, contact details, preferences)
\u2022 Technical services: sound, lighting (name, contact details, technical needs)<\/p>

Guarantees <\/b>: These partners:<\/p>

\u2022 Are carefully selected
\u2022 Sign confidentiality agreements compliant with Law 25
\u2022 Use your data solely to deliver your event
\u2022 Cannot use your data for their own commercial purposes
\u2022 Must delete your data after the event (except where legally required)<\/p>

5.2 Essential service providers (subcontractors)<\/b><\/h5>

We use service providers who process personal information on our behalf. These subcontractors are contractually required to protect your data in accordance with section 18.3 of Law 25.<\/p>

5.3 Stripe (payment processing)<\/b><\/h5>

Provider <\/b>: Stripe Payments Canada, Ltd.<\/p>

Certification <\/b>: PCI-DSS Level 1 (highest security standard for payments) Data shared with Stripe:<\/p>

\u2022 First and last name
\u2022 Email and billing address
\u2022 Card number, expiration date
\u2022 CVV code (NOT RETAINED after transaction \u2013 immediate deletion in accordance with PCI-DSS standards)
\u2022 Transaction amount and date<\/p>

TRANSFER OUTSIDE QU\u00c9BEC \u2013 UNITED STATES<\/b><\/p>

\u00a0<\/p>

Payment data is processed by Stripe on servers located primarily in the United States. By using our payment services, you expressly consent to this transfer of your data outside Qu\u00e9bec. The United States has laws different from Qu\u00e9bec regarding data protection, including the Cloud Act, which may allow U.S. government authorities to access certain data in specific circumstances.<\/p>

Protective measures in place:<\/p>

\u2022 Privacy Impact Assessment (PIA) carried out in accordance with section 17 of Law 25
\u2022 Written contract with Stripe including strict protective clauses (section 18.3)
\u2022 Limited use for payment processing only
\u2022 Enhanced security: TLS 1.2 encryption, PCI-DSS Level 1 certification
\u2022 Mandatory notification in the event of a privacy incident
\u2022 Right to verify compliance<\/p>

Stripe\u2019s privacy policy: [https:\/\/stripe.com\/privacy](https:\/\/stripe.com\/privacy)<\/p>

Your rights:<\/p>

\u2022 Withdraw your consent to the transfer (limitation: would prevent online payment)
\u2022 Request access to or deletion of your payment data (except where legally required for tax purposes)
\u2022 Alternative payment option without transfer outside Qu\u00e9bec (contact us)<\/p>

5.4 Sonixos (booking system)<\/b><\/h5>

System used: Sonixos (reservation management system) Data shared:<\/p>

\u2022 Identification and contact information
\u2022 Reservation details
\u2022 Your reservation history<\/p>

Server location: [To be confirmed with the provider \u2013 information available upon request]<\/p>

Contractual protection:<\/p>

\u2022 Written contract compliant with section 18.3 of Law 25
\u2022 Use limited to managing your reservations
\u2022 Strict security measures (encryption, access controls)
\u2022 Deletion of data after the end of the contract (except where legally required)<\/p>

For more information about hosting location and specific protective measures, you can contact our Person Responsible for the Protection of Personal Information.<\/p>

5.5 Legal obligations<\/b><\/h5>

We may disclose your personal information if required by law:<\/p>

\u2022 In response to a court order
\u2022 To comply with a law or regulation
\u2022 To protect our legal rights or those of others
\u2022 In the event of reorganization, merger, or sale of assets (with prior notice)<\/p>

5.6 With your consent<\/b><\/h5>

In all other cases, we will disclose your personal information to third parties only with your explicit consent.<\/p>

6. COOKIES AND TRACKING TECHNOLOGIES<\/h3>

Our website uses cookies and similar technologies. In accordance with Law 25, all identification, location, or profiling technologies are disabled by default and are enabled only with your explicit consent.<\/p>

6.1 What is a cookie?<\/b><\/h5>

A cookie is a small text file placed on your device when you visit a website. Cookies allow the site to recognize your device during future visits.<\/p>

6.2 Types of cookies used<\/b><\/h5>

A. Essential cookies (always active)<\/p>

These cookies are necessary for the website to function and cannot be disabled. They do not collect any information that allows us to identify you.<\/p>

Use:<\/p>

\u2022 Maintain your session during your visit
\u2022 Secure your login
\u2022 Remember your language preferences
\u2022 Ensure the functioning of the reservation cart<\/p>

Legal basis: Essential operation of the site (no consent required)<\/p>

B. Analytics cookies (require your consent)<\/p>

Google Analytics<\/b><\/p>

\u00a0<\/p>

Our site uses Google Analytics, a web analytics service from Google LLC, to understand the use of our site and improve your experience.<\/p>

Information collected:<\/b><\/p>

\u00a0<\/p>

\u2022 Anonymized IP address (last bytes truncated)
\u2022 Pages visited, duration and sequence of browsing
\u2022 Browser type and operating system
\u2022 Geographic origin (regional level only, not a precise address)
\u2022 Actions performed on the site (clicks, forms)<\/p>

Purpose: Anonymized statistical analysis to improve site performance and user experience. No commercial or marketing use.<\/p>

INTERNATIONAL TRANSFER \u2013 UNITED STATES<\/b><\/p>

Data is stored and processed on Google servers located primarily in the United States.<\/p>

A Privacy Impact Assessment (PIA) was conducted in accordance with Law 25. Contractual protective measures have been put in place with Google.<\/p>

Privacy configuration:<\/p>

\u2022 IP anonymization enabled (mandatory)
\u2022 No data sharing with other Google services
\u2022 No personalized advertising based on Google Analytics
\u2022 Limitation of collection to essential statistics<\/p>

Google Analytics cookies:<\/p>

\u2022 _ga (duration: 2 years): Identify unique visitors
\u2022 _gid (duration: 24 hours): Identify visitors
\u2022 _gat (duration: 1 minute): Limit request rate<\/p>

Your rights:<\/b><\/p>

\u00a0<\/p>

\u2022 Refuse Google Analytics via our consent banner
\u2022 Install Google\u2019s opt-out add-on:<\/p>

[https:\/\/tools.google.com\/dlpage\/gaoptout](https:\/\/tools.google.com\/dlpage\/gaoptout)<\/p>

\u2022 Withdraw your consent at any time
\u2022 Request access to or deletion of your data<\/p>

Google\u2019s privacy policy: [https:\/\/policies.google.com\/privacy](https:\/\/policies.google.com\/privacy)<\/p>

C. Marketing and advertising cookies (require your consent) Facebook Pixel (Meta Pixel)<\/p>

We use the Facebook\/Meta pixel to measure the effectiveness of our advertising campaigns on Facebook and Instagram.<\/p>

Information collected:<\/b><\/p>

\u2022 Pages viewed and actions on our site
\u2022 IP address and unique browser identifier
\u2022 Information about your device and browser
\u2022 Interactions with our Facebook\/Instagram ads<\/p>

Purposes <\/b>:<\/p>

\u2022 Measure conversions from our ads (how many people book after seeing an ad)
\u2022 Create audiences for remarketing (show our ads if you visited our site)
\u2022 Optimize delivery of our Facebook\/Instagram ads
\u2022 Analyze the effectiveness of our marketing campaigns<\/p>

INTERNATIONAL TRANSFER \u2013 UNITED STATES<\/b><\/p>

\u00a0<\/p>

Data is transmitted to Meta Platforms, Inc., whose servers are located in the United States.<\/p>

Important: Meta (Facebook) received a record fine of \u20ac1.2 billion in May 2023 for data transfers to the United States. Meta now relies on the new Data Privacy Framework adopted in July 2023, but legal uncertainties remain.<\/p>

A thorough Privacy Impact Assessment (PIA) was conducted in accordance with Law 25, including a risk analysis related to these transfers.<\/p>

Protective measures:<\/b><\/p>

\u2022 Limited use to essential conversions only
\u2022 No extensive profiling
\u2022 Standard contractual clauses with Meta
\u2022 Regular compliance review<\/p>

Facebook Pixel cookies:<\/p>

\u2022 _fbp (duration: 3 months): Visit tracking
\u2022 fr (duration: 3 months): Advertising and measurement<\/p>

Your rights:<\/b><\/p>

\u00a0<\/p>

\u2022 Refuse Facebook Pixel via our consent banner
\u2022 Manage your ad preferences: [https:\/\/www.facebook.com\/settings?tab=ads](https:\/\/www.facebook.com\/settings?tab=ads)
\u2022 Withdraw your consent at any time
\u2022 Request deletion of your data<\/p>

Meta\u2019s privacy policy: [https:\/\/www.facebook.com\/privacy\/policy\/](https:\/\/www.facebook.com\/privacy\/policy\/)<\/p>

6.3 Managing your preferences<\/b><\/h5>

On your first visit: A consent banner appears allowing you to choose the categories of cookies you accept.<\/p>

Change at any time: You can modify your preferences by clicking the \u201cManage my cookie preferences\u201d link available at all times in the footer of our site.<\/p>

Validity period: Your consent is valid for a period of 12 months. After this period, we will ask for your consent again.<\/p>

No consent: If you refuse analytics or marketing cookies, it will not affect your ability to use our website and make reservations. Only essential cookies will remain active.<\/p>

Your browser settings: You can also set your browser to refuse all cookies or to be notified when a cookie is placed. Note:<\/p>

refusing essential cookies may prevent certain site features from functioning properly.<\/p>

7. RETENTION OF INFORMATION<\/h3>

We retain your personal information only for as long as necessary for the purposes for which it was collected, or as required by law.<\/p>

7.1 Retention periods<\/b><\/p>


<\/b>Type of information Retention period Justification Reservation and contract data Duration of the event + 1 year Customer relationship management and potential claims Invoices and tax data 6 years after issuanceLegal tax obligation (Revenu Qu\u00e9bec) Payment data \u2013 CVV NEVER retained (immediate deletion) PCI-DSS standards (strict prohibition) Payment history 10 years Accounting and commercial obligations Correspondence (emails, messages) 2 years after last contact Proof of contractual relationship
Analytics data
(Google Analytics)
Up to 26 months Trend analysis
Documented consents
3 years after
consent withdrawal
Proof of legal compliance
Portfolio photos\/videos
(with consent)
3 to 5 years
depending on
authorization
Marketing purpose (with possibility of withdrawal)
Privacy incident
register
Minimum 5 years Legal obligation (Law 25)
Non-converted prospects
3 years after last
contact
Business management (presumption of loss of interest)
Inactive newsletter
subscribers
3 years without interaction Presumption of disinterest<\/p>

7.2 Destruction and anonymization<\/b><\/h5>

Upon expiry of the deadlines: Your personal information is either:<\/p>

\u2022 Securely destroyed (complete and unrecoverable deletion from our systems and backups)
\u2022 Irreversibly anonymized (removal of all elements allowing identification)<\/p>

Destruction process:<\/p>

\u2022 Deletion from active databases
\u2022 Purge of backups
\u2022 Deletion of archives
\u2022 Certificate of destruction for sensitive data<\/p>

Exception: We may retain certain information beyond the stated periods if required by law, to defend our rights in the event of a dispute, or with your explicit consent.<\/p>

8. SECURITY MEASURES<\/h3>

Protecting your personal information is a priority. We implement physical, technological, and administrative security measures appropriate to the sensitivity level of the information.<\/p>

8.1 Technological measures<\/b><\/h5>

\u2022 Encryption: All transmissions of sensitive data (payments, forms) use HTTPS with TLS 1.2 encryption at minimum
\u2022 Encryption of data at rest: Stored data is encrypted on our servers
\u2022 Firewalls and intrusion detection systems: Protection against unauthorized access
\u2022 Strong passwords: Strong password policy and multi-factor authentication for administrative access
\u2022 Secure backups: Regular encrypted backups
\u2022 Security updates: Systems and software regularly updated
\u2022 Antivirus and malware protection: Deployed on all systems

<\/b><\/p>

8.2 Physical measures<\/b><\/h5>

\u2022 Restricted access: Secured premises with access control<\/p>

\u2022 Locked storage areas: Locked offices and cabinets
\u2022 Secure destruction: Paper documents destroyed by confidential shredding <\/b><\/p>

8.3 Administrative measures<\/b><\/h5>

\u2022 Personal information governance policy: Established and published internal rules<\/p>

\u2022 Staff training: All staff are trained on Law 25 and our obligations
\u2022 Limited access on a \u201cneed-to-know\u201d basis: Only authorized staff who need access to perform their work have access
\u2022 Confidentiality clauses: All employees and partners sign confidentiality commitments
\u2022 Regular audits: Periodic review of our security practices
\u2022 Incident management: Established procedures to detect, manage, and notify incidents <\/b><\/p>

8.4 Subcontractor security<\/b><\/h5>

All our subcontractors and partners are contractually required to:<\/p>

\u2022 Implement appropriate security measures
\u2022 Use the information only for authorized purposes
\u2022 Not retain information beyond the necessary duration
\u2022 Immediately notify any privacy incident
\u2022 Allow compliance verifications<\/p>

\u00a0<\/p>

\u00a0<\/p>

9. PRIVACY INCIDENTS<\/span><\/p>

\u00a0<\/p>

Despite all our protective measures, no system is infallible. <\/b><\/p>

9.1 In case of an incident<\/b><\/h5>

A privacy incident is a situation where your personal information is subject to unauthorized access, use, disclosure, loss, or destruction.<\/p>

Our commitments:<\/p>

\u2022 All incidents are recorded in a register (kept for a minimum of 5 years)
\u2022 We immediately take measures to limit risks and impacts
\u2022 If the incident presents a risk of serious harm to you:<\/p>

o We notify the Commission d’acc\u00e8s \u00e0 l’information du Qu\u00e9bec (CAI) as soon as possible
o We notify you personally as soon as possible
o The notification includes: nature of the incident, information involved, possible consequences, measures taken, measures you can take to mitigate risks<\/p>

9.2 Notification<\/b><\/h5>

Content of the notification:<\/p>

\u2022 Description of the incident
\u2022 Date or period of the incident
\u2022 Categories of information affected
\u2022 Number of persons concerned (estimate)
\u2022 Possible consequences for you
\u2022 Measures we have taken
\u2022 Measures you can take to protect yourself
\u2022 Contact details for more information<\/p>

Means of notification:<\/p>

\u2022 By email to the address you provided
\u2022 By phone if email is unavailable
\u2022 By postal mail if necessary
\u2022 Public notice on our website if it is impossible to contact you individually <\/b><\/p>

9.3 Reporting an incident<\/b><\/h5>

If you observe or suspect a privacy incident concerning your information, please contact us immediately:<\/p>

Person Responsible for the Protection of Personal Information<\/p>

Name: Claudio Sansalone
Email: [info@lebaldwin.com](mailto:info@lebaldwin.com)
Phone: (438) 299-6868
Address: 3954 Bd Leman, Laval, QC H7E 1A1<\/p>

10. YOUR RIGHTS<\/h3>

Law 25 grants you several rights concerning your personal information. You may exercise these rights at any time, free of charge.<\/p>

10.1 Right of access<\/b><\/h5>

You have the right to:<\/p>

\u2022 Know whether we hold information about you
\u2022 Obtain a copy of all personal information we hold about you
\u2022 Know how it is used
\u2022 Know the third parties to whom it has been disclosed<\/p>

Response time: Maximum 30 days (possibility of a 30-day extension if the request is complex, with notification)<\/p>

10.2 Right to rectification<\/b><\/h5>

You have the right to:<\/p>

\u2022 Have inaccurate or incomplete information corrected
\u2022 Have outdated information deleted
\u2022 Have missing information added<\/p>

Response time: Maximum 30 days
If rectification is made: We will inform third parties to whom we disclosed the erroneous information, unless this proves impossible or requires disproportionate efforts.<\/p>

10.3 Right to withdraw consent<\/b><\/h5>

You have the right to:<\/p>

\u2022 Withdraw your consent at any time for any use of your information based on consent
\u2022 Unsubscribe from our newsletter (link in each email)
\u2022 Withdraw your consent for analytics and marketing cookies
\u2022 Withdraw your consent for the use of photos\/videos<\/p>

Consequences of withdrawal:<\/p>

\u2022 Withdrawal takes effect immediately going forward (does not apply retroactively)
\u2022 Depending on the consent withdrawn, certain services may no longer be available (e.g., online payment if transfer to Stripe is refused)
\u2022 We will inform you of the consequences before the withdrawal takes effect Exceptions: We may retain certain information despite withdrawal if another legal basis applies (legal obligation, defense of rights).<\/p>

10.4 Right to data portability<\/b><\/h5>

Since September 2024, you have the right to:<\/p>

\u2022 Receive your personal information in a structured, commonly used, and machine-readable format (e.g., CSV, JSON, PDF)
\u2022 Transmit this information to another service provider<\/p>

Portable information:<\/p>

\u2022 Information you have provided to us directly
\u2022 Information created by your use of our services
\u2022 Excluded: Information generated by us (internal analyses, assessments)
Response time: Maximum 30 days<\/p>

10.5 Right to be forgotten (de-indexing)<\/b><\/h5>

You have the right to:<\/p>

\u2022 Request deletion of your personal information in certain circumstances:
o Information not necessary for the purposes for which it was collected
o Withdrawal of consent and absence of another legal basis
o Information collected or used unlawfully
o Legal obligation to delete
Exceptions: We may refuse deletion if:
\u2022 Legal obligation to retain (invoices: minimum 6 years)
\u2022 Necessary to defend our rights in court
\u2022 Consent cannot be withdrawn (performance of an ongoing contract) If refused: We will explain the reasons for refusal and your recourses.<\/p>

10.6 Right to object<\/b><\/h5>

You have the right to:<\/p>

\u2022 Object to certain uses of your information (direct marketing, profiling, automated decisions)
Automated decisions: We currently do not use any fully automated decision-making systems that have legal or similar effects concerning you.<\/p>

10.7 Exercising your rights<\/b><\/h5>

How to make a request:<\/p>

To exercise any of these rights, contact our Person Responsible for the Protection of Personal Information:<\/p>

Contact details <\/b>:<\/p>

Name: Claudio Sansalone
Email: [info@lebaldwin.com](mailto:info@lebaldwin.com)
Phone: (438) 299-6868
Address: 3954 Bd Leman, Laval, QC H7E 1A1<\/p>

Information required in your request:<\/p>

\u2022 Your first and last name
\u2022 Contact details (email, phone)
\u2022 Precise description of your request
\u2022 The right you wish to exercise
\u2022 A copy of an identity document (if necessary to confirm your identity)<\/p>

Free of charge: Exercising your rights is entirely free.
Response time: Maximum 30 days from receipt of your request. If the request is complex, this period may be extended by an additional 30 days (we will inform you).
Identity verification: To protect your information, we may ask you to prove your identity before acting on your request.<\/p>

11. RIGHT TO COMPLAIN<\/h3>

If you believe that your rights regarding the protection of personal information have not been respected, you have the right to file a complaint.<\/p>

11.1 Internal complaint<\/b><\/h5>

First step: Contact our Person Responsible for the Protection of Personal Information to try to resolve the situation amicably.
We commit to:
\u2022 Examine your complaint seriously and promptly
\u2022 Respond to you within a reasonable time
\u2022 Explain the measures taken or the reasons for our decision
\u2022 Correct any non-compliance identified<\/p>

11.2 Complaint to the Commission d’acc\u00e8s \u00e0 l’information<\/b><\/h5>

If you are not satisfied with our response or if you prefer to contact the supervisory authority directly, you can file a complaint with the Commission d’acc\u00e8s \u00e0 l’information du Qu\u00e9bec (CAI).
Commission d’acc\u00e8s \u00e0 l’information du Qu\u00e9bec
Phone: 418 528-7741 or 1 888 528-7741 (toll-free)
Website: https:\/\/www.cai.gouv.qc.ca<\/p>

Mailing address: <\/b>525, boulevard Ren\u00e9-L\u00e9vesque Est, bureau 1.200
Qu\u00e9bec (Qu\u00e9bec) G1R 5S9
Complaint form: Available on the CAI website
Important: You can file a complaint with the CAI without affecting your other legal recourses (civil action, class action).<\/p>

11.3 Legal recourses<\/b><\/h5>

You retain all your legal recourses, including:
\u2022 Action for damages (minimum $1,000 in the event of intentional or gross fault)
\u2022 Class action
\u2022 Other remedies provided by law<\/p>

12. MINORS (UNDER 14 YEARS OLD)<\/b><\/h5>

In accordance with Law 25, we do not knowingly collect personal information from children under 14 without the consent of a parent or legal guardian.<\/p>

Family events involving minors:<\/p>

If your event involves children under 14 (child\u2019s birthday, family event):<\/p>

\u2022 Parental or guardian consent is required for any collection of information regarding the child
\u2022 Parental\/guardian consent is required for any photo or video in which the child is identifiable
\u2022 A specific form will be provided to you If you are a parent\/guardian:
\u2022 You have the right to access, correct, or delete your child\u2019s information
\u2022 You can withdraw your consent at any time If we discover that we have inadvertently collected information from a child under 14 without parental consent, we will immediately delete such information.<\/p>

13. LINKS TO THIRD-PARTY SITES<\/h3>

Our website may contain links to third-party websites (partners, social networks, providers).<\/p>

Important <\/b>: We are not responsible for the privacy practices of these third-party sites. This privacy policy applies only to information collected by LE BALDWIN.<\/p>

We recommend that you carefully read the privacy policies of all sites you visit.<\/p>

Social media sharing buttons: If our site contains sharing buttons (Facebook, Instagram, etc.), these platforms may collect information about you, even if you do not click. Consult their privacy policies.<\/p>

14. CHANGES TO THIS POLICY<\/h3>

We regularly review this privacy policy to ensure it remains compliant with the law and reflects our practices.<\/p>

In the event of changes:<\/p>

\u2022 The \u201cLast Updated\u201d date at the top of this page will be modified
\u2022 Important changes will be notified to you by email (if we have your address) or by notice on our website
\u2022 You will have the opportunity to withdraw your consent if the changes affect the use of your information<\/p>

Current version: This policy came into force on [date to be completed]. We encourage you to check this page regularly to stay informed about our practices.<\/p>

15. CONTACT US<\/h3>

For any question, request, or concern regarding this privacy policy or our practices in protecting personal information:<\/p>

Person Responsible for the Protection of Personal Information<\/p>

LE BALDWIN<\/b><\/p>


<\/b>Name: Claudio Sansalone
Email: info@lebaldwin.com
Phone: (438) 299-6868
Address: 3954 Bd Leman, Laval, QC H7E 1A1<\/p>

Contact details <\/b>:<\/p>

Name: [To be completed]
Email: [To be completed]
Phone: [To be completed]
Hours of availability: [To be completed \u2013 e.g., Monday to Friday, 9 a.m. to 5 p.m.]<\/p>

We strive to respond to all requests within 48 business hours.<\/p>

16. GLOSSARY<\/h3>

To facilitate understanding of this policy, here are definitions of certain terms:<\/p>

Anonymization <\/b>: Irreversible process that removes all elements allowing direct or indirect identification of a person.<\/p>

Consent <\/b>: Free, informed, and specific expression of your will by which you agree that personal information about you may be collected, used, or disclosed.<\/p>

Cookie <\/b>: Small text file placed on your device when visiting a website. Encryption: Security technique that makes data unreadable to anyone not authorized.<\/p>

PIA (Privacy Impact Assessment)<\/b> : Mandatory analysis of risks related to transferring personal information outside Qu\u00e9bec or to the use of certain technologies.<\/p>

Privacy incident<\/b> : Unauthorized access, use, disclosure, loss, or destruction of personal information.<\/p>

Personal information <\/b>: Any information that concerns a natural person and allows identification directly or indirectly (name, address, email, phone number, IP address, etc.).<\/p>

Sensitive information<\/b> : Personal information whose nature or context of use creates a higher expectation of privacy protection (medical, biometric, intimate data).<\/p>

Person Responsible for the Protection of Personal Information (RPRP)<\/b> : Person designated within the company to ensure the protection of personal information and compliance with the law.<\/p>

Subcontractor<\/b> : Person or organization that processes personal information on our behalf (service providers, technology partners).<\/p>

LE BALDWIN\u2019S COMMITMENT<\/b><\/p>

\u00a0<\/p>

At LE BALDWIN, we understand that your events are among the most precious and personal moments of your life. The trust you place in us by sharing your personal information is at the heart of our commitment to you.<\/p>

We commit to:<\/p>

\u2713 Respect your privacy at all times
\u2713 Be transparent about our practices
\u2713 Protect your information with the highest security standards
\u2713 Give you control over your personal information
\u2713 Respond quickly to your questions and requests
\u2713 Continuously improve our privacy practices
\u2713 Scrupulously comply with Law 25 and all applicable laws<\/p>

Your trust guides our actions. We strive every day to earn and preserve this trust by handling your personal information with the greatest care and respect.<\/p>

Thank you for choosing LE BALDWIN for your most memorable events.<\/p>

Document prepared in accordance with:<\/b><\/p>

\u00a0<\/p>

\u2022 Act respecting the protection of personal information in the private sector (RLRQ, chapter P-39.1)
\u2022 Law 25: An Act to modernize legislative provisions as regards the protection of personal information (2021, chapter 25)
\u2022 Guidelines of the Commission d’acc\u00e8s \u00e0 l’information du Qu\u00e9bec Last review: 10\/6\/2025<\/p>

IMPLEMENTATION INSTRUCTIONS IMMEDIATE ACTIONS TO COMPLETE:<\/p>

1. Fill in the [To be completed] fields: <\/b><\/p>

\u00a0<\/p>

a. Full name of the Person Responsible for the Protection of Personal Information
b. Complete contact details (email, phone, address)
c. Effective and update dates
d. Hours of availability<\/p>

2. Confirm with Sonixos: <\/b><\/p>

\u00a0<\/p>

a. Exact location of data hosting
b. Obtain a copy of the Data Processing Agreement (DPA)
c. If outside Qu\u00e9bec: complete a specific PIA<\/p>

3. Priority compliance actions: <\/b><\/p>

\u00a0<\/p>

a. Officially designate and publish the RPRP
b. Notify the Commission d’acc\u00e8s \u00e0 l’information of the appointment
c. Implement a compliant consent banner (CMP)
d. Configure Google Analytics with IP anonymization
e. Disable GA and Facebook Pixel by default
f. Create the privacy incident register
g. Complete PIAs for Google Analytics, Facebook Pixel, and Stripe
h. Review all supplier contracts (Section 18.3)<\/p>

4. Publication:<\/b><\/p>

\u00a0<\/p>

a. Publish this policy on the website (dedicated page accessible from the main menu and footer)
b. Add links to this policy in all forms
c. Update legal notices
d. Inform existing customers of the new policy<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Privacy Policy LE BALDWIN Private Event Hall Effective Date : 10\/6\/2025 Last Updated : 10\/6\/2025 1. INTRODUCTION LE BALDWIN is a refined private event venue located in Laval, Qu\u00e9bec, specializing in weddings, birthdays, baby showers, engagements, and other memorable celebrations. We place the utmost importance on protecting your personal information and are committed to respecting […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-929","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/lebaldwin.com\/en\/wp-json\/wp\/v2\/pages\/929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lebaldwin.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/lebaldwin.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/lebaldwin.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/lebaldwin.com\/en\/wp-json\/wp\/v2\/comments?post=929"}],"version-history":[{"count":9,"href":"https:\/\/lebaldwin.com\/en\/wp-json\/wp\/v2\/pages\/929\/revisions"}],"predecessor-version":[{"id":1365,"href":"https:\/\/lebaldwin.com\/en\/wp-json\/wp\/v2\/pages\/929\/revisions\/1365"}],"wp:attachment":[{"href":"https:\/\/lebaldwin.com\/en\/wp-json\/wp\/v2\/media?parent=929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}