Privacy and Personal Information Protection Policy
(Quebec - Law 25)
Innovation Mobile inc. - for sites evolutionerp.ca and evolutiondmc.com
Version: 1.0
Effective date: 27 October 2025
1) To whom does this Policy apply?
This Policy applies to Innovation Mobile inc. («Mobile Innovation», «we», «our», «our»our products and services, as well as to our websites. www.evolutionerp.ca and www.evolutiondmc.com (the «Sites»). It governs the collection, use, communication, storage and destruction of personal data. personal information (within the meaning of the Act respecting the protection of personal information in the private sector). Your obligations with regard to transparency and the publication of a Web policy are set out in our Internal Guide (see section Policies and procedures).
2) Key definitions
- Personal information Personal data: any information concerning a natural person that enables that person to be identified directly or indirectly (e.g., identity, personal details, financial data, health information, etc.). Contact details strictly professional (name, title, business address/email/telephone) are not covered.
- Sensitive personal information : information generating high expectation of privacy (e.g. health, finance, biometrics, political opinions, etc.) - a express consent is then required.
3) What information do we collect?
Depending on the context, we can collect :
- Users of the Sites and persons who communicate with us name, contact details (e-mail, telephone), content of your requests, navigation data (IP address, pages viewed, date/time, type of device and browser) and cookies and similar technologies for analytics and service improvement.
- Customers (B2B) contact information, language, billing and payment information, communication preferences and more, if applicable, information from customer environments strictly necessary implementation, support and enhancement of our software. When our teams need to diagnose an application incident, a controlled copy from a customer database may be temporarily processed; in this case, we process all personal information such as confidential, we apply appropriate safety measures and strictly limit access.
- Applicants/Employees Information required for recruitment or HR management purposes (e.g. identity, contact details, career path, SIN, bank details, emergency contact), as required by law. (Minimum legal retention periods apply, e.g. certain employee files must be kept for a certain period of time. 7 years.)
4) Purpose of use
We use personal information to :
- Supply our products and services, manage accounts and customer relations, run and improve our software (including support/maintenance).
- Reply to your requests and provide customer service.
- Secure our solutions and environments (incident prevention/detection, improving our safety measures).
- Analyze the use of the Sites and improve the experience (aggregated statistics and depersonalized).
- Communicate with you (e.g. newsletters, offers), with your consent when required and can be withdrawn at any time.
5) Consent (including minors) and validity
We are looking for a valid consent (manifest, free, informed, specific, distinct, comprehensible and temporary), and express when the information is sensitive. The consent of under 14 must be given by a parent or guardian (14 years and over: by the minor, his/her parent or guardian). You can also withdraw your consent at any time, subject to applicable legal requirements.
6) Identification, location or profiling technologies (cookies)
Our Sites use witnesses and similar technologies (e.g., analytical): a cookie management banner allows you to accept, decline or customize your choices; you can change your preferences at any time. We do not activate profiling functions by default, and we provide information on how to activate them.
Typical witness categories
- Essentials (safety, accessibility, sessions)
- Analytics/Performance (aggregated usage statistics)
- Personalization (preferences)
- Marketing (if applicable, with consent)
7) Communications to third parties and« service providers »
We may disclose information :
- To our service providers (hosting, IT, support, payment processing, etc.) only for the purposes described, with written obligations confidentiality, security and deletion at the end of the mandate, in accordance with section 18.3 of the Act (contractual clauses required).
- As part of a business transaction (merger, financing, sale of assets), subject to confidentiality undertakings and limited use for the purposes of the transaction; notice will be given after completion, where applicable.
- To comply with legal obligation or respond to a competent authority.
Important (B2B/support relationship). When exceptional, we need to access environments or obtain a controlled copy customer's database for implementation or support purposes, we will treat this data as confidential, we apply proportionate safety measures and limit conservation to the strict minimum.
8) Accommodations, transfers outside Quebec and PIAs
Our solutions are designed to minimize the circulation of personal data outside our customers' environments. All transfer outside Quebec, if it occurs, will be the subject of a Privacy Impact Assessment (PIA) and’agreements ensuring adequate protection (contractual and legal measures) before communication.
9) Safety measures
We set up technical, organizational and physical measures proportionate to the sensitivity, purpose, quantity and medium of the information (e.g. access control, appropriate encryption, identity management, employee training and commitment to confidentiality, logging, secure retention/destruction practices). As no mechanism offers absolute security, we are constantly improving our systems.
10) Retention, anonymization and destruction
We store information only purposes and to comply with our legal obligations, and then we disclose them to destroy safety or the anonymize if a serious and legitimate use requires it. As a guide, certain categories (e.g. employee files) have minimum retention periods (e.g. 7 years). Internal written procedures govern retention and destruction.
11) Automated decisions and profiles
We let's not, decisions to date based exclusively on on automated processing with significant legal effects for you. Should this change, we will provide the required information (information used, main factors/parameters, right to rectification). before implementation.
12) Your rights
In particular, you have the following rights:
- Information on processing (purposes, means, internal access, categories of recipients, transfers outside Quebec, retention period, contact details of the PRP Manager).
- Access and copy of your information;
- Rectification any inaccurate, incomplete or ambiguous information;
- Withdrawal of consent (where applicable);
- Cessation of distribution / dereferencing / reindexing in cases provided for by law;
- Portability information computerized that you have provided to us (right in force since September 22, 2024), in a technological format structured and widely used, and direct transmission to a legally authorized organization whenever possible.
How to exercise your rights Send a written and dated request to Privacy Officer (contact details in section 14). We may verify your identity, ask for details to locate the data and, if necessary, claim compensation. reasonable costs for reproduction/transmission (advance notice). We respond within the 30 days reception.
13) Confidentiality incidents
In case of’confidentiality incident (unauthorized access, use or disclosure, loss or impairment), we take reasonable steps to reduce risk and avoid repetition, we have a incident register and, if the risk of serious prejudice is present, we notify CAI and the people involved with diligence (subject to ongoing investigations).
14) Questions, complaints and PRP Manager
Privacy Officer
Innovation Mobile inc.
165B Saint-Paul Street, Saint-Jean-sur-Richelieu, Quebec J3B 1Z8
E-mail : info@evolutionerp.ca
(All complaints must be forwarded to in writing to this e-mail address. A complaints register is kept).
If you are not satisfied with our response, you may contact the Commission d'accès à l'information (Surveillance Department), 2045 Stanley Street, Suite 900, Montreal, Quebec H3A 2V4, or cai.communications@cai.gouv.qc.ca. We encourage you to first complete our internal process.
15) Changes to this Policy