CONTACT

Goals

This Privacy Policy describes Brosso Innovations' (“Brosso”) practices regarding the collection, use, disclosure, sharing and management of personal information collected on our website or otherwise in the course of our business.
We also explain the security measures applied and how you can consult, update or delete your personal information.

ChatGPT Image Sep 26, 2025, 13_00_21.png

Definition

The term “ Website ”: the site accessible at the address brosso.ca (including www.brosso.ca) and all of its subdomains.

The term “ Brosso ” or “ Brosso Innovations ”: Brosso Innovations and, for the purposes of this policy, its suppliers or licensors and their respective employees, officers, directors, shareholders, agents, subcontractors and other representatives. The terms “we”, “us” and “our” also refer to Brosso.

The term “ Personal Information ” means any information relating to an identifiable individual, directly or indirectly. This excludes information from which the identity has been removed (anonymized data).

Collection of personal information

We collect personal information that you provide to us in several ways, described below.

1) Through our direct exchanges

The following are particularly targeted:

communications transmitted via a form on the Website;
exchanges about our services and products;
requests for information, comments or complaints (customer service);
interactions via our social media.

2) Through automatic technologies or interactions

When you use our Website, we automatically collect certain technical data relating to your equipment and your browsing (see the “Cookies and Similar Technologies” section of the policy).

Our website may use web beacons/pixel tags. These technologies help us understand which pages are being viewed so we can optimize and tailor the website for you and other visitors. We may also receive certain technical information if you visit other websites that use our cookies.

3) Through third parties

We may obtain information about you from customers, service providers, or business partners and then combine it with information we already hold. For example, we may use third parties (e.g., Google) to:

remarketing: serving advertisements to people who have already visited our Website, on other sites, in particular via Google Analytics;
the use of Analytics functions: advertising impression reports, integrations with campaign management/measurement tools (delivery, targeting, verification, reporting), as well as demographic and interest reports;
the collection and analysis of technical information (e.g., IP address, age range, interests, etc.) to understand Website usage and improve our products and services.

Remarketing companies may combine first-party cookies (e.g., Google Analytics cookie) and third-party cookies (e.g., DoubleClick) in order to:
(i) collect information;

(ii) inform, optimize and serve advertisements based on your previous visits;

(iii) link visits to our Website, advertising impressions and interactions with these services.

They may also use web beacons/pixels to report on certain visits to our Website and to sites that link to or promote our Website, for the purpose of measuring the effectiveness of our advertising.

Types of information collected

We may collect, use, store and transfer different kinds of personal information about you, grouped together as follows:

Communication details: first name, last name, email address, title/position, telephone number, postal address, contact preferences.
Social Media Data: Information associated with your accounts (e.g., name, username, email address, profile picture, date of birth, gender) when you interact with us through these platforms.
Technical Data: IP address, connection data, click counter and related information (sites visited immediately before/after our Website), time zone and region settings, internet service provider, as well as data about the device and technologies used to access our Website.
Usage Data: Number of visits, date and average duration of sessions, navigation paths, and information on how you use our products and services.
Marketing and communications data: prospecting preferences (of Brosso and, where applicable, of related third parties) and communication preferences.

Example: When you visit the Website and choose to write to us (form, email, etc.), you may be asked to provide your name and email address in order to get in touch with us.

We also collect, use, store, and share aggregated (statistical or demographic) data. This data may be derived from personal information, but is not considered personal data if it does not directly or indirectly identify an individual.
For example, we may aggregate usage data to calculate the percentage of users accessing a particular feature of our Website. However, if we combine or connect this aggregated data with personal information in a way that directly or indirectly identifies you, then we will treat this data as personal information and use it in accordance with this Policy.

Use of Personal Information

Nous limitons la collecte de renseignements personnels à ce qui est raisonnablement nécessaire pour atteindre les objectifs visés. Le plus souvent, nous utilisons vos renseignements dans les cas suivants :

a) Exécution d’un contrat

Lorsque cela est nécessaire pour conclure ou exécuter un contrat avec vous (p. ex., fournir un service, répondre à une demande préalable à la conclusion d’un contrat).

b) Intérêts légitimes

Lorsque le traitement est nécessaire à nos intérêts légitimes (ou ceux d’un tiers) et que vos droits et libertés n’y prévalent pas. Cela inclut notamment la communication avec vous, le suivi de la relation et l’amélioration de nos services.
Avant tout traitement fondé sur l’intérêt légitime, nous évaluons l’impact potentiel (positif/négatif) sur vous et ajustons nos pratiques au besoin. Nous n’y recourons pas si l’impact l’emporte sur nos intérêts (sauf consentement de votre part ou obligation légale). Pour plus d’information, vous pouvez contacter notre délégué à la protection des renseignements personnels.

c) Obligations légales

Lorsque le traitement est nécessaire pour respecter une obligation légale à laquelle Brosso est soumise.

Utilisations typiques et motifs juridiques

Formulaire de contact (Site Web)

Utilisation : répondre à votre demande (services, informations, etc.).
Base légale : intérêt légitime (gestion de la relation).
Consentement : en envoyant le formulaire, vous nous fournissez un consentement implicite à conserver et utiliser les informations qu’il contient aux fins de suivi de votre requête.

Médias sociaux

Utilisation : vous permettre d’interagir avec nos contenus depuis des plateformes tierces et, le cas échéant, recevoir des informations associées à vos comptes (p. ex. nom, nom d’utilisateur, adresse courriel, photo de profil, genre) pour la diffusion de contenu, le fonctionnement de nos modules d’extension/applications et la personnalisation de votre expérience.
Base légale : intérêt légitime (analyser l’usage de nos contenus et services, améliorer nos offres et notre marketing, faire croître l’entreprise).

Visites du Site Web

Utilisation : collecte de données telles que adresse IP, parcours de navigation, fréquence et durée des visites, afin d’administrer, sécuriser, améliorer le Site Web, comprendre son usage et analyser les tendances.
Base légale : intérêt légitime (exploitation du site, services administratifs/techniques, prévention de la fraude) et, le cas échéant, obligation légale.

Gestion de la relation (CRM)

Utilisation : compléter et actualiser nos bases CRM à partir des activités ci-dessus ; produire des rapports internes pour suivre la relation et améliorer nos offres et notre Site Web.
Base légale : intérêt légitime (analyse de l’usage, amélioration marketing/produits, développement de l’activité).

Communication interne

Les renseignements personnels collectés peuvent être utilisés par Brosso et communiqués en interne afin de :
répondre à vos demandes, communiquer avec vous et vous assister conformément à la présente Politique.

Remarque : Selon le contexte, un même traitement peut reposer sur plus d’une base légale (p. ex., intérêt légitime et exécution du contrat). N’hésitez pas à nous contacter si vous souhaitez des précisions sur le motif juridique applicable à une activité spécifique.

Disclosure of Personal Information

Except as expressly stated in this Policy, we do not sell, rent, transfer or otherwise disclose your personal information to third parties for undisclosed purposes without your consent.

Access to your personal information is restricted to Brosso Innovations (“Brosso”) personnel—including certain team members, management, and marketing—who need it to perform their duties.

We may, however, share your personal information, depending on the context, with the following categories of third parties:

1) Service providers

Third parties that provide services on our behalf, in Canada, the United States or abroad (e.g., Google for certain Google Analytics features described herein).

We only provide them with the information necessary to carry out their mandate and do not authorize the use or disclosure of this information for their own commercial purposes.

2) Entities, bodies and authorities (judicial and legal purposes)

We (and our suppliers) may disclose personal information in order to:

respond to a search warrant, legal request or order;
cooperate with an investigative body in the event of an allegation of violation of an agreement or the law;
exercise or defend legal rights;
prevent actual or suspected loss, bodily injury or property damage;
or more broadly when required or permitted by law.

3) Business operations

In the event of a sale of all or part of our business, transfer of assets, merger or reorganization, personal information may be transferred to the acquiring entity as part of the transaction.

Retention and protection of personal information

We have implemented administrative, technical and physical security measures to protect the personal information we hold against unauthorized access, use, modification or disclosure.

We also conduct risk assessments related to the potential disclosure of personal information. In the event of a security breach (loss, unauthorized access, or disclosure), we will notify you when there is a real risk of serious harm (e.g., bodily harm, humiliation, loss of professional opportunities, financial loss, identity theft).

When this risk is proven, we will notify you directly as soon as possible; if direct notification is not possible, a public communication will be issued.
The notice will contain the information needed to understand the breach and reduce the risk of harm.
We will also report the breach to the appropriate authorities and, where appropriate, to any organization that may be able to help mitigate its effects.
We keep a record of all breaches and, following each one, investigate the causes and review our safeguards to prevent future incidents.

Retention of information

We use retention procedures designed to keep personal information only for as long as necessary for the purposes described in this Policy or to comply with applicable legal requirements. Once these purposes are fulfilled (or the legal time limits have expired), the information is securely deleted or anonymized.

Your rights regarding your personal information

You have the following rights:

Right of access
Receive a copy of the personal information we hold about you and check that we are processing it lawfully.
Right of rectification (update/correction)
Correct or update incomplete, inaccurate, or outdated information. We may verify the accuracy of the new information provided.
Right to erasure
Request deletion of your information where there is no valid reason for its continued processing, where you have successfully exercised your right to object, where the processing was unlawful, or where the law requires erasure. However, certain legal obligations may prevent us from complying with this; if so, we will inform you.
Right to object
Object to processing based on our legitimate interests when something specific to your situation affects your rights and freedoms.
You can also object to direct marketing. In some cases, we may demonstrate compelling legitimate grounds to continue processing.
Right to restriction of processing
Request suspension of processing when:
a) you dispute the accuracy of the data (verification time);
(b) the use is unlawful but you do not want it to be erased;
(c) you need the data to establish, exercise or defend legal claims;
d) you have objected to the processing and we are verifying the existence of overriding legitimate grounds.
Right to portability
Receive (or transmit to a designated third party) your personal information in a structured, commonly used and machine-readable format, where the processing is automated and based on your consent or the performance of a contract.
Right to withdraw your consent
Withdraw your consent at any time where processing is dependent on it. Withdrawal does not affect the lawfulness of processing already carried out. However, it may prevent us from providing certain services; if so, we will inform you.

If you wish to exercise any of these rights, please contact our Privacy Officer (see next section).

Fees : You will not have to pay any fees to exercise your rights (except in cases where the request is manifestly unfounded, repetitive or excessive).
Identity verification : We may ask you for specific information to confirm your identity (a security measure to prevent unauthorized disclosure) and, if necessary, ask you for clarification to expedite processing.
Response time : We respond to all justified requests within thirty (30) days.

Contact us

For any questions or comments about the processing of your personal information (including exercising your rights) or to request access to, update or correct information we hold about you, please contact our Privacy Officer:

Responsible : Jean-Philippe Brosseau, co-president of Brosso Innovations
Email : jpbrosseau@brosso.ca

You may also withdraw your consent to the collection, use or disclosure of your personal information by using the contact details above. Please note, however, that withdrawing your consent may prevent us from responding to certain requests, processing inquiries or, more broadly, assisting you in using our Website or certain services.