Privacy Policy

Last updated: October 2025

At Erola, your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with Quebec’s Law 25, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable privacy laws.

By using our website or services, you consent to the practices described below.

1. Information We Collect

Personal Information

We collect only the information necessary to provide our services. This may include:

• Name, email address, and phone number.

• Company information or professional title (if applicable).

• Payment or billing details (when purchasing services).

• Any information voluntarily shared through contact forms, subscriptions, or communications.

Device and Usage Data

We automatically collect technical data such as:

• IP address, browser type, operating system, and device type.

• Pages visited, time spent, and navigation patterns.
  This helps us analyze website performance, security, and usability.

Cookies and Tracking Technologies

Erola uses cookies and similar technologies to enhance your browsing experience, remember preferences, and analyze site performance.
You may disable cookies through your browser settings, but some site features may not function properly without them.

2. How We Use Your Information

We collect and process your data for legitimate business purposes, including:

• Service Delivery: To respond to inquiries, provide consulting or digital services, and process payments.

• Improvement and Development: To improve our website, content, and user experience.

• Customer Support: To assist with service requests or technical issues.

• Marketing (With Consent): To send updates, promotions, or newsletters only when you have explicitly opted in.

• Legal and Security: To comply with legal obligations, prevent fraud, and ensure data integrity.

We never use your personal information for purposes other than those disclosed at the time of collection, unless required or permitted by law.

3. Legal Basis for Processing (Law 25 / PIPEDA)

We collect and use personal data based on one or more of the following lawful bases:

• Your consent (explicit or implied).

• To perform a contract or provide services you’ve requested.

• To comply with a legal obligation.

• For legitimate business interests, such as improving our services or ensuring security.

You can withdraw your consent at any time by contacting us (see Section 10).

4. Data Sharing and Disclosure

We do not sell or rent your personal data. We only share it when necessary:

• Service Providers: With trusted partners (e.g., hosting, analytics, payment processors) who assist us in operating our business.

• Legal Requirements: When required by law, regulation, or a court order.

• Business Transactions: In the event of a merger, sale, or reorganization, your data may be transferred under strict confidentiality obligations.

All third parties handling your data must comply with comparable privacy and security standards.

5. Data Retention and Storage

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law.

Data may be stored securely on servers located in Canada or other jurisdictions offering comparable privacy protection. When data is transferred outside Quebec or Canada, we ensure that equivalent safeguards are in place.

6. Data Security

Erola implements administrative, technical, and physical safeguards to protect your personal data against unauthorized access, loss, misuse, or alteration.
Examples include:

• Encrypted connections (SSL/TLS).

• Limited access to authorized personnel only.

• Regular data protection and security reviews.

However, no system is entirely immune to security risks, and we cannot guarantee absolute security.

7. Your Rights

Under Law 25 and PIPEDA, you have the following rights:

• Access: Request access to the personal data we hold about you.

• Correction: Request correction or update of inaccurate information.

• Deletion: Request deletion of your personal data, subject to legal retention obligations.

• Portability: Obtain a copy of your personal data in a structured, commonly used format.

• Withdraw Consent: Revoke consent for specific uses (e.g., marketing).

• Right to Complain: File a complaint with the Commission d’accès à l’information du Québec (CAI) if you believe your privacy rights have been violated.

Requests can be made at any time by contacting our Privacy Officer (see Section 10).

8. Third-Party Links

Our website may include links to external websites or third-party services. Erola is not responsible for the content, security, or privacy practices of these sites. We encourage you to review their policies before providing any personal data.

9. Children’s Privacy

Our services are not directed to individuals under 13 years old. We do not knowingly collect personal data from minors. If we become aware that a child’s data has been collected, we will promptly delete it.

10. Contacting Our Privacy Officer

Erola has appointed a Privacy Officer (Responsable de la protection des renseignements personnels) as required by Law 25.

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact:

Privacy Officer – Erola
📧 hello@erola.co
📍 Montreal, Quebec, Canada

We will respond to all verified requests within a reasonable time frame, in accordance with applicable privacy laws.

11. Updates to This Policy

Erola may update this Privacy Policy from time to time to reflect changes in our operations, technologies, or legal requirements. The “Last Updated” date at the top of this page indicates when changes were made. Continued use of our website or services after updates constitutes your acceptance of the revised policy.