PRIVACY POLICY
BENDER AND ASSOCIATES

Introduction
BENDER AND ASSOCIATES respects your privacy and complies with the Act respecting the protection of personal information in the private sector (RLRQ, c. P-39.1) and Act 25 (An Act to modernize certain provisions of the Act respecting the protection of personal information).

Personal information
Personal information is any information that can be used to identify an individual. We collect only the information necessary for our real estate activities.

Consent
We collect, use, and share your personal information only with your explicit consent. This consent must be freely given, informed, and specific to the purposes for which it is being collected. You may withdraw your consent at any time, although this may affect our ability to serve you.

Our responsibility
We are responsible for protecting your personal information and have policies and practices in place to do so.

Minimum collection
We collect only the information strictly necessary for our real estate brokerage services, in accordance with the principle of minimization required by Act 25.

Use and disclosure
Your information is used only for the purposes for which it was collected. In some cases, we may be required to disclose it to third parties (suppliers, subcontractors, insurers, regulators). In such cases, we enter into contracts with protective clauses.

Transfers outside Quebec
Before transferring any personal information outside Quebec, we assess whether adequate protection will be provided in accordance with Act 25.

Retention and destruction
We retain your information for six years after the permanent closure of your file, in accordance with our professional obligations. It is then destroyed in a secure manner.

Security measures

We protect your information through technical and administrative measures:

• Storage on secure Sharepoint
• Two-factor authentication
• Access limited to persons involved in your file

Confidentiality incidents
A privacy incident is any unauthorized access, use, or disclosure of personal information. We have a protocol for handling such incidents and will notify you if there is a risk of serious harm, in accordance with Act 25.

Responsible parties
The privacy officer is responsible for ensuring compliance with this policy and managing privacy incidents.

Your rights
You have the right to:

• Access your personal information
• Have inaccurate information corrected
• Withdraw your consent
• File a complaint

Contact us to exercise your rights
For any request for access, correction, or to file a complaint, contact our officer: François Bender – 418-683-4293 ext. 221