Privacy Policy

1. Person responsible for the protection of personal information

The person responsible for the protection of personal information at Épines & Roses is:

2. Information collected

We only collect the information necessary for the purposes described in this policy. This information may include:

• First and last name
• Email address
• Phone number (optional)
• Message submitted via the contact form
• Browsing data (IP address, browser type, pages visited) via anonymized analytics tools

We do not collect any medical or clinical information via our website. Information related to your therapeutic follow-up is managed in a separate, secure and confidential system, in accordance with the psychologists' Code of Ethics.

3. Purposes of collection

Your information is collected for the following purposes:

• Contact form: to respond to your requests for information or appointments
• Analytics: to improve our website and understand how it is used (aggregated and anonymized data)
• Communications: to send you requested information or appointment confirmations

We do not use your information for commercial purposes, nor do we sell it to third parties.

4. Consent

By submitting our contact form, you consent to us using your information to respond to you. This consent is free, informed, and can be withdrawn at any time by contacting us at contact@epinesetroses.ca.

5. Retention and destruction

Your information is kept only for as long as necessary for the purposes for which it was collected:

• Contact form: up to 12 months after your last interaction, or upon request
• Analytics data: according to the settings of the tool used (Google Analytics: 14 months by default)

Once these periods expire, your data is securely destroyed.

6. Sharing with third parties

We do not share your personal information, except in the following cases:

• Service providers: we use Resend (email delivery) and Google Analytics (traffic analysis). These providers act as processors and are required to protect your data in accordance with their own privacy policies.
• Legal obligations: if required by law or to protect our legal rights.

7. Your rights (Law 25)

In accordance with Law 25, you have the following rights:

• Access: request a copy of the information we hold about you
• Rectification: correct inaccurate or incomplete information
• Deletion: request the deletion of your information (right to erasure)
• Portability: receive your information in a structured, commonly used format
• Withdrawal of consent: withdraw your consent at any time

To exercise these rights, contact us at contact@epinesetroses.ca. We will respond within a reasonable timeframe (maximum 30 days).

8. Security

We implement reasonable security measures to protect your information against unauthorized access, disclosure, modification or destruction. Our site uses the HTTPS (TLS) protocol. Our service providers are selected taking their security practices into account.

9. Cookies

Our site places cookies strictly necessary for its operation, as well as audience measurement (Google Analytics) and advertising (Google Ads) cookies. The latter are only activated with your consent: until you give it, no measurement or advertising data is collected. IP addresses are anonymized.

You can grant or withdraw your consent at any time via the "Manage cookies" link at the bottom of each page. Refusing is as simple as accepting and does not affect your use of the site.

10. Changes to this policy

We may update this privacy policy periodically. The date of the last update appears at the top of this page. We encourage you to review this page regularly.

11. Contact and complaints

For any question regarding this policy or to exercise your rights, contact our person responsible for the protection of personal information:

If you believe your rights have not been respected, you may file a complaint with the Commission d'accès à l'information du Québec (CAI): www.cai.gouv.qc.ca