Last updated: October 29, 2026

NeoTech Cloud Solutions (“NeoTech”, “we”, “us”) takes the protection of your personal information seriously. This privacy policy explains how we collect, use, disclose, retain and protect your personal information, in accordance with Quebec’s Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1), as amended by Law 25 (An Act to modernize legislative provisions as regards the protection of personal information).

1. Who we are

Business name: NeoTech Cloud Solutions
Quebec Enterprise Number (NEQ): 1179590311
Service area: Greater Montreal (Quebec, Canada)
Address: 2572 Daniel-Johnson Blvd., 2nd floor, Suite 237, Laval, QC H7T 2R3
Email: info@neotechcloudsolutions.com
Phone: 438-476-2322

2. Person in charge of the protection of personal information

In accordance with Law 25, the person with the highest authority at NeoTech has delegated the role of person in charge of the protection of personal information (privacy officer) to:

Ian-Rémi Lafleur, Person in charge of the protection of personal information
Email: info@neotechcloudsolutions.com
Phone: 438-476-2322

The privacy officer ensures compliance with this policy and handles any question, access or correction request, or complaint regarding your personal information.

3. Personal information we collect

When you fill out our contact form, we collect the following information:

your name;
your email address;
your company name;
your phone number;
your company’s number of employees;
the service you are interested in;
the content of your message;
your optional choice to receive our email communications (opt-in checkbox).

We may also automatically collect certain technical information when you visit our site (for example, IP address, browser type, pages viewed, and the date and time of your visit), as described in section 6.

If you request a free Cyber Check, we also collect the information described in section 10.

4. Purposes of collection

We use your personal information only for the following purposes:

to respond to your request and communicate with you;
to assess your needs and offer suitable services (for example, a quote or consultation);
if you have consented, to send you email communications (news, tips, offers);
to ensure the proper operation, security and improvement of our website;
to comply with our legal obligations.

We collect only the information necessary for these purposes. We do not sell or rent your personal information.

5. Consent

By submitting the contact form, you consent to our use of your information to process and respond to your request. Your consent to receive our email communications is separate and optional, and is given by checking the box provided for that purpose; it is not required to receive a response to your request. You may withdraw your consent at any time (see section 11), subject to applicable legal or contractual restrictions. We will ask for your consent before using your information for any other purpose.

6. Cookies and analytics

Our site uses cookies and similar technologies. Some are essential to the operation and security of the site (for example, remembering your language choice or protecting forms against spam). Others may be used to measure traffic and understand how the site is used, through analytics and measurement tools (currently Google Tag Manager, used to deploy Google Ads conversion tracking and Microsoft Advertising tags; no Google Analytics tool is used), in order to improve our content and measure the effectiveness of our advertising.

In accordance with Law 25, technologies that allow you to be identified, located or profiled are turned off by default and are only activated with your consent, which you can give, refuse or change at any time through the site’s cookie banner and its “Cookie preferences” link. You can also configure your browser to refuse or delete cookies; some features of the site may then not work properly.

7. Sharing with service providers

We may share your personal information with service providers acting on our behalf, only to the extent necessary to carry out their mandate, including:

our web hosting provider, HostGator;
OVHcloud (OVH Hébergement inc.), which hosts our analysis server in Beauharnois, Quebec;
Brevo (Sendinblue SAS, France), used to send us the internal notice for each Cyber Check request;
our email service provider, Microsoft 365 (Microsoft);
the WordPress plugins Formidable Forms and WP Mail SMTP, used to manage our contact form and send emails; Google (Google Tag Manager and Google Ads) and Microsoft (Microsoft Advertising), for conversion measurement, only with your consent.

These providers are bound by contractual confidentiality and security commitments and may not use your information for any other purpose. We may also disclose information where required or permitted by law.

8. Information stored outside Quebec

Some of our service providers may host or process your personal information outside Quebec, namely in Canada, the United States and the European Union (Brevo). Before any communication outside Quebec, we conduct a privacy impact assessment as required by Law 25 and ensure that the information will receive adequate protection, including through written agreements. Your information may nevertheless be subject to the laws of the jurisdictions where it is stored.

Managed services: subprocessors outside Quebec

When we manage our clients’ workstations and servers, some information, mostly technical (device names, usernames, IP addresses, software inventory, security logs and alerts), is processed by the following subprocessors located outside Quebec:

Level Software, Inc. (remote monitoring and management tool, RMM): hosted in the United States at Advanced Data in Asheville, North Carolina. A data processing agreement (DPA) has been signed with Level.
SentinelOne (endpoint detection and response, EDR), purchased through the distributor Pax8: hosting region confirmed at deployment.

In accordance with section 17 of the Act respecting the protection of personal information in the private sector (Law 25), we carried out a privacy impact assessment (PIA) before entrusting this information to Level, and we will carry one out for SentinelOne before it goes into service. These assessments consider the sensitivity of the information, the purposes for which it is used, the contractual and technical safeguards, and the legal framework of the jurisdiction where it is sent.

9. Retention

We retain your personal information only as long as necessary to fulfil the purposes for which it was collected. Information submitted through the contact form is kept for 24 months after our last exchange and then deleted, unless you become a client, in which case it is kept for the duration of the business relationship and the period required by law. If you subscribed to our email communications, we keep your address until you unsubscribe. At the end of the retention period, information is securely destroyed or anonymized.

10. Free Cyber Check

When you request a free Cyber Check through the form on our website, the following rules apply in addition to the rest of this policy.

Information we collect

your first and last name;
your business email address;
your company name;
your company’s domain name (for example, company.ca);
the IP address from which the form is submitted;
proof of your consent: the exact wording of the boxes you ticked (authorization to analyze, and consent to our use of your information), and the date and time of your request;
if you choose to provide them: your phone number, number of employees, industry, email platform (Microsoft 365 or Google Workspace), cyber-insurance renewal date and your choice to receive our email communications.

Purposes

We use this information to:

perform a passive analysis of the domain you entered, which means reading already public information only (for example DNS records, email settings such as SPF, DKIM and DMARC, the website’s certificate and security headers, public certificate logs and public data-breach databases). No intrusive testing is performed: no port scanning, no login attempts and no access to your systems. Deeper testing is done only with your separate written authorization;
prepare your report, send it to you and contact you about the results;
keep proof of your authorization to analyze that domain;
prevent abuse (for example, by limiting the number of requests per domain and per IP address).

By ticking the authorization box, you confirm that you are responsible for the domain entered or are authorized to request its analysis.

Where your information is processed

The form and the proof of consent are stored on our website, hosted by HostGator.
The analysis runs on our private server at OVHcloud in Beauharnois, Quebec, where your request and report are stored.
An internal notice with your request (company, name, email, domain, IP address and report link) is sent to us through the Brevo email service (Sendinblue SAS, France), which may process this message outside Canada (see section 8). This service never emails you automatically: we send you the report ourselves.

Retention

Analysis report: available at a private, unguessable link for 30 days, then deleted from our server.
Request record (form information, IP address and proof of consent): kept for 24 months after your request, so that we can demonstrate your authorization and answer your questions, then securely destroyed. If you become a client, section 9 applies.

Your rights and contact

You may at any time ask to access or correct your information, have it deleted early, or withdraw your consent (see section 11). The person in charge of the protection of personal information is Ian-Rémi Lafleur: info@neotechcloudsolutions.com, 438-476-2322.

11. Your rights

Subject to the exceptions provided by law, you have the right to:

be informed of and access the personal information we hold about you;
have any inaccurate, incomplete or equivocal information corrected;
withdraw your consent to the use or disclosure of your information, including unsubscribing from our email communications at any time (via the unsubscribe link or by writing to us);
request that we stop disseminating your information or de-index any hyperlink attached to your name, where permitted by law;
receive, on request, the computerized personal information you provided to us in a structured, commonly used technological format (data portability), where permitted by law;
file a complaint with the Commission d’accès à l’information du Québec (www.cai.gouv.qc.ca) if you believe your information is not being handled in accordance with the law.

To exercise your rights, write to our privacy officer at info@neotechcloudsolutions.com. We may need to verify your identity before processing your request. We will respond in writing within 30 days of receiving your request.

12. Security measures

We implement reasonable security measures, appropriate to the sensitivity of the information, to protect it against loss, theft, and unauthorized access, use, disclosure or modification, including:

encryption of communications between your browser and our site (HTTPS/TLS);
access to information restricted to those who need it to perform their duties;
use of strong passwords and multi-factor authentication for our accounts;
regular software updates and protection against spam and malicious access;
restricted access to the site’s administration, protected by strong passwords, and regular backups.

In the event of a confidentiality incident presenting a risk of serious injury, we will notify the Commission d’accès à l’information and the affected individuals, and we keep a register of incidents, as required by law.

13. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The current version is always posted on this page with its update date. Last updated: October 29, 2026.

14. Contact us

For any question, request or complaint regarding this policy or the handling of your personal information, contact our privacy officer:

Ian-Rémi Lafleur, Person in charge of the protection of personal information
NeoTech Cloud Solutions
2572 Daniel-Johnson Blvd., 2nd floor, Suite 237, Laval, QC H7T 2R3
Email: info@neotechcloudsolutions.com
Phone: 438-476-2322

Privacy Policy