- Home
- Privacy Policy
Legal
Privacy Policy
How we collect, use, and protect personal information, and the rights you have under Quebec's Law 25 and Canadian federal privacy law.
1. Who we are
9144820 Canada Inc., doing business as Meginteractive Solutions ("Meginteractive Solutions", "we", "us"), is a commerce technology company established in Quebec, Canada. We are responsible for the personal information described in this policy.
Our address:
298 rue Picasso
Dollard-des-Ormeaux, Quebec H9A 3K3, Canada
Person in charge of the protection of personal information (our Privacy Officer, as required by section 3.1 of Quebec's Act respecting the protection of personal information in the private sector):
Brahm Morganstein, President
Email: hello@meginteractive.com
2. What this policy covers
This policy applies to personal information we collect through meginteractive.com, when you contact us, and in the course of our business relationships with clients, suppliers, and prospective clients.
It does not cover personal information we handle on behalf of our clients when we build, host, or maintain their systems. In that work we act as a service provider following our client's instructions, and their own privacy policy governs. See section 17.
3. Information we collect
Information you give us
When you submit our contact form or email us, we collect what you choose to provide:
| Information | Required? | Why |
|---|---|---|
| Name | Yes | To know who we are replying to |
| Email address | Yes | To reply to your enquiry |
| Message / project details | Yes | To understand what you need |
| Company | No | Business context for your enquiry |
| Phone number | No | To reach you if you prefer a call |
| Area of interest | No | To route your enquiry internally |
Please do not include sensitive personal information in the form. If your enquiry involves confidential material, contact us first and we will arrange a secure method.
Information collected automatically
Our web server keeps standard technical logs: IP address, date and time of the request, the page requested, browser type, and operating system. These are generated by the hosting infrastructure for security and troubleshooting. We also log the IP address of contact form submissions blocked as automated spam.
Information we do not collect
This website does not use analytics software, advertising pixels, or social media trackers. We do not build advertising profiles, and we do not buy or sell personal information.
One exception. Our contact page loads Google reCAPTCHA to tell people from automated submissions. On that page only, your browser contacts Google, which receives your IP address and information about your interaction with the page in order to score the request. No other page on this site loads anything from a third party. If you would rather not use it, email us directly instead — the address is on the same page.
4. Why we collect it
- To respond to your enquiry and correspond with you about it
- To provide, support, and improve the services a client has engaged us for
- To manage our business relationship, including contracts and invoicing
- To keep our website and systems secure and to prevent abuse
- To meet legal, accounting, and regulatory obligations
We use personal information only for the purposes above, or for a purpose consistent with them. If we ever want to use it for something new, we will ask you first.
5. Consent and how to withdraw it
We collect personal information with your consent, or where the law otherwise permits it — for example, where the information is necessary to perform a contract with you, or to comply with a legal obligation.
Submitting the contact form is a voluntary act, and we treat it as your consent for us to use those details to reply to you. You can withdraw your consent at any time by emailing us. Withdrawing consent does not affect anything we did lawfully beforehand, and it may mean we can no longer provide a service you have asked for.
6. Cookies and tracking
We set no cookies of our own, anywhere on this site, and store nothing in your browser's local or session storage.
Our contact page is the single exception. The Google reCAPTCHA there sets a cookie in your browser, placed by Google rather than by us, for the purpose of distinguishing people from bots. It is a security measure, not analytics or advertising, and it appears on no other page. If you prefer to avoid it, email us directly instead of using the form.
If we add any technology in future that collects information about you, identifies you, locates you, or profiles you, we will tell you before we activate it and give you the means to turn it off, as section 8.1 of Law 25 requires.
7. Who we share it with
We do not sell, rent, or trade personal information. We share it only in these cases:
| Recipient | Purpose | Location |
|---|---|---|
| Leaseweb Canada Inc. | Web hosting and server infrastructure | Montreal, Quebec, Canada |
| Twilio SendGrid | Delivering contact form submissions to our inbox | United States |
| Google (reCAPTCHA) | Distinguishing people from automated submissions on the contact page | United States |
| Google Workspace | Our business email | United States and other regions where Google operates |
| Professional advisors, authorities | Where required by law, or to establish or defend legal claims | As applicable |
Service providers may use personal information only to perform services for us, under contract, and may not use it for their own purposes.
8. Where it is stored
Our website and its data are hosted in Montreal, Quebec, so information submitted through this site is stored in Canada.
One exception: messages sent through our contact form are delivered by Twilio SendGrid, which processes them on servers in the United States. Your name, email address, and message therefore leave Quebec in the course of being delivered to us. Information stored in the United States may be accessible to authorities there under that country's laws.
Before disclosing personal information outside Quebec, section 17 of Law 25 requires us to assess whether it would receive adequate protection. If you would rather not have your message routed through a United States provider, email us directly instead of using the form.
9. How long we keep it
| Information | Retention period |
|---|---|
| Enquiries that do not become a project | 12 months from last contact |
| Client records and correspondence | Duration of the relationship, then 3 years |
| Invoices and accounting records | As required by Canadian and Quebec tax law (6 years) |
| Web server logs | Approximately one month |
When personal information is no longer needed for the purpose it was collected for, we destroy it or anonymise it.
10. How we protect it
- The whole website is served over HTTPS with a valid TLS certificate
- Credentials and API keys are stored outside the public web directory, readable only by the account that needs them, and never in any page, script, or stylesheet
- Access to systems holding personal information is limited to staff who need it
- Servers receive security updates, and backups are taken regularly
- Our contact form filters automated submissions
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do commit to the measures above and to reviewing them.
11. Confidentiality incidents
If a confidentiality incident occurs — unauthorised access to, use of, disclosure of, or loss of personal information — we will take reasonable steps to reduce the harm and prevent it happening again.
Where the incident presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and the people affected, as promptly as possible. We maintain a register of confidentiality incidents as required by law.
12. Automated decisions
We do not make decisions about you based exclusively on automated processing of your personal information. If that ever changes, we will tell you at the time, and you will be entitled to know what information was used, the reasons for the decision, and to have it reviewed by a person.
13. Your rights
Under Quebec's Law 25 and Canadian federal privacy law, you have the right to:
- Access the personal information we hold about you, and be told how it is being used and who it has been given to
- Correct information that is inaccurate, incomplete, or ambiguous
- Withdraw your consent to our continued use of it
- Portability — receive the computerised personal information you provided to us in a structured, commonly used technological format, or have it sent to another organisation
- De-indexation — ask us to stop disseminating your personal information, or to de-index any hyperlink that gives access to it, where dissemination contravenes the law or a court order, or causes serious injury to your reputation or privacy
- Complain to us, and to the regulator, about how we handle your information
14. How to exercise them
Write to our Privacy Officer at hello@meginteractive.com. Tell us what you want to do and give us enough detail to find your information. We may need to verify your identity before we act, so that we do not disclose your information to someone else.
We will respond within 30 days of receiving your request, as the law requires. Our response is free of charge in normal circumstances; if a transcription, reproduction, or transmission fee applies, we will tell you the amount before we proceed. If we refuse a request, we will explain why, tell you which provision we rely on, and tell you how to seek a review.
15. Commercial emails
If we send you commercial electronic messages, we do so in accordance with Canada's Anti-Spam Legislation. Every such message identifies us, gives our contact details, and contains a working unsubscribe link. Unsubscribing takes effect within 10 business days at the latest and is free.
Replying to your enquiry, and correspondence about work we are doing for you, are not commercial electronic messages of that kind. Unsubscribing from marketing does not stop us replying to you about a project.
16. Minors
Our services are directed at businesses, and we do not knowingly collect personal information from anyone under 14 without the consent of a parent or guardian. If you believe we have, contact our Privacy Officer and we will delete it.
17. Data we handle for clients
Much of our work involves building, integrating, and hosting systems that contain other people's personal information — customer records in a Shopify store, orders moving between an ERP and a warehouse, contacts in a Klaviyo account.
In that work our client is responsible for the information, and we act on their instructions as a service provider. We do not use it for our own purposes. Our agreements set out confidentiality and security obligations, and we return or destroy the information at the end of an engagement. If you are a customer of one of our clients and want to exercise your rights, contact that business directly — they are best placed to identify your records.
18. Other websites
Our site may link to sites we do not operate. This policy does not apply to them, and we are not responsible for their practices. We would encourage you to read the privacy policy of any site you visit.
19. Changes to this policy
We may update this policy as our practices or the law change. The effective date at the top of the page shows when the current version took effect. If a change materially affects how we handle personal information already collected, we will take reasonable steps to tell you.
20. Questions and complaints
Please raise anything with our Privacy Officer first — most matters are resolved quickly: hello@meginteractive.com.
If you are not satisfied with our response, you may complain to the regulator:
Commission d'accès à l'information du Québec
www.cai.gouv.qc.ca
For matters falling under federal jurisdiction:
Office of the Privacy Commissioner of Canada
www.priv.gc.ca
Get started
Let's Build Something Better
Whether you need a custom Shopify solution, enterprise integration, a SaaS platform, or a complete digital transformation, Meginteractive Solutions has the technical expertise to bring your vision to life.