1. Data controller

This privacy policy is published by Fromagerie Polyethnique Inc. (hereinafter "we", "us" or "the company"), a company subject to the An Act to modernize legislative provisions respecting the protection of personal information (S.Q. 2021, c. 25), commonly referred to as Bill 25.

As a Québec company, we are committed to collecting, using and retaining your personal information in a transparent, proportionate and secure manner, in accordance with our obligations under Bill 25.

Our site is hosted by Horizon-Cumulus (Quebec, Canada). Your data is hosted in Quebec via this infrastructure.

2. Personal information collected

Depending on your use of our site, we may collect the following categories of personal information:

• Identification and contact information - name, e-mail address, phone number, collected when you fill out a contact form or subscribe to our newsletter.
• Technical and navigational information - IP address, device identifiers, advertising identifiers, pages visited, duration of session, browsing behavior and approximate location, collected automatically by the analysis and marketing tools present on the site.
• Communication-related information - e-mail address and communication preferences, collected when subscribing to our newsletter.
• Form data - any information you enter in our online forms (reservation, inquiry, etc.).

We do not collect sensitive personal information (health data, social insurance number, biometric data) as part of the ordinary operation of this site.

3. Purposes of processing

We use your personal information only for the purposes described below. For each purpose, we indicate the legal basis on which we rely.

• Site operation - to ensure navigation, security and proper operation of pages. Legal basis: legitimate interest.Essential cookies are always active and cannot be deactivated.
• Audience measurement and site improvement - analyze visitor behavior to improve content and browsing experience, via Google Analytics 4. Legal basis: consent.
• Management of tracking tags - Deploy and coordinate measurement and conversion tools on the site, via Google Tag Manager Google Tag Manager. Legal basis: legitimate interest (technical management tool).
• Targeted advertising and remarketing - measure conversions and show you relevant ads on Meta platforms (Facebook, Instagram), via the Meta Pixel Meta Pixel. Legal basis: consent.
• Display of textual content - load the fonts required to display the site, via Google Fonts Google Fonts. Legal basis: legitimate interest (visual rendering of the site).
• Newsletter dispatch - We will send you our news, promotions and updates if you have subscribed. Legal basis: consent.You can unsubscribe at any time via the link in each e-mail.
• Responding to your requests - process your questions, reservations or requests for information submitted by form. Legal basis: performance of a pre-contractual or contractual relationship.

4. Third parties and subcontractors

Certain third-party services are integrated into our site. These suppliers may have access to some of your personal information strictly for the purposes described. The following table provides a complete list.

We do not sell your personal information to third parties. We only share it with the suppliers listed above, to the extent necessary to fulfill the purposes described in section 3.

5. Transfers outside Québec

Some of our suppliers are located in United States. In accordance with section 17 of Bill 25, we inform you that your personal information may be communicated outside Quebec in connection with the use of the following services:

• Google Analytics 4 (United States) - your device ID, IP address, pages visited, session duration, browsing behavior and approximate location may be processed on U.S. servers.
• Google Tag Manager (United States) - your device IDs, IP address, pages visited and form data may pass through this infrastructure.
• Meta Pixel (United States) - your device identifiers, IP address, pages visited, transaction data, advertising identifiers and social identifiers may be transmitted to Meta Platforms, Inc.
• Google Fonts (United States) - your IP address and device ID may be transmitted to Google servers when fonts are loaded.
• Microsoft 365 (United States) - your contact information and the content of your e-mail exchanges with us may be processed on Microsoft Corporation servers in the United States.

Prior to any transfer, we ensure that the supplier offers a level of protection of personal information deemed adequate, in particular by concluding appropriate contractual clauses. When required by the nature of the processing, we carry out a Privacy Impact Assessment (PIA) in accordance with the requirements of Bill 25.

Our site is hosted by Horizon-Cumulus (Quebec, Canada) and part of our e-mail communications are managed by Horizon-Cumulus Email (Quebec, Canada). These components of our infrastructure remain in Quebec.

6. Shelf life

We keep your personal information only as long as necessary for the purposes for which it was collected, or as required by law.

Once these time limits have expired, your information is destroyed or securely anonymized, so that it is no longer possible to identify you.

7. Rights of persons concerned

Bill 25 gives you the following rights with respect to your personal information held by us. If you wish to exercise any of these rights, please contact our designated person in charge as indicated in section 8.

• Your right of access - Right of access - you may ask to see the personal information we hold about you, as well as information about how it is used and disclosed.
• Right of rectification - if information concerning you is inaccurate, incomplete or ambiguous, you may request that it be corrected.
• Right to erasure (right to be forgotten) - you may request the deletion of your personal information when its retention is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to portability - You may request to receive the personal information you have provided in a structured and commonly used technological format, in order to transmit it to another data controller.
• Right to withdraw consent - when processing is based on your consent (newsletter, analytical or marketing cookies), you may withdraw this consent at any time, without affecting the lawfulness of the processing carried out prior to this withdrawal. For cookies, you can manage your preferences via our consent banner. For the newsletter, use the unsubscribe link in each e-mail.

If you feel that your rights are not being respected, you have the right to file a complaint with the Commission for Access to Information (CAI) : www.cai.gouv.qc.ca .

8. Designated Privacy Officer

In accordance with Law 25, Fromagerie Polyethnique Inc. has designated a person responsible for the protection of personal information. Any question, request for access, rectification or other exercise of rights must be addressed to him or her:

• Person in charge : Jean-Pierre Salvas
• Company: Fromagerie Polyethnique Inc: Fromagerie Polyethnique Inc.

We undertake to acknowledge receipt of your request as soon as possible and to respond within a maximum of 30 dayswe will respond within 30 days of receipt, in accordance with Bill 25. If your request is complex or voluminous, we will advise you of any additional time required.

9. Effective date and versioning

This Privacy Policy is effective as of May 11, 2026 and corresponds to the version 4.

We reserve the right to modify it at any time to reflect changes in our practices, in the technologies used or in applicable legal requirements. In the event of substantial modification, we will inform you by means of a notice visible on our site before the changes take effect. The most recent version is always available on this page.

Your continued use of the site after publication of an updated version constitutes your acceptance of the changes made, to the extent permitted by law.