Privacy Policy

Lofts Orizon

Last updated: May 2026 Applicable law: Act respecting the protection of personal information in the private sector, chapter P-39.1 (Quebec)

This policy explains what personal information we collect about you when you visit the website www.loftsorizon.com, make a reservation, or contact us, why we use it, and how we protect it. It replaces any previous version of our privacy policy.

1. Who we are

Lofts Orizon operates short-term rental lofts in Rimouski (Quebec), located near the hospital center.

280 rue Saint-Jean-Baptiste Ouest, Rimouski, QC G5L 4J6 Email: info@loftsorizon.com Phone: 581 824-9100 Website: www.loftsorizon.com

The Privacy Officer is the person to contact for any question regarding this policy.

Miguel Perreault President Email: info@loftsorizon.com Phone: 581 824-9100

2. Personal information we collect

2.1 Online booking (via HolidayFuture)

When you make a reservation through our booking platform (loftsorizon.holidayfuture.com), the following information is collected by Lofts Orizon and/or HolidayFuture, our booking manager:

First and last name

Email address

Phone number

Mailing address

Stay dates and number of guests

Payment information (processed directly by a PCI-DSS certified processor; Lofts Orizon does not retain your card numbers)

Notes or comments voluntarily provided during booking (e.g., reason for stay)

Purpose: To process and confirm your reservation; to contact you before, during, or after your stay (confirmation, arrival instructions, post-stay service); to prepare your welcome according to your needs.

Legal basis: Performance of the rental contract (art. 12 P-39.1). Note: if you mention a hospital stay in your notes, this information is considered sensitive and is used solely to personalize your welcome. It is never disclosed to third parties without your consent.

Retention: 7 years after the stay, in accordance with applicable Quebec tax and accounting obligations.

2.2 Contact form

When you contact us through the online form (Contact Us page), we collect:

First and last name (required)

Email address (required)

Phone number (optional)

Subject of the message (required: comment, testimonial, question, or other)

Content of the message (required)

Purpose: To respond to your request and follow up as needed.

Legal basis: Management of your request (art. 12 P-39.1).

Retention: 24 months after the last exchange, followed by secure destruction.

2.3 Google Analytics

With your consent, we use Google Analytics (Google LLC, United States) to measure site traffic and visitor behavior on our website. This tool may collect:

IP address (anonymized)

Browser and device type

Pages visited, visit duration, and referring pages

Actions taken on the site

Purpose: To understand how our site is used in order to improve it.

Legal basis: Your consent, collected via the cookie consent manager on your first visit (art. 14 P-39.1). Google's policy: policies.google.com/privacy.

Retention: According to the settings configured in Google Analytics (generally 14 months).

2.4 Google reCAPTCHA

Our forms are protected by Google reCAPTCHA (invisible) (Google LLC, United States) to prevent automated submissions.

Purpose: To protect forms against automated submissions and ensure site security.

Legal basis: Legitimate interest in site security (art. 12 P-39.1).

Retention: According to Google's settings.

3. Who we share your information with

We do not sell your personal information. We share it only in the following situations:

3.1 Service providers (agents)

Certain providers act on our behalf to deliver our services. They only have access to the information strictly necessary to perform their functions and are required to protect it.

HolidayFuture (booking manager): receives the booking data necessary to process your stay. Servers located outside Quebec.

Third-party payment processor (PCI-DSS certified): secure payment processing. Lofts Orizon does not have access to your card numbers.

Google LLC (Google Analytics, reCAPTCHA): site analysis (with consent) and form protection.

Magik Web (web agency): website design and maintenance. Limited data access within the scope of its mandate.

In accordance with section 18.3 of the Act, any mandate given to a third party with access to personal information must be established in writing and include confidentiality commitments.

3.2 Legal obligations

We may disclose your information if required by law or at the request of an authority legally entitled to receive it (e.g., police investigation, court order).

3.3 Emergency

If we have reasonable grounds to believe that a person is in danger, we may disclose the information necessary to prevent serious harm (art. 18 P-39.1).

3.4 Business transaction

If the business is sold, merged, or restructured, your personal information may be part of the assets transferred. You will be informed beforehand, in accordance with the Act.

4. Transfers of information outside Quebec

Some of our service providers are companies established outside Quebec. The use of their tools means that certain information is transferred and processed on servers located outside Quebec, notably in the United States:

HolidayFuture — outside Quebec: booking data (name, email, phone, stay dates).

Google LLC — United States: browsing data via Google Analytics (with consent) and interaction data via reCAPTCHA.

In accordance with section 17 of the Act, we have assessed that these providers offer an adequate level of protection for personal information, notably through their published privacy policies and security certifications. These transfers are limited to the information strictly necessary for the services provided.

5. Your rights

In accordance with the Act respecting the protection of personal information in the private sector (P-39.1), you have the following rights:

5.1 Access

You may ask whether we hold personal information about you and obtain a copy of it (art. 27 P-39.1). Certain exceptions may apply.

5.2 Rectification

If your information is inaccurate, incomplete, or outdated, you may request that it be corrected (art. 28 P-39.1).

5.3 Cessation of dissemination and de-indexing

If the dissemination of information about you causes you serious harm and that harm is clearly unjustified in light of your rights, you may request that it cease (art. 28.1 P-39.1).

5.4 Withdrawal of consent

You may withdraw your consent to the use of your information for promotional communication or analytics purposes, subject to legal obligations. Withdrawal does not affect processing already carried out.

5.5 How to exercise your rights

Any request must be made in writing and allow us to confirm your identity. Send your request to the Privacy Officer by email at info@loftsorizon.com.

We will respond in writing within a maximum of 30 days of receiving your request (art. 32 P-39.1). If your request is denied, you will receive a reasoned response and may file a complaint with the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca | 1-888-528-7741).

6. Cookies

We use two types of cookies:

Essential cookies: necessary for the proper functioning of the site and to remember your privacy preferences. They cannot be refused.

Google Analytics (disabled by default): enabled only if you consent via the cookie consent manager available on your first visit and accessible at any time via the "Privacy Preferences" link at the bottom of the site.

In accordance with section 9.1 of Act 25 (Law 25), non-essential cookies are disabled by default. You may change your preferences at any time.

In accordance with section 9.1 of Act 25, privacy settings are set to the highest level by default. No non-essential cookie is deposited without your prior consent.

7. Minors under 14

Our services are intended for adults. We do not knowingly collect personal information from persons under 14 years of age without the consent of their parent or guardian. If you are a parent and discover that your child has provided us with information, contact us at info@loftsorizon.com so we can delete it.

8. Security of information

We take reasonable security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted transmission (HTTPS) and restricting access to persons who need it to carry out their duties.

No system is infallible. In the event of a confidentiality incident presenting a serious risk of harm, we will notify affected persons and the Commission d'accès à l'information du Québec as soon as possible, in accordance with sections 3.5 to 3.8 of the Act.

9. Changes to this policy

We may amend this policy to reflect changes in our practices or in applicable law. In the event of a significant change, a notice will be posted on our website. The date of the last update is indicated at the top of this document.

10. Contact us

For any question regarding this policy or to exercise your rights:

Lofts Orizon Miguel Perreault, President 280 rue Saint-Jean-Baptiste Ouest, Rimouski, QC G5L 4J6 Email: info@loftsorizon.com Phone: 581 824-9100 Website: www.loftsorizon.com

To file a complaint with the supervisory authority:

Commission d'accès à l'information (CAI): www.cai.gouv.qc.ca | 1-888-528-7741