Privacy Policy

Thank you for visiting the Lemay Consulting website and for reviewing its privacy policy (hereinafter referred to as the “Policy”).

By browsing our website or using our systems or services, you acknowledge that you have read and understood this policy and consent to the processing of your personal data and information in accordance with it, where applicable.

This privacy policy consists of the following elements:

• Objectives of the privacy policy,
• Effective date,
• Methods of obtaining consent,
• Purposes of data collection,
• Personal information collected,
• Purposes of data processing,
• Processing methods used,
• Access and control of personal information,
• Sharing and reasons for sharing personal information with third parties,
• Use of cookies and similar technologies,
• Retention of personal information.

Objectives of the Privacy Policy:

Respecting privacy and protecting personal information are essential to us, which is why, through this Policy, we aim to protect them in accordance with applicable laws.

To ensure this protection, Lemay Consulting commits to collecting, processing, and sharing information that identifies an individual only when that individual has consented, unless permitted or required by law, in which case your consent will not be necessary.

The Policy aims to inform users of the reasons and manner in which Lemay Consulting, or anyone acting on its behalf, will collect and use their personal information. It is written in clear language to ensure informed consent from users.

For the purposes of this Policy, “personal information” refers to any information about an identifiable individual or that allows an individual to be identified. To the extent possible, we will anonymize, pseudonymize, and/or aggregate this information so that it no longer identifies an individual.

Effective Date:

This Policy applies from June 10, 2024.

This Policy replaces the Privacy Protection Policy dated June 10, 2024.

Methods of Obtaining Consent:

We are committed to obtaining consent before collecting an individual’s personal information. Consent can be explicit or implicit and can be provided directly by the individual or by their authorized representative.

We prefer obtaining explicit consent, whether verbally, electronically, or in writing. However, implicit consent can be reasonably inferred from an individual’s actions or inactions. For example, providing a name and address to receive a publication or a name and phone number to get a response to a question is considered implicit consent to the collection of information containing personal data. To determine the appropriate type of consent, we consider the sensitivity of the personal information involved, the purposes for which it is collected, and the reasonable expectations of an individual in a similar situation.

If we wish to use personal information for a new purpose, we will describe the intended use and seek consent again.

It is not always possible, particularly in the context of a government request, to obtain an individual’s consent to collect, use, or disclose their personal information. We commit to never disclosing such information other than in accordance with this Policy, unless required or permitted by law.

Purposes of Data Collection:

The information collected is in accordance with the purposes and objectives set out in this privacy policy.

Here are some reasons why we collect your personal information:

• To provide products and services: We will collect and process the data and information necessary to fulfill our mission and contractual obligations.
• To ensure and improve these products and services: Data collected during your interactions with our services may be used to analyze and improve the functioning of our products and services.
• To develop new products and services, including AI: Collected data may be used for research and development to offer new products and services to our users, including through advertising and marketing messages. Additionally, collected and aggregated data may be processed by algorithms using artificial intelligence.
• To offer personalized products and services: The collection and analysis of data generated by your interactions with our services allow us to develop and create products and services that are relevant to better meet your cultural and entertainment expectations, including providing accommodations for clients who need them.
• To evaluate the performance of products and services: Data is collected to gather information on the advantages and disadvantages of our products and services to evaluate and resolve them if necessary, including through surveys. This helps us ensure the quality of our products and services and promotes risk management.
• To protect the privacy of our users: Collected data allows us to verify identity and protect the privacy of individuals who communicate with us by phone, electronically, or otherwise.
• To comply with legal obligations: Data is collected to fulfill obligations arising from laws, regulations, or international treaties.

Personal Information Collected:

Lemay Consulting may collect personal information in various forms but will only do so through lawful means and only for the necessary purposes disclosed to you, as described in this Policy, or when permitted or required by law.

The personal information collected, as well as its sensitivity, may vary depending on the context of your interactions with Lemay Consulting. This is why we must first inform you of the nature of the personal information we use.

We protect all personal information collected. Among the personal information that may be collected and used, we pay particular attention to:

• Name and contact details: First and last name, email address, postal address, phone number, and similar data used to communicate with you.
• Identification credentials: Passwords, password hints, and similar security information used to identify you and access your account.
• Demographic data: Data about you such as age, gender, country, and language of communication.
• Payment data: Data necessary to process your payments, such as payment instrument number (e.g., credit card number) and associated security code.
• Subscription data: Information about your subscriptions related to cultural events and newsletters from cultural companies.
• Images and sounds: Audiovisual data to ensure the safety of our users, particularly at venues where cultural events we organize or host take place.
• Interactions: Data related to your use of websites, platforms, and tools created. This includes data you provide to use the products. In other cases, such as error reports, it is data we generate.
• Other examples of interaction data we collect include:
• Visited sites and usage data: For example:
  • Payment and account history: Data on items you purchase and activities associated with your account.
  • Troubleshooting and support data: Data you provide when contacting Lemay Consulting for assistance, including products you use and other information that helps us resolve your issue.
• Interests and preferences: Data about your interests and preferences, such as artists or music genres that motivate you to attend concerts, types of exhibitions and cultural events that interest you, cities you are willing to travel to for certain cultural events. Apart from information you explicitly provide, other data we collect sometimes allows us to define or guess your interests and preferences.
• Content consumption data: Data on media content (e.g., TV, video, music, audio, books, apps, and games) you access through our products.
• Searches and commands: Search queries and commands you use when using our website.
• Text, input, and handwriting data: Text, input, and handwriting data, as well as any related information.
• Location data: Data, which may be precise or not, about the location of your device. For example, location data may be collected from a device’s IP address or from your account profile data indicating with less precision where you are, such as a city name or postal code.
• Other data: Other data provided when using our website, including data from Google Analytics.

Purposes of Data Processing:

• Provide our products and services: We use data to operate our products and services and to provide you with rich, interactive experiences.
• Improve products and/or services: We use data to improve our products, including adding new features or capabilities (e.g., error reports when purchasing a ticket or consulting an online program).
• Personalization: Some products include personalized features, such as recommendations that optimize your experiences and satisfaction. These features use automated processes to tailor your experiences based on data we have about you, such as inferences we make about you and your use of the product, your activities, interests, and location.
• Product and/or service development: We use data to develop new products. For example, we use personal information that we anonymize or pseudonymize to better understand our clients’ needs.
• Customer support: We use data to diagnose and resolve product and/or service issues, restore access to your personal account, and provide other support and assistance services.
• Security and troubleshooting: We use data to enhance the security and troubleshooting of our products and services. This includes using data to ensure the security of services offered to our clients, detecting malware and malicious activities, resolving performance and compatibility issues to help clients get the most out of their experience, and informing them of updates to our products and services. This may include using automated systems to detect security issues.
• Security: We use data to protect the security of our products and clients. Our security features may prevent malware from operating and inform users of malware detection on their device or use video surveillance to ensure public safety at events.
• Surveys and promotional communications: We use data we collect to provide surveys and promotional communications. You can subscribe to email newsletters, respond to surveys, and choose to receive or not receive promotional communications from Lemay Consulting by email, SMS, postal mail, and phone. For more information on managing your contact details, email subscriptions, and promotional communications, see the “Access and Control of Your Personal Information” section of this Policy.
• Relevant offers: Lemay Consulting uses data to provide you with relevant and important information about the products and services offered. We analyze data from various sources to predict the information that will be most interesting and relevant to you and communicate it in different ways. For example, we may predict your interests in shows and suggest new activities that may appeal to you.
• Advertising: Lemay Consulting uses data collected through interactions with you, some of our products, and third-party websites to advertise our products and services, including on third-party sites. We may sometimes use automated processes to make ads more relevant.
• Business transactions: We use data to process your transactions with us. For example, we process payment information to provide clients with product subscriptions and use contact details to provide products purchased in our online stores/box offices.
• Reporting and business operations: We use data to analyze our operations and improve decision-making. This allows us to make informed decisions and create reports on our business performance.
• Protection of rights and property: We use data to detect and prevent fraud, resolve disputes, enforce contracts, and protect our property. For example, we use data to confirm the validity of tickets sold to combat fraud. We may use automated processes to detect and prevent activities that violate our rights and those of third parties.
• Legal compliance: We process data to comply with the law. For example, we use our clients’ age to ensure we comply with our obligations regarding children’s privacy or to ensure the client meets the recommended age for the audience. We also process contact details and identifiers to help clients exercise their data protection rights.
• Research: We use data to conduct research, including for scientific and public interest purposes, when permitted by law.

Processing Methods Used:

Lemay Consulting places the utmost importance on the security of your personal information and commits to processing it according to industry standards and norms, only for the purposes for which it is collected as described in this policy or in a specific notice to that effect. However, absolute safeguarding of this information is impossible given the inherent security limitations of transmission over the Internet. Information transmitted to us is ultimately at the user’s risk.

Access and Control of Personal Information:

Lemay Consulting ensures that all personal information in its possession is as accurate, current, and complete as necessary for the purposes for which it is used.

You have the right to request access to your personal information for verification and to request corrections if it is inaccurate. If you believe your personal information is inaccurate or if you wish to access your personal information, you can make a request using the contact details provided at the end of this Policy.

To the best of our ability, we will provide you with timely access to your personal information. However, for security reasons, we may need to verify your identity.

Furthermore, there may be circumstances where we cannot provide you with access to your personal information. For example, when access could lead to the disclosure of another individual’s personal information and that individual refuses to consent to its disclosure or when legal restrictions apply. If such a situation arises, we will inform you of the reason why we cannot provide you with access to your personal information.

If your request concerns data appearing on third-party websites or platforms, please contact these third parties directly.

Sharing and Reasons for Sharing Personal Information with Third Parties:

We do not share your personal information with companies, organizations, or individuals outside of Lemay Consulting, except for our authorized suppliers and partners who need access to the information for the purposes listed in this policy and within its limits, as well as in the following cases:

• With your consent.
• For storage in cloud servers, in which case personal information may transit through third-party jurisdictions. Note that we only use services from reputable companies with privacy policies.
• For external processing needs: We transmit personal information to other trusted companies or individuals who process it on our behalf, according to our instructions, in accordance with this privacy policy, with a level of data security at least equivalent to ours and in compliance with any other appropriate security and confidentiality measures.
• Notably, we use third-party provider services to pool, clean, and analyze data in the cultural sector so they can enhance this data and develop tools for the benefit of the public or sector actors. To do this, these providers process the provided information as follows:
• Data is first prepared, then classified for use.
• From the prepared data, the provider creates global statistics containing general and non-personal information, sometimes combined with data from similar sources. This pooled data is then used to establish global statistics, such as origin analyses (via postal codes mainly) as well as seasonality analyses or pricing analyses (e.g., shopping cart type).
• This data is then enriched through two different processes. The first is enrichment using third-party data in the public domain, such as socio-demographic data from the Census via postal code. The second process is called inference enrichment. Inference enrichment consists, for example, in the context of purchasing a ticket at the “under 25” rate, in deducing that the individual concerned is under 25 years old.
• For legal reasons: We transmit personal information outside our company if access to it is necessary to comply with applicable laws and regulations.

Lemay Consulting commits to not selling or renting your personal information to a third party.

Cookies and Similar Technologies:

Lemay Consulting may use cookies, web beacons, invisible pixels, log files, or other technologies to collect certain personal information related to visitors to our websites, as well as recipients of our newsletters, invitations, and other communications. Cookies are pieces of information transmitted by the server to the browser during a website visit and allow the unique identification of the current connection. This data may include information such as your IP address, browser type, browser version, pages of our site you visit, the time and date of your visit, the time spent, and other statistics.

Cookies used notably help retrieve search history and carts (e.g., ticket purchases) linked to the session, to facilitate the user’s online browsing experience. It is important to know that enabling the cookies option may, depending on the chosen configuration, allow other servers to install cookies on your system. You can set your browser settings to inform you of the presence of cookies, giving you the option to accept or refuse them.

Please note that our website may contain links or references to third-party sites. This policy ceases to apply when you leave our website, and Lemay Consulting is not responsible for the collection or processing of personal information by these third parties or through these external sources.

Retention of Personal Information:

Lemay Consulting retains collected data for different periods of time, depending on their nature and usefulness in offering our products and services. During the retention period, Lemay Consulting takes physical and technical measures to ensure the security of data containing personal information.

The main locations where personal information is stored are the cities where Lemay Consulting has offices or facilities and the cities where Google Cloud has servers containing data collected by Lemay Consulting.

Personal information may be stored outside the country in which you live if a third-party provider or another entity to whom we disclose personal information in accordance with this Policy is located outside the country. In such cases, personal information may be subject to local laws of the countries or territories within which the information is collected, used, disclosed, or stored, and government authorities and law enforcement agencies in these countries or territories may have access to it.

Once the retention period has expired, personal information is destroyed. Only statistics or reports containing depersonalized and anonymized data may be retained for extended periods.

Other Information:

Changes to These Rules:

We make changes to this Privacy Policy from time to time. Any reduction in your rights under this Privacy Policy will not be applied without your explicit consent. We always indicate the date on which the latest changes were made and allow you to access archived versions for review. If the changes are significant, we will post a highlighted notice on our website (including, for some services, via email notification).

Compliance Officer:

For any questions, comments, or complaints regarding this policy, you can contact the person responsible for ensuring compliance with this privacy policy:

Phillipe Lemay
Lemay Consulting
301-3399 Jacques-Bureau Avenue, Laval, H7P-0H3
Phone: +1 514-700-2323
Email: admin@lemayconsulting.com