Skip to content

Privacy policy 

Last updated: November 4, 2026

This text is a draft provided for guidance only. It must be reviewed and approved by a legal professional before publication.

Last updated: [TO BE CONFIRMED]

1. Purpose

SYNORGIA – Institut de Santé et Transformation Organisationnelles (“SYNORGIA”, “we”) attaches great importance to protecting your personal information. This policy explains what information we collect on our website, for what purposes, how we use it, to whom we disclose it, how long we keep it and what your rights are.

It has been prepared with regard to Québec’s Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1), as amended by the Act to modernize legislative provisions as regards the protection of personal information (“Law 25”), and to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), to the extent it applies.

2. Person in charge of the protection of personal information

The person in charge of the protection of personal information at SYNORGIA is:

  • Name and title: Hervé Djiowou Youmbi, Ph. D., Adm.A., founder and president [TO BE CONFIRMED: official spelling]
  • Email: contact@synorgia.ca [TO BE CONFIRMED: or a dedicated address, e.g. confidentialite@synorgia.ca]
  • Mailing address: 2352, rue Jean-Durand, app. 1, Québec (Québec) G1V 4J7

You may contact this person with any question, request to exercise your rights or complaint regarding your personal information.

3. Information collected and purposes

We collect only the information necessary for the purposes described below.

Contact form

  • Information: name, organization, type of organization, email address, phone number (optional), area of interest and message.
  • Purposes: responding to your request, preparing a service proposal and following up on our communications.

Newsletter

  • Information: email address and preferred language.
  • Purposes: sending you our newsletter (articles, new publications, events). Your subscription is confirmed by a validation email (double opt-in). Every mailing includes an unsubscribe link.
  • “Notify me on release”: your sign-up is linked to the book concerned, so we can tell you when it comes out.

Expert-network form

  • Information: name, professional email address, phone number (optional), status, main area of expertise and message.
  • Purposes: reviewing your expression of interest and contacting you about it.
  • Recipient and retention: submissions are not stored in the website’s database: they are sent by email to contact@synorgia.ca and kept in SYNORGIA’s mailbox [TO BE CONFIRMED: retention period of the email]. A specific privacy notice, available from the form, supplements this policy.

Orders (Synorgia Éditions shop)

  • Information: name, email address, billing address (needed to calculate taxes), order contents and history.
  • Purposes: processing your order, sending you the confirmation and your download links, providing after-sales support and meeting our accounting and tax obligations.
  • Payment: payments are processed by Stripe. SYNORGIA never receives or stores your payment card data.

Download links

  • Information: for each purchased file, a personal link tied to your order, the number of downloads made and the date of the last download.
  • Purposes: delivering your files, applying the download limit set out in the terms of sale, preventing unauthorized sharing and issuing a new link when needed. [TO BE CONFIRMED]

Technical data

  • Information: IP address and technical browsing data sent by your browser.
  • Purposes: website security, rate limiting and protection against spam and abuse.

4. Consent and legal basis

We collect your information with your consent, which you give by completing a form, subscribing to the newsletter or placing an order, after being informed of the purposes. Some processing is necessary to perform a contract (your order) or to comply with our legal obligations (retention of accounting records). Security-related technical data is processed because it is necessary for the secure operation of the website.

You may withdraw your consent at any time (see section 9), subject to applicable legal or contractual restrictions. The website is not intended for persons under 14 years of age, and we do not knowingly collect their information.

5. Retention periods

We keep your information only as long as necessary for the purposes for which it was collected, after which we securely destroy or anonymize it.

  • Contact requests: [TO BE CONFIRMED — e.g. 3 years after the last communication].
  • Newsletter: until you unsubscribe; unconfirmed subscriptions are deleted after [TO BE CONFIRMED — e.g. 30 days].
  • Orders: [TO BE CONFIRMED — e.g. 6 years after the end of the fiscal year, in accordance with tax requirements].
  • Download links: kept with the order; they stop working after 30 days or 5 downloads. [TO BE CONFIRMED]
  • Technical data (IP address): [TO BE CONFIRMED — e.g. a few hours to 30 days].

6. Disclosure to service providers

We do not sell or rent your personal information. We disclose it only to the service providers that help us operate the website, to the extent necessary for their mandate and under agreements requiring them to protect it:

  • Stripe — payment processing and tax calculation (Stripe Tax).
  • Resend — sending transactional emails (confirmations, newsletter, download links).
  • Vercel — website hosting and file storage (Vercel Blob).
  • Neon — database hosting (United States region).

We may also disclose information where required or permitted by law, for example at the request of a competent authority.

7. Communication outside Québec

Several of our service providers host or process information outside Québec, mainly in the United States. Your information may therefore be subject to the laws of those jurisdictions, including with respect to access by authorities.

In accordance with Law 25, before communicating personal information outside Québec, we conduct a privacy impact assessment that takes into account, in particular, the sensitivity of the information, the purposes for which it will be used, the protection measures (including contractual ones) that will apply to it and the legal framework applicable in the jurisdiction concerned. The information is communicated only if the assessment establishes that it will receive adequate protection. [TO BE CONFIRMED — the assessment must be carried out and documented by SYNORGIA.]

8. Cookies and local storage

The website uses cookies and technologies that are strictly necessary for its operation:

  • Admin session: reserved for website administrators, to keep them signed in.
  • Language: remembers your chosen language (French or English).
  • Cart: your cart contents are kept in your browser’s local storage (localStorage) and are not sent to our servers until you place an order.

We do not use any advertising or audience-measurement cookies.

You can delete or block cookies in your browser settings; some features may then no longer work properly.

9. Your rights

Subject to the exceptions provided by law, you have the right to:

  • access: find out whether we hold information about you and obtain a copy of it;
  • rectification: have inaccurate, incomplete or equivocal information corrected;
  • withdraw consent: withdraw your consent to a use or disclosure (for example, unsubscribe from the newsletter using the link included in every mailing);
  • de-indexation and cessation of dissemination: request that we stop disseminating information about you or de-index any hyperlink attached to your name, where the conditions set out in the law are met;
  • portability: obtain the computerized information you provided to us in a structured, commonly used technological format, or have it transferred to a person or body you designate.

To exercise these rights, write to the person in charge of the protection of personal information (section 2). We may ask you to confirm your identity. We will respond in writing within 30 days of receiving your request.

10. Security and confidentiality incidents

We implement reasonable security measures appropriate to the sensitivity of the information: encrypted communications (HTTPS), access restricted to authorized persons only, administrator authentication, personal time-limited download links and the use of reputable service providers.

In the event of a confidentiality incident, we promptly take measures to reduce the risk of injury. If the incident presents a risk of serious injury, we notify the Commission d’accès à l’information and the persons concerned, as required by law. We keep a register of confidentiality incidents.

11. Complaints

If you believe your information has not been handled in accordance with the law, we invite you to first contact the person in charge of the protection of personal information. You may also file a complaint with the Commission d’accès à l’information du Québec (www.cai.gouv.qc.ca) or, where applicable, with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).

12. Changes

We may amend this policy to reflect changes in our practices or in the law. The current version is posted on this page with its update date. In the event of a significant change, we will inform you by appropriate means (notice on the website or email).