Privacy Policy

Au Petit Chalet ("we", "our" or "us"), a brand of Groupe Limonade, operates the website aupetitchalet.com and its locations in Quebec. We are committed to protecting your personal information in accordance with Quebec's Act 25 modernizing legislative provisions regarding the protection of personal information.

This policy describes how we collect, use, disclose and protect your personal information when you browse our website or interact with our services.

We only collect personal information that is necessary for the purposes for which it is collected. This may include:

• Identification information: name, email address, phone number, postal code, reason for contact, location
• Navigation data: IP address, browser type, pages visited, visit duration, cookies and similar technologies
• Communication data: messages sent via our contact form, group reservation form or by email
• Franchise application data: personal and professional information provided when applying for a franchise
• Marketing data: email address used for promotional communications (with your consent, including via our contact form and Klaviyo)

We use your personal information for the following purposes:

• Responding to your requests and providing customer service
• Sending you promotional communications (with your consent)
• Improving our website through statistical analysis
• Measuring the effectiveness of our advertising campaigns
• Processing your franchise and group reservation requests
• Displaying the location of our branches and their opening hours
• Complying with our legal obligations

We use cookies and similar technologies to improve your experience on our website, analyze our traffic and measure the effectiveness of our advertising. Cookies are small text files stored on your device.

You can manage your cookie preferences at any time via our cookie management banner at the bottom of the page. Disabling marketing cookies does not affect the general operation of the site.

We may use technologies that create a profile for advertising personalization purposes. These practices are governed by your consent, in accordance with Act 25.

Types of cookies used:

• Essential cookies: required for the site to function (security, language preferences, consent banner) — cannot be disabled
• Analytics cookies: to understand how you use our site and improve it (via Google Tag Manager / Google Analytics)
• Marketing cookies: to measure the effectiveness of our advertising and offer you personalized content (via Google Ads, Meta Pixel, HubSpot, Klaviyo)

We never sell your personal information. We only share your data with service providers necessary for the operation of our website and our operations.

Who has access to your information at Au Petit Chalet?

Access to your personal information is limited to staff, agents and representatives of Groupe Limonade who need it in the performance of their duties (customer service, marketing, management). Our employees are trained on the importance of protecting personal information and only have access to the information necessary to perform their tasks.

Third-party service providers

The providers mentioned above (Google, Meta, HubSpot, Klaviyo, etc.) may process data on servers located notably in the United States. In accordance with section 17 of the Act respecting the protection of personal information in the private sector, we ensure that these transfers are governed by adequate contractual safeguards (standard contractual clauses, recognized certifications).

In accordance with Act 25, you have the following rights regarding your personal information:

To exercise these rights, contact our Privacy Officer at [email protected]. We are committed to responding within 30 days of receiving your request. If your request is complex, this deadline may be extended by an additional 30 days, with notice.

• The right to request access to personal information we hold about you
• The right to request correction of inaccurate, incomplete or ambiguous information
• The right to request deletion (erasure) of your information in cases provided by law
• The right to withdraw your previously given consent
• The right to object to the processing of your information in certain circumstances
• The right to data portability: to receive your information in a structured, commonly used technological format
• The right to request the cessation of dissemination of your personal information

Right to file a complaint

If you believe we have not adequately addressed your concerns, you have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI): Phone 1-888-528-7741 — Website www.cai.gouv.qc.ca

We take the security of your data very seriously. Our protection measures include:

Technical measures:

• Encryption of data in transit (TLS v1.2+)
• HTTPS protocols across the entire site
• Secure authentication and role-based access controls
• Regular data backups

Organizational measures:

• Access to information limited to authorized personnel
• Staff training on personal data protection
• Internal access control policies
• Security incident response procedures
• Documentation of all privacy incidents for 5 years

Data breach notification

In the event of a breach presenting a serious risk of harm, we are committed to informing you as soon as possible (no later than 72 hours), notifying the CAI and recording the incident in our privacy incident register.

No method of transmission over the Internet or electronic storage is completely secure. Although we do our best to protect your information, we cannot guarantee absolute security.

We retain your personal information only as long as necessary to respond to your request, provide you with the requested service, comply with our legal obligations, resolve any disputes and enforce our agreements.

When your information is no longer necessary, we securely delete or anonymize it in accordance with Act 25 and industry best practices.

For guidance:

• Contact requests — 2 years following our last interaction
• Marketing lists (e.g. Klaviyo) — Until unsubscribe
• Group reservation requests — 2 years following our last interaction
• Franchise applications — 3 years following file closure
• Advertising data (Google, Meta, etc.) — According to each platform's own settings

The forms on our site (contact, group reservation, franchise) are not intended for children under 14. We do not knowingly collect personal information from minors under 14 without the express consent of a parent or legal guardian.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected] so we can delete this information.

We may update this Policy periodically to reflect changes in our practices or applicable legislation. We will inform you of any significant changes by publishing the new version on this page with an updated revision date.

Your continued use of our site after publication of a modified version constitutes your acceptance of the changes.

Groupe Limonade has designated a Privacy Officer who oversees our privacy practices and ensures compliance with applicable laws.

Role of the Officer:

• Monitoring compliance with Act 25 and other applicable laws
• Regularly reviewing our data processing processes
• Handling access requests and complaints
• Ensuring ongoing staff training
• Maintaining the register of privacy incidents

For any questions, concerns, complaints or requests:

For any questions regarding this Policy or to exercise your rights:

We are committed to complying with the following legislation:

• Act respecting the protection of personal information in the private sector (CQLR c P-39.1), as amended by Act 25
• Personal Information Protection and Electronic Documents Act (PIPEDA) — applicable to interprovincial activities