Privacy policy

1. Who we are

This tire sales site (the “Site”) is operated by Pneus Distribution, 1800 5e Avenue, Grand-Mère, QC G9T 2P4. We are responsible for the personal information collected through the Site, in accordance with Quebec’s Act respecting the protection of personal information in the private sector, as modernized by Law 25.

2. Information we collect

• Customer account: name, garage or business name, email address, phone number, address and city (postal code optional), provided with the account request, and password, stored as a non-reversible hash, never in plain text. This information is used first to assess your access request: Pneus Distribution approves or refuses each request before opening access to prices and orders.
• Dealer account: the business name and, where applicable, the discount percentage agreed with you.
• Order requests: items requested, quantities, pickup or delivery preference, a delivery address if you provide one, and any note you send us.
• No payment data: the Site processes no transaction. We do not ask for, receive or keep any credit card number.
• Contact form: name, email, optional phone number and the message content.
• Technical data: your IP address and your browser type: our authentication service records them with your sign-in session and keeps them for as long as that session stays open; our anti-abuse counters, for their part, keep only a non-reversible fingerprint of the address, for at most three hours, and empty themselves; the cookies needed for the session and the language setting to work, plus the one that stores your cookie choices; the register of the emails the Site sends you and the register of the actions taken in the admin panel. We use no advertising cookies, no analytics tool, and carry out no profiling.
• Proof of consent: the date and time at which you accepted this policy and the terms of use when creating your account, along with the version of the text you accepted.
• Internal notes: the remarks we record on your account or on an order to follow your file, a price arrangement or a pickup preference for instance. They concern you, so you may request access to them and their correction like the rest.
• If you use them: the review you post on a product, with the vehicle and mileage you choose to add to it, and your device’s subscription to notifications.

3. What we use it for

• Process your order requests and keep you informed about them;
• Reach you to confirm the amount, the payment and the handover of the goods;
• Manage your account and, where applicable, your dealer discount;
• Answer messages sent through the contact form;
• Meet our legal obligations, notably tax ones (invoicing, GST and QST);
• Improve the Site, using aggregated and anonymized statistics.

We neither sell nor rent your personal information. No commercial communication is sent to you without your consent.

4. Consent

Creating an account requires you to expressly accept this policy and the terms of use, through a checkbox that is never ticked in advance. The date and time of that acceptance are kept with your account, along with the version of the text accepted. That consent is given for specific and limited purposes: it does not extend to other uses. You may withdraw it at any time, subject to the information the law requires us to keep.

5. Disclosure to third parties

Your information is disclosed only to the providers strictly necessary for the Site to work: application hosting, the database, the transactional email service and, only if you consent to it, Google, for displaying the map of our address. When you type an address (a delivery address, or the one on your account request, even when signed out), the characters you type are sent by our servers to OpenStreetMap (the Nominatim service) so it can suggest existing addresses: your browser never contacts that service, and neither your identity, nor your account, nor your IP address is passed to it. No payment provider is involved, since the Site processes no transaction. Those providers only access the information required for their mandate, and we name them rather than describe them by role: Vercel hosts the Site and RUNS the pages, so it receives every request from your browser and processes the forms at the moment you send them, in a region located in the United States; Supabase hosts the database, the accounts and the files, kept in Canada, in the Montreal region; Resend sends the transactional emails; and if a member of our staff turns on notifications on their device, the notification service of their browser — Google, Mozilla, Apple or Microsoft as the case may be — carries the alert, whose content it cannot read, being encrypted end to end. No notification is offered to customers. Part of the processing therefore happens outside Quebec, and your information may be accessed there by the authorities of those countries in the cases provided by their laws. Before entrusting personal information to a provider established outside Quebec, the law requires us to carry out a privacy impact assessment and to enter into a written agreement: that assessment is under way for the hosting of the Site and for the sending of emails. It will be recorded in writing, and you will be able to obtain a summary of it by writing to the person responsible for the protection of personal information.

6. Cookies

A cookie is a small file the Site stores in your browser. Here is the complete list of what the Site stores, and nothing else is stored.

• Necessary cookies (no consent required): your sign-in session, the language you picked, the promo code you entered (seven days), the password reset link being validated, the admin panel’s second lock, and the cookie that remembers the choices below. Without them you cannot sign in or send an order request: the law exempts them from consent because they are strictly necessary to the service you asked for.
• Maps and external content (consent required): the Google map shown on the Contact page is served by Google, which then sets cookies of its own. Until you accept it, that map is not loaded at all: it is absent from the page, not merely hidden. Nothing is sent to Google.

You can accept, refuse or change your choices at any time through the “Cookie preferences” link at the bottom of every page. Refusing blocks neither browsing, nor account creation, nor sending an order request.

7. Retention and security

We keep order requests and the records that go with them for six years after the end of the financial year concerned, the period required by tax law. The register of the emails the Site sends you is kept for at most twelve months, and the register of the actions taken in the admin panel for at most twenty-four months. Beyond those periods, the information is deleted or anonymized. Access to the data is restricted to authorized staff, communications with the Site are encrypted (HTTPS), and database access is governed by security policies applied at the level of each record.

8. Privacy incident

In the event of a privacy incident presenting a risk of serious injury, we take reasonable measures to reduce its effects, notify the people concerned as well as the Commission d’accès à l’information du Québec, and record the incident in a register, in accordance with Law 25.

9. Your rights

Under Quebec law, you may at any time:

• request access to the information we hold about you;
• request its correction if it is inaccurate or incomplete;
• request that its dissemination cease or that it be de-indexed, in the cases provided by law;
• obtain, in a structured and commonly used technological format, the information you provided to us (portability);
• withdraw your consent or request the deletion of your account, subject to the retention periods imposed by law;
• file a complaint with the Commission d’accès à l’information du Québec if you believe your rights have not been respected.

10. Privacy officer

In accordance with Law 25, Pneus Distribution has designated a person responsible for the protection of personal information. For any question, access or correction request, or withdrawal of consent, contact:

11. Changes

We may update this policy from time to time. The date of the latest update appears at the top of the page. In case of a significant change, a notice will be posted on the Site.