John Verreault JOHNVERREAULT Residential Real Estate Broker FR
Privacy

Privacy Policy

Compliant with Quebec's Law 25 and PIPEDA.

Last updated: 2026-06-02. This policy describes how John Verreault, residential real estate broker registered with the OACIQ (license H3792), collects, uses, retains, and protects your personal information when you interact with this website or engage their services.

1. Data Controller

The data controller for your personal information is:
John Verreault, Residential Real Estate Broker
OACIQ license H3792
Phone: 514-501-4388
Email: info@johnverreault.com
Service area: Greater Montreal and Lac-Simon.

As a solo broker, I also serve as the designated Privacy Officer under section 3.1 of Quebec's Act respecting the protection of personal information in the private sector (Law 25). Any questions, complaints, or requests to exercise your rights can be sent directly to the contact information above.

2. Information Collected

When you use this site, I may collect:

  • Information you voluntarily provide via the contact form: name, email address, phone number, message, interest type (buying, selling, evaluation, general inquiry), and where applicable the identifier of the property you are interested in.
  • Technical data collected automatically: IP address, browser type (user agent), pages viewed, date and time of visit. This data is used for site security, abuse prevention, and service improvement.
  • Strictly necessary cookies: a CSRF protection cookie (_csrf), a language preference cookie (lang), a cookie recording your cookie-consent choice (cookie_consent), Cloudflare technical cookies (security and caching), and those of the Cloudflare Turnstile anti-bot widget on the contact form.

No third-party advertising tracking, remarketing, or behavioral analytics tools are currently active on this site. Any analytics added in the future will load only with your prior consent (see the cookie banner).

You can change or withdraw your cookie choice at any time:

3. Purposes

Your information is used solely to:

  • respond to your inquiries and provide the real estate brokerage services you have requested;
  • satisfy professional and regulatory obligations under the OACIQ (recordkeeping, communications traceability);
  • ensure site security and prevent fraud;
  • comply with applicable legal obligations (Law 25, PIPEDA, OACIQ regulations, Canadian Anti-Spam Legislation C-28).

Your information is never sold, rented, or shared for commercial purposes. No automated decision producing legal effects is made about you.

4. Legal Basis

I process your personal information on the following bases:

  • Consent — for handling your inquiries through the contact form and any subsequent communication about properties matching your criteria;
  • Legal and regulatory obligation — for the recordkeeping required by the OACIQ and the retention of transaction documents.

You may withdraw your consent at any time (see section 7).

5. Retention Periods

  • Transaction files (clients who completed a real estate transaction): retained for a minimum of 7 years after closing, as required by OACIQ recordkeeping rules.
  • Unconverted inquiries (contact form submissions without subsequent transaction): retained for a maximum of 24 months, then securely destroyed.
  • Technical logs (IP, user agent): retained for 90 days for security purposes, then purged.

6. Processors and Cross-Border Transfers

To deliver this service, some information passes through technical providers:

  • Cloudflare, Inc. (United States) — content distribution, network security, caching. Cloudflare may process your IP address and certain technical metadata. Cloudflare participates in the EU-US Data Privacy Framework.
  • Application hosting — servers located in Canada.
  • Email — outgoing email (automatic acknowledgements, broker alerts) is sent via Google LLC (Gmail, United States); email addressed to [email protected] is received via Apple Inc. (iCloud, United States). These providers may process your name, email address, and message content.

In accordance with section 17 of Quebec's Law 25, I inform you that some information may be communicated outside Quebec (notably to Cloudflare, Google, and Apple). A privacy impact assessment has been performed and contractual measures govern these transfers.

7. Your Rights

Under Law 25 and PIPEDA you have the following rights:

  • Right of access — obtain a copy of the information I hold about you;
  • Right of rectification — correct inaccurate or incomplete information;
  • Right to erasure / de-indexing — subject to legal retention obligations;
  • Right to portability — receive your information in a structured, commonly used technological format;
  • Right to withdraw consent at any time;
  • Right to lodge a complaint with Quebec's Commission d'accès à l'information (CAI) or the Office of the Privacy Commissioner of Canada.

To exercise these rights, write to info@johnverreault.com. I commit to responding within a maximum of 30 days.

8. Security

Appropriate technical and organizational measures are in place:

  • end-to-end TLS encryption for all communications with the site;
  • strict access controls on client records;
  • anonymization of personal information before any processing by artificial intelligence tools;
  • access logging and periodic privilege review.

9. Changes

This policy may be updated to reflect legal or technical developments. The date of the most recent update appears at the top of the page. Substantive changes will be communicated through appropriate means.

10. Contact

For any question regarding this policy or your personal information:
John Verreault — Privacy Officer
info@johnverreault.com · 514-501-4388