PRIVACY POLICY AND PROTECTION
OF PERSONAL INFORMATION

We only collect the personal information necessary for our passenger transportation activities and administrative management. This information may include:

• Last name, first name, address, phone number, email
• Billing or payment information
• Employment information (for employees or applicants)
• Medical or health-related information (when provided for tailored services or health transport programs)
• Technical information (IP address, cookies, website browsing data)

The personal information collected is used for the following purposes:

• Providing and managing transportation services
• Communicating with customers and users
• Managing schedules, reservations, and claims
• Managing human resources (recruitment, payroll, personnel files)
• Complying with legal, contractual, or regulatory obligations
• Ensuring the safety of users and staff

We collect personal information with your informed consent, except where the law permits otherwise. Consent may be implied or explicit depending on the nature of the information and its intended use.

Your personal information is never sold. However, it may be disclosed to:

• Subcontractors or partners (e.g., booking or payment platforms) bound by confidentiality agreements
• Regulatory or government authorities when required by law
• In the context of a merger, acquisition, or other business transaction, subject to confidentiality safeguards

We implement rigorous physical, administrative, and technological security measures, including:

• Data access control (using passwords, firewalls, encryption)
• Regular backups on secure servers
• Staff training on privacy
• Logging of access and sensitive activities

All data is stored in Quebec and Canada, in centers that meet Canadian security standards. No personal information is stored or accessible from outside the country, except in cases of exceptions approved by the client or the competent authority.

When it is necessary for us to process personal health information (e.g., for tailored or medical services), such information is handled with special care in accordance with applicable laws, including PHIPA (Ontario) and LSSSS (Quebec). It is only accessible to authorized personnel and protected against any unauthorized use.

Cookies are used for customer analysis and targeted advertising purposes. Cookie preferences can be managed in the "Cookies" section at the bottom of the site.

In the event of a security incident or data breach, Autobus la Québécoise Inc. follows a strict procedure:

• Identification and containment of the incident
• Risk assessment
• Prompt notification of affected individuals and competent authorities (Quebec's Access to Information Commission)
• Implementation of corrective measures and follow-up

Personal information is retained only for the duration necessary to achieve the intended purposes or in accordance with legal and contractual requirements. Once this period has expired, the data is securely destroyed.

You have the right to:

• Access your personal information
• Request the correction of inaccurate data
• Withdraw your consent (within the limits permitted by law)
• File a complaint with the Access to Information Commission

To exercise your rights, please contact us in writing at the contact details below.

In accordance with Loi 25, Autobus la Québécoise Inc. has appointed a Personal Information Protection Officer:

• Email: info@autobus.qc.ca

This policy is updated regularly. The version published on our website is always the most recent version.

Last update: March 2025