Privacy Policy

Introduction

Leduc RH Inc. is a company providing human resources services ("Leduc RH", "we", "our", or "us"). We are committed to protecting the privacy of candidates, of the people we support, of our clients, and of the users of our platforms. Accordingly, we undertake to comply with applicable laws and to prevent any unauthorized access to your information.

This Privacy Policy explains what we do with your personal data, whether we are introducing ourselves to you, providing you with a service, supporting you through a career transition, helping you find a job, continuing our relationship with you once we have found you a position, or when you visit our platforms.

This policy applies to:

• our website www.leducrh.ca and all its subdomains, including any other form of media, media channel, mobile website, or mobile application associated with or connected to it;
• our career portal leducrh.app, including its pages accessible without signing in, such as survey forms sent by email;
• our recruitment site recrutement.leducrh.ca and our other service platforms.

(collectively, the "platforms")

Leduc RH may amend and update this policy from time to time to comply with any governmental or legal changes, as well as with corporate policies. All changes take effect immediately upon publication of the updated Privacy Policy. We will inform you of any change by publishing the new Privacy Policy on this page. You may consult this Privacy Policy periodically to become aware of any changes.

Last updated: July 28, 2026.

To learn more about the processing of our users' personal data, please read this privacy policy carefully.

What types of personal data do we collect?

As a career management specialist, employer, and human resources service provider, and in order to carry out our activities, we collect various personal data about prospective and placed candidates, the people we support, clients, users of our platforms, service providers, employees, and consultants.

Data about prospective candidates

We collect information including your name, contact details, professional experience, education, qualifications obtained, and skills, which may be gathered from publicly available sources such as LinkedIn and other websites containing information about prospective candidates. We may also obtain the aforementioned information through a referral from another candidate, a consultant, a client, or an employer.

Data about candidates

When you apply for a job posting through our website or any other partner site such as job boards, whether by sending us your resume or information by email, in person, or by any other means, we rely on the voluntary consent obtained during the application process to process your personal data for the purpose of conducting the recruitment process. Your consent may relate to your participation in a specific recruitment process for a particular position with a specific client. However, you may also give your consent to the processing of your personal data for unspecified future recruitments with our other clients. We may also seek your consent to process your personal data in order to explore other attractive employment opportunities.

In particular, we process personal details such as name, personal identifiers, online identifiers, IP (Internet Protocol) address, account name, email address, home address, telephone number, date of birth, qualifications, experience, information relating to your employment history, current job title, salary, income and benefits, transcripts, references, your resume, and communications created, stored, or transmitted for professional or employment-related purposes through our networks.

We may also collect details of your visits to our platforms, including but not limited to traffic data, location data, web logs, and other communication data, the site that referred you to our website, and the resources you access.

We may also collect information about you from third parties, personality and aptitude testing platforms, educational institutions, former employers and references, systems containing publicly available information about candidates such as LinkedIn, and clients who have initiated the recruitment process with you or provided feedback on your application.

Data about people supported through career transition and career management

When you take part in a career transition or career management program — generally funded by your former employer — we process the data required to support you: your identity and contact details, the follow-up of your journey with your coach, the content you produce in the portal, your usage data, and your responses to satisfaction surveys.

This data is used to support you, to ensure continuity of service if your coach changes, and to report to the organization funding your program. That reporting is limited to administrative information — participation, attendance, file status, and milestones reached. The content of your exchanges with your coach, your reflections, and your survey responses are not disclosed to the employer funding the program.

Details of the data processed, the purposes, the retention periods, and the authorizations requested are set out in the Career Portal privacy policy, which you accept when creating your account.

Data about clients and suppliers

We collect information regarding your name, contact details, job title, and the role you hold within the organization, which may eventually enable us to establish and maintain a business relationship with you or your company. We may also keep a record of our communications with you.

Testimonials

We sometimes publish testimonials from people we have supported. A testimonial is never published without the person's express authorization, it is published without their name, and the authorization may be withdrawn at any time. The detailed conditions are set out in the Career Portal privacy policy.

How do we collect information?

Information submitted by email or through a form

Leduc RH is committed to ensuring the protection of the confidential information you entrust to us. If you voluntarily provide us with personal or confidential information, by email or through a form, only the data necessary for the Leduc RH team to respond to your message or process your request will be used. Electronic communications benefit from the same confidentiality measures as written documents, and they may be answered by secure email.

Non-personal data is data relating to the way you access the website. This information includes the type of browser you use, the system you use, the name of your Internet service provider, and the pages visited. Non-personal data is automatically collected when you access our website.

Career portal

Access to the portal requires the creation of an account. The data processed there, the cookies used, and the applicable security measures are described in the portal's own privacy policy, which you accept when setting up your account.

Use of cookies

We use cookies on our website. These small text files are installed on your hard drive by your browser to personalize your journey and offer you a user experience that meets your expectations. With your consent, we and our partners use cookies or similar technologies to store, access, and process personal data. You may revoke this consent or object to the processing of data at any time by clicking "Customize" as soon as you arrive on our website. In addition, you may choose to enable or disable cookies, in whole or in part, but disabling some of them may affect your browsing experience.

If you have accepted cookies, you may delete them through your browser settings. You may also disable the use of cookies in your browser. This may, however, limit certain features on our website. Further information on this subject is available on your Internet browser's website.

Analytics and pixels

We also gather statistics measuring our site's activity using Google Analytics, in an ongoing effort to improve your web experience. We may use web beacons, navigation files, log files, redirect files, or invisible pixels in order to improve your Internet experience. This information is collected anonymously and always used in aggregate. In addition, as we continually seek to improve how we promote our site, we may measure the effectiveness of our promotional efforts by tracking what you consulted before arriving on our site.

Non-personally identifying data is also used to diagnose problems with our servers, to compile demographic information, and to administer our website.

We refer you to the Google Analytics Privacy Statement to learn how information is collected and used. Google Analytics software uses cookies to record certain user behaviours, including the number of visits to sites, the browsing path, and the duration of the visit. It is important to note that under no circumstances does the cookie allow the user to be identified. You may access the Google Analytics Privacy Statement at www.google.com/analytics.

Service providers, hosting, and communication outside Québec

To operate our platforms, we rely on service providers who process personal information on our behalf, notably for hosting our databases, sending our transactional emails, delivering our websites, and running our customer relationship management tools.

These providers are bound by contract: they may use your information solely to carry out the mandate we entrust to them, and they are held to confidentiality and security obligations equivalent to our own.

The data in our career portal is hosted in Canada, in data centres located on Canadian territory.

Where a provider is called upon to process personal information outside Québec, we first carry out a privacy impact assessment to ensure that such information will benefit from adequate protection, in accordance with the law applicable in Québec.

Consent and data retention

Consent is at the heart of our actions relating to the protection of your data. It is essential to obtain your consent prior to storing your information in our systems. Your consent may be provided to us in writing, verbally, or electronically. Once consent is obtained, we undertake to retain your data for legitimate purposes, securely, and to destroy your data at the end of your consent or of the retention period prescribed in your situation. All data concerning you will be used and disclosed only for the specific purposes that have been identified. Our tools also allow us to securely destroy any data subject to expired consent, an expired retention period, or a de-indexing request.

Separate consent for secondary purposes

Where we wish to use your information for a purpose that is not necessary to the delivery of the service — the publication of a testimonial, for example — we ask for your separate, express, and freely given consent at the moment the question arises. This consent is never presumed, never pre-checked, and declining has no consequence on the services you receive.

Retention periods

The periods applicable to support files, to content uploaded to the portal, and to survey responses are set out in the Career Portal privacy policy.

At the end of these periods, the information is securely destroyed or anonymized under the conditions described below.

Withdrawal of consent

You may revoke your consent to the processing of data at any time, without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal, and subject to restrictions provided by law or contract and to reasonable notice.

This right applies in particular to the authorization to publish your testimonial: you may withdraw it at any time, even after publication, by writing to us.

Requests for information

What are your rights and choices regarding your personal information?

At any time, you have a right of access to your personal information. You also have the right to request the rectification of personal data if any change has occurred. In addition, you may request the deletion of your personal data, that is, the right to be forgotten.

You also have the following rights:

• Portability: to obtain, in a structured, commonly used technological format, the computerized information you have provided to us, or to request that it be communicated to a third party.
• De-indexing: to request that the dissemination of information cease, or that any hyperlink giving access to it be de-indexed, under the conditions provided by law.
• Withdrawal of a published testimonial, as described above.

Automated decisions: we do not make any decision concerning you based exclusively on the automated processing of your personal information. The assessments and recommendations produced as part of our services are carried out by professionals.

In the event of a request for information, a complaint, an incident notification, or a request to withdraw consent, the request must be submitted to the person responsible for the protection of personal information, specifying in detail the type of request, the data concerned, and the circumstances surrounding the request. You must provide sufficient information to allow us to identify you, as well as any other relevant information that will help us respond effectively to your request or promptly take the measures necessary to handle the incident. Additional proof of identity may be required. In the event of an incident notification, our procedures are handled confidentially.

We respond to requests within 30 days of receipt.

Person responsible for the protection of personal information

Xavier Bouchard, Development and Partnerships Director at Leduc RH Inc.

368 Notre-Dame West – Suite 301, Montréal, Québec H2Y 1T9

Phone: 514 287-0770, ext. 266
Email: xbouchard@leducrh.ca

Security, transparency, and accessibility

We have implemented appropriate and reasonable organizational, contractual, and technological security measures to ensure the confidentiality of this information. These measures are also designed to limit access to your personal information only to members of our staff who need to access it as part of their duties. Those who process your information do so only as authorized and are bound by confidentiality obligations.

We have established procedures to manage any suspected data security breach. If such a breach is suspected, and if we are legally obligated to do so, we will notify you as well as the relevant regulatory authorities. We also maintain a register of confidentiality incidents, in accordance with the law.

Please note that while we strive to protect your personal data to the best of our abilities, the transmission of information over the Internet is not entirely secure. Consequently, any transmission of data by online means is at your own risk.

Anonymization and de-identification

In certain circumstances, we may anonymize your personal information so that it can no longer be linked, directly or indirectly, to your identity, and this on an irreversible basis. Such anonymization is carried out according to generally accepted best practices and according to the criteria determined by regulation. In such cases, we reserve the right to use this anonymized data for serious and legitimate purposes, without further notice to you or your consent.

We may also de-identify certain information, that is, remove the elements that directly identify you, without the process being irreversible. De-identified information remains personal information within the meaning of the law and continues to be protected as such. This is the case, for example, of satisfaction statistics produced from surveys, or of a testimonial published without your name.

Exceptional circumstances

In order to collect personal information concerning a minor under the age of 14, consent must be given by the holder of parental authority or by a guardian. In accordance with the guidelines of the Government of Québec, a person may be designated as guardian following the death of a minor child's parents or by reason of their inability to care for the child.

Leduc RH may disclose to the spouse or a close relative of a deceased person the personal information it holds about that person, if knowledge of that information is likely to assist the applicant in their grieving process. However, such disclosure will only be made if the deceased person did not expressly refuse, in writing, to grant this right of access, and provided the integrity of the status has been validated.