Privacy Policy

1. Introduction

EcoMénagePro ("we", "our", "us") is an eco-friendly cleaning service company based in Greater Montreal, Quebec, Canada. This privacy policy explains how we collect, use, disclose and protect your personal information when you use our website or services.

By using our site or providing us with your information, you agree to the practices described in this policy. If you do not agree with these practices, please do not use our site.

2. Data We Collect

We collect only the data necessary to provide our services:

Identification information:

• First and last name
• Email address
• Phone number

Service information:

• Address of the home to be cleaned (street, city, postal code)
• Type of service requested and frequency
• Notes and special instructions

Payment information:

• Chosen payment method (card, Interac, cash)
• No credit card data is stored on our servers — payments are processed by PCI-DSS certified providers

Browsing data (collected automatically):

• IP address and browser type
• Pages visited and duration of visit
• Traffic source (search engine, direct link, etc.)
• Session and preference cookies

3. How We Use Your Data

Your personal data is used exclusively to:

• Provide our services: schedule and perform cleaning appointments at your home
• Service communication: send quotes, booking confirmations, appointment reminders and invoices
• Customer service: answer your questions and resolve any issues
• Marketing communications: send promotional offers only with your explicit consent
• Service improvement: analyze usage data to improve our website and service quality
• Legal obligations: comply with accounting and tax obligations applicable in Quebec

4. Data Sharing

Your information may be shared only in the following cases:

• Employees and cleaners: only the information necessary (address, time slot, instructions) to perform the requested service
• Web hosting: Hostinger, a hosting provider whose servers are located in Europe and North America, in compliance with GDPR standards
• Google Analytics: anonymized browsing data to improve our site (you can opt out via cookie settings)
• Legal obligations: if required by law or in response to a valid legal proceeding

5. Cookies

Our site uses cookies to improve your browsing experience.

Essential cookies (required for operation):

• User session (login to your client account)
• Display preferences and closing of the promotional bar
• Security and CSRF attack protection

Analytics cookies (Google Analytics):

• Audience and traffic measurement (number of visitors, page views)
• Anonymized data — no personal identification
• Retention period: maximum 26 months

How to disable cookies:

• In your browser: Settings → Privacy → Cookies
• Google Analytics: install the Google Analytics Opt-out add-on
• Note that disabling certain cookies may affect the functioning of some site features

6. Your Rights — Quebec Law 25 & GDPR

In accordance with Quebec Law 25 on the Protection of Personal Information in the Private Sector and the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain a copy of all your personal data we hold
• Right of rectification: correct any inaccurate or incomplete information about you
• Right of erasure: request the deletion of your personal data (subject to our legal obligations)
• Right of portability: receive your data in a structured, machine-readable format
• Right to object: object to the processing of your data for marketing purposes
• Right to withdraw consent: withdraw your consent at any time for marketing communications
• Right to file a complaint: with the Commission d'accès à l'information du Québec (CAI) if you believe your rights are not being respected

To exercise any of these rights, contact our data protection officer:

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration or destruction:

• SSL/TLS encryption: all communications between your browser and our server are encrypted (HTTPS)
• Restricted access: only authorized staff members have access to your personal data, within the limits of their responsibilities
• Hashed passwords: client account passwords are stored in hashed form (bcrypt), never in plain text
• Secure hosting: our Hostinger servers have firewalls, automatic backups and DDoS protection
• Retention period: your data is kept for as long as necessary to provide the service, then deleted within legal deadlines (maximum 5 years for accounting data)

In the event of a data breach likely to result in a high risk to your rights and freedoms, we will notify you as soon as possible in accordance with Law 25.

8. Contact Us

For any questions about this privacy policy or the processing of your personal data, please contact us:

This privacy policy may be updated periodically. The date of last modification is indicated at the top of this document. We encourage you to check this page regularly to stay informed of our practices.