Privacy policy

Under the Act respecting the protection of personal information in the private sector (Law 25), the person in charge of protecting personal information at Nomad360 is [name and title of the person in charge — P-A], [confidentialite@nomad360.ca]. Write to them for any question or request.

• Identity and contact details: name, email, phone, language.
• Your booking: dates, branch, vehicles or outings, accessories, amounts, the release signed.
• Driver's licence, when the vehicle requires one: its class, and its number when you declare it.
• Payment: handled by our payment processor. We never see nor keep your card number.
• What you write to us through the contact or quote forms.
• Minimal technical data: server logs and IP address, to prevent abuse.

To carry out your booking, check that a driver may drive the vehicle, invoice and keep our accounts as tax laws require, write to you about your booking (confirmation, release, thanks), and keep the service safe. We do not sell your information. We send no promotional email without your consent.

You consent by booking or writing to us. You may withdraw your consent at any time; some information remains necessary to carry out a booking already made, and to meet our legal obligations.

A licence number is erased 30 days after your file is closed; only the fact that a licence was declared remains.

Bookings and invoices are kept six years, as tax laws require. After that, the customer's identity (name, email, phone) is anonymized; the bookings, invoices and amounts remain, with no one's name on them. [To be confirmed with our accountant.]

Our database is in Canada, in Montréal (Google Cloud, Firebase). Our service providers process information only for us, under contract:

• Google Cloud — the database and files (Montréal).
• Vercel — hosting of this website.
• Microsoft 365 — the emails we send you.
• Our payment processor — card payments.

[Privacy impact assessment for any communication outside Québec (Law 25, s. 17): to be completed.]

This site uses only the cookies it needs to work (language, security). No advertising cookie, no audience measurement.

You may ask to see your information, have it corrected, withdraw your consent, receive it in a structured format, or have it stop being disseminated. We answer within 30 days. If you are not satisfied, you may complain to the Commission d'accès à l'information du Québec.

Every incident is recorded. When one presents a risk of serious injury, we notify the Commission d'accès à l'information and the people concerned without delay.

We publish any change to this policy on this page, with its date.