Privacy Policy

1. Person in charge of the protection of personal information

As required by Law 25, the person in charge of the protection of personal information at Maison Boire is:

2. Information we collect

We collect only the information necessary for the purposes set out below, directly from you:

• Reservations — name, phone, email, party size, allergies, dietary restrictions and special occasions you choose to share with us.
• Newsletter — first name and email address, with your explicit consent.
• Gift cards and online shop — name, contact and billing details. Payment is handled by our secure payment provider; we never store card numbers.
• Correspondence — the content of emails or messages you send us.
• Cookies — see section 6.

3. Purposes of collection

Your information is used exclusively to: honour and confirm your reservations; adapt service to your allergies and preferences; process your purchases and gift cards; send you the newsletter if you have consented to it; respond to your requests; meet our legal and tax obligations; and, if you accept, measure site traffic anonymously. We never sell or rent your personal information, and we run no targeted advertising.

4. Consent

We obtain your consent in a clear, free and informed manner, for each specific purpose. Newsletter sign-up relies on explicit consent (double opt-in); every email includes a one-click unsubscribe link. You may withdraw your consent at any time by writing to info@maisonboire.com, without affecting the service you receive in the dining room.

5. Third parties and hosting outside Québec

We share your information only with the providers strictly necessary to our services:

• Bookenda — online reservation platform.
• Mailchimp (Intuit) — newsletter delivery.
• Payment provider — secure processing of online purchases.

Some of these providers store data outside Québec. Before any communication of information outside Québec, we conduct a privacy impact assessment (PIA) and ensure by contract that your information receives adequate protection, equivalent to what Québec law requires.

6. Cookies

Our site uses two categories of cookies:

• Essential cookies — required for the site to work (for example, remembering your language or consent choice). They cannot be turned off.
• Analytics cookies — anonymous traffic statistics. They are off by default and activate only if you accept them in the cookie banner.

You can change your choice at any time via the “Manage Cookies” link at the bottom of the home page, or by deleting cookies in your browser.

7. Retention and destruction

We keep your information only as long as necessary for the purposes it was collected for, then for the period required by our legal and tax obligations. After that, it is securely destroyed or anonymized. An internal retention schedule governs these practices.

8. Security measures

Your information is protected by measures that are reasonable and proportionate to its sensitivity: encrypted communications (TLS), access limited to team members who need it, strong passwords, and internal personal-information governance policies approved by the designated officer.

9. Your rights

At any time, by writing to the designated officer, you may:

• request access to the information we hold about you;
• request its correction if it is inaccurate or incomplete;
• withdraw your consent or request de-indexing (cessation of dissemination);
• obtain your information in a structured technological format (data portability);
• request its deletion, subject to our legal obligations.

We respond within 30 days. If you are unsatisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (CAI).

10. Confidentiality incidents

Every confidentiality incident is recorded in an internal register. Should an incident present a risk of serious injury, we will diligently notify the Commission d'accès à l'information and the persons concerned, as required by Law 25.