1. Data controller

This privacy policy is published by The Water Hub(hereinafter “we” or “the company”), which operates this website.

Carrefour de l'eau is subject to the An Act to modernize legislative provisions respecting the protection of personal information (L.Q. 2021, c. 25), commonly referred to as "Bill 25", as well as the Act respecting the protection of personal information in the private sector (LPRPSP). We are committed to handling your personal information with care, transparency, and respect for your rights.

This policy applies to anyone who visits our website or interacts with us electronically.

2. Personal information collected

Depending on how you use our site, we may collect the following categories of personal information:

Technical and navigational information

• IP address (Internet Protocol address)
• Device identifiers (browser type, operating system, screen resolution)
• Pages Visited and Navigation Paths on the Site
• Duration of tour sessions
• Browsing behavior (clicks, scrolling, interactions)
• Approximate location (derived from the IP address, at the city or region level)

Consent preferences

• Your cookie preferences, stored via the Moelleux platform

We do not collect sensitive personal information, such as health data, detailed financial information, or Social Security numbers, during the normal use of this site.

3. Purposes of processing

We use your personal information solely for the purposes described below. For each purpose, we indicate the legal basis on which we rely.

Audience measurement and site improvement

We analyze visitor behavior (pages viewed, session duration, navigation paths, approximate location) to understand how our site is used and to improve its content and user experience. This processing is carried out via Google Analytics 4 (Google LLC, United States).
Legal basis: Consent (You can accept or decline analytics cookies via our Moelleux consent banner).

Optimal Content Display

We use Google Fonts (Google LLC, United States) to load fonts that ensure legible and consistent text display on our website. This process involves a connection to Google’s servers, which may result in the transmission of your IP address.
Legal basis: legitimate interest (to ensure that the website functions properly and is accessible).

Cookie consent management

The platform Moelleux, operated by Horizon-Cumulus (9322-8310 Québec Inc., Joliette, Québec), records your cookie consent preferences in order to respect your choices during future visits. A cookie named moelleux_{site_key} is stored in your browser for 13 months.
Legal basis: legal requirement (Act 25 requires that proof of consent be obtained and retained).

4. Third parties and subcontractors

The following table lists all third-party services integrated into our website, their roles, and their policies regarding the transfer of information outside of Quebec.

We do not sell your personal information to third parties or share it for advertising purposes without your explicit consent.

5. Transfers outside Québec

Some of the third-party services we use transfer personal information outside of Quebec, including to États-Unis. These transfers involve the following services:

• Google Analytics 4 (Google LLC, United States) — Your browsing data (IP address, device identifiers, website behavior) is processed on servers located in the United States.
• Google Fonts (Google LLC, United States) — Your IP address may be transmitted to Google's servers when fonts are loaded.

In accordance with Section 17 of Act 25, before transferring personal information outside of Quebec, we ensure that such information is adequately protected, in particular through the privacy policies and contractual mechanisms put in place by these providers (standard contractual clauses, data processing policies, etc.).

Please note that the laws governing the protection of personal information in the United States differ from those in effect in Quebec. By accepting analytical and functional cookies through our consent banner, you acknowledge that you have been informed of these transfers.

In addition, our primary hosting infrastructure (website and Moelleux consent records) is operated in Quebec by Horizon-Cumulus, which means that data related to consent management does not leave Quebec.

For sending business emails, we use Google Workspace(Google LLC, United States). Your contact information submitted via email may therefore be processed in that jurisdiction. Our routine communications are also routed through Horizon-Cumulus Email (Joliette, Quebec), whose data remains in Quebec.

6. Shelf life

We keep your personal information only as long as it is required for the purposes for which it was collected, or to meet our legal obligations.

Upon expiration of these time limits, the information is securely destroyed or anonymized, in accordance with the practices recommended by the Commission d'accès à l'information (CAI).

7. Rights of persons concerned

Under Act 25, you have the following rights with respect to the personal information we hold about you. To exercise any of these rights, please contact our Privacy Officer (see Section 8).

Your right of access

You may request to review the personal information we hold about you, as well as information about how it is used and shared.

Right of rectification

If any information about you is inaccurate, incomplete, or ambiguous, you may request that it be corrected.

Right to erasure (right to be forgotten)

In situations provided for by law—including when the information was collected while you were a minor, or when its collection violates the law—you may request that your personal information be deleted.

Right to portability

You may request to receive, in a structured and commonly used digital format, the personal information you have provided to us, so that you can transfer it to another organization if you wish.

Right to withdraw consent

When the processing of your information is based on your consent, you may withdraw it at any time without any adverse consequences for you. For cookies, you can change your preferences directly through the Moelleux consent banner available on our website.

Response time

We are committed to responding to all inquiries within 30 dayswithin 30 days of receipt, in accordance with Act 25.

Right to File a Complaint

If you feel your rights have not been respected, you can file a complaint with the Commission for Access to Information (CAI) :

• Website : www.cai.gouv.qc.ca

8. Privacy Officer

In accordance with Section 8.1 of Act 25, Le Carrefour de l'eau has appointed a Privacy Officer (RPRP). This person is your point of contact for any questions, requests, or concerns regarding the protection of your personal information.

• Name : Franck Cuellar
• Title : --
• E-mail : franck@carrefourdeleau.com
• Phone : -------

We undertake to acknowledge receipt of your request as soon as possible and to respond within a maximum of 30 days we will reply within 30 days of receipt of your request, as stipulated in Bill 25. If your request is complex or voluminous, we will inform you of any additional time required.

9. Effective date and versioning

This Privacy Policy is effective as of juin, 23 2026and corresponds to the version 1.

We reserve the right to update this policy at any time to reflect changes in our practices, the services we use, or applicable legal requirements. In the event of a significant change, we will notify you by posting a prominent notice on our website. We encourage you to check this page periodically.

The current version is always the one published on this page. Previous versions are available upon request from our Privacy Officer.