Privacy
policy

Who is responsible

Débossatec is a body shop in Terrebonne, founded in 1942. Our address is 208 rue Kennedy. We are the business that collects and uses the information described below, and we are responsible for it.

Under the Loi sur la protection des renseignements personnels dans le secteur privé (Act respecting the protection of personal information in the private sector, Quebec), as amended by Law 25, one person within the business carries that responsibility and must be reachable directly:

This is the person you write to with any question about this policy, to see your file, to have it corrected, or to file a complaint.

What we collect

Until you fill in a form, we do not know who you are. We only know that a visitor is on the site, from which approximate city, which pages they view and how many times they have come (see section 05).

Free estimate request

• Your first and last name, your phone number and your email address, so we can call you back with the estimate.
• The year, make and model of your vehicle.
• The service or services requested and, where applicable, the package you clicked on.
• The message you write, including whatever you choose to mention in it (claim, insurer, deadline).
• The photos you attach. A photo of your vehicle can show your licence plate or your driveway. Attach only what is needed to see the damage.

Windshield claim

• Only if you ask us to handle the claim with your insurer: your insurer's name, your policy number, the date of loss, the vehicle identification number (VIN), the licence plate, the mileage and your address. That is what the insurer requires to open the file.

Estimate appointment

• Your name, your phone number and, if you give it, your email address so we can send you the confirmation.
• Your vehicle, the service or services you want, the day and time you chose, who you want to meet and your note.

VIP request

• Your name, your phone number and the package you chose.

EV charger quote

• Your name, phone number, email and address, your type of home and parking, details about your electrical panel and the photos you attach, to prepare the quote with our partner electrician.

Maintenance reminders (After an accident page)

• The printable card downloads without giving us anything. If you tick the box to receive our seasonal maintenance reminders, we keep your email address, along with the date and IP address of your sign-up, as proof of your consent.

Click to a partner

• When you click through to a partner's website (for example our insurance broker), we receive a notice that only says a click happened, and from which page. We pass no information about you to the partner.

What our servers log

Like any website, ours is served by a host, Netlify, whose servers keep technical logs: IP address, date and time of the request, page requested, browser type. Those logs serve the security and operation of the service. We do not consult them and we do not link them to any customer file.

To block bots that send spam, we also keep the IP address of each form submission for 7 days, without linking it to your file.

Why we collect it

Every piece of information serves one specific purpose, and nothing else:

• To answer you. Prepare your estimate, call you back, set an appointment.
• To be ready when you call. Know that a visitor is on the site and, only if you asked for it, who you are (section 05).
• To carry out the work. Open your shop file, order the parts, document the condition of the vehicle before and after.
• To handle your claim, if you ask us to follow up with your insurer.
• To prepare an EV charger quote with our partner electrician, if you asked for one.
• To send you our seasonal maintenance reminders, only if you ticked the box for them.
• To meet our legal and accounting obligations: invoices, warranties, records.

We do not use your information to profile you, to target you with advertising, or to make a decision about you based exclusively on automated processing.

We never write to you about anything other than your request without your separate agreement. Maintenance reminders are offered through a separate checkbox, and you can say no or unsubscribe without it changing anything about the service.

Your consent

By filling in and sending a form, you consent to our using that information for the purposes described above. That consent is free, informed and given for specific purposes: you know exactly what it is for at the moment you click, because it is written right under the button.

You can withdraw it at any time. An email to info@debossatec.com is enough. We will stop using your information and will destroy it, subject to what the law requires us to keep (an invoice, for example, must be kept even if you withdraw your consent).

Cookies and tracking

This site sets no third-party cookies. No analytics cookie, no advertising cookie. It keeps one thing in your browser: a random token, created by us, that holds no information about you. (It also notes which car the home page showed you, so it can show you a different one next time. That note never leaves your browser.)

A visitor, under a number. This token lets the shop know that someone is on the site, under a plain number (for example “Visitor #6512 from Laval”), with the approximate city derived from the IP address, the page viewed and the number of visits. We keep neither your exact address nor your IP address. The point: being ready to answer if you call.

Your name, only if you ask. Recognition by name is off by default. It is turned on only if you tick the box “Recognize me on my next visits to the site” when sending a form. The shop then sees your name when you come back to the site, so we can pick up your file faster. To turn it off, clear your browser's site data, or write to us and we will remove the link between your name and the token.

This token is shared with no one and is never used for advertising. Visit data is erased 12 months after your last visit. You can also ask us to delete it sooner (see section 10).

In practical terms, it means we have left out:

• any third-party analytics tool (Google Analytics and equivalents);
• any social network or ad network pixel;
• any embedded Google Maps frame (iframe), which would have set advertising cookies. Our map is drawn on our own server from OpenStreetMap data;
• any font loading from Google Fonts. The site's fonts are hosted by us, which avoids passing your IP address to a third party.

If we ever add an analytics tool, we will choose one with no cookies and no personal data, and this page will be updated before it goes live.

Who it is shared with

We do not sell, rent or trade your information with anyone. We disclose it only in the following cases:

• Our technical providers. Netlify hosts the site. Supabase stores the requests received through the forms and the photos you attach. Brevo delivers the confirmation and notice emails. They act as service providers and have no right to use your information for their own purposes.
• Your insurer or the claims adjuster, only if you have asked us to follow up on your claim.
• Our partner electrician, only if you ask for an EV charger quote, and only what is needed to prepare it.
• Our parts suppliers and subcontractors (towing, glass, alignment), and only the information needed to fill the order, generally the year, make, model and serial number of your vehicle.
• A public authority, if the law requires it of us or if a court order demands it.

You can ask us at any time for the list of categories of people within the business who have access to your file, as well as the names of the third parties to whom your information has been disclosed.

Disclosure outside Quebec

Our technical providers have their servers outside Quebec: Netlify (United States), Supabase (United States, Oregon region) and Brevo (France). Your information may therefore be stored outside Quebec or pass through other countries, where it may be subject to the laws of the host country.

Before retaining these providers, we assessed that the information involved (a name, a phone number, a description of damage and, for a claim, a policy number and a VIN) receives adequate protection given its sensitivity, the security measures in place (encryption in transit and at rest, restricted access) and the providers' contractual commitments.

If this assessment concerns you, you can always reach us by phone at 450-581-0333 or drop by the shop rather than using a form.

How long we keep it

We keep your information for as long as is necessary for the purposes for which it was collected, then we destroy it or anonymize it.

The photos you send us follow the fate of the file they belong to. If we want to publish a photo of your vehicle in our gallery of completed work, we ask you first.

How it is protected

• The site is served entirely over HTTPS: everything you send in a form is encrypted in transit.
• The requests we receive are kept in an encrypted database, accessible to a limited number of people at the shop, on a strict need-to-know basis.
• Paper files are kept in the shop offices, where access is controlled.
• We keep a register of confidentiality incidents, as the law requires.

No measure is foolproof. If you have reason to believe your information has been compromised, write to us immediately.

Your rights

Quebec law gives you several rights over the information we hold about you. You exercise them by writing to the officer identified in section 01. We answer within 30 days, free of charge.

• Access. Obtain the list and a copy of the information we hold about you.
• Correction. Have information that is inaccurate, incomplete or ambiguous corrected.
• Withdrawal of consent. Ask us to stop using your information.
• Deletion and de-indexing. Have the dissemination of a piece of information stopped, or have a link to it removed, on the conditions set out in the law.
• Portability. Since 22 September 2024, receive in a structured, commonly used technological format the computerized information you yourself provided to us, or ask us to transmit it to someone else.
• Explanation. Know what information was used in a decision concerning you, and be able to submit your observations.

We may ask you for proof of identity before acting: that is a protection for you. If we refuse your request, we will explain in writing why, and we will tell you how to contest that refusal.

If there is a confidentiality incident

If unauthorized access to, use of, or disclosure of your information were to occur and presented a risk of serious injury, we would notify you without delay, along with the Commission d'accès à l'information, as the law requires. We keep a register of all incidents, even minor ones.

Minors

Our services are for adults. We do not knowingly collect information from a person under 14 years of age without the consent of the person having parental authority. If that were to happen, write to us and we will destroy the file.

Changes to this policy

We may change this policy, for example if we add a service or change provider. The update date shown at the top of the page always indicates the version in force. If there is a significant change to the purposes of use, we will inform you before it takes effect.

Contact us

For any question about this policy, to exercise a right, or simply to find out what we have in your file:

This policy is governed by the Loi sur la protection des renseignements personnels dans le secteur privé (Act respecting the protection of personal information in the private sector, RLRQ, c. P-39.1), as amended by Law 25, and by the Loi sur la protection des renseignements personnels et les documents électroniques (Personal Information Protection and Electronic Documents Act, PIPEDA) where it applies.