Privacy Policy
Last updated: May 18, 2026
Collection of personal information
Houle Defence Agency collects personal information you voluntarily provide through our contact form: full name, work email address, organization, subject of inquiry, and message content. We also collect minimal technical data, including a partially redacted IP address and the contents of your cookie preferences, for security and consent-proof purposes.
How we use your data
Personal information collected through our contact form is used exclusively to respond to your inquiry, verify the credentials of the requesting party, and document compliance with applicable Canadian regulatory frameworks. We do not use your personal information for marketing purposes, and we perform no automated decision-making or profiling.
How long we keep your data
Cookie preferences are retained for a maximum of 13 months in your browser, and the consent audit log (proof required under Law 25 and the GDPR) is retained for 36 months in anonymized form. Retention of other data aligns with Canadian regulatory requirements applicable to defence brokerage operations. Communications protected by mutual non-disclosure agreements are retained as required by applicable law and contractual obligations.
International transfers and safeguards
Pursuant to article 17 of Law 25, we inform you that certain processing activities (hosting, audience measurement) are carried out by providers established in or operating infrastructure within the United States, notably Vercel Inc. (California). For visitors from the European Union, these transfers rely on the European Commission's Standard Contractual Clauses (SCCs). A privacy impact assessment is maintained under Law 25, and sensitive data does not leave the Canadian environment without equivalent contractual safeguards.
Who has access
Access to your information is restricted to authorized Houle Defence Agency personnel involved in your engagement. We do not share, sell, or disclose your information to third parties without your prior written consent. Technical processors (Vercel for hosting and audience measurement, Resend for transactional email delivery) are contractually bound to confidentiality and applicable data protection regulations.
Your rights under applicable law
Under Quebec's Law 25, PIPEDA (Canada), and the GDPR (EU) where applicable, you have the following rights: access, rectification, erasure, portability, withdrawal of consent, objection to processing, and restriction of processing. Withdrawing consent does not affect the lawfulness of prior processing. To exercise these rights, submit your request in writing to the Privacy Officer (next section). Requests are processed within 30 days, as required by Law 25 and PIPEDA.
Privacy Officer
In accordance with article 8.1 of Law 25, Houle Defence Agency's Privacy Officer can be reached at contact@houledefenceagency.ca. If you believe your rights have not been respected, you may file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) under Law 25, the Office of the Privacy Commissioner of Canada (priv.gc.ca) under PIPEDA, or, for EU residents, the competent supervisory authority in your country of residence (full list at edpb.europa.eu).