--- title: "Privacy Policy - Petit Duc" description: "Learn how Technologies Merisia Inc. collects, uses, communicates, retains and protects personal information through Petit Duc." canonical: https://www.petitduc.ca/en/privacy-policy/ locale: en-CA alternates: fr-CA: https://www.petitduc.ca/fr/politique-de-confidentialite.md en-CA: https://www.petitduc.ca/en/privacy-policy.md --- # Petit Duc Privacy Policy Last updated: July 17, 2026 Your privacy matters to us. This Privacy Policy explains how Technologies Merisia Inc. collects, uses, communicates, retains and protects personal information through Petit Duc. Petit Duc is a digital platform developed and operated by Technologies Merisia Inc., referred to in this Policy as "Merisia," "Petit Duc," "we," "us" or "our." This Policy applies to: - visitors to the Petit Duc website; - event organizers and their authorized users; - participants who submit information through an event form; - individuals who contact us, request a demonstration or receive support; and - other individuals whose personal information is processed through the Petit Duc services. This Policy should be read together with our [Terms of Use](https://www.petitduc.ca/en/terms-of-use/) and any event-specific privacy notice displayed when information is collected. ### Learn About Petit Duc Petit Duc helps event organizers collect and analyze sustainability-related information about their events. The platform currently focuses primarily on participant travel and may be used to: - collect information about journeys to and from an event; - structure multimodal and multi-segment journeys; - calculate travel distances; - estimate greenhouse gas emissions; - analyze travel patterns and transportation modes; - produce maps, indicators, reports and visual materials; and - identify opportunities to improve future events. Petit Duc may gradually be expanded to cover residual materials and other sustainability indicators. The information collected and the features available may vary depending on the event, the Organizer's configuration and the services selected. ### Who Is Responsible for Your Information? The organization responsible for your personal information may depend on how you interact with Petit Duc. ### Information managed by Merisia Merisia generally determines how and why personal information is processed when you: - visit the Petit Duc website; - request information or a demonstration; - create or manage an organizer account; - communicate with our team; - receive technical support; - purchase or administer Petit Duc services; or - interact with our security, authentication or platform administration systems. ### Event-specific Participant Data When you submit information through a form created for a particular event, the event organizer generally determines: - why the information is being collected; - which questions are included in the form; - how the event results will be used; - which members of its team may access the results; and - how long event-related information should be retained, subject to its agreement with Merisia and applicable law. In this context, Merisia provides and operates the technology used to collect, process and analyze the information on behalf of the Organizer. Merisia may also process limited information for its own legitimate operational purposes, including platform security, service delivery, troubleshooting, legal compliance and the production of aggregated or anonymized information. An event-specific notice may provide additional details about the Organizer, the event and the purposes of the collection. If that notice and this Policy address different matters, they should be read together. ### Personal Information We Collect Personal information is information that directly or indirectly identifies an individual. The categories of information we collect depend on your relationship with Petit Duc and how you use the Services. ### Website and technical information When you visit our website or use the platform, we may automatically collect: - your Internet Protocol address; - browser type and version; - device and operating system information; - preferred language; - pages or features accessed; - dates and times of access; - referring pages or websites; - session and authentication information; - error, diagnostic and performance data; - approximate geographic information derived from an IP address; and - information collected through cookies or similar technologies. We use this information to operate, secure, maintain and improve the Services. ### Organizer and Authorized User information When an Organizer or Authorized User creates an account, requests a demonstration, enters into an agreement with us or uses the platform, we may collect: - first and last name; - professional email address; - telephone number; - job title or role; - organization name; - account credentials and authentication information; - communication preferences; - event information; - service configuration and subscription information; - billing contact details; - invoices and payment status; - support requests and communications; and - actions performed through the account. Payment transactions may be processed by a third-party payment provider. Unless otherwise indicated during payment, Merisia does not receive or store complete payment-card numbers. ### Event and organization information Organizers may provide information about their events, including: - event name and description; - dates and times; - venues and addresses; - expected or actual attendance; - event format; - participating locations; - transportation options; - contact persons; - logos and visual identity; - sustainability objectives; and - other information needed to configure the Services or prepare Reports. Information relating solely to an organization is not necessarily personal information. It may nevertheless become personal information when it identifies an individual representative, employee or contact person. ### Participant travel information Depending on the event and form configuration, Petit Duc may collect information such as: - the event or activity attended; - language preference; - origin and destination; - postal code, municipality, address or approximate departure area; - intermediate stops or journey segments; - transportation modes; - travel dates or periods; - one-way or round-trip status; - vehicle type; - number of occupants; - carpooling information; - approximate or calculated travel distance; - optional comments; and - other information reasonably necessary to understand the journey. Participant forms are generally designed to minimize the collection of direct identifiers such as names, personal email addresses and telephone numbers. However, an Organizer may configure a form to request additional information where appropriate. When this occurs, the additional collection should be clearly identified in the form or event-specific notice. Travel information, postal codes, addresses and journey details may constitute personal information, particularly when they can be associated with a specific individual. ### Information generated by the platform Petit Duc may generate information from the data submitted, including: - standardized or geocoded locations; - estimated routes and distances; - travel categories; - estimated greenhouse gas emissions; - response statistics; - aggregated transportation patterns; - maps and visual representations; - completeness or validation indicators; and - reports and event-level summaries. These results may remain personal information where they can reasonably be associated with an identifiable individual. ### Communications and support information When you communicate with us, we may collect: - your contact details; - the content of your message; - attachments you provide; - information about an issue or support request; - meeting notes; - feedback and suggestions; and - records of our response. Please avoid sending sensitive or unnecessary personal information through general email or support channels. ### How We Collect Personal Information We may collect personal information: - directly from you; - through an Organizer or its Authorized Users; - through participant forms; - through your use of our website or platform; - through cookies and technical logs; - through communications with our team; - from service providers acting on our behalf; - from publicly available professional sources; or - as otherwise permitted by law. When information is collected directly from you, we will provide the information required by applicable law, including the purposes of the collection and whether providing the information is required or optional. ### Why We Use Personal Information We use personal information only for identified and appropriate purposes. ### Providing Petit Duc We may use information to: - create and manage accounts; - authenticate users; - configure event experiences; - operate participant forms; - process journey submissions; - standardize or validate locations; - calculate routes and distances; - estimate travel-related greenhouse gas emissions; - create dashboards, maps and Reports; - provide exports and visual materials; and - deliver the services requested by an Organizer. ### Supporting Organizers and Participants We may use information to: - answer questions; - provide demonstrations; - offer training or onboarding; - provide technical support; - investigate errors; - communicate service-related information; - respond to privacy requests; and - manage customer relationships. ### Managing our activities We may use information to: - prepare proposals and service agreements; - administer subscriptions; - issue invoices and process payments; - maintain business and accounting records; - manage suppliers and contractors; and - comply with contractual and legal obligations. ### Protecting the Services We may use information to: - prevent unauthorized access; - monitor platform security; - detect fraud, misuse or malicious activity; - investigate security incidents; - maintain logs; - protect our rights and systems; and - enforce our agreements and Terms of Use. ### Improving Petit Duc We may use information to: - understand how features are used; - evaluate platform performance; - identify usability problems; - improve calculation methods; - develop new features; - test platform changes; and - conduct internal research and statistical analysis. Whenever reasonably possible, we use aggregated, de-identified or anonymized information for product improvement and research. ### Communicating about Petit Duc With consent where required, we may use professional contact information to: - send information about Petit Duc; - provide requested resources; - announce relevant product updates; - invite Organizers to demonstrations, consultations or events; and - maintain professional relationships. You may unsubscribe from promotional communications at any time. Service, security, billing and account-related communications may still be sent when necessary. ### Consent and Other Permitted Uses We obtain consent where required by applicable law. Consent must relate to specific purposes and may be requested through: - a participant form; - an account registration process; - a cookie preference tool; - a written agreement; - an email or other communication; or - another clear affirmative action. Certain information is necessary to provide a requested service. Refusing to provide that information may prevent us or the Organizer from: - creating an account; - processing a participant submission; - calculating a journey; - providing a Report; - responding to a request; or - delivering another requested feature. We may also collect, use or communicate personal information without consent where permitted or required by law. You may withdraw consent to a use based on consent, subject to legal or contractual restrictions and reasonable notice. A withdrawal does not invalidate processing that occurred before the withdrawal. ### How Participant Information Is Used Participant information is used primarily to help the Organizer understand travel associated with its event. Depending on the event configuration, Participant Data may be used to: - estimate the greenhouse gas emissions associated with reported travel; - calculate distances and transportation-mode distribution; - understand multimodal or multi-segment journeys; - evaluate carpooling and vehicle occupancy; - prepare aggregated event statistics; - create maps and visual summaries; - inform participants about their estimated travel impact; - prepare sustainability Reports; - support reporting to partners, sponsors or funders; and - identify opportunities for future event planning. Petit Duc does not use Participant Data to: - determine admission to an event; - establish employment eligibility; - assess creditworthiness; - make insurance decisions; - build advertising profiles; - sell targeted advertising; or - track Participants across unrelated events for commercial purposes. Unless expressly disclosed in an event form, Petit Duc does not continuously track the physical location of a Participant's device. ### Information Shared With Organizers Information submitted through an event-specific form may be made available to the Organizer and its Authorized Users. Depending on the services and configuration selected, the Organizer may receive: - individual journey responses; - travel segments; - submitted postal codes or locations; - estimated distances and emissions; - aggregated statistics; - maps; - exports; and - event-level Reports. Organizers are responsible for limiting access to individuals who need the information for authorized event-related purposes. Merisia does not control independent uses of information made by an Organizer outside Petit Duc. Questions about an Organizer's use of event-specific information should normally be directed to that Organizer. We may assist with the request or direct it to the appropriate Organizer when necessary. ### Service Providers and Other Disclosures We do not sell personal information. We may communicate personal information to service providers that help us operate Petit Duc, such as providers of: - infrastructure and hosting; - data storage and backups; - mapping, routing and geocoding; - email and communications; - authentication and security; - technical support; - payment processing; - accounting and administration; - performance monitoring; and - privacy, legal or professional services. These providers are authorized to process information only for the services they provide to us or as otherwise permitted by law. We use contractual, organizational and technical measures appropriate to the nature of the information involved. Some journey information, such as an address, postal code, origin or destination, may be transmitted to a mapping, routing or geocoding provider to calculate or standardize a location, route or distance. We may also communicate information: - with your consent; - to an Organizer as described in this Policy; - to comply with a law, court order or lawful request; - to investigate fraud, security incidents or unlawful activity; - to protect the rights, safety or property of Merisia, an Organizer, a Participant or another person; - to collect an unpaid amount; - to professional advisers who are subject to confidentiality obligations; or - in connection with a proposed merger, financing, reorganization, sale or transfer of all or part of the Petit Duc business. If a business transaction occurs, personal information will remain subject to applicable legal and contractual safeguards. ### Aggregated, De-identified and Anonymized Information We may create aggregated or de-identified information by combining or modifying information so that it is less likely to identify an individual. We may use such information to: - understand transportation patterns; - evaluate the performance of Petit Duc; - improve emission calculations; - develop new features; - conduct research; - prepare general industry insights; - demonstrate platform capabilities; and - support sustainability initiatives. Where information is legally anonymized, we will apply the requirements and recognized practices applicable to anonymization. We will not publicly identify a Participant, Organizer or specific event through aggregated information without authorization. We do not attempt to re-identify information that has been anonymized. ### Automated Processing and Emission Calculations Petit Duc uses automated calculations to: - standardize locations; - calculate or estimate distances; - associate journeys with transportation categories; - apply emission factors; - calculate estimated greenhouse gas emissions; and - generate statistics, indicators and Reports. These calculations are intended to support event sustainability analysis. They are not designed to make decisions that produce legal or similarly significant effects concerning individual Participants. If Petit Duc introduces a feature that makes a decision concerning an individual based exclusively on automated processing, we will provide the information and rights required by applicable law. ### Cookies and Similar Technologies Petit Duc may use cookies, local storage or similar technologies. ### Essential technologies Essential technologies may be used to: - keep you signed in; - maintain a secure session; - remember a language or accessibility preference; - prevent fraud; - balance platform traffic; and - provide requested functionality. Disabling essential technologies may prevent parts of the Services from working correctly. ### Analytics technologies Where enabled, analytics technologies may help us understand: - the number of visits; - pages or features used; - general navigation patterns; - errors and performance; and - the effectiveness of our website. We seek to limit analytics collection to information reasonably necessary to understand and improve the Services. ### Your choices You may be able to manage optional cookies through: - our cookie preference interface; - your browser settings; - your device settings; or - another preference mechanism provided through the Services. Browser settings may not control all technologies, such as local storage. Petit Duc does not currently use third-party advertising cookies or Participant Data for behavioural advertising. If this practice changes, this Policy and the applicable consent mechanisms will be updated before such use begins. ### Where Information Is Processed Personal information may be stored or processed in Québec, elsewhere in Canada or in another jurisdiction where one of our service providers operates. Information processed outside Québec may be subject to the laws of the jurisdiction where it is located and may be accessible to courts, governments or law enforcement authorities in accordance with those laws. Before communicating personal information outside Québec, we take the measures required by applicable law. These may include: - evaluating privacy-related factors; - considering the sensitivity of the information; - reviewing the purposes and safeguards involved; - assessing the applicable legal framework; and - entering into a written agreement with the recipient. We communicate information outside Québec only where we determine that it will receive adequate protection in the circumstances. ### Retention of Personal Information We retain personal information only for as long as reasonably necessary to fulfill the identified purposes, comply with legal requirements, resolve disputes, protect our rights and administer our agreements. Retention periods vary depending on the nature and purpose of the information. ### Participant and event data Participant and event information is generally retained: - for the period required to provide the Services; - for the period specified in an agreement with the Organizer; - for the time needed to prepare, verify and deliver Reports; - while reasonably necessary to provide support; and - as otherwise required or permitted by law. At the end of the applicable retention period, the information will be securely destroyed or, where appropriate and legally permitted, anonymized. ### Organizer accounts Account and customer relationship information may be retained for the duration of the account or business relationship and for an appropriate period afterward for legal, contractual, security and administrative purposes. ### Financial records Invoices, payment records and other financial information may be retained for the periods required by tax, accounting and corporate laws. ### Security and technical logs Logs are retained for a limited period appropriate to security, troubleshooting, fraud prevention and system administration. ### Privacy requests and complaints Records concerning privacy requests, complaints or incidents may be retained for the period necessary to document our response and meet legal obligations. ### Our security measures We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity, purpose, quantity, distribution and format of the personal information involved. Depending on the circumstances, these measures may include: - role-based access restrictions; - authentication controls; - access logging; - separation of customer environments or permissions; - secure backups; - software and infrastructure updates; - monitoring and incident-response processes; - confidentiality commitments; - staff and contractor access limitations; - contractual safeguards with service providers; and - secure destruction procedures. Access to personal information is limited to individuals who require it for authorized responsibilities. No Internet transmission, information system or storage method is completely secure. Although we take reasonable steps to protect information, we cannot guarantee absolute security. ### Confidentiality Incidents A confidentiality incident may include unauthorized access, use or communication of personal information, the loss of personal information or another breach of its protection. If an incident occurs, we will take reasonable measures to: - contain and investigate the incident; - reduce the risk of harm; - prevent similar incidents; - document the incident; and - comply with applicable notification and reporting obligations. Where an incident presents a risk of serious injury, we will notify the appropriate authorities and affected individuals as required by law. ### Your Data Privacy Rights Subject to applicable law and certain exceptions, you may have the right to: ### Access your information You may ask whether we hold personal information about you and request access to that information. ### Correct your information You may request the correction of information that is inaccurate, incomplete or ambiguous. You may also challenge the collection, communication or retention of information where it is not authorized by law. ### Request portability You may request personal information collected from you in a structured and commonly used technological format where the legal conditions for portability are met. You may also request that eligible information be communicated to another person or organization authorized to receive it. ### Withdraw consent Where processing is based on consent, you may withdraw that consent, subject to applicable legal and contractual restrictions. ### Request deletion or destruction You may request the deletion or destruction of personal information where required or permitted by applicable law. Some information may need to be retained because of a legal requirement, an active agreement, an unresolved dispute, a security concern or another permitted reason. ### Request cessation of dissemination or de-indexing Where applicable, you may request that we cease disseminating personal information or de-index or re-index a link associated with your name, in accordance with the conditions established by law. ### Ask about an automated decision If a decision concerning you is made exclusively through automated processing, you may request the information and review rights provided by applicable law. ### File a complaint You may submit a complaint concerning our privacy practices to our Privacy Officer. You may also contact the Commission d'accès à l'information du Québec or another competent privacy authority. ### How to Exercise Your Rights Requests should be submitted in writing to our Privacy Officer using the contact information below. Please provide enough information for us to: - understand your request; - identify the information involved; - determine the relevant event or Organizer; and - verify your identity. We may request additional information where reasonably necessary to verify your identity. We will not use identity-verification information for unrelated purposes. When a request concerns information collected for a specific event, we may: - respond directly; - consult the Organizer; - transfer the request to the Organizer; or - coordinate a response with the Organizer. We will respond within the period required by applicable law. Access may be subject to legal restrictions, and a refusal will be explained where required. Access is generally provided without charge. Reasonable transcription, reproduction or transmission costs may apply where permitted by law and disclosed in advance. ### Information About Minors Petit Duc is primarily intended for professional event organizers and general event participants. It is not designed to collect personal information from children for advertising or profiling purposes. Personal information concerning a child under 14 should not be collected directly from that child without the consent of a parent or legal guardian, unless the collection is otherwise permitted by law. Organizers using Petit Duc for an event involving children are responsible for: - informing Merisia of the context; - configuring the collection appropriately; - limiting the information requested; - obtaining any required parental authorization; and - providing age-appropriate privacy information. A parent or legal guardian who believes that a child's information has been collected inappropriately may [contact us](https://www.petitduc.ca/en/contact-us/). ### External Websites and Services The Petit Duc website or platform may contain links to external websites or services. We do not control the privacy practices of independent third parties. Their collection and use of information are governed by their own privacy policies. We encourage you to review the privacy information provided by a third party before submitting personal information to it. ### Changes to This Privacy Policy We may update this Policy to reflect changes to: - Petit Duc features; - our information-handling practices; - service providers; - legal requirements; - security practices; or - organizational responsibilities. The updated Policy will be published with a revised "Last updated" date. Where a change is material, we will provide an appropriate notice through the website, platform, email or another method reasonably likely to reach affected individuals. A new consent will be requested where required by law. ### Questions and Complaints Questions, concerns, requests or complaints concerning personal information may be submitted to our Privacy Officer. We will review privacy complaints fairly and take appropriate steps to address substantiated concerns. ### Privacy Officer **Benjamin Rancourt** President Technologies Merisia Inc. 1886, rue de Fleur-de-Fenouil Sherbrooke (Quebec) J1H 0K8 Canada **Email:** [info@merisia.ca](mailto:%69%6e%66%6f%40%6d%65%72%69%73%69%61%2e%63%61) Please include "Privacy Request" in the subject line of your communication.