Privacy policy
Last updated : August 16, 2026
Maya™ Investissement Group Inc. (“MayaInvest”, “we”) is committed to protecting the privacy and personal information of visitors to its website, as well as that of its clients and partners. This policy describes what information we collect, why we collect it, how we use, protect and retain it, and the rights available to you.
This policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) applicable in Canada, with Quebec's Law 25, and with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) for visitors located in the European Economic Area (EEA), Switzerland or the United Kingdom.
1. Data controller
The controller of the personal information collected through this website is:
Maya Investissement Group Inc.
2237 Esprit Drive
Orléans (Ontario) K4A 4Z4, Canada
Email: infos@maya-invest.ca
2. Information we collect
We collect only the information necessary for the purposes described below:
a) Information you provide directly. When you fill out our contact form: first name, last name, email address, phone number (optional), subject and content of your message. This form opens your email client: the message reaches us as an ordinary email, without passing through any database on this site.
b) Information collected automatically. As you browse, certain technical data may be processed by our host for security and proper operation of the site: IP address, browser type, operating system, pages visited, date and time of the visit.
c) Third-party resources. The stylesheets, fonts, images and scripts of this site are served from our own domain: loading them transmits no data to any third party. The only exception is the booking page, described in the paragraph below.
d) Appointment booking. Our booking page embeds the Microsoft Bookings calendar, a service operated by Microsoft Corporation. Because the calendar is displayed inside our page, your IP address is transmitted to Microsoft as soon as that page opens, before you enter anything. The information you then enter (name, email address, reason for and preferred time of the appointment) is processed by Microsoft on its own servers, which may be located outside Canada, under its privacy statement. We receive a copy in order to arrange the meeting, and retain it for the periods set out in section 6.
We do not collect any sensitive personal information, and we carry out no automated decision-making or profiling.
3. Purposes and legal bases for processing
- Responding to your requests submitted through the contact form or by email (GDPR legal basis: your consent, art. 6(1)(a), and pre-contractual measures, art. 6(1)(b)).
- Ensuring the security and proper operation of the site (GDPR legal basis: our legitimate interest, art. 6(1)(f)).
- Meeting our legal obligations, in particular accounting and tax obligations (GDPR legal basis: legal obligation, art. 6(1)(c)).
We do not use your information for commercial solicitation without your explicit consent, in accordance with Canada's Anti-Spam Legislation (CASL).
4. Cookies
This site does not use advertising cookies or marketing tracking tools. Only cookies strictly necessary for the technical operation of the site may be placed. Should audience measurement tools be added, your prior consent would be obtained through a dedicated banner, in accordance with Law 25 and the GDPR.
5. Disclosure and transfer of information
We never sell, rent or trade your personal information. It may be disclosed only: (a) to our technical service providers acting on our behalf and bound by confidentiality obligations; (b) to competent authorities where required by law.
This website is hosted by Amazon Web Services, Inc. (Amazon S3), on infrastructure that may be located in the United States. The technical data described in section 2 b) may therefore be processed outside Canada. In accordance with PIPEDA and Law 25, we ensure that this provider offers protection measures comparable to those required under Canadian law.
For individuals located in the EEA, transfers outside the European Union are governed by appropriate safeguards within the meaning of articles 44 and following of the GDPR (adequacy decision or standard contractual clauses of the European Commission).
6. Retention period
Contact requests are kept for a maximum of 24 months after the last exchange, unless a business relationship results from them; documents related to a contractual relationship are kept for the period prescribed by applicable laws. Once these periods expire, the information is securely destroyed or anonymized.
7. Security
We implement reasonable physical, organizational and technological security measures: encryption of communications (HTTPS/TLS), restricted access to authorized personnel, and awareness training for our team. In the event of a confidentiality incident presenting a risk of serious harm, we will notify the individuals concerned and the competent authorities in accordance with applicable laws.
8. Your rights
- Access: obtain confirmation that we hold information about you.
- Rectification: have inaccurate, incomplete or ambiguous information corrected.
- Withdrawal of consent at any time.
- Erasure (GDPR, art. 17) and de-indexing (Law 25).
- Restriction and objection to processing (GDPR, art. 18 and 21).
- Portability (GDPR, art. 20; Law 25).
To exercise these rights, write to us at infos@maya-invest.ca. We will respond within a maximum of 30 days.
If you believe your rights have not been respected, you may file a complaint with the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or the supervisory authority of your country of residence in the EEA.
9. Minors
This site is intended for a professional audience. We do not knowingly collect personal information from minors.
10. Changes to this policy
We may update this policy to reflect changes in our practices or in legal requirements. The version in force is the one published on this page, together with its update date.
11. Contact us
For any question: infos@maya-invest.ca.