DRAFT: pending legal review. Not yet in force.

BROUILLON : en attente de revision juridique. Pas encore en vigueur.

Who we are: New4Tek ([legal entity name], based in Quebec, Canada) provides security awareness training. Contact: [privacy contact email].

What we collect: account details (name, work email), the company or organization you belong to, and your training activity (modules viewed, exam attempts and scores, completion dates, certificates).

Why we collect it: to deliver the training, track completion for your employer's compliance records, issue certificates, and improve the course.

Roles: for learners enrolled by an employer, that employer is responsible for the personal information and New4Tek acts as its service provider, processing data on the employer's instructions under a written agreement.

Sharing: we share training records with the employer or organization that enrolled you. We do not sell personal information. We use service providers (hosting, email) bound by confidentiality.

Retention: we keep training records for [retention period, e.g. as long as the account is active plus X years] or as required by the employer's compliance obligations, then delete or anonymize them.

Your rights (Quebec Law 25): you may request access to or correction of your personal information and ask how it is handled. Contact [privacy contact email]. New4Tek's Privacy Officer is [name and title].

Security: we use access controls, encryption in transit, and regular backups to protect your information.

Cross-border: if data is stored or processed outside Quebec, we identify where and apply appropriate safeguards. [Confirm hosting location.]

Changes: we will post updates to this page with a new effective date.