1. Person in Charge of Processing

This privacy policy applies to the website operated by Les entreprises de rodage DGM (hereinafter "we," "us," or "our"). As a Quebec-based business, we are subject to Quebec Law 25 (An Act to modernize legislative provisions as regards the protection of personal information, S.Q. 2021, c. 25) and we handle all personal information in accordance with its requirements.

"Personal information" means any information that identifies, or could reasonably identify, a specific individual — whether directly or indirectly. This policy explains what personal information we collect through this website, why we collect it, who we share it with, and what rights you have over it.

Our website is hosted in Quebec, Canada, through our hosting provider (OVH, Beauharnois, Quebec). Our consent records and this privacy policy are also stored in Quebec.

2. Personal Information Collected

Depending on how you interact with our website, we may collect the following categories of personal information:

2.1 Identification and Contact Information

• First and last name
• Email address
• Phone number
• Billing and shipping address

2.2 Transaction and Order Information

• Products purchased or browsed
• Order history and value
• Payment method details (processed through our payment provider; we do not store full card numbers)

2.3 Technical and Navigation Information

• IP address
• Device and browser identifiers
• Pages visited and time spent on each page
• Session duration
• Approximate geographic location (derived from IP address)
• Browsing behavior on our site

2.4 Advertising Identifiers

• Advertising and social identifiers (collected when you interact with our marketing content, subject to your consent)

2.5 Consent Preferences

• Your cookie consent choices, recorded and stored by our consent management platform (Moelleux by Horizon-Cumulus), including the date and nature of your consent. A preference cookie named moelleux_{site_key} is placed in your browser for a period of 13 months.

We collect personal information directly from you (when you place an order, fill out a form, or contact us) and automatically (through cookies and similar technologies when you browse our site, subject to your consent).

3. Purposes of Processing

We use your personal information only for the purposes described below.

3.1 Processing Your Orders (Legal basis: performance of a contract)

We use your identification, contact, and transaction information to process and fulfill your orders, send order confirmations and shipping updates, and handle returns or customer service requests. This processing is necessary to fulfill our contractual obligations to you.

3.2 Website Analytics and Performance (Legal basis: consent)

With your consent, we use Google Analytics 4 (Google LLC, United States) and WooCommerce Analytics to measure website traffic, understand how visitors navigate our site, and improve our online store's performance. These tools collect technical and navigation information including device identifiers, IP addresses, pages visited, and session data.

3.3 Targeted Advertising and Remarketing (Legal basis: consent)

With your consent, we use the Meta Pixel (Facebook) (Meta Platforms, Inc., United States) to track conversions on our site and to show you relevant advertisements on Meta platforms. This tool may collect device identifiers, IP addresses, advertising identifiers, social identifiers, and transaction data.

3.4 Functional Features — Video and Web Fonts (Legal basis: consent for Vimeo; legitimate interest for Google Fonts)

Our website embeds videos hosted on Vimeo (Vimeo, Inc., United States). When you play a video, Vimeo may collect your IP address, device identifiers, and viewing behavior. We use Google Fonts (Google LLC, United States) to display text content correctly; your IP address is transmitted to Google's servers when fonts are loaded.

3.5 Consent Management (Legal basis: legal obligation under Quebec Law 25)

We use Moelleux (by Horizon-Cumulus), a consent management platform operated by Horizon-Cumulus (9322-8310 Québec inc., Joliette, Quebec), to record and manage your cookie preferences. Consent records are stored in Quebec (OVH, Beauharnois). This processing is required to demonstrate compliance with Quebec Law 25.

3.6 Security and Fraud Prevention (Legal basis: legitimate interest)

We process technical information such as IP addresses to protect our website against unauthorized access, fraud, and abuse. This is a legitimate interest that we balance against your privacy rights.

4. Third Parties and Processors

We share personal information only with the third-party service providers listed below, and only to the extent necessary for the stated purpose. We do not sell your personal information.

Each of these providers acts as a service provider (processor) on our behalf and is contractually required to protect your personal information and use it only for the purposes we specify.

5. Transfers Outside Quebec

Several of our service providers are based in the United States and may process your personal information outside Quebec and Canada. Under section 17 of Quebec Law 25, we are required to assess the level of protection afforded to your personal information before authorizing any such transfer.

The following services involve transfers of personal information to the United States:

• Google Analytics 4 — Google LLC, United States. Your device identifiers, IP address, pages visited, session duration, browsing behavior, and approximate location may be processed in the United States.
• WooCommerce Analytics — United States. Your device identifiers, IP address, navigation data, and transaction data may be processed in the United States.
• Meta Pixel (Facebook) — Meta Platforms, Inc., United States. Your device identifiers, IP address, advertising identifiers, social identifiers, and transaction data may be processed in the United States.
• Google Fonts — Google LLC, United States. Your IP address is transmitted to Google's servers when fonts are loaded.
• Vimeo — Vimeo, Inc., United States. Your IP address, device identifiers, session duration, and browsing behavior may be processed in the United States.
• Microsoft 365 — Microsoft Corporation, United States. Email communications sent through our business email account may be processed and stored in the United States.

Before authorizing these transfers, we have conducted or are in the process of conducting a Privacy Impact Assessment (PIA) as required by section 63.3 of Quebec Law 25, to verify that the personal information transferred receives adequate protection. We rely on contractual safeguards — including data processing agreements and, where applicable, standard contractual clauses — to protect your information when it is processed outside Quebec.

Please note that laws in the United States may differ from Quebec privacy law and may allow government authorities to access personal information in certain circumstances. If you have questions about these transfers, please contact our Person responsible for the protection of personal information (see Section 8).

6. Retention Period

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law.

Once the applicable retention period has expired, personal information is securely deleted or anonymized so that it can no longer identify you.

7. Your Rights

Under Quebec Law 25, you have the following rights with respect to your personal information. To exercise any of these rights, please contact our Person responsible for the protection of personal information using the contact details in Section 8. We will respond within 30 days of receiving your request.

7.1 Right of Access

You have the right to ask us whether we hold personal information about you, and to receive a copy of that information in a clear and understandable format.

7.2 Right of Rectification

If any personal information we hold about you is inaccurate, incomplete, or ambiguous, you have the right to ask us to correct it. If we have shared that information with third parties, we will notify them of the correction where feasible.

7.3 Right to Erasure

You may ask us to delete personal information that we collected without a valid legal basis, or that is no longer necessary for the purposes for which it was collected. Please note that we may be required to retain certain information to comply with legal obligations (for example, tax records).

7.4 Right to Portability

You have the right to receive personal information that you have provided to us in a structured, commonly used, and machine-readable format, and to have it transmitted to another organization where technically feasible.

7.5 Right to Withdraw Consent

Where we rely on your consent to process personal information (for example, for analytics cookies or advertising), you may withdraw that consent at any time by updating your preferences through our cookie consent banner (powered by Moelleux). Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

7.6 Right to File a Complaint

If you believe we have not handled your personal information in accordance with Quebec Law 25, you have the right to file a complaint with the Quebec Information Access Commission (CAI):

• Website: www.cai.gouv.qc.ca

We encourage you to contact us first so we can try to resolve your concern directly before you escalate to the CAI.

8. Person Responsible for the Protection of Personal Information

In accordance with section 3.1 of Quebec Law 25, Les entreprises de rodage DGM has designated a Person responsible for the protection of personal information who oversees compliance with this policy and with Quebec Law 25.

If you have any questions, concerns, or requests regarding your personal information or this policy, please contact our Person responsible for the protection of personal information:

• Name: Janie-Anne Marsolais
• Title: --
• Email: vieprivee@dgm-seals.com
• Phone: 450 752-1152

We will acknowledge your request promptly and provide a substantive response within 30 days, as required by Quebec Law 25. If your request is complex or voluminous, we may extend this period by an additional 30 days and will notify you accordingly.

9. Effective Date and Versioning

This privacy policy takes effect on 11 juin 2026 and replaces all previous versions.

Version: 1

We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. When we make material changes, we will update the effective date above and, where appropriate, notify you through our website or by email. We encourage you to review this policy periodically.

Continued use of our website after a revised policy has been posted constitutes your acknowledgment of the changes. For processing activities that require your consent, we will seek fresh consent where required by Quebec Law 25.