Law 25 compliance

Garantie Prolongée Auto ("GPA") is committed to protecting its customers' personal information in accordance with the Act modernizing legislative provisions as regards the protection of personal information (commonly known as "Law 25"), applicable in Quebec.

Explicit responsibility

GPA acts as the personal information protection officer for the data collected on this Site. A personal information protection officer can be reached at info@garantieprolongeeauto.ca.

Consent and purpose

Consent to collection is obtained freely, knowingly and through a positive action. Information is collected only for the intended purposes (sign-up, claims management, roadside assistance and legal obligations) and is never used for a secondary purpose without new consent.

Minimization and accuracy

We collect only the information necessary for the stated purpose and ensure it remains up to date. Any inaccuracy can be corrected on request.

Security

Reasonable technical and organizational measures protect the information against unauthorized access, disclosure, loss or destruction. Payments are processed by Stripe, in compliance with PCI-DSS standards; GPA stores no card data.

Individuals' rights

You may exercise the following rights:

• right of access to your information;
• right to rectification;
• right to withdraw your consent;
• right to portability;
• right to be informed of a confidentiality incident.

To exercise these rights, contact GPA at info@garantieprolongeeauto.ca or 1-877-338-8113. A response is provided within the timeframes set by law.

Confidentiality incidents

In the event of an incident posing a risk of serious harm, GPA notifies the Commission d'accès à l'information du Québec and the affected individuals, in accordance with Law 25.

Retention and destruction

An information retention and destruction policy is applied according to reasonable timeframes dictated by the purpose and legal obligations.