The following privacy policy (hereinafter the "Policy") outlines how Onyx Capital collects, uses, communicates, stores, and destroys your personal information. For the sake of readability, intermittent use of the terms "we" or "the company" will be adopted in this Policy.
We may provide additional information regarding the processing of your personal information, in certain cases, when collecting your personal information. In some cases, we may also obtain your specific consent regarding the collection, use, communication, and storage of your personal information.
The Policy applies to the personal information we collect, regardless of the method, whether it be in person, by email, by phone, or through our website. By accepting this Policy or providing us with personal information after having the opportunity to review the Policy or any additional notice, you agree that your personal information will be processed in accordance with the Policy and additional notice.
Onyx Capital
110-10000 rue Lajeunesse
Montreal (Quebec)
H3L2E1, Canada
Feel free to contact our privacy officer, our administrative assistant, for any questions or comments you may have regarding the Policy, how we handle your personal information, or to exercise your rights regarding your personal information.
You can reach our privacy officer by email: info@onyxfinance.ca
or by mail at the address mentioned above.
Within Onyx Capital, we have assigned roles and responsibilities as follows:Under the authority of the company operators, the administrative assistant ensures that the rules regarding the protection of personal information are established in the company and understood by all staff.
We raise awareness among our team members to understand the importance of protecting personal information.
In the Policy, the following terms are defined:
"Privacy Incident"
Unauthorized access by law to personal information;
Unauthorized use by law of personal information;
Unauthorized communication by law of personal information; or
Loss of personal information or any other breach of the protection of such information.
"Personal Information" means any information about an individual that directly or indirectly allows identification.
How do we collect your personal information?
Phone interview / in-person meeting
Online/paper form
Email exchange and document sharing
What personal information do we collect?
Personal contact details (name, postal address, email address, phone number)
From whom do we collect your personal information?
Directly from you or your advisors (e.g., accountant, legal advisor)
Why do we collect your personal information?
In the context of fundraising, grant applications, purchase of a business, or other activities within the scope of the company's operations.
What happens if you do not consent to the collection of your personal information?
In some cases, we will not be able to advise and support you in specific and mandated needs.
How will we share your personal information with third parties?
Via a secure virtual data room or encrypted email.
Who can access your personal information?
Certain members of our administrative team, all strictly in the performance of their own functions.
How long will we retain your personal information?
For six years from the end of the fiscal year or the last taxation year to which the documents in question relate (or the equivalent of seven years) for all documents, financial or otherwise, for a duration at least in compliance with the strictest legal requirements and permanently for documents whose significance justifies such retention.
What are the risks associated with the processing of your personal information?
The occurrence of privacy incidents (see definition above).
Where will we store your personal information?
We store your personal information on our secured server.
We follow security standards in our industry to protect the information we collect and receive. Specifically, we have in place appropriate physical, technical, computer, and administrative protection measures to safeguard your personal information against a privacy incident.
Despite these measures, given the inherent risks of using computer systems, we cannot assure or guarantee the security and confidentiality of the information you transmit to us, and you do so at your own risk. If you have reason to believe that personal information has been compromised, please contact us using the contact information provided in Article 1 of the Policy.
5.1 In cases of serious risk of death or serious injury
We may disclose personal information we hold to protect an individual or group of individuals when there is a reasonable belief of a serious risk of death or serious injury, including disappearance or an act of violence, such as a suicide attempt, threatening that person or group, and the nature of the threat inspires a sense of urgency.
The information may then be communicated to the person or persons exposed to this risk, their representative, or anyone likely to assist them. Only the information necessary for the purposes pursued by the communication will be disclosed.
5.2 To enable the exercise of a mandate or the execution of a service or business contract entrusted to a third party
We may disclose personal information if the mandate or contract is given in writing and indicates the measures to be taken by the mandatary or contractor:
To ensure the confidentiality of the information;
For this information to be used only within the scope of its mandate or the execution of its contract;
For this information not to be retained after the expiry of the mandate or contract.
5.3 When a person or organization submits a written request to use this information for research, study, or statistical production purposes
Before disclosing the requested information:
An evaluation of privacy factors must be conducted by the organization and reach certain conclusions.
A written agreement must then be concluded with the applicant.
5.4 Law enforcement
We may also disclose information to the Director of Criminal and Penal Prosecutions or to a person or group responsible for preventing, detecting, or repressing crime or violations of laws when the information is necessary for the purpose of prosecuting an offense under a law applicable in Quebec.
Finally, we may disclose information to a police force when it is necessary for planning or carrying out an intervention adapted to the characteristics of a person or situation, in either of the following cases:
The police force intervenes at our request to provide assistance or support in the provision of services to an individual;
We act in coordination or partnership with the police force as part of mixed police intervention practices.
We act in coordination or partnership with the police force as part of mixed police intervention practices.We may transfer your personal information to service providers we use in our operations. Therefore, your personal information may be transferred outside Quebec, for example, to the cloud to ensure data redundancy, i.e., to ensure its integrity.
The law gives you various rights regarding your personal information. You have the following rights, among others:
Access: the right to inquire whether we hold personal information about you and, if so, to request access to that personal information.
Correction: the right to request the correction of any incomplete or inaccurate personal information we hold.
Withdrawal of consent: the right to withdraw your consent for the communication or use of personal information held. In this case, we will no longer be able to provide you with our services or keep you in our employment if you are one of our employees.
Restriction or refusal of access: the right to request that a particular intervener or belonging to an indicated category of interveners not have access to one or more information you have identified.
Complaint: the right to file a complaint addressed to our privacy protection officer as identified in Article 1 in connection with this Policy or to lodge a complaint with the Access to Information Commission of Quebec if you believe that a violation of laws on the protection of personal information has occurred. To file a complaint with the Access to Information Commission (Quebec), please use the appropriate form available at the following address: For citizens | Access to Information Commission of Quebec (gouv.qc.ca)
Portability: You have the right to request that your personal information be communicated to you or transferred to another organization in a structured and commonly used technological format.
To exercise either of these rights, please contact our privacy protection officer as indicated in Article 1 of this Policy.
You can consult your web integrator for this section. Keywords such as Google Analytics or HotJar are clues to what may be found in this section.
This Policy does not apply to third-party websites, pages, or applications that can be accessed through our services, and we are not responsible for such third-party services.
If you follow such links, these third-party sites or services will likely have their own policies on the protection of personal information that you should review before submitting your personal information.
We do not use any technology that makes fully automated decisions based on personal information.
We do not use any technology that uses personal information for identification, profiling, or location purposes.
Personal information is securely destroyed in accordance with Article 73 of the Access to Information Act, the laws applicable in Quebec regarding human resources management, and the laws applicable in Quebec for the protection of personal information.
We may, from time to time, modify the Policy to reflect changes in our business processes or the law. If this is the case, a summary of the changes will be communicated to you to facilitate the identification of what has been added.
