Privacy Policy
Last updated : April 19, 2026
1. Identity of the Data Controller
The website coincarriere.com (hereinafter "CoinCarriere" or "the Platform") is operated by:
- Legal name: 9558-9321 Quebec inc., doing business as CoinCarriere
- NEQ: 1181724304
- Head office: Quebec City, QC, Canada
- Email: [email protected]
- Website: https://coincarriere.com
The person responsible for the protection of personal information is the highest-ranking officer of the company, reachable at the address above.
2. Scope
This policy applies to all Platform users, whether candidates, recruiters, employers, or visitors, regardless of their place of residence. It covers all personal information collected through the website, forms, resume submissions, account creation, and use of recruitment services.
CoinCarriere complies with applicable personal information protection laws, including:
- Quebec's Act respecting the protection of personal information in the private sector (RLRQ, c. P-39.1), as modernized by Bill 25
- Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
- The General Data Protection Regulation (GDPR) of the European Union, for users located in the European Economic Area
- Law No. 09-08 on the protection of individuals with regard to the processing of personal data in Morocco, for users located in Morocco
3. Personal Information Collected
3.1 Information Provided Directly by the User
- Identification: first name, last name, email address, phone number
- Professional information: resume (CV), cover letter, work experience, education, skills, certifications
- Profile information: city, country, LinkedIn URL, personal website
- Account information: login credentials, password (encrypted), notification preferences
- Communications: messages exchanged through the Platform, application form responses
3.2 Information Collected Automatically
- Technical data: IP address, browser type and version, operating system, screen resolution
- Browsing data: pages visited, visit duration, referring pages, navigation path
- Cookies: session cookies, analytics cookies, advertising cookies (see section 8)
- Location data: country and region inferred from IP address
3.3 Information Received from Third Parties
- Information provided by an employer or recruiter who creates a candidate profile as part of a recruitment process
- Information from public sources (job postings published on third-party websites)
4. Purposes and Legal Bases for Processing
| Purpose | Legal basis |
|---|---|
| Provide recruitment services (matching candidates with employers) | Performance of contract |
| Create and manage user accounts | Performance of contract |
| Enable resume submission and consultation | Consent |
| Forward applications to employers | Consent |
| Send application-related notifications (stage, interview, offer) | Performance of contract |
| Send marketing communications and newsletters | Consent |
| Improve the Platform and analyze usage | Legitimate interest |
| Prevent fraud and ensure security | Legitimate interest |
| Comply with legal and regulatory obligations | Legal obligation |
| Respond to inquiries and provide support | Legitimate interest |
5. Sharing and Disclosure of Information
Your personal information may be shared with the following categories of recipients:
5.1 Employers and Recruiters
When you apply for a job or submit your resume, your professional information (resume, contact details, experience) is transmitted to the relevant employers to process your application. Employers are required to maintain the confidentiality of this information.
5.2 Subcontractors and Service Providers
- Cloudflare, Inc. (San Francisco, USA) — hosting, file storage (R2), database (D1), content delivery network (CDN)
- Google LLC (USA) — Google Analytics (traffic analysis), Google Ads (advertising)
- Meta Platforms, Inc. (USA) — Facebook Ads (advertising)
- Amazon Web Services (USA) — transactional email delivery (SES)
These subcontractors only use your data to provide the services we contract them for and are bound by contractual confidentiality obligations.
5.3 Legal Authorities
We may disclose your information to competent authorities when required by law, in connection with legal proceedings, or to protect our legal rights.
5.4 What We Do Not Do
We never sell your personal information to third parties. We do not rent, trade, or monetize your personal data.
6. Transfers Outside Quebec and Canada
Some of our subcontractors are located in the United States (Cloudflare, Google, Meta, AWS). Your personal information may therefore be transferred and processed outside Quebec and Canada.
In accordance with Bill 25, before any transfer, we conduct a privacy impact assessment (PIA) to ensure that the information will receive adequate protection. These transfers are governed by appropriate contractual clauses.
For users located in the European Union, these transfers are carried out on the basis of standard contractual clauses approved by the European Commission or any other safeguard provided for by the GDPR.
7. Retention of Information
We retain your personal information for the following periods:
| Type of data | Retention period |
|---|---|
| Resumes (CVs) submitted | 5 years from submission or last update |
| Candidate accounts | 5 years after last login |
| Employer / recruiter accounts | Duration of contractual relationship + 3 years |
| Application data | 5 years after position closure |
| Audit logs | 3 years |
| Analytics data (anonymized) | 26 months |
| Communications / messages | 5 years |
Upon expiration of these periods, information is deleted or irreversibly anonymized. You may request early deletion of your data at any time (see section 9).
8. Cookies and Tracking Technologies
8.1 Categories of Cookies Used
| Category | Purpose | Duration | Provider |
|---|---|---|---|
| Essential | Authentication, security, site functionality | Session / 7 days | CoinCarriere |
| Analytics | Audience measurement, service improvement | 26 months | Google Analytics |
| Advertising | Personalized ads, performance measurement | 90 days | Google Ads, Meta Ads |
8.2 Managing Cookies
You can change your cookie preferences at any time:
- Through your browser settings (block or delete cookies)
- Through the Google Analytics opt-out tool
- Through the advertising settings of your Google or Facebook account
Refusing essential cookies may affect the functionality of the Platform.
9. Your Rights
In accordance with applicable laws, you have the following rights:
For All Users (Bill 25 / PIPEDA)
- Right of access: confirm whether we hold information about you and receive a copy
- Right of rectification: have inaccurate, incomplete, or ambiguous information corrected
- Right of deletion: request the deletion of your information when it is no longer necessary
- Right to withdraw consent: withdraw previously given consent at any time
- Right to de-indexing: request the cessation of dissemination of your information
- Right to portability: receive your information in a structured and commonly used technological format
Additional Rights for Users in the EU/EEA (GDPR)
- Right to object: object to processing based on legitimate interest
- Right to restriction: request restriction of processing in certain cases
- Right to lodge a complaint: with the competent supervisory authority (e.g., CNIL in France)
Additional Rights for Users in Morocco (Law 09-08)
- Right to object: object, on legitimate grounds, to the processing of your data
- Right to lodge a complaint: with the National Commission for the Control of Personal Data Protection (CNDP)
How to Exercise Your Rights
Send your request to [email protected] specifying your name, email address, and the right you wish to exercise. We will respond within 30 days.
10. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Password encryption (irreversible hashing)
- Communication encryption (HTTPS/TLS)
- Secure token authentication (JWT) with expiration
- Data isolation per organization (multi-tenant architecture)
- Role-based access control (RBAC)
- Audit logs on all sensitive operations
- Request rate limiting
- Regular data backups
Despite these measures, no method of electronic transmission or storage is completely secure. In the event of a privacy incident, we will notify you in accordance with applicable laws.
11. Protection of Minors
The Platform is intended for persons aged 16 years and older. We do not knowingly collect personal information from persons under 16 years of age. If we learn that we have collected information from a minor, we will delete it promptly.
12. Privacy Incident
In accordance with Bill 25, in the event of a privacy incident presenting a risk of serious harm, we will:
- Take reasonable measures to reduce risks and prevent further incidents
- Notify the Commission d'acces a l'information du Quebec (CAI)
- Notify the affected individuals
- Maintain a record of the incident
13. Changes to This Policy
We may update this privacy policy periodically. In the event of a substantial change, we will inform you by email or by a prominent notice on the Platform. The date of the last update is indicated at the top of this page.
14. Contact
For any questions regarding this policy or to exercise your rights:
- Email: [email protected]
- Company: 9558-9321 Quebec inc. (CoinCarriere)
- Head office: Quebec City, QC, Canada
If you believe your rights have not been respected, you may file a complaint with:
- Quebec: Commission d'acces a l'information du Quebec (CAI) — cai.gouv.qc.ca
- Canada: Office of the Privacy Commissioner of Canada — priv.gc.ca
- European Union: the supervisory authority of your country of residence
- Morocco: National Commission for the Control of Personal Data Protection (CNDP) — cndp.ma