This policy explains how RendezVousAuto.com (“the platform”) collects, uses, discloses and retains the personal information of its users. It is written in accordance with Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25, and with the Personal Information Protection and Electronic Documents Act (PIPEDA) applicable across Canada. It covers the car owner who books an appointment and the visitor browsing the site. The professional business, its officer and its team members are covered by the “Privacy policy — professionals”, which restates the same main lines and adds those of the business account.
1. Privacy officer
The person in charge of the protection of personal information is Mr. Karam MEDJAHDI. Any question, any request for access, correction or withdrawal, and any complaint about this policy is addressed to him through the contact form or at communication
rendezvousauto.com.
2. Information we collect
- identity and contact details: last name, first name, email address, phone number, display language;
- account: technical identifiers, role, sign-in log (date, time, device, IP address);
- vehicles: make, model, year, engine and, where you provide it, the licence plate;
- appointments: chosen business, service, date, history and reviews left;
- payments: amounts, statuses and transaction references. Card numbers are never received by the platform;
- phone calls handled by the assistant: calling number, timestamp, duration, recording and transcript;
- browsing: session cookies, selected language and audience measurement.
3. Purposes
This information is used only to create and maintain your account, to connect a car owner with a business, to confirm and remind appointments, to collect deposits and subscriptions, to answer support requests, to prevent fraud and abuse, and to meet the platform’s legal, accounting and tax obligations.
4. Consent
Creating an account, booking an appointment and subscribing to a plan constitute consent to this policy. Consent to optional communication — newsletter, commercial solicitation — is separate and may be withdrawn at any time without affecting the core service.
5. Hosting and data location
Platform data is stored on Amazon Web Services servers located in Canada, in the Canada (Central) region. Emails sent by the platform transit through a mail server located in France: their content — name, email address, appointment details — travels through it for the time of delivery.
6. Phone calls and voice assistant
When a call is handled by a business’s phone assistant, it is routed and processed by several distinct services, including OpenAI, Twilio and Retell. These services provide the connection, speech recognition, answer generation and transcription of the exchange. The call may therefore be recorded, transcribed and retained, and part of that processing takes place outside Quebec. A caller who does not wish to be handled by the assistant may hang up and reach the business by another means.
7. Payments
Payments are processed by Stripe. Your payment method details — card number, expiry date, security code — are entered at Stripe, recorded and retained by Stripe alone. The platform has no access to them and never stores them. It keeps only the amount, the status and the transaction reference, which are required for invoicing and refunds.
8. Who has access to your information
Access is limited to what each role requires: the privacy officer, the platform’s authorised staff and the site’s developers, for operation, maintenance, troubleshooting and defect correction. The business you chose accesses only the data of the appointment that concerns it. The providers named in this policy access it solely to perform their service.
9. Disclosure outside Quebec
Some processing — hosting, email, telephony, payment — involves disclosing information outside Quebec. The platform first assesses that the information receives adequate protection there and frames each disclosure by contract, as required by Law 25.
10. Retention
Information is retained for as long as necessary for the purposes for which it was collected, then destroyed or anonymised. Accounting records, invoices and payment traces are retained for the period required by tax law. Sign-in logs and call history are retained for a limited period for security and evidentiary purposes.
11. Your rights
- access the information we hold about you and obtain a copy of it;
- have it corrected where it is inaccurate, incomplete or ambiguous;
- withdraw your consent and request the deletion of your account;
- obtain your computerised information in a structured, commonly used technological format (portability);
- request that the dissemination of an item of information cease, or that it be de-indexed;
- be informed when a decision concerning you is based exclusively on automated processing.
Such requests are addressed to the privacy officer, who answers within thirty (30) days. In case of disagreement, you may complain to the Commission d’accès à l’information du Québec or to the Office of the Privacy Commissioner of Canada.
12. Cookies
The platform sets the cookies required for the session, for security and for remembering the display language. Audience measurement cookies are set only with your consent and may be refused from your browser.
13. Security and confidentiality incidents
Access is partitioned by role and by business, exchanges are encrypted in transit, and passwords are never stored in clear text. In the event of a confidentiality incident presenting a risk of serious injury, the platform keeps a register, notifies the persons concerned and notifies the Commission d’accès à l’information, as Law 25 requires.
14. Security logging — IP address and actions
To keep the platform secure, to prevent fraud and abuse and to establish evidence of an incident, the platform records users’ IP addresses as well as the actions they perform: sign-ins and sign-in attempts, creation, modification and deletion of data, bookings, payments, withdrawal requests, messages sent and sensitive lookups. Each record carries the timestamp, the account concerned, the IP address and the device used. These logs are used neither for advertising nor for commercial solicitation. They are retained for a limited period, consulted by authorised staff alone, and may be produced in court or handed over to the competent authorities.
15. Illegal access, hacking, bots and data copying
Any hacking attempt, any unauthorised access, any use of credentials that are not yours, any use of bots, scripts, automated agents or harvesting (crawling, scraping), any automated or bulk extraction, any copying, reproduction, reuse or resale of the platform’s data, content, listings, prices or contact details is strictly prohibited, by whatever means and for whatever purpose. It leads to the permanent ban of the accounts concerned, with no refund of the amounts already paid, and exposes its author to civil and criminal proceedings, in particular under sections 342.1 and 430(1.1) of the Criminal Code of Canada, and to a claim for full compensation of the harm suffered. The account concerned is suspended immediately and without notice, and evidence is preserved and handed over to the competent authorities.
16. Changes to this policy
This policy may be amended. The date of the last update is shown at the top of this page; any substantial change is brought to the attention of users.
17. Contact us
Privacy officer: Mr. Karam MEDJAHDI — communicationrendezvousauto.com, or through the contact form on the site.