Privacy Policy

Sirina Consulting ("we", "our", or "the firm") places paramount importance on respecting your privacy and protecting your personal data. This Privacy Policy transparently explains how we collect, use, store, communicate, and safeguard personal information submitted through our website (sirinaconsulting.com), including our online appointment booking modal, contact forms, corporate quote requests (B2B), and recruitment forms. This policy strictly complies with Quebec Law 25 (Act respecting the protection of personal information in the private sector), Canada's federal PIPEDA (Personal Information Protection and Electronic Documents Act), and the European Union's General Data Protection Regulation (GDPR - Regulation EU 2016/679).

In accordance with Section 3.1 of Quebec Law 25 and Article 37 of the GDPR, the designated person responsible for personal data protection at Sirina Consulting is: • Name: Sirina Souilem • Title: Founder & Managing Director, Sirina Consulting • Official Email: contact@sirinaconsulting.com • Role: Oversees adherence to applicable privacy legislation, processes data subject rights requests, and manages security incidents.

We only collect personal information strictly necessary to fulfill the specified purposes. Data is collected directly when you complete our interactive forms: • Appointment Booking Modal: Full name, email address, phone number, company/organization name (optional), meeting subject (HR consulting, recruitment, training, coaching), preferred format (video call, phone call, in-person), and preparatory notes. • General Contact Form: Full name, email address, phone number, profile type (individual, company, recruiter), and message content. • Corporate Solutions & Quote Requests (B2B): First and last name, business email, phone number, company name, workforce size, requested service category, and project specifications. • Recruitment Form: Company name, target role title, contact email, and candidate profile requirements. • Technical & Security Data: Truncated/anonymized IP addresses, browser and device specifications, timestamp of requests, and non-intrusive honeypot spam prevention.

Your personal data is processed for specific, explicit, and legitimate purposes: • Consultation Scheduling & Management: Registering time slots, delivering automated confirmation notifications and video conference invitations (Legal basis: Pre-contractual measures and consent). • Inquiry & Quote Inquiries: Evaluating organizational, training, or recruitment needs and providing customized proposals (Legal basis: Pre-contractual measures and consent). • Service Delivery: Executing professional training curricula, HR advisory engagements, and executive talent search mandates (Legal basis: Contract performance). • Website Security & Anti-Spam: Defending forms from automated abuse and malicious submissions (Legal basis: Legitimate interest in digital security). • Regulatory & Accounting Compliance: Satisfying billing, tax, and statutory record-keeping obligations (Legal basis: Legal compliance).

Under Quebec Law 25 and the GDPR, your consent to the collection and use of personal data must be clear, free, informed, and specific. It is obtained at the precise moment you submit a form on our site. You retain the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, simply email contact@sirinaconsulting.com.

We retain your personal information only for the duration necessary to achieve the purposes for which it was gathered, in line with applicable statutory retention rules: • Inquiries, general contacts, and consultations not resulting in an active contract: Stored for a maximum of three (3) years from your last outbound contact. • Active client records and contractual documentation: Retained for the duration of the commercial relationship, then archived according to applicable statutory limitation periods (5 to 7 years in Quebec and Europe). • Recruitment submissions and candidate dossiers: Stored for up to two (2) years after the last exchange, unless an immediate erasure request is received.

Sirina Consulting never sells, leases, trades, or commercializes your personal information to third parties. Your information is accessible only to authorized members of our internal team and vetted technical service providers acting on our behalf as data processors (secure cloud hosting, transactional mail services, scheduling calendar infrastructure). These processors are bound by strict contractual clauses guaranteeing data security and confidentiality in compliance with Law 25 and GDPR.

Given our international operations across Canada (Quebec), Europe, and the Gulf, personal data may be stored or processed on secure servers located outside your home province or country. Under Quebec Law 25, transfers outside Quebec undergo a Privacy Impact Assessment (PIA) to verify equivalent protection. For European Union residents, transfers to Canada are supported by the European Commission's adequacy decision, supplemented by standard contractual clauses where appropriate.

We implement physical, organizational, and technological safeguards to shield personal information against loss, theft, unauthorized access, disclosure, copying, or alteration: • End-to-end web encryption via modern SSL/TLS (HTTPS) protocols. • Strict administrative access controls with robust credential management. • Protection against automated bot attacks using non-intrusive honeypot fields. In the event of a privacy incident involving your data that poses a risk of serious injury, Sirina Consulting will promptly notify the Commission d'accès à l'information du Québec (CAI), the CNIL or relevant EU supervisory authority, as well as affected individuals, in accordance with applicable legislation.

Depending on your applicable jurisdiction (Law 25 or GDPR), you hold the following rights: • Right of Access: Confirm processing and obtain a readable copy of your personal data. • Right of Rectification: Demand correction of inaccurate, incomplete, or ambiguous information. • Right to Erasure ("Right to be Forgotten"): Request deletion when data retention is no longer justified. • Right to Data Portability: Receive data provided in a structured, commonly used technological format. • Right to Object and Restrict: Object on legitimate grounds or request temporary restriction of processing. • Right to Withdraw Consent: Revoke consent at any time for future processing activities. • Right to De-indexing: Request that information cease being disseminated or that hyperlinks be de-indexed under Law 25. To exercise any of these rights, submit a written request to contact@sirinaconsulting.com. We will respond diligently within thirty (30) days of receipt.

Our website does not deploy invasive advertising trackers or third-party profiling cookies. Only technical cookies strictly essential for application operation (such as remembering your language choice via NEXT_LOCALE and securing sessions) are utilized.

If you believe your personal data rights have been infringed, you may lodge a complaint with your competent supervisory authority: • In Quebec (Canada): Commission d'accès à l'information du Québec (CAI) — cai.gouv.qc.ca • In France (EU): Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr • Across the EU: Your national Data Protection Authority.