Privacy policy

Cyclo Services inc. (“Cyclo Services”, “we”) rents bikes, offers guided tours and runs a repair shop at 289 rue Saint-Paul, in Québec City’s Old Port. Cyclo Services is a subsidiary of Quatre Natures inc. This policy explains what personal information we collect, why, who we share it with, how long we keep it and how to exercise your rights. It applies to our website, our bookings and our exchanges with you at the counter, by phone and by email.

We comply with Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.

1. Person in charge of the protection of personal information

The person in charge of the protection of personal information at Cyclo Services is:

Yohann Moucheboeuf
Cyclo Services inc.
289 rue Saint-Paul, Québec City, QC G1K 3W6
Email: info@cycloservices.net (subject: “Personal information”)
Phone: 418 692-4052

You can write to him with any question, request for access or correction, or complaint about your personal information.

2. The information we collect

We only collect the information needed for the purposes listed in section 3:

• Booking a rental, tour or course (online or at the counter): name, email, phone number, chosen date and activity, number of participants, age or age group and height of each rider so we can prepare a properly fitted bike, and any details you give us (food allergies for a tasting, for example).
• Repair shop: name, phone number, email, description of the bike and the work, estimates and invoices.
• Website forms (contact, private tour or group request): name, email, phone number, organization if applicable and the content of your message.
• Payment: payments are processed by our payment providers (Stripe or PayPal). We never see or store your full card number.
• Cyclo Services news: your email address, only if you tick the box provided for that purpose.
• Technical data: when you visit the website, our host automatically records your IP address, browser type and the pages requested in its server logs, for the security and proper operation of the site.

We collect this information directly from you, or from the travel platform you booked through (for example GetYourGuide), which sends us the information needed for your activity.

3. Why we use it

• To confirm and manage your booking, prepare your equipment and contact you if something changes (weather, schedule).
• To keep you safe during the activity, including by applying minimum ages and heights.
• To carry out the repairs you request, send you an estimate and let you know when your bike is ready.
• To answer your questions and quote requests.
• To invoice, collect payments and meet our accounting and tax obligations.
• To send you our news, if you have consented. You can unsubscribe at any time.
• To protect the website against abuse and intrusion attempts.

We do not use your information for any other purpose without your consent, unless the law allows it. We do not sell your personal information.

4. Cookies and similar technologies

Our website only uses cookies needed for it to work, such as the one that remembers the language you chose. We do not use any audience measurement tool, advertising cookie or technology that can identify you, locate you or build a profile of you.

Some pages display third-party content: fonts are loaded from Google Fonts and the Contact us page shows a Google Maps map. When this content loads, Google receives your IP address, under its own privacy policy.

If we ever add measurement or advertising tools, they will be turned off by default and only turned on with your consent.

Online booking takes place on Reservotron, a separate platform with its own cookies and privacy policy.

5. Who we share it with

Only team members who need it for their work (counter, guides, repair shop, administration) have access to your information. We also share it with service providers acting on our behalf, under agreements that require them to protect it and use it only for the service provided:

• Reservotron (Code Génome inc., Québec): booking platform;
• Stripe and PayPal: payment processing;
• Microsoft 365: email and office tools;
• our web host and the email delivery service used by the website;
• Quatre Natures inc., our parent company, for administrative, accounting and IT management.

We may also share information when the law requires or allows it, for example with our insurers in the event of an accident, or as part of the sale of all or part of the business, subject to an agreement that protects its confidentiality.

6. Information kept outside Québec

Some of our providers (including Stripe, PayPal, Microsoft and Google) may store or process information outside Québec, elsewhere in Canada or in the United States. Before entrusting them with information, we assess whether it will be adequately protected, taking into account its sensitivity, the purpose and the provider’s security measures.

7. How long we keep it

• Bookings, invoices and payment records: 6 years after the end of the fiscal year, as required by tax laws.
• Repair shop records: 3 years after the last work, for follow-up and warranties.
• Messages received through the website forms: 2 years after our last reply.
• News mailing list: until you unsubscribe.

At the end of these periods, the information is securely destroyed or anonymized.

8. Security

We protect your information with reasonable measures: access limited to authorized people, password-protected accounts, encrypted connection (HTTPS) on the website and providers chosen for their security measures. We keep a register of confidentiality incidents. If an incident presents a risk of serious harm, we notify the Commission d’accès à l’information and the people concerned.

9. Children

For a child under 14, the information is provided by their parent or guardian, who consents on their behalf when booking.

10. Your rights

At any time, you can:

• find out whether we hold information about you and get a copy of it;
• have inaccurate, incomplete or ambiguous information corrected;
• withdraw your consent, for example to receiving our news;
• ask that your information be sent to you, or to a third party, in a structured, commonly used technological format;
• ask that we stop disseminating information about you or de-index a hyperlink attached to your name, where the law allows it.

Write to the person in charge (section 1). We may ask you to confirm your identity. We reply in writing within 30 days. This service is free, except for reasonable fees for transcription or reproduction, which we would tell you about in advance.

If you are not satisfied with our reply, you can contact the Commission d’accès à l’information du Québec.

11. Changes

We may update this policy, for example if we change providers or add a service. The date of the last update is shown at the top of the page. If there is a significant change, we will say so clearly on the website.