What ORYX does with your information
Law 25 governs the protection of personal information in Quebec. There is no official certification for this law: here is, point by point, what we do, and the text that commits us to it.
A named privacy officer
Anthony Payeur, CEO, is responsible for the protection of personal information. A question, an access request or a complaint: admin@oryxgestion.com.
Source : Privacy policy, section 2
Your data belongs to you
What you enter in ORYX stays yours. We act as a service provider: we use it only to provide the service, never for our own purposes or for advertising.
Source : Terms of use, section 7
You leave with your data
When the contract ends, you have 30 days to export your data. After that, we delete it from the platform.
Source : Terms of use, section 7
An incident register
If an incident presents a risk of serious harm, we notify the Commission d'accès à l'information and the people concerned without delay, and we record it in the register.
Source : Privacy policy, section 12
Our subprocessors are published
Every provider that processes information on our behalf is named, with its country, in our policy. Several operate outside Quebec, and we say so.
Source : Privacy policy, section 6
Your rights, on request
Access, correction, deletion, portability, withdrawal of consent and de-indexing: one request to admin@oryxgestion.com is enough.
Source : Privacy policy, section 10
Punch geolocation is limited
Off by default. Once the company turns it on, the location is taken only at Punch in and Punch out, never in between, and it is erased after 12 months.
Source : Privacy policy, section 4
Limited access
Communications are encrypted in transit (HTTPS). Each user sees only the data their role requires.
Source : Privacy policy, section 11
What is still in progress
We are obtaining, in writing, each provider's protection commitments and the location of their servers. No privacy impact assessment has been completed to date. Our policy says so plainly and will be updated as we go.
Source : Privacy policy, section 7