Quebec Law 25
Privacy policy
What GoBAC collects, why, with whom, for how long — and how to exercise your rights. In effect November 6, 2026.
Who is responsible
Les Boîtes GoBAC inc. (NEQ 1166716606), 2960 Rue Halpern, Saint-Laurent, QC H4S 1R2, is responsible for the personal information collected on this site. The person in charge of the protection of personal information is Shai Schwartz: shai@gobac.ca, (514) 335-2427.
What we collect
For a booking or an account: name, email, phone, delivery and pickup addresses, dates, the package and equipment chosen, preferred times, notes you write, and the acceptance of the agreement (date, IP address, browser).
For a payment: the amount, the transaction number and the last four digits of the card. The full card number is entered at Converge and never goes through our servers.
For a quote request or a message: the contact details and text you send.
While you fill in the booking form: your answers are kept in your browser; they reach us, with your contact details, only once the consent box is checked.
If you accept analytics: pages viewed and actions on the site (Google Analytics), and the performance of our ads (Google Ads).
Why
To deliver and pick up your bins, work out the price and the distance, collect payment, write to you about your order (confirmation, agreement, receipt, reminders), answer your requests, keep our accounting records, and — only with your agreement — measure and improve the site and our ads. We sell no information.
Cookies and analytics
No analytics or advertising cookie is set before you click “Accept” in the banner. Until you answer, or if you decline, Google Analytics and Google Ads do not load, and Google’s consent mode stays at “denied” (Consent Mode v2).
You can change your mind at any time with the “Manage cookies” link at the foot of every page.
The site also keeps in your browser what makes it work: your consent choice, your session if you have an account, and the draft of your booking.
Who it is shared with
Google (Firebase and Google Cloud): site hosting, database, functions and sign-in email; Google Maps: the driving distance from our depot and address suggestions while you type; Google Analytics and Google Ads, if you accept them.
Converge (Elavon): card payment.
Our email provider (SMTP): sending order emails.
Krealo CRM (Krealo Media, our agency): follow-up of requests and bookings.
These providers use your information only for the service they provide to us.
Outside Quebec
Some of these providers process information elsewhere in Canada or in the United States (Google, Converge). As the law requires, GoBAC makes sure the information receives adequate protection there; our functions and database are hosted in Montreal where the service allows it.
How long
Orders, invoices and payments: six years after the end of the year in which they occur, as tax laws require.
Quote requests, messages and unfinished bookings: two years after the last exchange.
Analytics: fourteen months at Google Analytics.
After that, the information is destroyed or anonymized.
Your rights
You may ask to see your information, have it corrected, receive it in a common format, withdraw your consent, or have it deleted where the law does not require us to keep it. Write to shai@gobac.ca or call (514) 335-2427: we answer within 30 days. If our answer does not satisfy you, you may contact the Commission d’accès à l’information du Québec.
Confidentiality incident
If an incident presented a risk of serious harm, we would notify you, and the Commission d’accès à l’information, as the law provides.