Last updated: April 20, 2026.

1. Introduction

Axis4 Media inc. ("Axis4", "we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites (axis4.ca and crystalcms.com) or engage our services.

This policy is drafted in accordance with Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (commonly known as "Law 25"), the Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable Canadian privacy legislation.

2. Person Responsible for the Protection of Personal Information

In accordance with Law 25, the President of Axis4 Media inc. serves as the person responsible for the protection of personal information. This individual ensures compliance with this policy and applicable legislation.

For any questions or requests regarding your personal information, you may contact the person responsible:

• Email: privacy@axis4.ca
• Address: Axis4 Media inc., 2700 rue Diab, Saint-Laurent, Quebec, H4S 1E8, Canada

3. Information We Collect

3.1 Information You Provide Voluntarily

When you fill out a contact request form on one of our websites (axis4.ca or crystalcms.com) or communicate with us, we may collect the following information:

• First and last name
• Email address
• Phone number
• Company name and job title
• Information related to your project or inquiry
• History of communications with us

3.2 Information Collected Automatically

When you browse our websites, certain technical information is collected automatically, including:

• IP address
• Browser type and version
• Operating system
• Pages visited, visit duration, and navigation path
• Referring source (website from which you arrived)
• Data collected by Google Analytics (see Section 6 on cookies)

3.3 Information We Do Not Collect

We do not collect sensitive information such as health data, political opinions, religious beliefs, biometric data, or financial information, unless you voluntarily provide it to us as part of a project.

4. Consent

We collect your personal information only with your free, informed, and specific consent for each purpose, in accordance with Law 25.

4.1 Contact Form

Our contact request forms (on axis4.ca and crystalcms.com) include a separate checkbox through which you explicitly consent to the collection and use of your personal information for the purposes described in this policy. No data is submitted unless this checkbox is selected.

4.2 Cookies

Upon your first visit to one of our websites, a cookie management banner allows you to accept or decline non-essential cookies (including those used by Google Analytics). Only cookies strictly necessary for the website’s operation are enabled by default. Analytics cookies are activated only after your explicit consent.

4.3 Withdrawal of Consent

You may withdraw your consent at any time by contacting us at privacy@axis4.ca. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You may also modify your cookie preferences at any time through the cookie management banner accessible on our websites.

5. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to your inquiries: processing your requests for information, quotes, or contact.
• Providing our services: carrying out client mandates and ensuring project follow-up.
• Improving our websites: analyzing website usage to improve content, navigation, and performance.
• Communications: sending you relevant updates about our services and industry, only if you have consented.
• Legal obligations: complying with our obligations under applicable laws.

6. Cookies and Tracking Technologies

6.1 What Is a Cookie?

A cookie is a small text file placed on your device when you visit a website. It allows the website to remember certain information about your visit.

6.2 Types of Cookies Used

• Essential cookies: necessary for the proper functioning of our websites. They do not require your consent.
• Analytics cookies (Google Analytics): allow us to understand how visitors use our websites (pages visited, visit duration, navigation path). These cookies are activated only with your consent.

6.3 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, on our websites axis4.ca and crystalcms.com. Google Analytics uses cookies to analyze website usage. The data generated is transmitted to Google servers that may be located outside of Canada (see Section 8 on transfers). We have enabled IP address anonymization to limit the collection of identifying data.

You may decline Google Analytics cookies through our cookie management banner or by installing the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout).

7. Disclosure to Third Parties

We may disclose your personal information to the following third parties, strictly for the purposes described in this policy:

• Service providers: web hosting, analytics services (Google Analytics), project management or communication tools that help us operate our websites and deliver our services.
• Legal obligations: we may disclose your information if required by law or in the context of legal proceedings.

These third parties are contractually bound to protect your information and to use it only for the purposes for which it was disclosed. We never sell your personal information to third parties.

8. Transfers Outside Quebec

Some of our service providers, including Google (Google Analytics), may store or process data outside of Quebec or Canada. In accordance with Law 25, before any transfer of personal information outside Quebec, we conduct a Privacy Impact Assessment (PIA) to ensure that the information will receive adequate protection.

We ensure that appropriate contractual agreements are in place with these providers to guarantee a level of protection consistent with Quebec legislation.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy or to comply with our legal obligations. As a guideline:

• Contact and project data: retained for the duration of the business relationship, then for up to three (3) years after the relationship ends.
• Web analytics data: retained according to Google Analytics retention settings (14 months by default).
• Consent records: proof of consent is retained as long as the consent is active, and for a reasonable period after its withdrawal.

When information is no longer needed, it is securely destroyed or irreversibly anonymized.

10. Security Measures

We implement reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. These measures include:

• Encryption of data in transit (HTTPS / TLS protocol)
• Restricted access to personal information, limited to authorized personnel only
• Use of strong passwords and secure authentication
• Regular updates to our systems and software

11. Privacy Incidents

In accordance with Law 25, in the event of a privacy incident involving your personal information (unauthorized access, loss, unauthorized use or disclosure), we will take the following steps:

• Assess the severity of the incident and take necessary measures to mitigate its consequences.
• If the incident presents a serious risk of harm, notify the Commission d’accès à l’information du Québec (CAI) and the affected individuals as soon as possible.
• Record the incident in our privacy incident register.
• Implement appropriate corrective measures to prevent recurrence.

12. Your Rights

In accordance with applicable legislation, you have the following rights regarding your personal information:

• Right of access: you may request access to the personal information we hold about you.
• Right of rectification: you may request the correction of inaccurate, incomplete, or ambiguous information.
• Right of deletion: you may request the erasure of your personal information when it is no longer necessary for the purposes for which it was collected.
• Right to portability: you may request to receive your personal information in a structured, commonly used technological format, or to have it transferred to another organization.
• Right to withdraw consent: you may withdraw your consent at any time (see Section 4.3).
• Right to file a complaint: if you believe your rights have not been respected, you may file a complaint with the Commission d’accès à l’information du Québec (CAI) at www.cai.gouv.qc.ca.

To exercise any of these rights, please contact us at privacy@axis4.ca. We will respond to your request within thirty (30) days of receipt.

13. Protection of Minors’ Information

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected personal information from a minor without the required parental consent, we will take the necessary steps to delete that information as soon as possible.

14. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with a revised update date. In the event of a material change, we will notify you through a prominent notice on our websites. We encourage you to review this policy regularly.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or the processing of your personal information, please contact us:

• Email: privacy@axis4.ca
• Address: Axis4 Media inc., 2700 rue Diab, Saint-Laurent, Quebec, H4S 1E8, Canada

We are committed to responding to any request within a reasonable time frame, and no later than thirty (30) days following receipt of your request.