**1. Protection of Personal Information (Law 25)**
SkeletronixPC is committed to protecting personal information collected, used or disclosed in the course of its business, in accordance with the **Act to modernize legislative provisions respecting the protection of personal information (Act 25)** and the **Act respecting the protection of personal information in the private sector (Act P-39.1)**.

**a. Person responsible for the protection of personal information**
In accordance with Law 25, the person responsible for the protection of personal information within our company is:
Patrice Inkel, Managing Director
Contact information: skeletronixpc@gmail.com
This manager ensures that our practices comply with data protection legislation.

**b. Collection and Use of Personal Information**
We only collect the personal information necessary to provide our services, such as:
- Name, surname, address, email, telephone number for order processing and delivery.
- Payment information for secure transactions.
- Browsing data (cookies, preferences) to improve the experience on our website.

This data is collected with your explicit and informed consent, in accordance with Article 14 of the **Law on the Protection of Personal Information in the Private Sector**. You may withdraw your consent at any time by contacting us.

**c. Communication and storage of data**
We only share your personal information with third parties in the following cases:
- To partners necessary to execute an order (e.g., carriers for delivery).
- When required by law or a competent authority.
- In the context of a commercial transaction, subject to a privacy impact assessment (PIA).

Your data is kept for the period necessary for the purposes for which it was collected (7 years). Unnecessary data is anonymized or securely destroyed.

**d. Consumer Rights**
In accordance with Law 25, you have the following rights:
- **Right of access**: View the personal information we hold about you.
- **Right of rectification**: Request the correction of inaccurate data.
- **Right to data portability**: Receive your data in a structured and commonly used format (e.g., CSV, JSON).
- **Right to be forgotten**: Request the deletion of your data, subject to legal retention obligations.

To exercise these rights, contact our privacy officer at skeletronixpc@gmail.com.

**e. Confidentiality Incident**
In the event of a confidentiality incident (e.g., unauthorized access, loss or disclosure of data), we commit to:
- Notify the **Quebec Access to Information Commission** and the people concerned if the incident presents a serious risk of harm.
- Maintain a register of confidentiality incidents, in accordance with Law 25