1. Person Responsible for the Protection of Personal Information

This privacy policy is published by Théâtre Incliné (hereinafter "we" or "the Theatre"), a company in the arts and media sector operating in Quebec.

As a company that collects, uses, and retains personal information in the course of its activities, Théâtre Incliné is subject to the Act to modernize legislative provisions relating to the protection of personal information (S.Q. 2021, c. 25), commonly referred to as "Quebec Law 25". This law governs how we process your personal information and grants you important rights with respect to it.

Our site is hosted in Quebec by Horizon-Cumulus (Joliette, Quebec), which means that data hosted on our main infrastructure remains on Quebec territory.

This policy applies to any person who visits our website, makes a purchase, subscribes to our communications, or interacts with us electronically.

2. Personal Information Collected

We collect different categories of personal information depending on the nature of your interactions with our site. Here is an overview of what we collect:

• Identification information: name, first name, email address, phone number — collected when making a purchase, subscribing to the newsletter, or contacting us.
• Transaction information: purchase history, tickets or products ordered, amounts, payment method (processed by the payment gateway; we do not retain complete card numbers) — collected during transactions on our online store.
• Technical browsing information: IP address, device and browser type, pages visited, session duration, browsing behavior, approximate location (city or region) — collected automatically during your visit.
• Advertising and social identifiers: device identifiers, advertising identifiers, identifiers associated with your social media accounts — collected only if you consent to Marketing category cookies.
• Consent preferences: your choices regarding cookies, saved to avoid asking you again on each visit.

We do not intentionally collect sensitive personal information such as health data, biometric data, or information about minors. If you transmit such information to us, we invite you to contact our Person responsible for the protection of personal information directly.

3. Processing Purposes

We use your personal information only for the purposes described below. For each purpose, we indicate the legal basis on which we rely.

• Processing orders and transactions (online store)
  We use your identification and transaction information to process your purchases, issue receipts, and track your orders. Analysis of store performance is conducted via WooCommerce Analytics.
  Legal basis: performance of a contract (your purchase constitutes a contract with us).
• Sending newsletters and promotional communications
  If you subscribe to our newsletter, we use your email address to send you news about our programming, events, and offers. You may unsubscribe at any time.
  Legal basis: explicit consent.
• Audience measurement and site improvement
  We analyze visitor behavior on our site in order to improve its content and user experience. This analysis is conducted via Google Analytics 4 and WooCommerce Analytics, which transmit certain data to the United States.
  Legal basis: consent (analytical cookies).
• Targeted advertising and remarketing
  With your consent, we use the Meta Pixel (Facebook) to measure the effectiveness of our advertising campaigns and present relevant advertisements to you on social media platforms. This data is transmitted to the United States.
  Legal basis: consent (marketing cookies).
• Display of embedded multimedia content
  Our site integrates videos hosted on YouTube and Vimeo. When you view these videos, these platforms may collect technical information about you. Google Fonts is also used for typographic display of the site, which involves a connection to Google's servers.
  Legal basis: consent (functional cookies).
• Site security and protection against threats
  Cloudflare protects our site against cyberattacks and malicious access. This service collects your IP address and device identifiers for security purposes.
  Legal basis: legitimate interest (infrastructure security) — this service is always active and cannot be disabled without compromising site security.
• Cookie consent management
  The Moelleux platform (by Horizon-Cumulus) records your consent preferences and hosts this privacy policy. A cookie named moelleux_{site_key} is placed in your browser to remember your choices for 13 months. This data is hosted in Quebec (OVH Beauharnois).
  Legal basis: legal obligation (Quebec Law 25 — obligation to collect and retain proof of consent).

4. Third Parties and Subprocessors

We engage third-party vendors to operate our site and provide our services. The following table presents each of these vendors, their role, the category to which they belong, and information about data transfers outside Quebec.

We require our vendors to process your personal information only for the purposes for which they have been engaged and to maintain adequate security measures.

5. Transfers Outside Quebec

Several of the third-party vendors we use are established in the United States. As a result, some of your personal information may be transferred, stored, or processed on U.S. territory. The vendors concerned are: Google Analytics 4, WooCommerce Analytics, Meta Pixel (Facebook), Google Fonts, YouTube, Vimeo, and Cloudflare.

In accordance with article 17 of Quebec Law 25, before proceeding with a transfer of personal information outside Quebec, we ensure that this information benefits from adequate protection, in particular through:

• the conclusion of contractual agreements with our vendors that require them to protect your personal information according to standards comparable to those of Quebec Law 25;
• verification that the vendors concerned have recognized privacy policies and security measures;
• the conduct, when required, of a privacy impact assessment before any new transfer to a foreign jurisdiction.

The United States does not have a federal personal information protection law equivalent to Quebec Law 25. However, the U.S. vendors we use are generally subject to recognized contractual frameworks (standard contractual clauses, certified privacy policies) that govern the processing of your data.

You may withdraw your consent to non-essential cookies (analytical, marketing, functional) at any time through our consent manager, which will limit cross-border transfers related to these services.

Our main hosting infrastructure (website and consent records via Moelleux) is hosted in Quebec and is not subject to any transfer outside the province.

6. Retention Period

We retain your personal information only as long as necessary for the purposes for which it was collected, or as required by law. The following table presents our retention practices by data type.

Upon expiration of these periods, your personal information is securely destroyed or irreversibly anonymized.

7. Rights of Individuals

Quebec Law 25 grants you several important rights with respect to your personal information that we hold. Here is a summary of these rights and how to exercise them.

• Right of Access
  You may request to consult the personal information we hold about you, as well as information about how it is used and with whom it is shared.
• Right of Rectification
  If information about you is inaccurate, incomplete, or ambiguous, you may request that it be corrected.
• Right to Erasure (Right to be Forgotten)
  You may request the deletion of your personal information when its retention is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (for example, tax data).
• Right to Data Portability
  You may request to receive your computerized personal information in a structured and commonly used technological format, so that you may transmit it to another organization if you wish.
• Right to Withdraw Consent
  When the processing of your personal information is based on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal. For cookies, you may modify your preferences through our Moelleux consent manager accessible on our site. For the newsletter, an unsubscribe link appears in each email.

To exercise any of these rights, contact our Person responsible for the protection of personal information whose contact information appears in section 8. We will respond to your request within 30 days of receipt, in accordance with Quebec Law 25.

If you believe your rights have not been respected or that we have not handled your request satisfactorily, you have the right to file a complaint with the Quebec Information Access Commission (CAI):

• Website: www.cai.gouv.qc.ca
• Phone: 1 888 528-7741

8. Person Responsible for the Protection of Personal Information

In accordance with article 8.1 of Quebec Law 25, Théâtre Incliné has designated a Person responsible for the protection of personal information. This person is your point of contact for any questions, requests, or concerns relating to the protection of your personal information.

We are committed to responding to any request within a maximum of 30 days of receipt, as prescribed by Quebec Law 25. If your request is complex or voluminous, we will notify you within this period if an extension is necessary.

You may contact us by email or phone to:

• exercise any of your rights (access, rectification, erasure, data portability, withdrawal of consent);
• ask questions about this policy or our processing practices;
• report a privacy incident or concern;
• request a copy of our privacy incident register.

9. Effective Date and Versioning

This privacy policy becomes effective on 8 juillet 2026 and constitutes version 1 of this document.

We reserve the right to modify this policy at any time to reflect the evolution of our practices, our services, or applicable legal requirements. In the event of a material modification, we will inform you through a notice visible on our website or, if we have your email address, through a direct message.

We encourage you to consult this page regularly to become aware of the most recent version. The effective date indicated above always corresponds to the version currently in effect.

This policy has been drafted and is hosted by Moelleux, a compliance management platform for Quebec Law 25 operated by Horizon-Cumulus (9322-8310 Quebec Inc.), Joliette (Quebec). Consent records and the policy are hosted in Quebec.