1. Data Controller
PhysEdBoard is a platform operated by André Timotheatos (Quebec, Canada), who also acts as the person responsible for the protection of personal information.
This policy applies to users located in Canada and internationally.
For any questions relating to this policy or your personal information, please use the website contact form.
2. Data Collected
We only collect information necessary for the operation, improvement, and security of the platform.
User Account
- Email address
- Encrypted password (never stored in plain text)
Technical Data
- IP address
- Browser type and device used
- Session data and technical logs
Payments
Payments are processed by a secure PCI-DSS certified provider. No credit card information is stored on our servers.
Support and Communications
- Name
- Email address
- Content of messages submitted via contact forms
Usage Data
Pseudonymized data may be used for statistical, analytical, and service improvement purposes (pages visited, features used, language, or device type).
3. Use of Data
- Provide, operate, and improve the service
- Manage accounts, subscriptions, and access
- Provide customer support
- Ensure security and prevent fraudulent activities
- Analyze platform usage to improve the user experience
- Communicate important service-related information
4. Legal Basis
- Contract: service delivery and management
- Consent: analytics cookies and optional communications
- Legitimate interest: security, fraud prevention, and service improvement
- Legal obligations: Quebec Law 25 and other applicable laws
5. Third-Party Services
We use third-party service providers to ensure the proper operation, hosting, and improvement of the platform.
- Platform hosting and infrastructure
- User authentication and account management
- Secure payment processing
- Audience and performance analytics
These providers may process certain data outside Quebec or Canada, in accordance with their own privacy policies and security standards.
When data is transferred or stored outside Canada, reasonable measures are put in place to ensure its protection.
6. Data Retention
- Account: until deletion, with a technical delay of up to 30 days
- Payments: according to the legal and contractual obligations of the payment provider
- Support and contact: up to 24 months
- Analytics: pseudonymized data used for statistical purposes
Data is retained only for as long as necessary for the intended purposes or to comply with applicable legal obligations.
7. Your Rights
In accordance with Quebec Law 25, you have the following rights, among others:
- Access: view the information held about you
- Rectification: correct inaccurate or incomplete information
- Deletion: request the erasure of your data
- Portability: receive your data in a structured format where applicable
- Objection: object to certain processing activities permitted by law
You may exercise these rights via the website contact form. Proof of identity may be required to process certain requests.
A response will be provided within a maximum of 30 days, in accordance with applicable legal obligations.
You may also file a complaint with the Commission d'accès à l'information du Québec (CAI) .
8. Cookies
- Essential cookies: required for the operation and security of the site
- Analytics cookies: used to measure usage and improve the service
Some cookies may be provided by third-party services used by the platform.
Analytics cookies can be disabled through your browser settings or via the opt-out tools provided by the relevant vendors.
9. Security
- HTTPS encryption
- Restricted data access
- Secure infrastructure
- Protection measures against unauthorized access
- Regular review of security practices
Despite the measures in place, no method of electronic transmission or storage can guarantee absolute security.
10. Communications
Service-related communications may be sent to users, including information about account management, security, billing, or important updates.
Users may unsubscribe from promotional communications at any time, where such communications are offered.
11. Target Users
PhysEdBoard is intended for education professionals aged 18 and over.
The service is not designed for minors, and we do not knowingly collect their personal information.
12. Changes
This policy may be updated to reflect changes in the service, technological practices, or applicable legal obligations.
Significant changes will be communicated to users when necessary.
By continuing to use PhysEdBoard after changes take effect, you accept the revised policy.
13. Contact
For any questions regarding this policy or your personal information, please use the website contact form.
You may also visit the website of the Commission d'accès à l'information du Québec .
Last updated: May 21, 2026