Privacy Policy

1. Who we are

This Privacy Policy explains how Gestion & Holdings CFFA ("CFFA", "we", "us", or "our") collects, uses, discloses, and protects personal information through this website. It applies to visitors of our public site — for example, to apply for a job or submit a business idea — as well as to staff who access our internal management portal.

We are committed to protecting your personal information in accordance with Quebec's Act respecting the protection of personal information in the private sector (the "Act", commonly known as Law 25) and applicable Canadian privacy law.

2. Person responsible for protecting your information

CFFA has designated a Privacy Officer who is responsible for the protection of personal information and for handling your privacy requests and questions.

You can reach our Privacy Officer by email at privacy@cffagroup.ca.

3. Personal information we collect

When you apply to join our team, we collect your name, email address, telephone number, preferred restaurant location, the position you are applying for, and your preferred employment type (full-time or part-time).

When you submit a business or investment idea, we collect your name, email address, telephone number, a description of your idea, your available capital range, and any relevant experience you choose to share.

If you are a staff member with access to our internal portal, we collect your name, email address, telephone number, an encrypted password, your language preference, and records of your sign-ins and active sessions.

We also automatically record limited technical information when you submit a form, including your IP address and the date and time of your submission, together with information from cookies as described below.

4. Why we collect your information

We use personal information to review and respond to job applications and business ideas; to contact you about your submission; to operate, maintain, and secure the website; to prevent spam, fraud, and abuse; and, for staff, to provide and secure access to the internal management portal.

5. Consent

We collect and use your personal information with your consent, which you give when you choose to submit a form or when you accept optional cookies. You may withdraw your consent at any time, as described under "Your rights" and through the "Cookie settings" link in the footer. Withdrawing consent does not affect processing already carried out.

6. Cookies and similar technologies

We use cookies that are strictly necessary to run the site securely, to handle the forms you submit, and to keep staff signed in to the internal portal. These are always active.

With your consent, we also use Google Analytics to measure website traffic and Google reCAPTCHA to protect our forms from spam. Both are provided by Google and place cookies. You can accept, decline, or change your choice at any time using the "Cookie settings" link at the bottom of the page. If you decline, these optional cookies are not set.

7. Who we share it with

We do not sell or rent your personal information. We share it only with service providers who help us operate the website, and only as needed for them to perform their services. These include Google (for Analytics and reCAPTCHA), our email delivery provider (to send notification emails), and our hosting provider.

Some of these service providers, notably Google, may process information on servers located outside Québec, including in the United States.

8. Where your information is stored

Our application data is hosted on servers located in Canada (Toronto, Ontario). As noted above, certain third-party services may process limited data outside Québec and Canada.

9. How long we keep it

Job applications and business ideas that do not lead to hiring or a business relationship are retained for three (3) months, after which they are deleted. Staff account information is kept for as long as the person holds a role with us and is deleted or anonymized afterward, subject to any legal obligations that require longer retention.

10. How we protect your information

We use reasonable security measures to protect your personal information, including encrypted storage of passwords, secure (HTTPS) connections, and access controls that limit who can view submissions and account data.

11. Your rights

Under Law 25, you have the right to access the personal information we hold about you, to have it corrected if it is inaccurate, to withdraw your consent, to request its deletion, and to receive the computerized personal information you provided in a structured, commonly used technological format (portability).

To exercise any of these rights, contact our Privacy Officer at privacy@cffagroup.ca. If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (CAI).

12. Age requirement

This website and its forms are intended for individuals 14 years of age or older. We do not knowingly collect personal information from children under the age of 14.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the most recent changes took effect.

14. Contact us

If you have questions about this Privacy Policy or how we handle your personal information, contact our Privacy Officer: