BDC Extensions ("BDC Extensions", "we", "us", or "our") is a Canadian automotive Business Development Center (BDC) service operating from Quebec and serving franchised and independent dealerships across Canada and the United States. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through bdcextensions.com (the "Site") and any related business interactions.
We comply with Quebec's Act respecting the protection of personal information in the private sector (as modernized by Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Privacy Officer
In accordance with section 3.1 of the Quebec Act and PIPEDA Principle 1 (Accountability), we have designated a Privacy Officer responsible for our compliance and for handling any privacy question, request, or complaint.
- Name: Abdou Alaoui, Founder
- Role: Privacy Officer / Person in Charge of the Protection of Personal Information
- Email: abdou@bdcextensions.com
- Postal: BDC Extensions — Privacy Officer, Quebec, Canada (full mailing address available on written request)
2. Personal information we collect
We only collect personal information that is necessary for the purposes described below.
a) Information you give us through the contact form
- Full name
- Business email address
- Dealership / employer name
- Business phone number
- Any message you choose to include
b) Technical & attribution information collected automatically
- Referring website (HTTP referrer) when you land on the Site
- Landing page URL and UTM campaign parameters, if any
- Browser user-agent string at the moment you submit a form
- Approximate technical information required by our hosting provider to deliver the Site (IP address is processed transiently by the edge network but is not stored by us in our own database)
We do not knowingly collect information from minors. The Site is intended for business contacts at automotive dealerships.
We do not collect sensitive categories of personal information (health, racial or ethnic origin, political opinions, religious beliefs, biometric data, financial account credentials, government identifiers).
3. Purposes for which we use personal information
- Respond to your inquiry and provide a proposal for BDC services;
- Contact you by email or phone regarding the request you submitted;
- Understand how prospects find the Site (marketing attribution, in aggregate);
- Maintain security of the Site, prevent spam, fraud, and abuse;
- Comply with legal, tax, and regulatory obligations.
We do not use your personal information for automated decision-making that produces legal or similarly significant effects, and we do not profile you for targeted advertising.
4. Legal basis and consent (Law 25)
We collect the information above with your express, informed, and free consent, granted at the moment you submit the contact form after reading the notice presented next to the submit button. You may withdraw your consent at any time by writing to the Privacy Officer; withdrawal does not affect processing carried out before the withdrawal.
5. Disclosure to third parties and subcontractors
We do not sell, rent, or trade personal information. We share it only with service providers who help us operate the Site and respond to you. Each provider is bound by a written agreement limiting their use of the information to the services they perform for us.
- Hosting & database: our website hosting and database provider (Supabase / managed cloud infrastructure) stores contact submissions and site logs. Data may be processed on servers located outside Quebec, including elsewhere in Canada and the United States.
- Transactional email delivery: a third-party email provider is used to deliver our internal notification emails when you submit the contact form.
Transfers outside Quebec — Law 25 assessment: Before communicating personal information outside Quebec, we conduct a Privacy Impact Assessment to confirm the information will receive adequate protection, in particular in light of the sensitivity of the information, the purposes, the protection measures (including contractual measures), and the legal regime of the destination jurisdiction.
6. Retention
We keep contact submissions for a maximum of 24 months from the date of submission, after which they are deleted or anonymized, unless a longer retention is required by law or necessary to defend a legal claim. Aggregated, non-identifying analytics may be kept longer.
7. Security measures
- TLS encryption in transit for all Site traffic;
- Encryption at rest on our managed database;
- Row-Level Security policies restricting access to contact submissions to authenticated administrators only;
- Role-based access; principle of least privilege for internal staff;
- Server-side input validation and rate limiting on the contact form;
- Ongoing security scans and dependency monitoring.
No system is perfectly secure. In the event of a confidentiality incident presenting a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and any affected person, as required by law.
8. Your rights
Under Law 25 and PIPEDA, you have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate, incomplete, or ambiguous information;
- Request deletion (de-indexing / erasure) where permitted by law;
- Withdraw your consent to future processing;
- Receive computerized personal information you provided to us in a structured, commonly used technological format (data portability);
- Be informed about, and object to, decisions based exclusively on automated processing (we do not currently make such decisions);
- File a complaint with the Privacy Officer, and, if unsatisfied, with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
See our Privacy Rights Request page to exercise any of these rights. We will respond within 30 days.
9. Cookies and similar technologies
The Site uses a small amount of browser storage strictly necessary to remember your language preference and to attribute marketing campaigns for a single session. See our Cookie Policy for details. We do not use advertising cookies or third-party analytics cookies at this time.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the last change was made. Material changes will be highlighted on the Site.
11. Contact
Questions, requests, or complaints: abdou@bdcextensions.com.