Privacy policy

1. Two roles

A distributor subscribes its company to PocketPO and invites its customers ("buyers") to place orders there. Buyer information belongs to the distributor, who decides who is invited and can remove access; PCR processes it on the distributor's behalf to run the portal. For questions about how a distributor uses your information, contact the distributor first.

2. Information we collect

For each portal user (buyer, sales rep or distributor administrator):

• email address and, if provided, name;
• role, linked customer company and the person who sent the invitation;
• creation and last-modification dates, and active or inactive status;
• sign-in links (valid 15 minutes, single use) and sessions (fixed 30-day duration);
• orders placed: number, products, quantities, notes and who placed the order.

We store no passwords (sign-in is by emailed link), no IP addresses and no browser fingerprints in our databases. The IP address is kept in memory only, to limit abusive sign-in requests; an address that exceeds the limit is noted in the technical logs. Those logs may contain email addresses; they are deleted automatically according to their volume.

The catalogue, prices and customer list come from the distributor's management software (SOS Inventory), with its authorization. The pocketpo.com website collects only what you type yourself into the demo-booking form.

3. Purposes

We use this information only to: sign you in to the portal; pass your orders to the distributor and record them in its management system; send you the emails related to your account and orders; keep the service secure; meet our legal obligations. No selling, no profiling, no advertising.

4. Who has access

• The distributor and its sales reps, for their company's orders.
• PCR, for operations and technical support, through restricted access.
• Our providers, strictly for the service they perform:

Emails and orders therefore transit outside Québec. Before using these providers we assessed that they offer adequate protection, and we are bound to them by contract. Backups are encrypted before leaving our server; the decryption key is not stored there.

5. Security

Encrypted connections (HTTPS), password-less sign-in by single-use link, the distributor's software access tokens encrypted in the database, strict separation between distributors, automatic security updates, daily encrypted and tested backups. In the event of a confidentiality incident presenting a risk of serious injury, we notify the Commission d'accès à l'information and the persons concerned, as the law requires.

6. Retention

• Sign-in links: unusable after 15 minutes or once used; sessions: expired after 30 days or on sign-out. An automatic clean-up deletes expired links and sessions every night.
• User account: kept as long as the distributor maintains access. On request, a user with no orders is deleted entirely; a user who has placed orders is anonymised (email, name and access removed) so that the distributor's order history stays accurate.
• Orders: kept while the distributor is subscribed, then deleted at its request when the subscription ends.
• Backups: 30 days. Technical logs: deleted automatically according to their volume.

7. Your rights

You may ask to access your information, correct it, have it deleted or withdraw your consent, and you may file a complaint with the Commission d'accès à l'information du Québec. Write to the address below; we respond within 30 days. If you are a buyer, we will forward the request to the distributor concerned where the decision is theirs.

8. Cookies and tracking

The portal uses only strictly necessary cookies: the session and the language choice (FR/EN, kept one year); administrators also get a short-lived cookie while connecting SOS Inventory. No analytics or advertising tools are installed on the portal or on pocketpo.com. The demo-booking calendar on pocketpo.com is provided by Zoho, which sets its own cookies within it.

9. Responsible person and contact

Person in charge of the protection of personal information: Didier Allien, President, PCR Solutions Inc.

Email: confidentialite@pocketpo.com

10. Changes

We will publish any change on this page with its date. For a material change, subscribed distributors will be notified by email. In case of discrepancy between the French and English versions, the French version prevails.