Privacy policy

1. Who we are

McBroue Resto-Pub (“McBroue”, “we”), 329, rue Victoria, Salaberry-de-Valleyfield (QC) J6T 1B3, is committed to protecting the personal information of its customers and of visitors to mcbroue.com, in accordance with Quebec's Act to modernize legislative provisions as regards the protection of personal information (S.Q. 2021, c. 25).

2. Person in charge of the protection of personal information

The person in charge of the protection of personal information is the person with the highest authority at McBroue, reachable at info@mcbroue.com or at (450) 371-0770. The pub may delegate this role in writing; the delegate's name and title will then be published here.

3. Information collected and purposes

3.1 Website forms

Table reservation and contact message. Depending on the form: name, email, phone, date, time, number of people, occasion, message. Purpose: to handle your request and answer you. Consent is requested through a checkbox that is unchecked by default.

Form data is sent by email to info@mcbroue.com through the Resend service (Resend, Inc., United States) and kept in our mailbox while the request is handled, then deleted; no database is built on the website. An acknowledgement with a summary of your request is also sent to the email address you entered, through the same service. Each form contains a timestamped token and a hidden anti-spam field; no personal information is stored in them. The reservation and contact forms use Cloudflare Turnstile (Cloudflare, Inc.) to tell a person from a robot; this service receives your IP address and technical browser signals, without advertising cookies, and it is strictly necessary for the form to work.

3.2 Phone reservations

We only record what is needed (name, phone, date, time, number of people) and delete these notes after your visit.

3.3 Browsing data

Only with your consent, the website loads Google Analytics 4 (Google LLC, United States), set up in consent mode (Google Consent Mode v2): pages viewed, source of the visit, device type, approximate region and conversion actions (click on the phone number, form submission). No advertising feature is enabled. Without consent, the Google Analytics script is not loaded and no data is sent to Google. You can withdraw your consent at any time through the “Manage cookies” link at the bottom of every page; analytics cookies are then deleted.

To count visits, the website also uses Vercel Web Analytics (Vercel Inc., United States), served from our own domain. This tool sets no cookie and stores nothing on your device. For each page viewed, it records the page address, the referring site, the country, and the browser, operating system and device type. To tell visits apart without identifying anyone, Vercel derives a temporary code from the request, which is discarded after 24 hours; your IP address is not kept. We only see totals, never an individual visitor. Because this tool does not identify, locate or profile you, it runs without a consent request; you can block it with your browser's tracker blocker without any impact on the website.

The website is hosted by Vercel Inc. (United States) on a global delivery network; the host's technical logs (IP address, pages requested) are used for security and kept for a few days. The consent banner (CookieConsent library) is loaded from the jsDelivr network, which receives your IP address to serve the file. Fonts are hosted by us: no call to Google Fonts. Google Analytics data is kept according to the retention setting of our Google Analytics account, then deleted.

4. Cookies

Vercel Web Analytics sets no cookie.

Manage my cookie preferences. You can also withdraw your consent through the “Manage cookies” link at the bottom of every page.

5. Retention and disclosure

Your information is neither sold nor rented. It is only disclosed to the providers named above (Resend, Cloudflare, Google with consent, Vercel for hosting and visit counts) for the purposes described. These providers are located outside Quebec; we have assessed that the information involved (contact details, anonymized or aggregated browsing data) is adequately protected given its sensitivity, these providers' contractual measures and encryption in transit.

6. Security

• HTTPS encryption of all communications.
• Access to request emails limited to authorized staff.
• No analytics cookie set before explicit consent (Google Consent Mode v2, basic mode); visit counting (Vercel Web Analytics) uses no cookie at all.
• Minimization: we only ask for the fields each form needs.

7. Your rights

Access, correction, withdrawal of consent, deletion once the purpose is fulfilled, portability, and complaint to the Commission d'accès à l'information du Québec. Write to info@mcbroue.com; we answer within 30 days.

8. Confidentiality incident

If an incident presents a risk of serious injury, we take steps to reduce it, notify the Commission d'accès à l'information and the people concerned, and record the incident in our register.

9. Changes

The update date appears at the top of this page. A substantial change is announced by a notice on the website and triggers a new consent request for cookies.