Privacy Policy
This Privacy Policy applies to Conciergerie Successorale Valora inc. (“VALORA“), the valoraestate.com website, and the VALORA SaaS application, including the VALORA mobile application.
Purpose. This Privacy Policy describes, in simple and clear terms, how VALORA collects, uses, communicates, retains, and protects personal information in the course of its business activities, including when collection is carried out by technological means (e.g., website, email, application).
Notice at the time of collection (non-technological cases). When personal information is collected other than by technological means (e.g., verbally, by telephone, in person), certain notices may also be provided at the time of collection, in addition to this Policy.
Human Resources. Practices relating to the personal information of candidates, employees, and contractors (HR) are described in a separate HR Privacy Notice, in order to keep this Policy focused on clients, prospects, website visitors, and application users.
Section 1 — Scope and Definitions
1.1 Scope of the Policy
This Privacy Policy applies to personal information that VALORA may collect, hold, use, or communicate in the course of operating its business, particularly when the interaction involves a technological means, for example:
Website valoraestate.com (contact/quote forms, pages viewed, site security measures, etc.);
Communications initiated or continued by email, telephone, or other channel related to a service request;
Mobile application (if applicable), used to support service delivery (e.g., capturing inventory photos and producing deliverables);
Management tools (e.g., CRM or case management) used by VALORA to manage requests and mandates.
It also covers personal information collected other than by technological means (e.g., verbally when opening a file). In such cases, certain notices may be provided at the time of collection (opening script, welcome email, etc.), in addition to this Policy, in accordance with information requirements “regardless of the means of collection.”
Exclusion (HR). Personal information processed in connection with recruitment and human resources management activities (candidates, employees, contractors) is subject to a separate HR Privacy Notice.
1.2 Definitions
For the purposes of this Policy:
“Personal information”: means any information concerning a natural person that allows that person to be identified, directly or indirectly, within the meaning of the Act respecting the protection of personal information in the private sector.
“Sensitive information”: means, depending on the context, certain information that may be more sensitive (e.g., financial information, estate documents, photos of property and documents found on site). Sensitivity influences the protective measures to be implemented.
“Collection”: means the obtaining of personal information by VALORA, whether via the Site (form), the application, email, telephone, or otherwise.
“Provider” / “Contractor”: means any person or entity that provides services to VALORA (technological or operational) and that may, as the case may be, process personal information on behalf of VALORA (e.g., hosting, storage, signature tools, translation, image processing, appointment scheduling, CPA/tax specialist/notary/lawyer as per mandate, etc.).
“Privacy incident”: means unauthorized access, unauthorized use, unauthorized communication, loss of personal information, or any other breach of their protection, within the meaning of the applicable framework.
“Technological means”: means in particular a website, an online form, an application, or any other digital means by which personal information is collected.
“Profiling”: means the collection and use of personal information to assess certain characteristics of a person (e.g., preferences, interests, behavior), particularly through technologies. If such technology is used, prior information and activation means must be provided, in accordance with the applicable framework.
1.3 Related Documents
This Policy should be read together with the following documents:
Security and Privacy;
Cookie Policy;
Terms of Service and Mandate Terms.
Section 2 — What Information We Collect
2.1 Principle: Minimization and “As-Needed” Collection
VALORA aims to collect only the personal information necessary for the purposes described in Section 4 (processing a request, executing a mandate, administering the service relationship, etc.). The quantity and nature of the information vary depending on the context (simple quote request vs. full mandate; after death vs. lifetime estate file).
2.2 Information Collected via the Site (Forms)
When you use the Site (e.g., quote request, triage, contact), VALORA may collect in particular:
Identity and contact information: name, email, telephone number, contact preference;
Role and governance: your role (liquidator, relative, professional), authorized person/decision-maker (if applicable);
File information: city/area, type of location, number of locations, access constraints, urgency/deadline, approximate volume, mandate objectives (inventory, clearance, storage, coordination, etc.);
Contextual information: elements likely to influence the quote and planning (e.g., multiple stakeholders, disagreements, building constraints).
2.3 Information Collected by Email, Telephone, or Otherwise (File Opening)
When you communicate with VALORA by email, telephone, or when opening a file, VALORA may collect in particular:
Contact and identification information;
Information necessary for the mandate: access, relevant contacts, constraints, priorities, authorizations and approvals;
Communications: content of exchanges (emails, conversation notes) to ensure file follow-up.
When collection is carried out by non-technological means (e.g., verbally), certain notices may be provided at the time of collection, in addition to this Policy.
2.4 Information Collected via the Mobile Application (If Applicable)
When VALORA uses a mobile application to support service delivery (e.g., property inventory), the personal information that may be collected or generated includes in particular:
Photos taken on site (property, rooms, visible documents);
Associated metadata (e.g., date and time of capture; and, depending on device and application settings, technical information that may be associated with photos);
2.5 Billing and Administrative Information
In the context of a mandate, VALORA may collect information necessary for administration:
billing information (billing address, payment information — depending on the terms agreed upon);
time and milestone records (hours, deliverables, approvals), when required to document service delivery.
2.6 Technical and Navigation Information (Site)
Depending on the Site configuration, VALORA may collect technical information, for example:
IP address, device and browser type;
pages viewed and timestamp;
cookie identifiers.
This information is generally used for security, operational, and/or statistical purposes, depending on the tools chosen. Details and choices (particularly for non-essential cookies) are described in Section 9 and the Cookie Policy.
2.7 Sensitive Information: Enhanced Processing (Principle)
Certain information processed in an estate context may be sensitive (e.g., financial information, estate documents, information relating to vulnerable persons, photos of documents). VALORA aims to apply protective measures proportionate to the sensitivity and to limit collection to what is necessary.
Section 3 — How We Collect Information (Technological Means)
3.1 Principle: Transparency on Collection Channels
VALORA collects personal information through various channels, particularly by technological means (website, email, application, related tools). This section describes these collection means at a functional level, in accordance with transparency expectations when they are used via technological means.
3.2 Site Forms (Contact / Quote / Triage)
VALORA collects information when you complete a form on the Site, for example:
contact form;
quote request / triage form;
any other form made available.
The fields requested vary by form and aim to enable response, triage, and quote preparation (see Section 4 — purposes).
3.3 Email and Electronic Communications
VALORA may collect personal information when you:
write to VALORA by email;
transmit documents, photos, or file information electronically;
respond to a message from VALORA (file follow-up, information requests, access or authorization validation).
3.4 Telephone (and Follow-Up Notes)
VALORA may collect personal information during a telephone exchange (e.g., file opening, triage, access, decisions and approvals). Relevant information may be recorded in follow-up notes in internal case management tools to ensure operational continuity and traceability.
When collection is carried out other than by technological means (e.g., verbally), certain notices may be provided at the time of collection, in addition to this Policy.
3.5 Mobile Application
VALORA may use a mobile application to support service delivery, particularly field inventory. Collection may then come from:
capture (photos) performed on site;
contextual information necessary to organize these elements (e.g., association with a file, a room/area, date/time);
production of deliverables (descriptions, translations) from captured elements.
The categories of information concerned are described in Section 2 (including photos and relevant metadata).
3.6 Appointment Scheduling Tools
VALORA implements an online appointment scheduling tool (e.g., to schedule a 15-minute call); the following information may be collected:
name and contact information;
time slot preferences;
minimal triage information.
Details relating to communications with providers are addressed in Sections 7 and 8.
3.7 Cookies, Trackers, and Navigation Technologies
Depending on the Site configuration, VALORA may use cookies or other trackers to:
ensure Site operation (essential cookies);
improve performance and security;
produce statistics (analytics), when activated.
When non-essential cookies and trackers are used, VALORA aims to present information and preference management options via the Cookie Policy (and, where applicable, via a preference management tool).
Section 4 — Why We Collect Information (Purposes)
4.1 Principle: Determined Purposes and Consistent Use
VALORA collects and uses personal information for determined, explicit, and legitimate purposes, and aims to limit their use to the purposes described below (or to compatible purposes, when permitted by the applicable framework).
4.2 Process a Request (Contact, Triage, Quote)
VALORA uses personal information to:
respond to a request made via the Site, by email, or by telephone;
perform triage (e.g., territory, access, urgency, volume, governance);
prepare a quote or range (assumptions, milestones, disbursement approval thresholds);
schedule an exchange (e.g., 15-minute call) and ensure request follow-up.
4.3 Execute a Mandate and Deliver Services
When you entrust a mandate to VALORA, personal information may be used to:
open, administer, and manage a file (after death or lifetime estate file);
organize field intervention (access, coordination, inventory, photos, deliverables);
produce and deliver agreed-upon deliverables (exportable inventory, indexed photo albums, reports);
manage necessary authorizations and approvals (e.g., decisions relating to disposition, transport, or storage).
These purposes are central to the service relationship and guide “as-needed” collection.
4.4 Communicate with Third Parties Necessary for Execution (As Per Mandate)
In certain files, VALORA may need to communicate personal information to third parties necessary for mandate execution, for example:
technology providers (hosting, storage, signature tools, appointment scheduling, image processing or translation);
operational providers (transport, storage, disposition channels, liquidators and marketplace), as per mandate;
mandated professionals (e.g., CPA, tax specialist, notary, lawyer as subcontractor, if applicable to the file).
These communications are governed according to Section 7 (third parties) and, where applicable, according to the requirements of the Act for communication to a person who provides services to the business and who must process this information on its behalf (including written framework).
4.5 Administration, Billing, and Internal File Management
VALORA may use personal information for:
billing, accounting, payment management (according to terms agreed upon);
internal management of milestones, hours, deliverables, and follow-ups;
problem resolution, customer service, and post-mandate follow-up.
4.6 Security, Fraud Prevention, and Incident Management
VALORA may use certain personal information (particularly technical information and logs) to:
ensure Site and system security;
prevent, detect, and manage security and privacy incidents;
maintain a register and make notifications when the legal framework requires it.
(See: Security and Privacy.)
4.7 Service and Site Improvement
If VALORA uses statistics or analytics tools, the information (often aggregated or technical) may be used to:
understand Site usage;
improve navigation, content, and performance;
measure the quality of interactions (e.g., form conversion).
The terms relating to cookies, trackers, and preferences, when applicable, are described in Section 9 of the Cookie Policy.
4.8 Marketing Communications (Only with Separate Consent)
VALORA may, only with your consent, use your contact information to send you marketing communications (e.g., newsletter, service updates). Consent, when required, must be express, free, informed, and given for specific purposes, and may be withdrawn according to the terms indicated.
Section 5 — Consent and Processing Bases (Practice)
5.1 Principle: Clear Consent When Required
When the law requires consent, VALORA aims to obtain express, free, informed consent given for specific purposes. Consent must be requested in simple and clear terms and presented separately when required (e.g., marketing separate from transactional).
5.2 Information Necessary for Service: Processing Related to Request or Mandate
In many cases, information is provided by the person themselves in the context of:
a request (triage and quote), or
a mandate entrusted to VALORA.
In these situations, VALORA uses the information primarily to respond to the request and execute the mandate (Section 4). This use is generally consistent with the purposes communicated at the time of collection and does not, in practice, require “new authorization” for each normal step of the service, as long as the use remains related to the mandate and proportionate.
5.3 Use for Another Purpose: Consent or Permitted Basis
If VALORA were to want to use personal information for a purpose that is not consistent with the purpose initially communicated (or if the law requires it), VALORA aims to:
obtain additional consent when required, or
ensure that a legal provision permits the use without new consent in this context.
5.4 Marketing Communications: Separate Consent and Withdrawal
Marketing communications (e.g., newsletter, offers) are separate from transactional communications (e.g., responding to a request, file follow-up).
VALORA only sends marketing communications if the person has consented to them.
The person may withdraw their consent according to the terms indicated in the communication (e.g., by unsubscribing) or by contacting VALORA.
This distinction is consistent with the logic of specific consent and with compliance expectations regarding electronic communications.
5.5 Withdrawal of Consent (When Applicable)
When consent constitutes the applicable basis, you may withdraw it by contacting VALORA (see contact information in Section 14).
VALORA will apply the withdrawal within a reasonable time, subject to:
information necessary to execute an ongoing mandate or comply with applicable obligations;
practical consequences (e.g., inability to execute certain components without certain information).
5.6 Cookies and Preferences
When non-essential cookies and trackers are used, VALORA aims to offer preference choices (e.g., accept or refuse certain categories), in accordance with the Cookie Policy and a preference center.
Section 6 — Internal Access to Information (Who, Within the Company)
6.1 Principle: Limited Access (“Need to Know”)
Within VALORA, access to personal information is limited to persons who need it to perform their functions and execute the purposes described in Section 4. This limitation aims to reduce exposure and preserve file confidentiality.
6.2 Categories of Persons Who May Have Access
Depending on the nature of the file and mandate, the following categories of persons may have access to certain personal information:
Field team (on-site interventions): access to information necessary for execution (e.g., address, access, instructions, inventory, photos relevant to deliverables).
Coordination / case management: access to information necessary to plan, communicate, produce deliverables, manage approvals, and milestone progression.
Administration / billing: access to information necessary for billing, accounting, payment management, and administrative follow-up.
Management / person responsible for the protection of personal information: access when required for governance, compliance, incident management, complaint resolution, or file supervision.
6.3 Internal Access Control Measures
Without detailing the internal technical architecture, VALORA aims to implement reasonable measures such as:
role-based access assignment;
removal/deactivation of access when no longer required;
logging when appropriate.
These measures are part of the general obligation to protect personal information. (See: Security and Compliance).
Section 7 — Communication to Third Parties (Providers / Contractors)
7.1 Principle: Limited and Necessary Communication
VALORA may communicate personal information to third parties only when necessary to achieve the purposes described in Section 4 (e.g., execute a mandate, produce deliverables, manage storage, obtain a specialized service). Communication then aims to communicate to the relevant third party the minimum necessary.
7.2 Categories of Third Parties Likely to Receive Information
Depending on the mandate and tools used, personal information may be communicated to categories of third parties such as:
Technology providers (depending on configuration): hosting, storage and sharing, signature tools, messaging, CRM/case management, image processing and/or translation tools.
Operational providers: transport, storage, disposition channels, liquidators, marketplace (depending on mandate), services necessary in the field.
Professionals and specialized services (depending on mandate): for example, CPAs, tax specialists for return preparation, notaries and lawyers for services related to acts reserved to their profession, when these services are required and entrusted in the context of the file.
This Policy describes the categories of third parties rather than the internal architecture of systems.
7.3 Legal Framework When the Third Party Processes “On Behalf” of VALORA (Mandate and Service Contract)
When VALORA communicates personal information to a person or organization because this communication is necessary for the exercise of a mandate or the execution of a service or business contract entrusted by VALORA, the Act permits communication without additional consent, but imposes specific conditions, including:
the mandate or contract must be entrusted in writing;
the mandate/contract must provide for measures aimed at:
protecting the confidentiality of the information;
limiting the use of the information to the execution of the mandate/contract;
avoiding retention after the expiration of the mandate/contract;
the mandatary/contractor must notify VALORA’s person responsible for the protection of personal information without delay of any violation or attempted violation of confidentiality obligations and allow verifications relating to this confidentiality.
7.4 Sharing Directed by the Client / Liquidator
In certain files, the client (or authorized liquidator) may ask VALORA to share information with a specific third party (e.g., a notary, a broker, a tax specialist, a family member). In such a case, VALORA limits communication to what is necessary and documents the context (authorization and instruction), in accordance with the mandate and file governance.
Section 8 — Communication Outside Quebec (Conditional)
8.1 Principle: Transparency “When Applicable”
When personal information is disclosed outside Québec (e.g., through certain technology providers or cloud services), VALORA aims to inform the individuals concerned appropriately and to govern such disclosure in accordance with the applicable legal framework.
8.2 Prior legal framework
To the extent that VALORA must disclose personal information outside Québec, the Act respecting the protection of personal information in the private sector governs such disclosure and provides, in particular, for:
the assessment of privacy-related factors; and
the implementation of a written agreement including measures intended to ensure adequate protection of the information, taking into account, in particular, its sensitivity, the purpose, and the applicable framework in the destination state.
VALORA intends to structure its practices so as to comply with these requirements when they apply.
8.3 Minimization and disclosure choices
Where disclosure outside Québec is necessary, VALORA aims to:
limit disclosure to the information required for the purpose;
restrict access;
avoid uncontrolled sharing;
document, where applicable, the disclosure parameters related to the file.
8.4 Where the information is presented
VALORA presents this information in this Policy and, where applicable, at the time of collection or when opening the file, depending on the channel used and the nature of the information disclosed.
Section 9 — Cookies, trackers and analytics
9.1 Principle: clearly explain what is used
The Site may use cookies and other trackers (e.g., pixels, similar identifiers) to ensure its operation, improve performance and, where applicable, produce usage statistics. VALORA aims to explain these mechanisms clearly and, where applicable, to offer choices for managing preferences.
Important: this section describes the general framework. Operational details (categories, durations, providers, preferences) are consolidated in the Cookie Policy.
9.2 What is a cookie / tracker?
A cookie is a small text file placed on your device (computer, phone) when you visit a website. Other trackers (e.g., pixels) may be used to measure interactions or support certain technical functions. Depending on the Site’s configuration, these technologies may process technical information (e.g., cookie identifier, IP address, pages visited, timestamp).
9.3 Categories (framework)
When cookies and trackers are used, they may fall into categories such as:
Essential cookies: necessary for the Site to function (security, navigation, forms, etc.).
Performance / statistics cookies (analytics): used to understand how the Site is used and to improve the experience (e.g., most visited pages, errors, performance).
Marketing / advertising cookies (if used): used to measure campaigns or display relevant content.
VALORA does not assume here that all of these categories are enabled: actual use depends on the Site’s configuration.
9.4 Preference management
When non-essential cookies and trackers are used, VALORA aims to enable preference management (e.g., accepting or refusing certain categories) via:
a consent banner; and
a preference center accessible on the Site.
The exact terms (tool, categories, providers) are described in the Cookie Policy.
9.5 Reference to the Cookie Policy
For more information on:
the cookies and trackers used (where applicable),
the providers involved,
retention periods,
and how to manage your preferences,
please consult the Cookie Policy, available via the Site footer.
Section 10 — Security measures
10.1 Principle: reasonable and proportionate measures
VALORA implements reasonable security measures to protect personal information against loss, theft, unauthorized access, unauthorized use or unauthorized disclosure. These measures are adapted, in particular, to the sensitivity of the information and the processing context (e.g., estate files, inventory photos).
10.2 Types of measures
Security measures may include, as applicable:
Administrative Measures: access control, internal governance, minimization discipline, operational procedures;
Technical Measures: access controls for tools, logging where appropriate, protections related to tools used (e.g., secure communications);
Physical Measures: on-site practices aimed at limiting unauthorized access to premises and documents, in accordance with the mandate.
The level of technical detail is not published in this Policy to limit security risks and because the exact measures vary depending on the tools and files. The objective remains: proportionate and traceable protection.
10.3 Privacy Incidents
VALORA applies an incident management process and maintains a register of privacy incidents and, when required, notifies the CAI and affected individuals if the incident presents a risk of serious harm.
10.4 Referral
For a more detailed (public level) description of VALORA’s approach to security, logging, vendors, and incident management, please refer to the “Security and Privacy” section.
Section 11 — Retention and Destruction
11.1 Principle: Necessary Duration and Purposes
VALORA retains personal information only for the duration necessary for the purposes described in Section 4 and in accordance with applicable requirements. The retention period may vary depending on whether the individual is a simple applicant (quote and triage) or a client who has entrusted a mandate, as well as the nature and sensitivity of the file.
11.2 General Retention Criteria (Practical Approach)
Without publishing an exhaustive schedule, VALORA applies criteria such as:
Requests (pre-mandate): retention of information necessary for tracking the request and preparing a quote, then its deletion or anonymization when its retention is no longer justified.
Mandates (client files): retention of information and deliverables necessary for the execution of the mandate, delivery of deliverables, reasonable administrative follow-up (invoicing, post-delivery questions), and relevant traceability.
Incidents and Security: retention of elements necessary for incident management and record keeping, in accordance with applicable requirements.
This approach aims to avoid indefinite “default” retention and to support minimization.
11.3 Destruction, Disposal, and Access Removal
When personal information is no longer needed, VALORA aims for secure destruction or disposal depending on the medium:
deletion of digital copies and removal of external access when not required;
secure destruction of paper documents where applicable;
reasonable measures to avoid retaining unnecessary duplicates.
The exact terms may be adapted depending on the file (e.g., delivery of copies to the client, specific retention requests).
11.4 Specific Requests (e.g., deletion) and Limitations
You may request information about the retention applicable to your file or submit a request regarding your personal information (see Section 12). Some information may need to be retained for applicable administrative or legal reasons, or because it is necessary for the execution of an ongoing mandate.
Section 12 — Rights of Data Subjects and Requests
12.1 Right of Access and Rectification
Subject to exceptions provided by law, you may request:
access to the personal information VALORA holds about you;
the rectification of inaccurate, incomplete, or ambiguous personal information.
These rights are exercised in accordance with the procedure described below.
12.2 How to Make a Request
To make a request related to your personal information (access, rectification, questions about processing), you can contact the personal information protection officer at the contact details provided in Section 14.
Your request should include:
your name and contact details;
a sufficient description of the request (e.g., “access to my file,” “rectification of my phone number”);
any element allowing identification of the file or context (e.g., mandate date, location address), to process the request efficiently.
12.3 Identity Verification
To protect confidentiality, VALORA may need to verify the identity of the applicant before communicating personal information or proceeding with a rectification. This verification will be proportionate to the risk and sensitivity of the information.
12.4 Processing Time
VALORA aims to respond to requests within a reasonable timeframe, in accordance with applicable requirements. In some cases, additional time may be required (e.g., volume of information, complexity, need to verify identity or scope of the request).
12.5 Complaint and Internal Mechanism
If you have a complaint regarding the protection of your personal information, you can contact VALORA through the officer indicated in Section 14. VALORA takes into account its governance and complaint handling obligations regarding personal information and aims to review the complaint in a structured manner.
12.6 Other Rights (as applicable)
Depending on the context and applicable provisions, other rights may exist (e.g., withdrawal of consent when it forms the applicable basis; see Section 5). VALORA will process these requests on a case-by-case basis, in accordance with the applicable legal framework.
Section 13 — Identification, Location, or Profiling Technologies (Conditional)
13.1 Principle: Prior Information if Such Technology is Used
If VALORA uses technology that allows for the identification, location, or profiling of an individual (for example, via certain measurement, advertising, or personalization tools), VALORA aims to provide prior information and indicate the means offered to activate these functions (or, as the case may be, configure or deactivate them), in accordance with the applicable framework.
This section is conditional: VALORA does not assume here that such technologies are used. It frames the case where they would be deployed.
13.2 Typical Examples (Illustrative)
As general (non-exhaustive) examples, a targeted technology could include:
certain advanced analytics tools allowing persistent recognition of a visitor;
certain advertising technologies or conversion pixels;
personalization mechanisms based on browsing behavior.
These examples are provided to illustrate the concept; actual use, if any, would be described in the relevant sections (including cookies and trackers, as well as communications to third parties) and via the notices and settings offered on the Site.
13.3 Link to the Cookie Policy
When identification and profiling result from cookies and trackers, the details (categories, purposes, preferences) are described in the Cookie Policy, and preference choices (if any) are offered on the Site.
Section 14 — Contact — Personal Information Protection Officer
14.1 Personal Information Protection Officer
For any questions, requests, or complaints regarding the protection of personal information, you can contact VALORA’s personal information protection officer.
Contact Information
Name and Title: Marie-Josée Legault, President
Email: mariejlegault@valoraestate.com
Mailing Address: 3055, boulevard Saint-Martin Ouest, Suite T500, Laval, Quebec, H7T 0J3, Canada
Section 15 — Policy Updates
15.1 Policy Updates
VALORA may amend this Privacy Policy to reflect:
the evolution of its services (post-mortem / living legacy file);
the evolution of its collection methods (site, application, tools);
changes in suppliers or tools;
improvements in its governance and security practices;
or the evolution of the applicable legal framework.
15.2 Publication and Current Version
The current version of the Policy is published on valoraestate.com and accessible via the footer section of the Site.
15.3 Dates
Effective Date: [to be inserted]
Last Updated: [to be inserted]
