109-2727 rue Saint-Patrick, Montréal
MMontreal MailboxBusiness address
Legal

Privacy Policy

Last updated: July 2026

2727 Coworking (“we”, “us”, “our”), operator of the Montréal Mailbox service, is committed to protecting your personal information in accordance with Quebec’s Act respecting the protection of personal information in the private sector (Law 25) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

  • Contact information: name, email address, phone number, mailing address.
  • Business information: company name, business registration details, business address.
  • Identity documents: a government-issued photo ID and the authorized names on your account, collected to verify your identity and prevent fraud; ID records are kept for the life of your account and a reasonable period afterward, then securely destroyed.
  • Payment information: credit-card details and billing address (processed securely through Stripe).
  • Mail information: sender/recipient details and, on scanning plans, the scanned contents of your mail.
  • Service usage data: booking history, facility access logs, service preferences.
  • Communications: emails, inquiries, and correspondence with our team.
  • Technical data: IP address, browser type, and device information when using our website.

2. How we use your information

  • provide and manage our services, including mailbox services and facility access;
  • process payments and billing;
  • communicate with you about your account, bookings, and service updates;
  • send newsletters and marketing communications about our services and offers;
  • improve our services and customer experience;
  • comply with legal obligations and enforce our terms; and
  • protect the security of our facilities and members.

3. Marketing communications

Where you are a customer or have inquired about our services, we may send you commercial electronic messages (service updates, offers, newsletters) on the basis of our existing business relationship, in accordance with Canada’s Anti-Spam Legislation (CASL). Every marketing email identifies us as the sender and includes an easy unsubscribe link, and you may withdraw your consent at any time. We do not send marketing messages without a valid basis under CASL.

4. Information sharing

We may share personal information with service providers who help us operate (payment processors, email services, facility-management systems), where required by law or legal process, and in connection with a merger, acquisition, or sale of assets. We do not sell your personal information to third parties for their marketing purposes. Some of our service providers, including Stripe, may store or process your information outside Quebec, including in the United States; before entrusting personal information to a provider outside Quebec, we assess that it will receive protection comparable to that required under Quebec law.

5. Data retention

  • Active account information: for the duration of your membership plus 7 years for tax and legal compliance.
  • Transaction records: 7 years, as required by Canadian tax law.
  • Scanned mail images: for the duration of your subscription.
  • Physical mail: up to 6 months from receipt, unless we agree to hold it longer.
  • Marketing preferences: until you withdraw consent.
  • Security footage: 30 days, unless required for an investigation.

6. Your rights under Quebec Law 25

  • Right of access — request a copy of the personal information we hold about you.
  • Right of rectification — request correction of inaccurate or incomplete information.
  • Right of deletion — request deletion, subject to legal retention requirements.
  • Right to withdraw consent — where consent is the legal basis for processing.
  • Right to data portability — receive your data in a structured, commonly used format.

To exercise these rights, contact our Privacy Officer at [email protected]. We will respond within 30 days.

7. Data security

We implement appropriate technical and organizational measures — including encryption, secure servers, and access controls — to protect your personal information. No method of transmission over the Internet is 100% secure, so we cannot guarantee absolute security. If a confidentiality incident occurs that presents a risk of serious injury, we will notify the Commission d’accès à l’information du Québec and the affected individuals as required by Law 25, and keep a register of such incidents.

8. Cookies and tracking

Our website uses cookies and similar technologies to improve your experience, analyze traffic, and deliver relevant advertising. By using our website you consent to our use of cookies; you can manage preferences through your browser settings.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy and updating the “Last updated” date. Continued use of our services after changes constitutes acceptance.

10. Contact us

Privacy Officer — Montréal Mailbox (2727 Coworking), 2727 Saint-Patrick St. #109, Montréal, QC H3K 0A8. Email: [email protected]. Phone: +1 438-796-0017.

You may also file a complaint with the Commission d’accès à l’information du Québec if you believe your privacy rights have been violated.