Privacy policy of the Mon Papa Noël booking platform

Version française

Version 1, in effect on October 22, 2026. This English version is provided for convenience; if it differs from the French version, the French version prevails.

Mon Papa Noël photographs children with Santa in Quebec shopping centres. This policy explains what personal information the booking platform reservation.monpapanoel.ca collects, why, who can see it, how long we keep it and how to exercise your rights. It applies to online booking, to My account and to the emails and text messages about your booking.

Who we are

Mon Papa Noël is operated by Fk7 Photographie Inc., 859, rue Camil, Blainville (Québec) J7C 5L1.

Person in charge of the protection of personal information

Francis Cossette, President of Fk7 Photographie Inc., is the person in charge of the protection of personal information at Mon Papa Noël. For any question, request or complaint, write to him at [email protected], or by mail at the address above.

What we collect and why

When you book

• Your first and last name: to put the booking in your name and welcome you on site.
• Your email address: to send you the confirmation, the reminder and notices of changes, and to log in to My account.
• Your phone number (optional): to send you the confirmation and a reminder by text message, and to reach you about your visit.
• The number of children: to prepare the session.
• Your children’s first names (optional): so that Santa and our team can greet them by name.
• The age of your youngest child (optional): to adapt the session to the children’s age.
• The shopping centre, date and time you choose, along with the version of the consent you accepted and when you accepted it.
• Your choice about the shopping centre’s newsletter (optional): see “Shopping centre newsletter” below.
• The shopping centre’s newsletter checkbox: when ticked, it allows us to pass your address to the shopping centre so you receive its newsletter, with your consent (Canada’s Anti-Spam Legislation); it is optional.

Information about your children

We only ask for your children’s first names and the age of the youngest, and only if you want to give them. We do not ask for their last name, their date of birth or any information about their health. The booking is made by a parent or a responsible adult: we never collect information directly from a child. If you are not the parent or guardian, give this information only with their agreement. Only our team sees it (the team of the shopping centre you chose and our administrators), and it is anonymized after the season (see “How long we keep it”).

When you log in to My account

You enter your email address and we send you a 6-digit code, valid for 10 minutes, usable once and only in the browser that asked for it. We keep only a fingerprint of the code, never the code itself. In My account, you see your bookings, you can change or cancel them until the stated deadline (2 hours before the booked time, unless stated otherwise) and you can correct your contact information.

What is collected automatically

• Your IP address: to protect the site against abuse and share the slots fairly, for example by limiting the number of requests per minute. Our counters keep only a fingerprint of it, erased at the end of the limit’s time window, and our application logs do not record it. The technical logs of our infrastructure may contain it (see “How long we keep it”), and so may Cloudflare’s security events (see Cloudflare, below).
• Strictly necessary cookies: see “Cookies”.
• The delivery status of our messages: our providers tell us whether an email or a text message was delivered or refused, and whether you replied STOP or ARRÊT to a text message. We do not know whether you open our emails or click their links (see “No tracking in our emails”).
• Technical error reports, without names, email addresses, phone numbers or IP addresses, but with pseudonymous identifiers (see Sentry, below).

Why we use it

• To manage your booking: hold the slot, confirm it, send you the confirmation, a reminder and notices of changes or cancellation.
• To organize your welcome at the shopping centre, with our team’s list of the day.
• To let you view, change or cancel your bookings in My account.
• To detect duplicates (the same person booking twice) and give everyone fair access to the slots.
• To protect the platform and meet our legal obligations.

We do not use your information for any other purpose without your consent. We do not sell it, we do not rent it and we do not do targeted advertising.

Automated decisions

To give everyone fair access on the day bookings open, automatic rules limit the number of requests or bookings per network, email address or phone number, and a virtual waiting room may turn on. A new booking whose contact information resembles that of an existing booking is flagged to our team as a possible duplicate: it is never cancelled without a person’s review. If an automatic rule refuses your request, the message tells you so. Write to us to have a person review the situation.

The messages we send you

We write to you only about your booking: confirmation, reminder (usually by email 24 hours before and by text message 2 hours before, if you gave a number), change, cancellation, and notice if something unexpected affects your visit. These are not advertising messages.

To stop our text messages, reply STOP or ARRÊT. For our emails, write to us. Since they are about your booking, stopping them means you will not get the reminders and notices of changes.

No tracking in our emails

Our emails are sent through Amazon SES with no tracking image and no tracking link: we do not know whether you open them or click their links. Amazon SES only tells us whether an email was delivered or refused, or whether you marked it as spam.

Shopping centre newsletter

When you book, a separate, optional checkbox lets you ask for the newsletter of the shopping centre where you book. It is never checked in advance and your booking does not depend on your choice. If you check it, after the season we send that shopping centre only your first name, your last name, your email address, the date of your consent and the exact text you accepted, so that it can send you its newsletter by email and prove your consent. The shopping centre then becomes responsible for that information under its own privacy policy.

You can unsubscribe at any time through the unsubscribe link in each newsletter. You can also write to us before January 15, 2027 so that we do not send your information.

The shopping centres and their operators:

• Place Rosemère, Rosemère: Place Rosemère, 401, boulevard Labelle, Rosemère (Québec) J7A 3T2
• Carrefour du Nord, Saint-Jérôme: Carrefour du Nord, 900, boulevard Grignon, Saint-Jérôme (Québec) J7Y 3S7
• Galeries Terrebonne, Terrebonne: Galeries Terrebonne, 1185, boulevard Moody, Terrebonne (Québec) J6W 3Z5

This consent is separate from the booking consent and is requested in accordance with Canada’s Anti-Spam Legislation.

Who can see your information

Our team

Members of the Mon Papa Noël team (administrators, managers and on-site employees) see only what their role needs, for the shopping centres assigned to them. Every change made by the team is recorded in a log.

Our providers

These providers process your information for us, under our instructions and under a contract. They may not use it for their own purposes.

• OVHcloud: hosting of the platform, the database and the sessions. Location: Beauharnois data centre (Quebec), Canada.
• Amazon Web Services (Amazon SES and Amazon SNS): sending emails and returning delivery notices. Receives your email address and the content of the message (first name, reference, shopping centre, date and time). Location: Canada (Central) Region, in Montréal (Quebec).
• voip.ms: sending text messages and receiving STOP or ARRÊT replies, only if you gave a number. Receives your number and the content of the text message. Location: Canada.
• Cloudflare: protection of the site (firewall, bot filtering and, when it is turned on, the Turnstile bot check of the login form) and delivery. Every request goes through its network, encrypted, including what you type in the forms. That content only passes through: we do not ask Cloudflare to keep it. Separately, when one of its security rules blocks, checks or limits a request, Cloudflare records a security event that contains the IP address, the country and network it came from, the browser used (its user agent), the address of the page requested and the time. According to Cloudflare, these events are kept for 31 days on our zone’s plan. Location: the worldwide network of Cloudflare, Inc., a United States company; requests made from Quebec usually go through its servers in Canada, without guarantee. Outside Quebec and Canada.
• Sentry: tracking of technical errors. Receives cleaned error reports, without names, email addresses, phone numbers or IP addresses. They may contain pseudonymous identifiers, such as the identifier of an account, the identifier of a booking or its reference: they do not name you, but Mon Papa Noël can link them to you. They are therefore personal information, which we keep to the minimum needed to fix errors. Location: United States (the sentry.io US region). Outside Quebec and Canada.

Information processed outside Quebec

Cloudflare and Sentry process information in the United States, outside Quebec and Canada. Before entrusting them with information, we assess the privacy-related factors, as section 17 of the Act respecting the protection of personal information in the private sector requires, and we limit what they receive and keep: Cloudflare keeps for us only its security events, and Sentry receives only cleaned error reports, with pseudonymous identifiers.

We recorded this assessment on October 21, 2026; it is available on request.

Other communications

We do not share your information with anyone else, unless the law requires it or allows it without your consent (for example, a court order).

How long we keep it

• Unconfirmed hold: if you do not finish your booking, the slot is released after a few minutes (8 by default) and none of your contact information is recorded.
• 90 days after the end of the season, we anonymize the children’s first names and the other form answers marked as personal, the contact information and answers recorded in our team’s log of changes, and the proof of sending of emails and text messages (addresses, numbers and the content of delivery events).
• Your booking contact information and your account: your first name, last name, email address and phone number are anonymized in your bookings 90 days after the end of the season; your account is too if it has no booking still to come. Exception: if you withdrew your consent to a shopping centre’s newsletter less than three years ago, we keep only your account’s email address, to respect that withdrawal (see “Do-not-contact list”).
• Proof of your consent: the version of the consent you accepted and when you accepted it are kept for three years after your consent.
• Do-not-contact list: if an email server permanently refuses your address, if you mark our email as spam, if you reply STOP or ARRÊT, or if you withdraw your consent to the newsletter, we keep that address or number on a do-not-contact list for three years (Canada’s Anti-Spam Legislation), so that we no longer write to you that way or send your address to a shopping centre.
• Login codes: they expire 10 minutes after they are sent, and their fingerprint is erased one day after they expire, by a clean-up that runs every hour.
• Sessions: as long as the cookies last (see “Cookies”).
• Technical logs: 30 days.
• Error reports (Sentry): 90 days.
• Cloudflare’s security events: 31 days, according to Cloudflare (see “Our providers”).
• Database backups: the automatic backups are replaced after 2 days (OVHcloud’s Essential plan, chosen on 2026-10-19); anonymized information therefore also disappears from the backups after that time.
• Newsletter: once sent, your information is kept by the shopping centre under its own policy.

To anonymize means to replace or erase information so that you can no longer, reasonably, be identified. What remains after anonymization is not anonymous for all that: the history of your bookings without your contact information (the shopping centre, date, time, status and reference) and the proof of your consent no longer name you, but they can still be linked to you, for example through the reference you received or the address the do-not-contact list keeps. We protect them like your other personal information. Only the statistics we draw from them, such as the number of bookings per day, contain no personal information.

Cookies

The platform uses only cookies that are strictly necessary for it to work. It uses no audience measurement, advertising or social media cookie.

• mpn_session: links your browser to your session (current hold, language, login to My account). It contains only a signed identifier; the session itself is kept on our servers. Duration: 24 hours for a visit, 15 minutes while logging in, then 30 days, extended when you come back, once logged in to My account (12 to 14 hours for the team).
• mpn_adm_… (one per shopping centre): lets your browser through after the virtual waiting room, on busy days. Duration: 10 minutes at most.
• mpn_lng: remembers the language of the team’s interface (administration and on site). It is not used for parents, whose language is in the page address. Duration: 1 year.
• Cloudflare: we have it set no cookie. Bot Fight Mode is off on our zone, so Cloudflare does not set the __cf_bm cookie; only a visitor to whom Cloudflare shows a security check receives, if they pass it, the strictly necessary cf_clearance cookie, valid 30 minutes by default.

Since these cookies are necessary, they do not ask for consent. If you block them, booking will not work.

Security

Exchanges with the platform are encrypted (HTTPS). Access to the data is limited by role and by shopping centre, our application logs contain no name, email address or phone number, and login codes are never stored in clear. If a confidentiality incident presents a risk of serious injury, we notify the Commission d’accès à l’information and the people concerned.

Your rights

• Access: know what information we hold about you and get a copy, including, on request, in a structured, commonly used technological format.
• Correction: have inaccurate, incomplete or equivocal information corrected. You can correct your contact information yourself in My account.
• Withdrawal of consent: withdraw your consent at any time. For the booking, this means cancelling it, in My account or by writing to us, since we cannot hold a slot without being able to reach you. For the newsletter, see “Shopping centre newsletter”.
• Complaint: write to us first, then, if our answer does not satisfy you, contact the Commission d’accès à l’information du Québec (1 888 528-7741).

To exercise a right, write to [email protected], if possible from the address used for your booking, or by mail to the person in charge of the protection of personal information. We may ask you to confirm your identity. We answer within 30 days, free of charge.

Changes to this policy

If we change this policy, we publish the new version at this address, with its version number and its effective date. A new version applies to bookings made after it is published. We keep every earlier version; you can get a copy on request.

Contact us

Mon Papa Noël (Fk7 Photographie Inc.), 859, rue Camil, Blainville (Québec) J7C 5L1, [email protected].