Security Incident Management Policy
Last updated: September 15, 2025
At Red Carpet Web Promotion, we take the security of the personal information we collect and process very seriously. This policy complements our Privacy Policy and explains the measures we have implemented to detect, report, and resolve any security incident.
SECURITY OFFICER
Jason Campbell has been designated as the Security Officer at Red Carpet Web Promotion. He is responsible for implementing and maintaining the company’s security incident management procedures and ensuring compliance with applicable legislation, including Law 25.
DEFINITION OF A SECURITY INCIDENT
A “security incident” refers to any situation that:
- involves the unauthorized access, use, disclosure, loss, or alteration of personal information;
- creates a risk of harm to the individuals concerned;
- requires prompt intervention to minimize its impact.
SECURITY INCIDENT MANAGEMENT PROCESS
Red Carpet Web Promotion is committed to:
- implementing a process to promptly detect any confirmed or potential security incident;
- acting diligently and documenting all actions taken to contain, resolve, and mitigate the impact of the incident;
- collecting and preserving evidence relevant to the incident and its resolution;
- cooperating with authorities or contracting partners, when required.
REPORTING AND TRANSPARENCY
Any security incident will be:
- reported immediately to the relevant public organization, if the incident occurs within the scope of a public sector contract;
- documented, including: the nature of the personal information involved, the circumstances and cause (if known), the time period of the incident, the approximate number of individuals affected, and the corrective actions taken or planned;
- followed by a post-incident report describing the root causes, actions undertaken, and preventive measures implemented to avoid recurrence.
PREVENTION AND CONTINUOUS IMPROVEMENT
We take ongoing steps to reduce the risk of security incidents, including:
- restricting access to personal information to authorized individuals only;
- using modern protection tools (password managers, secure storage, encryption when required);
- providing regular training to our staff on security best practices;
- updating our internal processes to reflect evolving security threats and legal obligations.
CONTACT
For questions regarding this policy or to report a security issue, please contact:
Jason Campbell
Information Security Officer
Red Carpet Web Promotion
7 Rue Pleasant, Sutton, Québec, Canada J0E 2K0
This Security Incident Management Policy is also available in French. Cliquez ici pour la version française.