Security notes
Overview of security
Confidentiality of information and security of transactions are a priority at Épargne Placements Québec, which makes every effort to ensure the integrity of information exchanged through its website and the mobile application (hereinafter collectively referred to as the “digital platforms”). The security standards in effect at Épargne Placements Québec provide maximum security for electronic transactions that can be carried out using existing computer technology.
In addition, all personal information provided by the user of the digital platforms is confidential and protected by the Act respecting access to documents held by public bodies and the protection of personal information (CQLR, chapter A‑2.1).
At Épargne Placements Québec, confidentiality of information and security of transactions cover a range of subjects. We suggest you become familiar with them to maximize the level of security of your electronic transmissions :
| Browsers required | Google Analytics |
| Encryption | Password management |
| E‑mail | Empty the memory cache |
| Firewall | System supervision |
| Use of cookies | Responsibility |
| Exchange of information | Fraudulent emails |
Browsers required
The first level of Internet security is provided by the web browser you use. Your browser must be configured to be compatible with the 256‑bit SSL security protocol, which keeps the information you send confidential.
To optimize the security of electronic transmissions between your computer and Épargne Placements Québec’s digital platforms, we recommend that you use the most recent version of the following browsers:
Encryption
As previously mentioned, encryption is a means of ensuring the security of communications over the public Internet network. Cryptography involves encoding data so that a third party cannot intercept and understand information exchanged between two computers. The transmitted information is coded so as to be decodable only once it is received.
Épargne Placements Québec uses one of the most secure encryption algorithms in North America. All electronic transactions carried out through Épargne Placements Québec’s digital platforms must be encoded using 256‑bit encryption.
E‑mail
A security mechanism applies to all electronic transmissions sent to Épargne Placements Québec. However, although information sent to us by E‑mail is encrypted, we recommend that you not send us confidential information by E‑mail.
Firewall
Users of the digital platforms are protected by a firewall providing a high degree of security between Épargne Placements Québec’s systems and the public Internet network. This firewall consists of computer systems designed to separate Épargne Placements Québec’s internal systems from the public Internet network.
All exchanges of information between a user of Épargne Placements Québec’s digital platforms and Épargne Placements Québec’s internal systems are accordingly processed securely to prevent any attempt at illicit access.
Use of cookies
Épargne Placements Québec uses session cookies on its digital platforms. The cookies are automatically erased when you close your browser or when you click on “Quit” to end your session in the “Online Transactions” section. Session cookies enable you to safely perform transactions and help to maintain the integrity of your session.
In addition, Épargne Placements Québec and third-party suppliers jointly use persistent cookies to deliver personalized ads to you based on your browsing habits. Épargne Placements Québec ads could therefore appear on other websites after a visit to our digital platforms. Please note that you can at any time disable the use of cookies in your browser. However, doing so might deprive you of certain functions offered on our website and prevent you from accessing the “Online Transactions” section.
Exchange of information
When you access the Épargne Placements Québec digital platforms, information is exchanged between your computer and the digital platforms server. The information does not make it possible to identify you personally. The following information is exchanged:
- the domain name of your Internet service provider and the IP address, e.g. 123.45.67.890, the unique number assigned to your computer when it is connected to the Internet;
- the browser and operating system used to access the Épargne Placements Québec digital platforms;
- the pages visited;
- the date and time when the pages are visited;
- the address from which you accessed the Épargne Placements Québec digital platforms.
Épargne Placements Québec collects this information because of the technological demands of the Internet and preserves it solely for statistical purposes. The information collected is used to determine the number of visits, the pages most frequently visited, the technology that the digital platforms’s users use, the external website that led to the Épargne Placements Québec digital platforms, and the user’s countries of origin.
Google Analytics
Épargne Placements Québec uses Google Analytics, a website analysis tool provided by Google.
The software uses cookies to collect, among other things, information on the browsers used by the digital platforms’s users, and the pages that they visit. It also makes it possible to calculate how frequently users return to the digital platforms. The statistics can help Épargne Placements Québec to better grasp the interests and needs of Internet users in order to enhance its digital platforms. The information is stored on Google servers. We wish to point out that the analytic service is not used on the pages in the “Online transactions” section of the Épargne Placements Québec digital platforms.
Google uses persistent cookies that remain in the browser until they expire or until the Internet user or the browser deletes them. Among other things, these cookies enable the delivery of personalized ads to you based on your browsing habits. Épargne Placements Québec ads could therefore appear on other websites after a visit to our digital platforms.
If you do not want Google Analytics to collect information, you can deactivate cookies by selecting the appropriate parameters in your browser. Moreover, an additional model developed by Google can be used to prevent your browser from providing such information. You can download and install the additional module in your Web browser. If you wish to opt out of seeing Épargne Placements Québec ads, you may change your settings or deactivate personalized ads at Manage your Ads Settings.
Password management
The password assigned to you when you registered with the transactional section of the Épargne Placements Québec digital platforms is your access key. Accordingly, you have to manage your password in a way that maximizes the confidentiality of your data and the security of your transactions. You are responsible for managing your password to control access to your confidential financial information. To optimize this protection, Épargne Placements Québec recommends you follow these suggestions:
- Choose a password that nobody can guess;
- Protect your password by memorizing it and do not reveal it to anyone;
- Change your password regularly;
- Empty your browser’s memory cache after each transactions session;
- Correctly finish each transactions session.
Empty the memory cache
Your browser’s memory cache generally holds a copy of the Web pages you have viewed in order to load them more quickly when you next visit them.
To optimize the security of your electronic transactions and thus prevent anyone from knowing the confidential information exchanged, we recommend that you always empty your browser’s memory cache at the end of each transactions session on the Épargne Placements Québec digital platforms. To do so, refer to your browser’s documentation, since the procedure varies from one browser to another.
System supervision
Épargne Placements Québec has ensured the security of its digital platforms by implementing various protection measures such as encryption of electronically transmitted information and a firewall. In addition, its internal systems are constantly supervised to prevent any attempt to breach security. On‑going checks help optimize the security of Épargne Placements Québec’s internal systems. Regular independent security checks are also carried out.
Responsibility
In spite of all the measures taken by Épargne Placements Québec to protect the confidentiality of information and the security of transactions, each user of the Épargne Placements Québec digital platforms is responsible for taking the required measures to ensure a high level of security when carrying out electronic transactions over the public Internet network. Accordingly, each user of the digital platforms is encouraged to play an active role regarding the security of electronic transmissions.
Lastly, if you have questions on any of the above topics, please contact us.
Fraudulent emails
Beware of fraudulent emails that would have you believe they are from Épargne Placements Québec.
Definition of phishing
Email fraud, called “phishing,” is an attempt to scam people by using various pretexts to ask them to verify their personal information—information that can be used to commit financial fraud or identity theft.
Fraudulent emails may reproduce our graphic charter (logo, typography, vocabulary) and contain a link to a phoney website resembling that of Épargne Placements Québec.
Practices at Épargne Placements Québec
Épargne Placements Québec never asks for personal information by email. If we need to contact you by phone, strict procedures are in place to protect your personal information. To guard against phone phishing, check the phone number against that of Épargne Placements Québec, 1 800 463‑5229, to ensure its authenticity, or go to the “How to reach us page” on our website.
Preventative measures
If you receive suspicious emails, do not reply to them or click on the links in them.
To guard against all types of phishing, check that our website’s unique address, epq.gouv.qc.ca, appears in the address bar of your browser.
In addition, when you browse in the Online Transactions section of our website, make sure that the address begins by “https,” which means the address is secured by a valid security certificate.
To protect your personal information, we recommend that you not disclose personal identifying information in an email. Such information includes your participant number, user code and password.
Report a phishing attempt
If you received an email involving Épargne Placements Québec that you think may be fraudulent, or if you replied or think you replied to a fraudulent email, please notify us by sending the email to courriel@epq.gouv.qc.ca, or contact us by phone.
