Privacy policy
Written in plain language, in accordance with Québec’s Act respecting the protection of personal information in the private sector (Law 25).
Last updated :
Who is responsible?
The person in charge of the protection of personal information is listed below. Contact them for any question, access or correction request, or complaint.
What we collect
Forms (free audit, quote): name, work email, company, phone (optional), message and, where applicable, your flash audit or self-assessment results.
Flash audit: the domain you enter. Results are kept in memory for at most 15 minutes to avoid repeated scans, then discarded. The domain is only stored if you then submit the form.
Technical logs: IP address and timestamp, kept by our host for security and abuse prevention (scan rate limiting).
Where your visit came from: if you arrive through a campaign link (utm or gclid parameters from an ad) or from another website, that information and your landing page are attached to your request, only if you submit a form. Nothing is stored in your browser. You may also tell us, if you wish, how you heard about us.
Why
Only to answer your request, prepare a quote and keep the site secure. No selling, no renting, no advertising profiling.
Cookies and tracking technologies
This site uses no tracking cookies, no third-party analytics and no profiling technology.
If we ever used a technology able to identify, locate or profile you, it would be off by default and enabled only with your consent (s. 8.1).
Sharing with third parties
Your requests may pass through service providers (hosting, form delivery, email) contractually bound to confidentiality and security. If one of them processes information outside Québec, we first assess that the protection is adequate (s. 17).
Retention
Requests that don’t lead to an engagement are deleted after 24 months. Engagement-related information is kept according to our contractual and tax obligations, then securely destroyed.
Your rights
You may request access, correction, withdrawal of consent, de-indexing or portability of your information. We reply within 30 days. You may also file a complaint with the Commission d’accès à l’information du Québec.
Security
Encryption in transit (HTTPS, HSTS), strict security headers, data minimization and restricted access. Found a vulnerability? Write to the address in our security.txt file.