Legal
Privacy policy
We build websites, not data collections. This policy explains, in plain words, what we collect when you visit 4etdemi.ca or write to us, why, where it goes, how long we keep it and how to use your rights.
In short
- No analytics or advertising cookies, no analytics tool, no ad pixel.
- We only collect what you send us through the quote form or by email, and we use it to answer you.
- We never sell, rent or trade your information.
- Some of our providers process your information outside Québec (see below).
- Questions? Email bonjour@4etdemi.ca.
Who is responsible for your information
4½, studio web, a sole proprietorship based in Montréal, is responsible for the personal information it collects.
Person in charge of the protection of personal information (Responsable de la protection des renseignements personnels)
Email: bonjour@4etdemi.ca (put "Privacy" in the subject line)
What we collect, and how
1. The quote form (/en/quote/)
When you fill in the form, we receive:
- your name and email address;
- your business name and field (where you provide them);
- the type of project and the package you’re interested in;
- your message;
- technical data tied to the submission: your IP address, date and time. Our form provider uses it to block spam.
Please don’t include sensitive information (health, finances, social insurance number, etc.): we don’t need it to prepare a quote.
2. Emails you send us
If you write to bonjour@4etdemi.ca, we receive your email address, your name if it appears, the content of your message and any attachments.
3. Your visit to the site
This is a static website. We don’t install any audience measurement tool, advertising cookie or third-party script. As with any website, our host (Cloudflare) automatically processes technical data to serve pages and protect the site from attacks: IP address, browser type, page requested, date and time. We don’t use this data to identify or profile you.
Cookies: the site sets none for analytics or advertising. If our host detects suspicious traffic, it may show a security check and set a strictly technical cookie to remember it. That cookie is used only for site security.
We use no technology that locates or profiles you, and we make no decision based solely on automated processing.
Why we use it
- To answer your request and prepare a quote.
- To discuss your project with you and, if you become a client, to carry out and bill the work.
- To protect the site and the form from spam and abuse.
We don’t use it for marketing: no newsletter, no mailing list. If we ever want to write to you for another purpose, we’ll ask for your permission first.
Your consent
By sending us the form or an email, you consent to our using your information for the purposes above, and to our entrusting it to the providers listed below to do so. For any other use, we’ll ask for your consent explicitly.
You can withdraw your consent at any time by emailing bonjour@4etdemi.ca. We’ll then stop using your information and delete it, except what a law requires us to keep (invoices, for example).
The site is not aimed at children. We don’t knowingly collect information about anyone under 14.
Who has access
The studio is a one-person business: only the person in charge of the protection of personal information has access to your information. If a collaborator ever needs access to carry out your project, they’ll only see what’s necessary and will be bound to confidentiality in writing.
Our providers and communication outside Québec
We use three providers. They process your information on our behalf, only to provide their service to us.
| Provider | What it does | Where data may be processed |
|---|---|---|
| Web3Forms (Web3Creative) | Receives the quote form and forwards it to us by email. It uses its own subprocessors, including Amazon Web Services, Cloudflare and Hetzner for hosting, and Akismet and CleanTalk, which receive your IP address and email to filter spam. | India, United States, European Union and other regions |
| Zoho Mail (Canadian data centre) | Hosts our bonjour@4etdemi.ca mailbox. | Canada (Toronto and Montréal) |
| Cloudflare | Hosts and protects the website. | Global network, including the United States |
Your information may therefore be communicated outside Québec, including outside Canada. Before doing so, we assessed the privacy risks (a "privacy impact assessment") and chose settings that limit what leaves Québec and how long it stays there. This information may be subject to the laws of the places where it is processed.
We never share your information with anyone else, unless the law requires or allows it (for example, a court order).
How long we keep it
| Information | Period |
|---|---|
| Copy of your request at Web3Forms | 30 days after sending, then automatically deleted |
| Quote request and emails, if you don’t become a client | 12 months after our last exchange, then deleted |
| Client file (emails, contract, invoices) | For the length of the project, then as long as tax laws require, usually 6 years |
| Host’s technical data | Short periods set by Cloudflare |
When these periods end, we delete your information securely.
How we protect it
- The site and the form only work over HTTPS (encrypted connection).
- Data is encrypted at rest with our providers.
- Our accounts use unique passwords and two-step verification.
- We keep only what’s needed, and only for as long as it’s needed.
If a confidentiality incident happens (unauthorized access, for example), we act quickly to limit the harm. If there’s a risk of serious injury, we notify the Commission d’accès à l’information and the people affected.
Your rights
At any time, you can:
- find out whether we hold information about you and get a copy;
- receive the information you gave us in a structured, commonly used technological format;
- have corrected information that is inaccurate, incomplete or ambiguous, or have deleted information we’re not allowed to hold;
- withdraw your consent to the use of your information;
- ask us what information we hold, who can access it and how long we keep it;
- ask us to stop disseminating information about you or to de-index a link leading to it, in the cases set out by law. (We normally publish no personal information on our site, but the right exists.)
How: email the person in charge of the protection of personal information at bonjour@4etdemi.ca. We may ask you to confirm your identity, and we can help you word your request. We reply in writing within 30 days. Access is free; only reasonable copying costs could apply, and we’d tell you first.
A complaint?
Write to us first at bonjour@4etdemi.ca: we take every complaint seriously. We acknowledge it, look into it and reply in writing within 30 days, with what we’ve done.
If you’re not satisfied, or if we refuse your request for access or correction, you can contact the Commission d’accès à l’information du Québec:
- website: cai.gouv.qc.ca
- toll-free: 1 888 528-7741
A request to examine a disagreement generally has to be filed within 30 days of our refusal or of the missed reply deadline.
How we govern your information
Even as a one-person studio, we follow simple rules, approved by the person in charge of the protection of personal information:
- Roles: the person in charge is the only one who collects, consults and deletes your information. Any future collaborator signs a confidentiality undertaking.
- Retention and destruction: we apply the periods in the table above. Once a quarter, we clean up the mailbox and the form dashboard.
- New tools: before adopting a new tool that processes personal information, or sending information outside Québec, we assess the privacy risks and choose the most protective settings.
- Providers: we only use providers that commit in writing to protect your information and to use it only to serve us.
- Incidents: we keep a register of confidentiality incidents and notify those concerned when the law requires it.
- Complaints: handled as described under "A complaint?".
Changes to this policy
If we change this policy, we’ll post the new version here with its update date. If the change is significant, we’ll also announce it clearly on the site.