Last updated: May 2025
Privacy Policy
Data Controller
Data We Collect
We collect the following data when you use our website:
- Contact form: first name, last name, email address, organization, message.
- Newsletter: email address, first name (optional).
- Analytics cookies: pages visited, session duration, referral source (anonymized data).
We do not collect any sensitive data (racial origin, political opinions, health, etc.).
Purposes of Processing
Your data is used only for:
- Responding to your inquiries submitted via the contact form;
- Sending our newsletter (if you subscribed);
- Analyzing audience and improving our website (anonymized data via Google Analytics).
Legal Basis for Processing
The processing of your data is based on your consent. By submitting a form or subscribing to our newsletter, you consent to the processing of your data for the purposes described above.
Data Retention
Your data is retained for a period of 3 years from our last interaction (last message, last email click, etc.).
After this period, your data is automatically deleted or anonymized.
Your Rights
In accordance with Quebec’s Law 25 and the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access — obtain a copy of your personal data;
- Right to rectification — correct inaccurate or incomplete data;
- Right to erasure — request deletion of your data;
- Right to object — object to the processing of your data;
- Right to data portability — receive your data in a reusable format.
To exercise these rights, contact us at:contact@gufaca.com
We commit to responding to your request within 30 days.
Cookie Management
This website uses the following types of cookies:
- Functional cookies: necessary for the website to function (language, preferences).
- Analytics cookies: Google Analytics to measure audience and improve content.
You can configure your preferences at any time via the cookie banner on your first visit or in your browser settings.
Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or disclosure (SSL/TLS encryption, restricted database access, regular audits).
International Transfers
Our servers are located in the United States (Vercel Inc.). Data transfers between Canada and the United States are governed by appropriate safeguards under Law 25 and the GDPR.
Reference Texts
For any questions about this policy, write to us at contact@gufaca.com.