Privacy Policy

Privacy Policy (Global, GDPR-Compliant, Loi 25 Compliant)

Last updated: 2025-11-15

1. Introduction

OP3C (“we”, “our”, “us”) is a Canadian company based in Québec specializing in data integration, interoperability, and software development. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, submit a form, book an appointment, or otherwise interact with us.

2. Scope

This Policy applies to:

  • The OP3C website (op3c.ca or op3c.com)
  • Contact forms powered by Formspark
  • Analytics tools (e.g., Google Analytics)
  • Appointment booking tools (e.g., Google Calendar API)
  • Any other service or feature we provide online

This Policy applies to users worldwide.

3. Information We Collect

Information you provide directly
  • Name
  • Email address
  • Organization name (optional)
  • Message content or project details
  • Preferred appointment times (if booking a meeting)
Information collected automatically
  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent
  • Referring website
  • General geographic location (city/region)

Collected through:

  • Google Analytics
  • Server and security logs
  • Cookies and similar technologies

We do not intentionally collect sensitive personal data.

4. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your contact requests
  • To analyze site performance and improve user experience
  • To understand interest in our services
  • To schedule appointments upon request
  • To ensure website security and prevent misuse
  • To comply with legal obligations

We do not sell personal information.

We process personal data under the following legal bases:

  • Consent (contact form, cookies, analytics)
  • Legitimate interest (security, fraud prevention, improvement of website)
  • Contractual necessity (if you engage our services)
  • Legal obligations (record keeping, compliance requirements)

6. Cookies

We use cookies for:

  • Website analytics
  • Functionality (e.g., appointment widgets)
  • Security

You may disable cookies in your browser, but some features may not function properly.

7. Data Sharing

We only share information with trusted service providers necessary to operate our website and services:

  • Formspark — contact form processing
  • Google Analytics — traffic and usage analytics
  • Google Calendar API — appointment scheduling
  • Web hosting provider — secure hosting and logs

All service providers follow strong security and privacy standards and are bound by contract not to use your data for other purposes.

We do not sell or rent your data.

8. International Transfers

Your information may be processed in Canada, the United States, or other jurisdictions where our service providers operate.

We ensure safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Data processing agreements
  • GDPR-compliant transfer mechanisms

9. Data Retention

We keep your information only as long as necessary:

  • Contact form submissions: up to 12 months
  • Analytics: as per Google Analytics data retention settings
  • Appointment info: until the meeting is completed or cancelled
  • Server logs: typically 30–90 days

Data may be retained longer when required by law.

10. Security

We use reasonable technical and organizational measures:

  • HTTPS encryption
  • Access controls and authentication
  • Secure infrastructure
  • Regular updates and auditing
  • Limited access to personal data

However, no system is 100% secure.

11. Your Rights

Depending on your location, you may have rights such as:

Loi 25 (Québec)

  • Access
  • Correction
  • Withdrawal of consent
  • Portability (where applicable)
  • Name & contact of Privacy Officer (mandatory—see section 14)

PIPEDA (Canada)

  • Access and correction
  • Explanation of how data is used

GDPR (EU residents)

  • Access
  • Correction
  • Erasure (“right to be forgotten”)
  • Restriction of processing
  • Objection to processing
  • Data portability
  • Withdrawal of consent
  • Rights related to automated decision-making
  • To exercise these rights, contact us (see section 14).

12. Children’s Privacy

Our website and services are not intended for children under 16. We do not knowingly collect children’s personal data.

13. Changes

We may update this Privacy Policy from time to time. The “Last updated” date will always reflect the latest version.

14. Contact — Privacy Officer

For questions, requests, or rights related to personal information, contact:

Privacy Officer — OP3C