Full name — to identify you and personalize our response
Email address — to communicate with you and respond to your request
Phone number — to call you back about your request
Approximate budget — to assess the scope of your project
Subject and message — to understand your request
When you visit the site (visit statistics)
Page viewed, site you came from (domain name only), device type (computer, mobile or tablet), browser language and visit duration — to know which pages are useful and improve the site
Visit fingerprint — your IP address and browser are combined with a secret key that changes every day, then irreversibly transformed. This fingerprint is only used to count the day's unique visitors. The key is deleted the next day; the fingerprint can then no longer be traced back to your IP address. The IP address itself is never stored by the statistics.
No cookies are used for statistics, and no data is sent to a third-party service (Google Analytics or other).
For site security
Web server logs (IP address, requested page, browser, date and time) — to diagnose outages and attacks
Submissions blocked by the spam filter (name, email and beginning of the message entered) — to improve the filter. The IP address is replaced by a fingerprint whose key changes every day.
3. Purposes of collection
Your personal information is collected for the following purposes:
Respond to your inquiries
Communicate with you about your request
Measure site traffic to improve the site
Ensure the security of our website
Comply with our legal obligations
4. Legal basis for processing
We process your personal information based on:
Your consent — given explicitly via the contact form
The proper operation of the site — security, abuse prevention and anonymized visit statistics
5. Communication to third parties
Your personal information may be communicated to the following third parties:
5.1 Email service
Amazon Web Services (AWS Simple Email Service) — sending service for contact form emails, ca-central-1 region (Montréal)
Information shared: name, email, phone, budget, subject, message
Purpose: secure transmission of contact form emails
OVHcloud — dedicated server (VPS) hosting the site and our customer management software, where received requests are also recorded
Information hosted: requests received through the form, visit statistics, server logs
Purpose: hosting and operation of the website
Server location: Beauharnois (Quebec), Canada
5.3 Hosting of our mailbox
MXroute — host of our inbox info@artecosolutions.com
Information hosted: requests received through the form (name, email, phone, budget, subject, message) and our exchanges with you
Purpose: receive and answer your requests
Server location: United States (see section 6)
6. Transfer of information outside Quebec
Your personal information is mainly processed in Quebec:
Hosting of the site and our customer management software: Beauharnois (Quebec)
Sending of contact form emails (AWS SES): Montréal (Quebec)
One exception: our email inbox is hosted by MXroute, in the United States. Requests sent through the form and our exchanges with you are therefore stored there. If you prefer that your request not go through this service, you can reach us by phone at (438) 823-5870.
7. Retention period
Your personal information is retained according to the following durations:
Requests received through the form (mailbox, customer management software and sending log): 6 months maximum if the request does not lead to a contract, then deletion. If it does, they are kept for the duration of the business relationship and the period required by law.
Submissions blocked by the spam filter: 180 days, then automatic deletion
Visit statistics: 13 months, then automatic deletion. The key used to create fingerprints is deleted every day.
Web server logs: 15 days, then automatic deletion
Session cookie (PHPSESSID): until browser closure
After these periods, your information is deleted securely.
8. Your rights
In accordance with Law 25, you have the following rights:
Right of access — consult your personal information
Right of rectification — correct your information
Right to deletion — request the erasure of your data
Right to portability — receive your data in a structured format
Right to withdraw consent — withdraw your consent at any time
Our site and services are not intended for persons under 14 years of age. We do not knowingly collect personal information from minors under 14.
If we learn that we have collected personal information from a minor under 14 without the required parental consent, we will take the necessary measures to delete this information as soon as possible.
10. Confidentiality incident
In accordance with Law 25, in the event of a confidentiality incident involving your personal information (unauthorized access, loss, theft, or unauthorized communication), we commit to:
Take reasonable measures to reduce the risk of harm and prevent new incidents of the same nature
Notify the Commission d'accès à l'information du Québec (CAI) if the incident presents a serious risk of harm
Notify affected individuals if the incident presents a serious risk of harm
Maintain a register of confidentiality incidents
Notification will be made as soon as possible and will contain the description of the information involved, the circumstances of the incident, and the measures taken to reduce its consequences.
11. Data security
We implement the following security measures to protect your personal information:
Encrypted transmission via HTTPS (TLS 1.2 or higher)
No external fonts loaded — the site uses your browser's system fonts (no data sent to Google Fonts or other third parties)
Restricted access to personal information (strong password authentication, protection against repeated attempts)
Secure servers with firewall and regular updates
12. Cookies and similar technologies
Our site uses the following cookies:
12.1 Essential cookies
PHPSESSID — PHP session cookie
Purpose: protection of the form against spam (security token and submission limit)
Duration: until browser closure
Type: first-party cookie
lang — language preference
Purpose: remember your language choice (FR or EN) to avoid repeated automatic redirects
Set: by JavaScript on first click of the language switcher, or during automatic redirect based on your browser language
Duration: 1 year
Type: first-party functional cookie
No advertising tracking cookies are used on this site. Both cookies are used solely for the operation of the site (form protection and language preference).
13. Policy changes
We reserve the right to modify this privacy policy at any time. Any modification will be published on this page with a new update date.
We encourage you to consult this page regularly to stay informed about our personal information protection practices.
14. Complaint to the CAI
If you believe that your rights regarding the protection of personal information are not being respected, you have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI):
