Privacy policy
What information the site collects, why, and how to exercise your rights.
Last updated: September 27, 2026
Québec Studio respects your privacy. This policy describes the personal information the quebec.studio website collects, how it is used, who it is shared with, how long it is kept and how to exercise your rights, in accordance with Québec’s Act respecting the protection of personal information in the private sector.
Person in charge of the protection of personal information
Richard Trudel, [email protected], P.O. Box 3012, Malartic, Québec J0Y 1Z0. Send any question about this policy or about your information to him.
What we collect, and why
When you write to us
The contact form sends us your name, your email, the subject and your message, as well as your phone number and organization if you provide them. This information is used only to answer your request and follow up on it. You provide it with your consent, given by checking the box on the form.
Your message reaches us by email. It is not stored in the website’s database.
When you visit the site
Like any website, our server records technical information on every visit: IP address, browser type, page requested, date and time. It is used to keep the site secure and fix errors, never to identify you.
We also measure traffic with Matomo, a tool we host ourselves: pages viewed, referring page, device type. These statistics are never sold, shared or used for advertising.
Cookies
The site only sets the cookies it needs to work, unless you accept statistics cookies. Until you agree, Matomo measures traffic without setting any cookie. If your browser sends the Global Privacy Control signal, we treat it as a refusal. You can change your choice at any time with the “Cookies” link at the bottom of every page.
The site contains no advertising cookies or profiling tools, and makes no automated decisions about you. Our fonts are served from our own server: your browser does not contact Google Fonts.
Necessary
Required for the site to work and for form security. These cannot be turned off.
| Cookie | Set by | Purpose | Retention |
|---|---|---|---|
CraftSessionId |
This site | Keeps your browsing session. | Session |
CRAFT_CSRF_TOKEN |
This site | Protects forms against cross-site request forgery. | Session |
cookie_consent |
This site | Remembers your cookie choices. | 6 months |
Statistics
Help us understand how the site is used so we can improve it. Measured with Matomo.
| Cookie | Set by | Purpose | Retention |
|---|---|---|---|
_pk_id.* |
This site | Recognizes the browser from one visit to the next, without identifying you. | 13 months |
_pk_ses.* |
This site | Groups the pages viewed during a single visit. | 30 minutes |
Who this information is shared with
We never sell, rent or trade personal information. Only the providers the site needs to run have access to it, and only to provide that service to us:
- Hosting: the site runs on a virtual private server managed with Laravel Forge.
- Email: messages from the form pass through our email provider on their way to our inbox.
- Bot protection: on the contact page, Cloudflare Turnstile analyzes technical signals from your browser to tell people from bots.
We may also have to disclose information when required by law, for example under a court order.
Disclosure outside Québec
Some of these providers may process information outside Québec, including Cloudflare, in the United States. We choose providers that offer adequate protection and send them only what is strictly necessary.
How long we keep it
- Messages received through the form: as long as needed to handle and follow up on your request, then no more than two years after our last exchange, unless we are working together under a contract.
- Server logs: a few weeks, after which they are deleted automatically.
- Your cookie choice: six months, after which the banner asks you again.
Security
The site is served over HTTPS only. The form is protected against cross-site request forgery and automated submissions. Access to the site’s admin and to our mailboxes is limited to the people who need it.
Confidentiality incidents
If an incident presented a risk of serious injury, we would notify the Commission d’accès à l’information and the people concerned as quickly as possible, and take steps to limit its consequences. Every incident is recorded in a register.
Your rights
At any time, you can:
- ask to see the information we hold about you;
- have it corrected if it is inaccurate, incomplete or ambiguous;
- ask for it to be deleted, or withdraw your consent;
- receive it in a structured, commonly used technological format.
Write to the person in charge above. We respond within 30 days of receiving your request. If you are not satisfied with our answer, you can file a complaint with the Commission d’accès à l’information du Québec.
Changes
We may update this policy. The date at the top of the page shows the latest change. If a change affects how we use your information, we will ask for your consent again where the law requires it.