Privacy without surprises.
No cookie banner, no ad trackers, no data resale. Here is exactly what this site collects, why, and how to exercise your rights.
Privacy Officer
Jon York is York Digital Solutions' privacy officer (responsable de la protection des renseignements personnels). For any question, or to request access, correction, or deletion: [email protected] or (819) 900-1328.
What we collect
Contact form
When you write to us we collect your name, email, company, phone (optional), team size, and your message, solely to respond to your inquiry. Submissions flagged as spam are deleted after 90 days; everything else after 24 months.
First-party, cookieless analytics
We measure site traffic with our own tool, with no cookies and no persistent identifier. A short-lived visit ID is derived from your IP address and browser using a random salt that is destroyed every night: by the next day, yesterday's page views can no longer be linked to anyone. Neither your IP address nor your full browser signature is ever stored.
This pseudonymized visit data is kept for 12 months; after that, only aggregate statistics with no identifiers are retained. Approximate region is derived locally on our server, with no call to an outside service.
Technical logs and security
The site is protected by Cloudflare, which sees each request's IP address to filter attacks and bots; the contact form's anti-bot check (Turnstile) works the same way. On our forms we keep only a code derived from the IP address, hashed with a secret key that rotates monthly, for at most 90 days, strictly to block abuse.
Cookies
The site sets only two cookies strictly necessary for it to work (session and form protection). No tracking cookies, no advertising cookies, no third-party analytics.
Vendors and transfers outside Quebec
A few vendors process technical information to keep the site running. Some are based in the United States; that country's laws may allow its authorities to access the data those vendors handle.
Cloudflare (United States): content delivery, firewall, and the Turnstile anti-bot check. Sees visitors' IP addresses at request time.
DigitalOcean (server located in Toronto, Canada): hosts the site and its database.
Google Workspace (Canada/United States): our business email. Messages you send us transit through it.
MaxMind: approximate geolocation is computed from a database installed on our own server. No visitor data is ever sent to them.
How long we keep what
Contact form submissions: 24 months (spam: 90 days).
Code derived from the IP address (forms): 90 days.
Pseudonymized visit data: 12 months.
Aggregate statistics with no identifiers: kept for history.
Access, correction, deletion
You can ask for access to the personal information we hold about you, have it corrected or deleted, and withdraw your consent at any time. Write to [email protected]; we respond within 30 days.
If you are not satisfied with our response, you can file a complaint with the Commission d'accès à l'information du Québec (CAI).
The site is served over HTTPS only, administrative access is restricted, and we collect only what is strictly necessary. If a confidentiality incident presents a risk of serious injury, we will notify the people affected and the CAI, as the law requires.
Any material change to this policy will be published on this page with a new effective date.