1. Person in Charge of Processing
This privacy policy applies to the website operated by Savard Architecte (referred to in this policy as "we," "us," or "our"). We are subject to Quebec Law 25 — formally known as An Act to modernize legislative provisions as regards the protection of personal information (S.Q. 2021, c. 25) — which governs how we collect, use, disclose, and retain personal information about visitors and clients who interact with our website.
By using our website, you acknowledge that your personal information may be collected and processed in accordance with this policy. We are committed to handling your personal information responsibly, transparently, and only for the purposes described below.
2. Personal Information Collected
We collect personal information in several ways depending on how you interact with our website. Below is a summary of the categories of personal information we may collect.
- Identification and contact information: Your name, email address, phone number, and any other details you voluntarily provide through our contact forms or newsletter sign-up.
- Technical and device identifiers: Your IP address, browser type, device identifiers, and operating system, collected automatically when you visit our site.
- Browsing and navigation data: Pages visited, session duration, navigation behavior, and approximate geographic location, collected through analytics tools.
- Advertising identifiers: Advertising and social identifiers used to measure the effectiveness of our marketing campaigns and to enable targeted advertising.
- Form and communication data: Information you submit through forms, including project inquiries and newsletter subscriptions.
- Consent preferences: Your cookie consent choices, recorded and stored to respect your preferences on future visits.
We do not knowingly collect sensitive personal information such as health data, financial account numbers, or government-issued identification numbers through this website.
3. Purposes of Processing
We collect and use your personal information only for specific, clearly defined purposes. The table below outlines each purpose, the personal information involved, the third-party services used, and the legal basis under Quebec Law 25.
- Website operation and security (Essential): We use session data, IP addresses, and consent preferences to keep the website functioning correctly and securely. This includes storing your cookie consent choices via Moelleux (by Horizon-Cumulus), our consent management platform, operated in Joliette, Quebec, with data hosted at OVH Beauharnois, Quebec. Legal basis: legitimate interest in operating a functional and secure website.
- Audience analytics (Analytics): We use Google Analytics 4 to measure traffic, understand how visitors navigate our site, and improve our content and user experience. Data collected includes device identifiers, IP address, pages visited, session duration, navigation behavior, and approximate location. This data is transferred to the United States. Legal basis: consent (you may withdraw at any time via our consent banner).
- Targeted advertising and remarketing (Marketing): We use the Meta Pixel (Facebook) to track conversions and show relevant advertisements to visitors who have previously interacted with our site. Data collected includes device identifiers, IP address, pages visited, advertising identifiers, and social identifiers. This data is transferred to the United States. Legal basis: consent.
- Newsletter and email marketing (Marketing): If you subscribe to our newsletter, we use Mailchimp to manage our mailing list and send promotional communications. Data collected includes your email address, IP address, form data, and email interaction data. This data is transferred to the United States. Legal basis: consent (you may unsubscribe at any time using the link in any email we send).
- Website display and performance (Functional): We use Google Fonts and Cloudflare to ensure our website loads quickly and displays correctly. These services may collect your IP address and device identifiers. Data may be transferred to the United States. Legal basis: legitimate interest in delivering a performant website experience; where consent is required, it is obtained through our consent banner.
4. Third Parties and Processors
We work with the following third-party service providers who may process your personal information on our behalf or independently. Each provider is listed with its role, service category, and whether data is transferred outside Quebec.
| Name | Purpose | Category | Transfer Outside Quebec |
|---|---|---|---|
| Moelleux (by Horizon-Cumulus) | Consent management platform; stores cookie preferences and hosts this privacy policy. Operated in Joliette, Quebec; data hosted at OVH Beauharnois, Quebec. | Essential | No — data remains in Quebec |
| Google Analytics 4 | Audience measurement and website traffic analysis. | Analytics | Yes — United States |
| Meta Pixel (Facebook) | Conversion tracking and targeted advertising / remarketing. | Marketing | Yes — United States |
| Mailchimp | Newsletter and email marketing campaign management. | Marketing | Yes — United States |
| Google Fonts | Web font delivery for optimal text display. | Functional | Yes — United States |
| Cloudflare | Content delivery network for faster page loading. | Functional | Yes — United States |
| Microsoft 365 | Business email communications (transactional and operational email). | Functional | Yes — United States |
| Horizon-Cumulus Email | Business email services operated in Quebec. | Functional | No — data remains in Quebec |
We require all third-party processors to handle your personal information in a manner consistent with applicable privacy laws. Where required by Quebec Law 25, we have entered into data processing agreements with these providers.
5. Transfers Outside Quebec
Several of the third-party services we use are operated by companies based in the United States, which means your personal information may be transferred to, stored in, and processed in that country. The services that involve such transfers are: Google Analytics 4, Meta Pixel (Facebook), Mailchimp, Google Fonts, Cloudflare, and Microsoft 365.
Under section 17 of Quebec Law 25, before communicating personal information outside Quebec, we are required to conduct a Privacy Impact Assessment (PIA) — known in French as an évaluation des facteurs relatifs à la vie privée (EFVP) — to ensure that the information will receive adequate protection in the destination jurisdiction. We have conducted or are in the process of conducting such assessments for the cross-border transfers described in this policy.
The United States does not have a privacy framework that is considered equivalent to Quebec's. However, the third-party providers listed above rely on contractual safeguards — such as standard contractual clauses, data processing agreements, and their own compliance programs — to protect your personal information when it is processed outside Canada.
Regarding our email infrastructure: our business email is handled through two providers. Horizon-Cumulus Email is operated entirely in Quebec and your data remains in the province. Microsoft 365 is operated in the United States, meaning that some email communications may be processed there. If you have questions about how a specific communication is handled, please contact us using the details in Section 8.
You may withdraw your consent to transfers associated with non-essential services (Analytics, Marketing) at any time through our consent management banner.
6. Retention Period
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The following table summarizes our retention practices.
| Data Type | Retention Period | Justification |
|---|---|---|
| Contact form submissions (name, email, project details) | 3 years from last contact | Reasonable period to follow up on project inquiries and maintain client relationship records. |
| Newsletter subscriber information | Until unsubscribe, then deleted within 30 days | Retained only while consent is active; deleted promptly upon withdrawal. |
| Cookie consent preferences (Moelleux) | 13 months from the date of consent | Standard consent record retention period; allows us to respect your preferences on return visits. |
| Analytics data (Google Analytics 4) | Up to 14 months (Google's default retention setting) | Used for traffic trend analysis; limited to the minimum period needed for meaningful reporting. |
| Advertising and remarketing data (Meta Pixel) | As determined by Meta's data retention policies (typically up to 180 days for event data) | Used for conversion tracking and audience building; governed by Meta's terms of service. |
| Business email communications (Microsoft 365 / Horizon-Cumulus) | 3 years from the date of the communication | Retained for business continuity, legal compliance, and professional accountability purposes. |
| IP addresses and technical logs | Up to 12 months | Used for security monitoring and troubleshooting; deleted once no longer operationally necessary. |
Once the applicable retention period expires, personal information is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.
7. Your Rights
Under Quebec Law 25, you have the following rights with respect to your personal information. To exercise any of these rights, please contact us using the details provided in Section 8. We will respond to your request within 30 days.
- Right of access: You have the right to ask us whether we hold personal information about you, and to receive a copy of that information in a clear and understandable format.
- Right of rectification: If any personal information we hold about you is inaccurate, incomplete, or ambiguous, you have the right to ask us to correct it.
- Right of erasure (right to be forgotten): You may ask us to delete your personal information when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent and there is no other legal basis for retaining it.
- Right to data portability: You have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another organization where technically feasible.
- Right to withdraw consent: Where we process your personal information based on your consent (for example, for analytics, marketing, or newsletter communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You can manage your cookie consent preferences at any time through our consent banner.
If you believe that we have not handled your personal information in accordance with Quebec Law 25, you have the right to file a complaint with the Quebec Information Access Commission (CAI) at https://www.cai.gouv.qc.ca.
8. Person Responsible for the Protection of Personal Information
In accordance with section 3.1 of Quebec Law 25, Savard Architecte has designated a Person responsible for the protection of personal information. This person oversees our compliance with Quebec Law 25, handles requests related to your personal information, and acts as your point of contact for any privacy-related questions or concerns.
- Name: Stéphanie Savard
- Title: Architecte principale, Chef d’entreprise
- Email: info@savardarchitecte.ca
- Phone: (450) 507-1120
We will acknowledge your request promptly and provide a substantive response within 30 days of receipt, as required by Quebec Law 25. If your request is complex or involves a large volume of information, we will notify you if additional time is needed.
9. Effective Date and Versioning
This privacy policy takes effect on 17 juin 2026 and corresponds to version 1.
We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable legal requirements. When we make material changes, we will update the effective date and version number above. We encourage you to review this policy periodically. Continued use of our website after an updated policy is posted constitutes your acknowledgment of the changes.
Previous versions of this policy are available upon request by contacting the Person responsible for the protection of personal information identified in Section 8.