Law 25
Privacy policy
In effect since September 29, 2026. Version française
We collect as little personal information as possible, only for specific purposes, and never to sell it or to advertise.
Person in charge of the protection of personal information
The person in charge of the protection of personal information at Physalis Design is its owner. To write to them, use the contact form and begin your message with “Privacy”. We reply within 30 days.
What we collect and why
| What | Why | How long |
|---|---|---|
| Contact form: name, email, message | To reply to you. Nothing else. | For the length of the conversation, then at most 2 years after our last message. |
| Abuse protection: an encrypted fingerprint of your IP address when you submit the form or run a check with our free tools (the domains checked are not kept) | To limit automated submissions (spam). | Erased after at most 2 hours. |
| Server logs: IP address, date, page requested, browser | Site security and counting visits, done on our own server without cookies. | As long as needed for these purposes, at most 10 years. |
| Google Analytics, only if you accept: page views, duration, device type, approximate city | To know which pages are viewed and how to improve the site. | At most 14 months at Google. |
The traffic statistics drawn from these (visitors per day, page views, referring sites) contain no personal information: they are kept without limit.
You can browse the site without sending us anything: the form is optional and Google Analytics is declined until you accept it.
Cookies
pd_temoins: remembers your choice (“yes” or “no”) for 6 months, so we do not ask again on every visit. It contains nothing else._gaand_ga_…: Google Analytics cookies, set only if you accept, kept for 2 years.pd-demo-…(browser storage, not a cookie): in the dashboard demonstrations, keeps the changes you make there. They stay in your browser and are never sent to us; the “Reset” button erases them.
You can change your mind at any time with the Cookies link at the bottom of every page. If you withdraw your consent, the Google Analytics cookies are erased.
Who has access
Only Physalis Design. We use two providers to run the site:
- OVHcloud hosts the site and our mailbox on a server located in Montréal, Quebec.
- Google receives a copy of the contact form messages in our Gmail mailbox, and the Google Analytics measurements if you accept them.
We do not sell, rent or share any information with anyone else.
Communication outside Quebec
Google services (Gmail and Google Analytics) may process your information outside Quebec and Canada, notably in the United States. Before using them, we assessed the privacy factors and concluded that the protection offered is adequate for information of this nature: a name, an email address, a message you choose to write, and traffic measurements.
Security
The site is served over an encrypted connection (HTTPS). The server and the mailbox are accessible only to Physalis Design. The form stores nothing on the site itself: your message is sent directly by email.
Your rights
You may at any time:
- find out what information we hold about you and obtain a copy of it, including in a structured, commonly used technological format;
- have it corrected if it is inaccurate or incomplete;
- withdraw your consent or ask us to erase it;
- ask that the dissemination of information about you cease.
Write to us through the contact form. We reply within 30 days. If our answer does not satisfy you, you may file a complaint with Quebec's Commission d'accès à l'information.
Privacy incidents
We keep a register of privacy incidents. If an incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people concerned, and we take steps to reduce its effects.
Our internal rules
- The person in charge of the protection of personal information answers requests and complaints within 30 days.
- Information is used only for the purpose for which it was collected.
- Messages are erased at the latest 2 years after the last exchange; server logs, at most 10 years after they are created.
- Any new service that would process information outside Quebec is first subject to a privacy impact assessment.
Changes
If this policy changes, the new version is published here with its effective date.
