{"id":177,"date":"2026-05-26T17:43:32","date_gmt":"2026-05-26T21:43:32","guid":{"rendered":"https:\/\/arcticreach.dev\/?page_id=177"},"modified":"2026-05-26T17:43:32","modified_gmt":"2026-05-26T21:43:32","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/arcticreach.dev\/sv\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h2>1. Who We Are<\/h2>\n<p>Arctic Reach is a web development agency based in Quebec, Canada. We design, build, and maintain websites for clients across Canada and internationally.<\/p>\n<p><strong>Privacy Officer \/ Person Responsible for Personal Information:<\/strong><br>Seb Molgat \u2014 <a href=\"mailto:hello@arcticreach.dev\">hello@arcticreach.dev<\/a><\/p>\n<p>For the purposes of Quebec&#8217;s Act respecting the protection of personal information in the private sector (Law 25), Seb Molgat is the designated person responsible for personal information.<\/p>\n\n<h2>2. What This Policy Covers<\/h2>\n<p>This policy describes how we collect, use, and protect personal information on <strong>arcticreach.dev<\/strong> \u2014 our agency website. It also explains your rights under applicable law.<\/p>\n<p>If you are a client whose website we host or maintain, see Section 9 for how we handle personal information in that context.<\/p>\n\n<h2>3. Information We Collect<\/h2>\n<h3>3.1 Contact Form<\/h3>\n<p>When you submit our contact form, we collect:<\/p>\n<ul><li>Full name<\/li><li>Email address<\/li><li>Your message<\/li><\/ul>\n<p><strong>Stored in:<\/strong> Our secure, self-hosted server located in Canada.<br><strong>Retained for:<\/strong> 2 years, or until your inquiry is resolved, whichever comes first.<\/p>\n\n<h3>3.2 Appointment Booking (Cal.com)<\/h3>\n<p>When you book a consultation through our website, we collect:<\/p>\n<ul><li>Full name<\/li><li>Email address<\/li><li>Selected date and time<\/li><li>Any notes you provide<\/li><\/ul>\n<p><strong>Stored in:<\/strong> Our secure, self-hosted server located in Canada. Cal.com is self-hosted on the same infrastructure as this website; no booking data is sent to third-party booking platforms.<\/p>\n\n<h3>3.3 Website Analytics (Umami)<\/h3>\n<p>We use Umami, a privacy-focused analytics tool, self-hosted on our own server in Canada. Umami collects:<\/p>\n<ul><li>Page views and navigation paths<\/li><li>Referral source (the website that linked to ours)<\/li><li>Browser type and operating system (aggregated)<\/li><li>Approximate country (derived from anonymized IP; the full IP is not stored)<\/li><\/ul>\n<p>Umami does <strong>not<\/strong> use cookies and does <strong>not<\/strong> share data with any third party.<\/p>\n\n<h3>3.4 Cookies and Local Storage<\/h3>\n<table><thead><tr><th>Cookie<\/th><th>Purpose<\/th><th>Duration<\/th><\/tr><\/thead><tbody><tr><td>LiteSpeed Cache<\/td><td>Performance caching<\/td><td>Session \/ up to 7 days<\/td><\/tr><tr><td>TranslatePress<\/td><td>Language preference<\/td><td>1 year<\/td><\/tr><\/tbody><\/table>\n<p>We do not use advertising cookies or cross-site tracking cookies.<\/p>\n\n<h3>3.5 Transactional Email<\/h3>\n<p>When you submit our contact form, your message is delivered to us via <strong>Resend<\/strong> (Resend Inc., United States), a transactional email relay. Resend processes your name, email address, and message content in transit. Resend does not retain email content beyond delivery. Resend is GDPR-compliant and maintains a Data Processing Agreement. Their privacy policy is available at resend.com\/legal\/privacy-policy.<\/p>\n\n<h3>3.6 Server Logs<\/h3>\n<p>Our web server automatically records standard technical data including IP addresses, timestamps, and requested URLs. Logs are retained for 30 days and used only for security and troubleshooting.<\/p>\n\n<h2>4. Why We Collect This Information<\/h2>\n<table><thead><tr><th>Data<\/th><th>Legal Basis (GDPR)<\/th><th>Quebec Law 25 Basis<\/th><\/tr><\/thead><tbody><tr><td>Contact form<\/td><td>Legitimate interest (pre-contractual communication)<\/td><td>Consent via voluntary submission<\/td><\/tr><tr><td>Cal.com bookings<\/td><td>Performance of a contract \/ pre-contractual steps<\/td><td>Necessary to deliver requested service<\/td><\/tr><tr><td>Analytics<\/td><td>Legitimate interest (improving our website)<\/td><td>Consent (anonymized, non-identifying)<\/td><\/tr><tr><td>Server logs<\/td><td>Legitimate interest (security)<\/td><td>Necessary for system security<\/td><\/tr><\/tbody><\/table>\n<p>We do not sell, rent, or trade your personal information.<\/p>\n\n<h2>5. Who Has Access to Your Information<\/h2>\n<p>Your information is accessible only to:<\/p>\n<ul><li>Arctic Reach personnel (currently: Seb Molgat)<\/li><li><strong>Resend Inc.<\/strong> \u2014 for contact form email delivery only<\/li><li>Infrastructure providers for routine hosting operations<\/li><\/ul>\n<p>We do not use third-party email marketing, CRM platforms, or advertising networks.<\/p>\n<h3>International Transfers<\/h3>\n<p>Contact form submissions are relayed through Resend&#8217;s infrastructure in the United States. Resend maintains GDPR-compliant data processing agreements. If you are in the EU\/EEA and wish to know more about the safeguards in place, contact <a href=\"mailto:hello@arcticreach.dev\">hello@arcticreach.dev<\/a>.<\/p>\n\n<h2>6. Your Rights<\/h2>\n<h3>All visitors (Quebec Law 25 \/ PIPEDA)<\/h3>\n<ul><li><strong>Access:<\/strong> Request a copy of the personal information we hold about you<\/li><li><strong>Correction:<\/strong> Request that we correct inaccurate or incomplete information<\/li><li><strong>Withdrawal of consent:<\/strong> Withdraw consent for non-essential processing at any time<\/li><li><strong>Complaint:<\/strong> File a complaint with the Commission d&#8217;acc\u00e8s \u00e0 l&#8217;information (CAI) at <a href=\"https:\/\/www.cai.gouv.qc.ca\" target=\"_blank\" rel=\"noopener\">cai.gouv.qc.ca<\/a><\/li><\/ul>\n<h3>EU\/EEA residents (GDPR)<\/h3>\n<p>In addition to the above:<\/p>\n<ul><li><strong>Erasure:<\/strong> Request deletion of your personal information<\/li><li><strong>Portability:<\/strong> Receive your data in a structured, machine-readable format<\/li><li><strong>Restriction:<\/strong> Ask us to limit how we process your data<\/li><li><strong>Objection:<\/strong> Object to processing based on legitimate interest<\/li><li><strong>Supervisory authority:<\/strong> Lodge a complaint with your local data protection authority<\/li><\/ul>\n<p>To exercise any of these rights, contact: <a href=\"mailto:hello@arcticreach.dev\">hello@arcticreach.dev<\/a><\/p>\n<p>We will respond within 30 days. Identity verification may be required.<\/p>\n\n<h2>7. Data Security<\/h2>\n<p>Personal information is stored on a self-hosted, hardened server in Canada protected by:<\/p>\n<ul><li>Encrypted HTTPS connections (TLS 1.2\/1.3)<\/li><li>Network firewalls and access controls<\/li><li>Automated daily backups stored in encrypted cloud storage<\/li><li>No unnecessary third-party access<\/li><\/ul>\n<p>In the event of a breach that poses a serious risk of harm, we will notify affected individuals and the appropriate regulatory authority within 72 hours, as required by Law 25 and GDPR.<\/p>\n\n<h2>8. Data Retention<\/h2>\n<table><thead><tr><th>Data type<\/th><th>Retention period<\/th><\/tr><\/thead><tbody><tr><td>Contact form submissions<\/td><td>2 years<\/td><\/tr><tr><td>Booking records<\/td><td>3 years (business records)<\/td><\/tr><tr><td>Analytics data<\/td><td>13 months (rolling)<\/td><\/tr><tr><td>Server logs<\/td><td>30 days<\/td><\/tr><\/tbody><\/table>\n\n<h2>9. Our Role as a Data Processor<\/h2>\n<p>As a web development agency, we build and maintain websites that collect personal information from your visitors and customers. In this capacity, we act as a <strong>data processor<\/strong> on your behalf, and you (our client) are the <strong>data controller<\/strong>.<\/p>\n<p>We process your end-users&#8217; data only according to your documented instructions. Clients are responsible for:<\/p>\n<ul><li>Maintaining their own privacy policy on their website<\/li><li>Obtaining required consents from their users<\/li><li>Notifying us of any data subject rights requests we need to fulfill<\/li><\/ul>\n<p>Clients who require a Data Processing Agreement (DPA) \u2014 including those subject to GDPR \u2014 may request one at <a href=\"mailto:hello@arcticreach.dev\">hello@arcticreach.dev<\/a>.<\/p>\n\n<h2>10. Children&#8217;s Privacy<\/h2>\n<p>Our website is not directed at children under the age of 14 (or 16 for EU residents). We do not knowingly collect personal information from minors. If we discover we have inadvertently collected such data, we will delete it promptly.<\/p>\n\n<h2>11. Changes to This Policy<\/h2>\n<p>We may update this policy periodically. The &#8220;Last updated&#8221; date at the top will reflect any changes. For material changes, we will post a notice on our website.<\/p>\n\n<h2>12. Contact<\/h2>\n<p><strong>Arctic Reach<\/strong><br><a href=\"mailto:hello@arcticreach.dev\">hello@arcticreach.dev<\/a><br>Quebec, Canada<\/p>","protected":false},"excerpt":{"rendered":"<p>Last updated: May 26, 2026<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-177","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/arcticreach.dev\/sv\/wp-json\/wp\/v2\/pages\/177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/arcticreach.dev\/sv\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/arcticreach.dev\/sv\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/arcticreach.dev\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/arcticreach.dev\/sv\/wp-json\/wp\/v2\/comments?post=177"}],"version-history":[{"count":3,"href":"https:\/\/arcticreach.dev\/sv\/wp-json\/wp\/v2\/pages\/177\/revisions"}],"predecessor-version":[{"id":180,"href":"https:\/\/arcticreach.dev\/sv\/wp-json\/wp\/v2\/pages\/177\/revisions\/180"}],"wp:attachment":[{"href":"https:\/\/arcticreach.dev\/sv\/wp-json\/wp\/v2\/media?parent=177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}