Privacy policy
This policy explains how Datastrophe uses enquiry details and website information. It covers handling enquiries and referring them to independent partners.
Privacy policy
This policy explains how Datastrophe uses enquiry details and website information. It covers handling enquiries and referring them to independent partners.
1. Your contact
The organisation responsible for Datastrophe’s processing and its contact details are identified in the legal notice. Send questions or privacy requests through the contact page. A partner offering its own services is responsible for its own processing and provides its own privacy information.
2. Information concerned
We receive the details you provide in forms and correspondence: name, contact details, country, device and problem description, and information needed for follow-up. Required fields are marked; without necessary details we may be unable to respond or arrange a referral. Technical information can include connection identifiers, browser information, the referring page and form events. Do not send passwords, encryption keys, personal files or unnecessary sensitive information with an initial enquiry.
3. Purposes
Information is used to answer and follow up your request, organise the requested referral, prevent abuse, protect the service and meet legal obligations. The intended recipient and disclosure are explained before a referral; any necessary specific consent must be obtained. Sending an enquiry is not general permission for marketing. Consent-based uses remain optional and consent may be withdrawn for the future.
4. Recipients and permitted uses
The information collected is not sold to third parties. It will never be used to create or enrich prospecting databases, including partners’ marketing databases. It is not used for advertising targeting on behalf of third parties. Any advertising targeting is solely for Datastrophe and remains subject to applicable consent and objection requirements; this does not authorise the creation of prospecting databases.
Information is hosted on infrastructure managed for the service and accessible to authorised personnel for handling requests. An independent partner receives only what is necessary for the explained introduction. The partner does not pay for this disclosure. Information may also be disclosed where required by law. Datastrophe remains responsible for the lawfulness and security of its own processing.
5. Retention and security
Referral enquiry information is kept for six months from receipt and then deleted. Only information necessary for a legal obligation or dispute may be isolated and retained with restricted access for the justified period. Technical media and recovered-file time limits in the terms do not automatically apply to contact details, messages or technical logs. Appropriate access controls, protected exchanges and deletion measures are required; no system guarantees zero risk. Incidents and legally required notifications must be handled appropriately.
6. Hosting and international transfers
Enquiry information for this market is stored on servers in Canada.
Storage location alone does not determine where authorised people or partners access information. Any international disclosure or access must meet the applicable safeguards and information requirements. The countries, recipients and safeguards for actual transfers must be explained; you may ask how to obtain the relevant information through the contact page. Submitting a form is not blanket permission to transfer information anywhere.
7. Browsing and tracking
Technical information may be used for operation, security or audience measurement. Non-essential tracking requiring prior consent must wait for that consent; refusal or withdrawal must remain possible. Advertising, if used, is limited to Datastrophe and does not authorise third-party targeting or prospecting databases. Information about tools, recipients, purposes and retention must match the actual configuration.
8. Your rights
Use the contact page to request access or correction or exercise other applicable rights. Identity checks must be proportionate, not automatic. Requests and complaints are handled within the applicable legal time limits; lawful extensions and reasons must be communicated. Requests about a partner’s independent processing may also be sent directly to that partner.
PIPEDA and applicable provincial private-sector privacy legislation govern within their scope. Required consent must be meaningful and relate to the explained purposes and recipients. You may request access and correction, withdraw consent subject to lawful limits and complain to the relevant federal or provincial authority. Where Quebec law applies, access and rectification requests are generally answered within 30 days; applicable portability rights remain available. A disclosure outside Quebec requires the applicable privacy impact assessment, adequate protection and written agreement. Required information about identification, location or profiling technology and the means to activate it must be supplied when relevant. A Canadian server alone does not establish that no data leaves Quebec.
You may contact the competent authority, including Office of the Privacy Commissioner of Canada or the competent provincial privacy authority, subject to the applicable complaint procedure.